2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-44286 | MEDIUM | 6.1 | 0.8% | Dec 14, 2023 | Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-based Cross-Si... |
| CVE-2023-44285 | HIGH | 7.8 | 0.2% | Dec 14, 2023 | Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access co... |
| CVE-2023-44284 | MEDIUM | 4.3 | 0.6% | Dec 14, 2023 | Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vul... |
| CVE-2023-44279 | MEDIUM | 6.7 | 0.6% | Dec 14, 2023 | Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injec... |
| CVE-2023-44278 | MEDIUM | 6.7 | 0.3% | Dec 14, 2023 | Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vu... |
| CVE-2023-50566 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | A stored cross-site scripting (XSS) vulnerability in EyouCMS-V1.6.5-UTF8-SP1 allows attackers to execute arbitrary web s... |
| CVE-2023-50565 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | A cross-site scripting (XSS) vulnerability in the component /logs/dopost.html in RPCMS v3.5.5 allows attackers to execut... |
| CVE-2023-50564 | HIGH | 8.8 | 29.1% | Dec 14, 2023 | An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers t... |
| CVE-2023-50563 | CRITICAL | 9.8 | 0.6% | Dec 14, 2023 | Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMS_Function.php. |
| CVE-2023-50073 | CRITICAL | 9.8 | 0.6% | Dec 14, 2023 | EmpireCMS v7.5 was discovered to contain a SQL injection vulnerability via the ftppassword parameter at SetEnews.php. |
| CVE-2023-50011 | HIGH | 7.2 | 2.0% | Dec 14, 2023 | PopojiCMS version 2.0.1 is vulnerable to remote command execution in the Meta Social field. |
| CVE-2023-49833 | MEDIUM | 5.4 | 0.6% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force S... |
| CVE-2023-49828 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WooPaym... |
| CVE-2023-49827 | MEDIUM | 6.1 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Soleda... |
| CVE-2023-49745 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spi... |
| CVE-2023-49743 | MEDIUM | 4.8 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Dashboa... |
| CVE-2023-49740 | MEDIUM | 6.1 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Seraphinite Soluti... |
| CVE-2023-49739 | MEDIUM | 6.1 | 0.4% | Dec 14, 2023 | Vulnerability in IdeaBox Creations PowerPack Pro for Elementor.This issue affects PowerPack Pro for Elementor: from n/a ... |
| CVE-2023-49168 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WordPlus Better Me... |
| CVE-2023-44277 | HIGH | 7.8 | 0.6% | Dec 14, 2023 | Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injecti... |
| CVE-2023-6572 | HIGH | 8.1 | 1.7% | Dec 14, 2023 | Command Injection in GitHub repository gradio-app/gradio prior to main. |
| CVE-2023-6545 | MEDIUM | 4.7 | 0.4% | Dec 14, 2023 | The package authelia-bhf included in Beckhoffs TwinCAT/BSD is prone to an open redirect that allows a remote unprivilege... |
| CVE-2023-5592 | HIGH | 7.5 | 0.3% | Dec 14, 2023 | Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK)... |
| CVE-2023-50370 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Livemesh WPBakery ... |
| CVE-2023-50369 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alma Alma – Pay in... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now