2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50368 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Shortcodes ... |
| CVE-2023-49847 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Twinpictures Annua... |
| CVE-2023-49846 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paul Bearne Author... |
| CVE-2023-49836 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brontobytes Cookie... |
| CVE-2023-48676 | HIGH | 7.1 | 0.2% | Dec 14, 2023 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr... |
| CVE-2023-46144 | MEDIUM | 6.5 | 0.3% | Dec 14, 2023 | A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileg... |
| CVE-2023-46143 | HIGH | 7.5 | 0.3% | Dec 14, 2023 | Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated re... |
| CVE-2023-46142 | HIGH | 8.8 | 0.7% | Dec 14, 2023 | A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with... |
| CVE-2023-46141 | CRITICAL | 9.8 | 0.9% | Dec 14, 2023 | Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic ... |
| CVE-2023-45185 | HIGH | 8.8 | 1.0% | Dec 14, 2023 | IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to execute remote ... |
| CVE-2023-45182 | MEDIUM | 6.5 | 0.6% | Dec 14, 2023 | IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 is vulnerable to having its key for an en... |
| CVE-2023-0757 | CRITICAL | 9.8 | 0.9% | Dec 14, 2023 | Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProCon... |
| CVE-2023-6571 | MEDIUM | 6.1 | 0.4% | Dec 14, 2023 | Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow |
| CVE-2023-6570 | MEDIUM | 6.5 | 0.6% | Dec 14, 2023 | Server-Side Request Forgery (SSRF) in kubeflow/kubeflow |
| CVE-2023-6569 | HIGH | 8.2 | 0.7% | Dec 14, 2023 | External Control of File Name or Path in h2oai/h2o-3 |
| CVE-2023-50371 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Page Visit Counter... |
| CVE-2023-48631 | HIGH | 7.5 | 1.1% | Dec 14, 2023 | @adobe/css-tools versions 4.3.1 and earlier are affected by an Improper Input Validation vulnerability that could result... |
| CVE-2023-49708 | CRITICAL | 9.8 | 0.8% | Dec 14, 2023 | SQLi vulnerability in Starshop component for Joomla. |
| CVE-2023-49707 | CRITICAL | 9.8 | 0.8% | Dec 14, 2023 | SQLi vulnerability in S5 Register module for Joomla. |
| CVE-2023-48925 | CRITICAL | 9.8 | 0.5% | Dec 14, 2023 | SQL injection vulnerability in Buy Addons bavideotab before version 1.0.6, allows attackers to escalate privileges and o... |
| CVE-2023-46750 | MEDIUM | 6.1 | 1.5% | Dec 14, 2023 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability when "form" authentication is used in Apache Shiro. Mi... |
| CVE-2023-46348 | CRITICAL | 9.8 | 0.8% | Dec 14, 2023 | SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain ... |
| CVE-2023-40659 | MEDIUM | 6.1 | 0.4% | Dec 14, 2023 | A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla. |
| CVE-2023-40658 | MEDIUM | 6.1 | 0.4% | Dec 14, 2023 | A reflected XSS vulnerability was discovered in the Clicky Analytics Dashboard module for Joomla. |
| CVE-2023-40657 | MEDIUM | 6.1 | 0.4% | Dec 14, 2023 | A reflected XSS vulnerability was discovered in the Joomdoc component for Joomla. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now