2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-40656 | MEDIUM | 6.1 | 0.4% | Dec 14, 2023 | A reflected XSS vulnerability was discovered in the Quickform component for Joomla. |
| CVE-2023-40655 | MEDIUM | 6.1 | 0.4% | Dec 14, 2023 | A reflected XSS vulnerability was discovered in the Proforms Basic component for Joomla. |
| CVE-2023-40630 | CRITICAL | 9.8 | 0.7% | Dec 14, 2023 | Unauthenticated LFI/SSRF in JCDashboards component for Joomla. |
| CVE-2023-40629 | CRITICAL | 9.8 | 0.8% | Dec 14, 2023 | SQLi vulnerability in LMS Lite component for Joomla. |
| CVE-2023-40628 | MEDIUM | 6.1 | 0.4% | Dec 14, 2023 | A reflected XSS vulnerability was discovered in the Extplorer component for Joomla. |
| CVE-2023-40627 | MEDIUM | 6.1 | 0.4% | Dec 14, 2023 | A reflected XSS vulnerability was discovered in the LivingWord component for Joomla. |
| CVE-2023-25644 | HIGH | 7.5 | 0.7% | Dec 14, 2023 | There is a denial of service vulnerability in some ZTE mobile internet products. Due to insufficient validation of Web ... |
| CVE-2023-25643 | HIGH | 8.8 | 1.8% | Dec 14, 2023 | There is a command injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation... |
| CVE-2023-25642 | MEDIUM | 6.5 | 0.5% | Dec 14, 2023 | There is a buffer overflow vulnerability in some ZTE mobile internet producsts. Due to insufficient validation of tcp p... |
| CVE-2023-1904 | HIGH | 7.5 | 0.4% | Dec 14, 2023 | In affected versions of Octopus Server it is possible for the OpenID client secret to be logged in clear text during the... |
| CVE-2023-48085 | CRITICAL | 9.8 | 75.8% | Dec 14, 2023 | Nagios XI before version 5.11.3 was discovered to contain a remote code execution (RCE) vulnerability via the component ... |
| CVE-2023-48084 | CRITICAL | 9.8 | 33.7% | Dec 14, 2023 | Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool. |
| CVE-2023-25651 | HIGH | 8 | 0.3% | Dec 14, 2023 | There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SM... |
| CVE-2023-25650 | MEDIUM | 6.5 | 0.6% | Dec 14, 2023 | There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or... |
| CVE-2023-25648 | HIGH | 7.8 | 0.2% | Dec 14, 2023 | There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attack... |
| CVE-2023-44709 | CRITICAL | 9.8 | 0.8% | Dec 14, 2023 | PlutoSVG commit 336c02997277a1888e6ccbbbe674551a0582e5c4 and before was discovered to contain an integer overflow via th... |
| CVE-2023-6407 | HIGH | 7.1 | 0.2% | Dec 14, 2023 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that coul... |
| CVE-2023-5630 | MEDIUM | 4.9 | 0.3% | Dec 14, 2023 | A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to instal... |
| CVE-2023-5629 | MEDIUM | 6.1 | 0.4% | Dec 14, 2023 | A CWE-601:URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability exists that could cause disclosure of infor... |
| CVE-2023-49938 | HIGH | 8.2 | 0.7% | Dec 14, 2023 | An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control: an attacker can modifie... |
| CVE-2023-49937 | CRITICAL | 9.8 | 1.4% | Dec 14, 2023 | An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free, attackers can cause a ... |
| CVE-2023-49936 | HIGH | 7.5 | 1.1% | Dec 14, 2023 | An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads to denial of se... |
| CVE-2023-49935 | HIGH | 8.8 | 1.0% | Dec 14, 2023 | An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Mess... |
| CVE-2023-49934 | CRITICAL | 9.8 | 0.8% | Dec 14, 2023 | An issue was discovered in SchedMD Slurm 23.11.x. There is SQL Injection against the SlurmDBD database. The fixed versio... |
| CVE-2023-49933 | HIGH | 7.5 | 0.4% | Dec 14, 2023 | An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integri... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now