2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-43813HIGH8.8GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, the sa...
CVE-2023-6767MEDIUM6.1A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Guest e-Book 1.0. This affects...
CVE-2023-6766LOW3.5A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0....
CVE-2023-6765CRITICAL9.8A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical....
CVE-2023-50779MEDIUM4.3Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read permis...
CVE-2023-50778HIGH8.8A cross-site request forgery (CSRF) vulnerability in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allows attackers...
CVE-2023-50777MEDIUM4.3Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job con...
CVE-2023-50776MEDIUM4.3Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml f...
CVE-2023-50775MEDIUM4.3A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attac...
CVE-2023-50774HIGH8.1A cross-site request forgery (CSRF) vulnerability in Jenkins HTMLResource Plugin 1.02 and earlier allows attackers to de...
CVE-2023-50773MEDIUM4.3Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form,...
CVE-2023-50772MEDIUM4.3Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenk...
CVE-2023-50771MEDIUM6.1Jenkins OpenId Connect Authentication Plugin 2.6 and earlier improperly determines that a redirect URL after login is le...
CVE-2023-50770MEDIUM6.7Jenkins OpenId Connect Authentication Plugin 2.6 and earlier stores a password of a local user account used as an anti-l...
CVE-2023-50769MEDIUM4.3Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permi...
CVE-2023-50768HIGH8.8A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows attacker...
CVE-2023-50767MEDIUM5.4Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permi...
CVE-2023-50766HIGH8.8A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows attacker...
CVE-2023-50765MEDIUM4.3A missing permission check in Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier allows attackers with Overall/Read...
CVE-2023-50764HIGH8.1Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier does not restrict a file name query parameter in an HTTP endpoin...
CVE-2023-49363CRITICAL9.8Rockoa <2.3.3 is vulnerable to SQL Injection. The problem exists in the indexAction method in reimpAction.php.
CVE-2023-6762MEDIUM4.3A vulnerability, which was classified as critical, was found in Thecosy IceCMS 2.0.1. Affected is an unknown function of...
CVE-2023-6761HIGH8.8A vulnerability, which was classified as problematic, has been found in Thecosy IceCMS up to 2.0.1. This issue affects s...
CVE-2023-6760MEDIUM5.4A vulnerability classified as critical was found in Thecosy IceCMS up to 2.0.1. This vulnerability affects unknown code....
CVE-2023-6759HIGH7.5A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. This affects an unknown part of the fi...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now