2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-34837 | MEDIUM | 5.4 | 0.8% | Jun 27, 2023 | A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remot... |
| CVE-2023-34836 | MEDIUM | 5.4 | 0.8% | Jun 27, 2023 | A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remot... |
| CVE-2023-34835 | MEDIUM | 5.4 | 0.6% | Jun 27, 2023 | A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remot... |
| CVE-2023-26274 | MEDIUM | 5.4 | 0.4% | Jun 27, 2023 | IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScr... |
| CVE-2023-26273 | MEDIUM | 4.3 | 0.4% | Jun 27, 2023 | IBM QRadar SIEM 7.5.0 could allow an authenticated user to perform unauthorized actions due to hazardous input validatio... |
| CVE-2023-35800 | MEDIUM | 4.3 | 0.3% | Jun 27, 2023 | Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution ... |
| CVE-2023-35799 | MEDIUM | 5.5 | 0.2% | Jun 27, 2023 | Stormshield Endpoint Security Evolution 2.0.0 through 2.3.2 has Insecure Permissions. An interactive user can use the SE... |
| CVE-2023-34830 | MEDIUM | 5.4 | 0.7% | Jun 27, 2023 | i-doit Open v24 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the timeout parameter... |
| CVE-2023-34099 | MEDIUM | 5.3 | 0.5% | Jun 27, 2023 | Shopware is an open source e-commerce software. The mail validation in the registration process had some flaws, so it wa... |
| CVE-2023-34098 | MEDIUM | 5.3 | 0.5% | Jun 27, 2023 | Shopware is an open source e-commerce software. Due to an incorrect configuration in the `.htaccess` file, the configura... |
| CVE-2023-32339 | MEDIUM | 6.1 | 0.5% | Jun 27, 2023 | IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra... |
| CVE-2023-3431 | MEDIUM | 5.3 | 0.7% | Jun 27, 2023 | Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9. |
| CVE-2023-36002 | MEDIUM | 4.3 | 0.2% | Jun 27, 2023 | A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an an... |
| CVE-2023-36000 | MEDIUM | 6.5 | 0.3% | Jun 27, 2023 | A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables ... |
| CVE-2023-35998 | MEDIUM | 4.6 | 0.2% | Jun 27, 2023 | A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on ... |
| CVE-2023-2818 | MEDIUM | 5.5 | 0.1% | Jun 27, 2023 | An insecure filesystem permission in the Insider Threat Management Agent for Windows enables local unprivileged users to... |
| CVE-2023-2795 | MEDIUM | 4.8 | 0.4% | Jun 27, 2023 | The CodeColorer WordPress plugin before 0.10.1 does not sanitise and escape some of its settings, which could allow high... |
| CVE-2023-2743 | MEDIUM | 6.1 | 0.5% | Jun 27, 2023 | The ERP WordPress plugin before 1.12.4 does not sanitise and escape the employee_name parameter before outputting it bac... |
| CVE-2023-2711 | MEDIUM | 4.8 | 0.5% | Jun 27, 2023 | The Ultimate Product Catalog WordPress plugin before 5.2.6 does not sanitise and escape some of its settings, which coul... |
| CVE-2023-2627 | MEDIUM | 4.3 | 0.2% | Jun 27, 2023 | The KiviCare WordPress plugin before 3.2.1 does not have proper CSRF and authorisation checks in various AJAX actions, a... |
| CVE-2023-2624 | MEDIUM | 6.1 | 1.1% | Jun 27, 2023 | The KiviCare WordPress plugin before 3.2.1 does not sanitise and escape a parameter before outputting it back in the pag... |
| CVE-2023-2623 | MEDIUM | 6.5 | 0.8% | Jun 27, 2023 | The KiviCare WordPress plugin before 3.2.1 does not restrict the information returned in a response and returns all user... |
| CVE-2023-2605 | MEDIUM | 6.1 | 0.5% | Jun 27, 2023 | The wpbrutalai WordPress plugin before 2.0.1 does not sanitise and escape a parameter before outputting it back in the p... |
| CVE-2023-2580 | MEDIUM | 4.8 | 0.5% | Jun 27, 2023 | The AI Engine WordPress plugin before 1.6.83 does not sanitize and escape some of its settings, which could allow high-p... |
| CVE-2023-2326 | MEDIUM | 6.5 | 0.3% | Jun 27, 2023 | The Gravity Forms Google Sheet Connector WordPress plugin before 1.3.5, gsheetconnector-gravityforms-pro WordPress plugi... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now