2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-35168 | MEDIUM | 6.5 | 0.6% | Jun 26, 2023 | DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. Affec... |
| CVE-2023-35930 | MEDIUM | 5.3 | 0.4% | Jun 26, 2023 | SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical applica... |
| CVE-2023-34422 | MEDIUM | 6.5 | 0.4% | Jun 26, 2023 | A valid, authenticated LXCA user with elevated privileges may be able to delete folders in the LXCA filesystem through a... |
| CVE-2023-34421 | MEDIUM | 6.5 | 0.4% | Jun 26, 2023 | A valid, authenticated LXCA user with elevated privileges may be able to replace filesystem data through a specifically ... |
| CVE-2023-33176 | MEDIUM | 6.5 | 0.4% | Jun 26, 2023 | BigBlueButton is an open source virtual classroom designed to help teachers teach and learners learn. In affected versio... |
| CVE-2023-2993 | MEDIUM | 6.3 | 0.2% | Jun 26, 2023 | A valid, authenticated user with limited privileges may be able to use specifically crafted web management server API ca... |
| CVE-2023-2290 | MEDIUM | 6.7 | 0.2% | Jun 26, 2023 | A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elev... |
| CVE-2023-27082 | MEDIUM | 4.8 | 0.5% | Jun 26, 2023 | Cross Site Scripting (XSS) vulnerability in /admin.php in Pluck CMS 4.7.15 through 4.7.16-dev4 allows remote attackers t... |
| CVE-2023-33580 | MEDIUM | 4.8 | 3.7% | Jun 26, 2023 | Phpgurukul Student Study Center Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in the "Admin Name" f... |
| CVE-2023-29459 | MEDIUM | 6.1 | 0.6% | Jun 26, 2023 | The laola.redbull application through 5.1.9-R for Android exposes the exported activity at.redbullsalzburg.android.AppMo... |
| CVE-2023-28485 | MEDIUM | 5.4 | 1.0% | Jun 26, 2023 | A stored cross-site scripting (Stored XSS) vulnerability in file preview in WeKan before 6.75 allows remote authenticate... |
| CVE-2023-29438 | MEDIUM | 4.8 | 0.4% | Jun 26, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eric Martin SimpleModal Contact Form (SMCF) plugin <= ... |
| CVE-2023-29437 | MEDIUM | 5.4 | 0.4% | Jun 26, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Steven A. Zahm Connections Business Directory pl... |
| CVE-2023-29435 | MEDIUM | 5.4 | 0.4% | Jun 26, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Zwaply Cryptocurrency All-in-One plugin <= 3.0.1... |
| CVE-2023-29436 | MEDIUM | 5.4 | 0.4% | Jun 26, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Flyn San IFrame Shortcode plugin <= 1.0.5 versio... |
| CVE-2023-29434 | MEDIUM | 4.8 | 0.4% | Jun 26, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in FancyThemes Optin Forms – Simple List Building Plugin ... |
| CVE-2023-29430 | MEDIUM | 6.1 | 0.4% | Jun 26, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CTHthemes TheRoof theme <= 1.0.3 versions. |
| CVE-2023-29427 | MEDIUM | 6.1 | 0.4% | Jun 26, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in TMS Booking for Appointments and Events Calendar – Amelia ... |
| CVE-2023-29424 | MEDIUM | 4.8 | 0.3% | Jun 26, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Plainware ShiftController Employee Shift Scheduling pl... |
| CVE-2023-29423 | MEDIUM | 4.8 | 0.4% | Jun 26, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Cancel order request / Return order / R... |
| CVE-2023-22359 | MEDIUM | 4.3 | 0.4% | Jun 26, 2023 | User enumeration in Checkmk <=2.2.0p4 allows an authenticated attacker to enumerate usernames. |
| CVE-2023-1620 | MEDIUM | 4.9 | 0.9% | Jun 26, 2023 | Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the de... |
| CVE-2023-1619 | MEDIUM | 4.9 | 0.8% | Jun 26, 2023 | Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the de... |
| CVE-2023-29093 | MEDIUM | 4.8 | 0.4% | Jun 26, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PI Websolution Con... |
| CVE-2023-28992 | MEDIUM | 6.1 | 0.4% | Jun 26, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Elliot Sowersby, RelyWP Coupon Affiliates – WooCommerce Af... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now