2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50455 | HIGH | 7.5 | 0.7% | Dec 10, 2023 | An issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email address verification" feature... |
| CVE-2023-50454 | MEDIUM | 5.9 | 0.3% | Dec 10, 2023 | An issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish connections to exte... |
| CVE-2023-50453 | MEDIUM | 5.3 | 0.5% | Dec 10, 2023 | An issue was discovered in Zammad before 6.2.0. It uses the public endpoint /api/v1/signshow for its login screen. This ... |
| CVE-2023-5870 | MEDIUM | 4.4 | 2.6% | Dec 10, 2023 | A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logic... |
| CVE-2023-5869 | HIGH | 8.8 | 4.3% | Dec 10, 2023 | A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overfl... |
| CVE-2023-5868 | MEDIUM | 4.3 | 2.8% | Dec 10, 2023 | A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by ex... |
| CVE-2023-50449 | HIGH | 7.5 | 1.2% | Dec 10, 2023 | JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey... |
| CVE-2023-50446 | HIGH | 7.8 | 0.2% | Dec 10, 2023 | An issue was discovered in Mullvad VPN Windows app before 2023.6-beta1. Insufficient permissions on a directory allow an... |
| CVE-2023-6655 | CRITICAL | 9.8 | 3.8% | Dec 10, 2023 | A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some ... |
| CVE-2023-6654 | HIGH | 8.8 | 1.7% | Dec 10, 2023 | A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0. Affected by this vulnerability is an unknown... |
| CVE-2023-6653 | MEDIUM | 4.3 | 0.4% | Dec 10, 2023 | A vulnerability was found in PHPGurukul Teacher Subject Allocation Management System 1.0. It has been rated as problemat... |
| CVE-2023-6652 | CRITICAL | 9.8 | 0.9% | Dec 10, 2023 | A vulnerability was found in code-projects Matrimonial Site 1.0. It has been declared as critical. Affected by this vuln... |
| CVE-2023-6651 | CRITICAL | 9.8 | 0.9% | Dec 10, 2023 | A vulnerability was found in code-projects Matrimonial Site 1.0. It has been classified as critical. Affected is an unkn... |
| CVE-2023-6650 | MEDIUM | 6.1 | 0.8% | Dec 10, 2023 | A vulnerability was found in SourceCodester Simple Invoice Generator System 1.0 and classified as problematic. This issu... |
| CVE-2023-6649 | MEDIUM | 6.1 | 0.8% | Dec 10, 2023 | A vulnerability has been found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as problema... |
| CVE-2023-6648 | CRITICAL | 9.8 | 1.0% | Dec 10, 2023 | A vulnerability, which was classified as critical, was found in PHPGurukul Nipah Virus Testing Management System 1.0. Th... |
| CVE-2023-6647 | CRITICAL | 9.8 | 1.0% | Dec 10, 2023 | A vulnerability, which was classified as critical, has been found in AMTT HiBOS 1.0. Affected by this issue is some unkn... |
| CVE-2023-50431 | MEDIUM | 5.5 | 0.3% | Dec 9, 2023 | sec_attest_info in drivers/accel/habanalabs/common/habanalabs_ioctl.c in the Linux kernel through 6.6.5 allows an inform... |
| CVE-2023-6646 | MEDIUM | 5.4 | 0.6% | Dec 9, 2023 | A vulnerability classified as problematic has been found in linkding 1.23.0. Affected is an unknown function. The manipu... |
| CVE-2023-50430 | MEDIUM | 6.4 | 0.4% | Dec 9, 2023 | The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Pr... |
| CVE-2023-50429 | CRITICAL | 9.1 | 0.7% | Dec 9, 2023 | IzyBat Orange casiers before 20230803_1 allows getEnsemble.php ensemble SQL injection. |
| CVE-2023-50428 | MEDIUM | 5.3 | 0.8% | Dec 9, 2023 | In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obf... |
| CVE-2023-47254 | CRITICAL | 9.8 | 2.2% | Dec 9, 2023 | An OS Command Injection in the CLI interface on DrayTek Vigor167 version 5.2.2, allows remote attackers to execute arbit... |
| CVE-2023-6120 | LOW | 2.7 | 0.5% | Dec 9, 2023 | The Welcart e-Commerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2... |
| CVE-2023-5756 | HIGH | 8.8 | 0.3% | Dec 9, 2023 | The Digital Publications by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now