2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-48830 | HIGH | 8.8 | 1.2% | Dec 7, 2023 | Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export. |
| CVE-2023-48828 | MEDIUM | 5.4 | 0.5% | Dec 7, 2023 | Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_... |
| CVE-2023-48827 | MEDIUM | 5.4 | 0.5% | Dec 7, 2023 | Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name, plugin_sms_api_key, plugin... |
| CVE-2023-48826 | HIGH | 8.8 | 1.2% | Dec 7, 2023 | Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List. |
| CVE-2023-48825 | MEDIUM | 5.4 | 0.5% | Dec 7, 2023 | Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Cod... |
| CVE-2023-48824 | MEDIUM | 5.4 | 0.5% | Dec 7, 2023 | BoidCMS 2.0.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the title, subtitle, footer, or key... |
| CVE-2023-48823 | CRITICAL | 9.8 | 1.1% | Dec 7, 2023 | A Blind SQL injection issue in ajax.php in GaatiTrack Courier Management System 1.0 allows an unauthenticated attacker t... |
| CVE-2023-48208 | MEDIUM | 6.1 | 0.5% | Dec 7, 2023 | A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via th... |
| CVE-2023-48207 | HIGH | 8.8 | 1.2% | Dec 7, 2023 | Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component. |
| CVE-2023-48206 | MEDIUM | 6.1 | 0.6% | Dec 7, 2023 | A Cross Site Scripting (XSS) vulnerability in GaatiTrack Courier Management System 1.0 allows a remote attacker to injec... |
| CVE-2023-48205 | MEDIUM | 5.3 | 0.8% | Dec 7, 2023 | Jorani Leave Management System 1.0.2 allows a remote attacker to spoof a Host header associated with password reset emai... |
| CVE-2023-43304 | HIGH | 8.2 | 0.5% | Dec 7, 2023 | An issue in PARK DANDAN mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of... |
| CVE-2023-43303 | HIGH | 8.2 | 0.5% | Dec 7, 2023 | An issue in craftbeer bar canvas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via l... |
| CVE-2023-43302 | HIGH | 8.2 | 0.6% | Dec 7, 2023 | An issue in sanTas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the ... |
| CVE-2023-43301 | HIGH | 8.2 | 0.6% | Dec 7, 2023 | An issue in DARTS SHOP MAXIM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leaka... |
| CVE-2023-43300 | HIGH | 8.2 | 0.5% | Dec 7, 2023 | An issue in urban_project mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage ... |
| CVE-2023-43299 | MEDIUM | 5.3 | 0.5% | Dec 7, 2023 | An issue in DA BUTCHERS mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of... |
| CVE-2023-43298 | MEDIUM | 5.3 | 0.5% | Dec 7, 2023 | An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leak... |
| CVE-2023-48172 | MEDIUM | 5.4 | 0.7% | Dec 7, 2023 | A Cross Site Scripting (XSS) vulnerability in Shuttle Booking Software 2.0 allows a remote attacker to inject JavaScript... |
| CVE-2023-46916 | MEDIUM | 4.3 | 0.5% | Dec 7, 2023 | Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay. An attacker can use GATT characteristic handle 0x0012 to... |
| CVE-2023-46857 | MEDIUM | 5.4 | 0.6% | Dec 7, 2023 | Squidex before 7.9.0 allows XSS via an SVG document to the Upload Assets feature. This occurs because there is an incomp... |
| CVE-2023-46307 | HIGH | 7.5 | 1.3% | Dec 7, 2023 | An issue was discovered in server.js in etcd-browser 87ae63d75260. By supplying a /../../../ Directory Traversal input t... |
| CVE-2023-43103 | MEDIUM | 6.1 | 0.4% | Dec 7, 2023 | An XSS issue was discovered in a web endpoint in Zimbra Collaboration (ZCS) before 10.0.4 via an unsanitized parameter. ... |
| CVE-2023-43102 | MEDIUM | 6.1 | 0.4% | Dec 7, 2023 | An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4. An XSS issue can be exploited to access the mailbox... |
| CVE-2023-6568 | MEDIUM | 6.1 | 1.6% | Dec 7, 2023 | A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the han... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now