2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-7322HIGH8.1Nagios Log Server versions prior to 2024R1 contain an incorrect authorization vulnerability. Users who lacked the requir...
CVE-2023-7321MEDIUM5.4Nagios Log Server versions prior to 2.1.14 are vulnerable to cross-site scripting (XSS) via the Snapshots Page. Untruste...
CVE-2023-7319MEDIUM5.4Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Percentile Calcula...
CVE-2023-7318MEDIUM5.4Nagios XI versions prior to < 2024R1.0.2 are vulnerable to cross-site scripting (XSS) via the Nagios Core Command Expans...
CVE-2023-7317HIGH8.8Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal. A remote, lo...
CVE-2023-7316MEDIUM5.4Nagios XI versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Graph Explorer component. Insuff...
CVE-2023-7315MEDIUM5.4Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Graph Explorer component. Insuff...
CVE-2023-7314MEDIUM5.4Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Bandwidth Report component. Insu...
CVE-2023-7313MEDIUM5.4Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Bulk Modifications tool. Insuffi...
CVE-2023-7312MEDIUM4.8Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability when adding or configuri...
CVE-2023-53690MEDIUM4.8Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD authentic...
CVE-2023-53689MEDIUM4.8Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting (XSS) vulnerability in the license key co...
CVE-2023-53688MEDIUM5.4Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) and cross-site request forgery (CSRF) vi...
CVE-2023-32199MEDIUM4.3A vulnerability has been identified within Rancher Manager, where after removing a custom GlobalRole that gives admini...
CVE-2023-7324HIGH8.1In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible addl_desc_ptr out-of-bounds...
CVE-2023-39178——Rejected reason: Duplicate of CVE-2023-52441.
CVE-2023-39177——Rejected reason: Duplicate of CVE-2023-52442.
CVE-2023-7320MEDIUM5.3The WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 7...
CVE-2023-49440HIGH8.8AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."
CVE-2023-37749MEDIUM5.3Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attackers to view users' da...
CVE-2023-53733HIGH7.8In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_u32: Undo tcf_bind_filter if u32_re...
CVE-2023-53732——In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL dereference in ni_write_inode S...
CVE-2023-53731——In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlink_set_err(...
CVE-2023-53730——In the Linux kernel, the following vulnerability has been resolved: blk-iocost: use spin_lock_irqsave in adjust_inuse_a...
CVE-2023-53729HIGH7.8In the Linux kernel, the following vulnerability has been resolved: soc: qcom: qmi_encdec: Restrict string length in de...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now