2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-48801 | CRITICAL | 9.8 | 1.7% | Dec 1, 2023 | In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_415534 function obtains fields from the front-en... |
| CVE-2023-6462 | MEDIUM | 6.1 | 0.6% | Dec 1, 2023 | A vulnerability, which was classified as problematic, was found in SourceCodester User Registration and Login System 1.0... |
| CVE-2023-49281 | MEDIUM | 6.1 | 0.6% | Dec 1, 2023 | Calendarinho is an open source calendaring application to manage large teams of consultants. An Open Redirect issue occu... |
| CVE-2023-49276 | MEDIUM | 6.1 | 0.5% | Dec 1, 2023 | Uptime Kuma is an open source self-hosted monitoring tool. In affected versions the Google Analytics element in vulnerab... |
| CVE-2023-48314 | MEDIUM | 6.1 | 0.4% | Dec 1, 2023 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Nextcloud with Collabo... |
| CVE-2023-46746 | MEDIUM | 4.3 | 0.4% | Dec 1, 2023 | PostHog provides open-source product analytics, session recording, feature flagging and A/B testing that you can self-ho... |
| CVE-2023-44402 | HIGH | 7 | 0.2% | Dec 1, 2023 | Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Thi... |
| CVE-2023-44382 | CRITICAL | 9.1 | 0.9% | Dec 1, 2023 | October is a Content Management System (CMS) and web platform to assist with development workflow. An authenticated back... |
| CVE-2023-44381 | MEDIUM | 4.9 | 0.5% | Dec 1, 2023 | October is a Content Management System (CMS) and web platform to assist with development workflow. An authenticated back... |
| CVE-2023-49277 | MEDIUM | 6.1 | 0.5% | Dec 1, 2023 | dpaste is an open source pastebin application written in Python using the Django framework. A security vulnerability has... |
| CVE-2023-46174 | MEDIUM | 5.4 | 0.4% | Dec 1, 2023 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embe... |
| CVE-2023-43021 | MEDIUM | 5.3 | 0.7% | Dec 1, 2023 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed te... |
| CVE-2023-42022 | MEDIUM | 5.4 | 0.4% | Dec 1, 2023 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embe... |
| CVE-2023-42019 | MEDIUM | 5.9 | 0.5% | Dec 1, 2023 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper inp... |
| CVE-2023-42009 | MEDIUM | 5.4 | 0.4% | Dec 1, 2023 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a... |
| CVE-2023-40699 | HIGH | 7.5 | 1.1% | Dec 1, 2023 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper inp... |
| CVE-2023-43015 | MEDIUM | 5.4 | 0.4% | Dec 1, 2023 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a... |
| CVE-2023-38268 | HIGH | 8.8 | 0.3% | Dec 1, 2023 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to exec... |
| CVE-2023-26024 | MEDIUM | 6.5 | 0.2% | Dec 1, 2023 | IBM Planning Analytics on Cloud Pak for Data 4.0 could allow an attacker on a shared network to obtain sensitive informa... |
| CVE-2023-42006 | MEDIUM | 5.5 | 0.2% | Dec 1, 2023 | IBM Administration Runtime Expert for i 7.2, 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information ... |
| CVE-2023-48893 | HIGH | 8.8 | 0.7% | Dec 1, 2023 | SLiMS (aka SENAYAN Library Management System) through 9.6.1 allows admin/modules/reporting/customs/staff_act.php SQL Inj... |
| CVE-2023-48842 | CRITICAL | 9.8 | 3.7% | Dec 1, 2023 | D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at... |
| CVE-2023-48813 | HIGH | 8.8 | 0.7% | Dec 1, 2023 | Senayan Library Management Systems (Slims) 9 Bulian v9.6.1 is vulnerable to SQL Injection via admin/modules/reporting/cu... |
| CVE-2023-4518 | HIGH | 7.5 | 0.7% | Dec 1, 2023 | A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed ... |
| CVE-2023-49371 | CRITICAL | 9.8 | 3.7% | Dec 1, 2023 | RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now