2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-2949 | MEDIUM | 6.1 | 1.5% | May 28, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.1. |
| CVE-2023-2948 | MEDIUM | 6.1 | 96.7% | May 28, 2023 | Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.1. |
| CVE-2023-2947 | MEDIUM | 4.8 | 90.8% | May 27, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.1. |
| CVE-2023-2945 | MEDIUM | 5.4 | 0.4% | May 27, 2023 | Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1. |
| CVE-2023-2944 | MEDIUM | 5.4 | 0.4% | May 27, 2023 | Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1. |
| CVE-2023-2926 | MEDIUM | 6.5 | 0.9% | May 27, 2023 | A vulnerability was found in SeaCMS 11.6 and classified as problematic. This issue affects some unknown processing of th... |
| CVE-2023-2925 | MEDIUM | 5.4 | 0.6% | May 27, 2023 | A vulnerability, which was classified as problematic, was found in Webkul krayin crm 1.2.4. This affects an unknown part... |
| CVE-2023-2922 | MEDIUM | 6.1 | 0.6% | May 27, 2023 | A vulnerability classified as problematic has been found in SourceCodester Comment System 1.0. Affected is an unknown fu... |
| CVE-2023-33184 | MEDIUM | 5.3 | 0.5% | May 27, 2023 | Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the s... |
| CVE-2023-33195 | MEDIUM | 6.1 | 0.7% | May 27, 2023 | Craft is a CMS for creating custom digital experiences on the web. A malformed RSS feed can deliver an XSS payload. This... |
| CVE-2023-33188 | MEDIUM | 5.5 | 0.3% | May 27, 2023 | Omni-notes is an open source note-taking application for Android. The Omni-notes Android app had an insufficient path va... |
| CVE-2023-32686 | MEDIUM | 5.4 | 0.4% | May 27, 2023 | Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to uplo... |
| CVE-2023-32325 | MEDIUM | 6.1 | 0.4% | May 27, 2023 | PostHog-js is a library to interface with the PostHog analytics tool. Versions prior to 1.57.2 have the potential for cr... |
| CVE-2023-33199 | MEDIUM | 5.3 | 0.7% | May 26, 2023 | Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects suppl... |
| CVE-2023-32319 | MEDIUM | 6.5 | 0.7% | May 26, 2023 | Nextcloud server is an open source personal cloud implementation. Missing brute-force protection on the WebDAV endpoints... |
| CVE-2023-32316 | MEDIUM | 4.3 | 0.4% | May 26, 2023 | CloudExplorer Lite is an open source cloud management tool. In affected versions users can add themselves to any organiz... |
| CVE-2023-32311 | MEDIUM | 4.3 | 0.4% | May 26, 2023 | CloudExplorer Lite is an open source cloud management platform. In CloudExplorer Lite prior to version 1.1.0 users organ... |
| CVE-2023-2898 | MEDIUM | 4.7 | 0.2% | May 26, 2023 | There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw all... |
| CVE-2023-27311 | MEDIUM | 5.3 | 0.6% | May 26, 2023 | NetApp Blue XP Connector versions prior to 3.9.25 expose information via a directory listing. A new Connector architectu... |
| CVE-2023-33196 | MEDIUM | 5.4 | 0.7% | May 26, 2023 | Craft is a CMS for creating custom digital experiences. Cross site scripting (XSS) can be triggered by review volumes. T... |
| CVE-2023-33194 | MEDIUM | 4.8 | 0.6% | May 26, 2023 | Craft is a CMS for creating custom digital experiences on the web.The platform does not filter input and encode output i... |
| CVE-2023-33187 | MEDIUM | 6.5 | 0.3% | May 26, 2023 | Highlight is an open source, full-stack monitoring platform. Highlight may record passwords on customer deployments when... |
| CVE-2023-33185 | MEDIUM | 5.4 | 0.2% | May 26, 2023 | Django-SES is a drop-in mail backend for Django. The django_ses library implements a mail backend for Django using AWS S... |
| CVE-2023-2858 | MEDIUM | 6.5 | 1.8% | May 26, 2023 | NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture... |
| CVE-2023-2857 | MEDIUM | 6.5 | 0.9% | May 26, 2023 | BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now