2023 CVE Vulnerabilities
31,397 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-40674 | MEDIUM | 5.4 | 0.4% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lasso Simple URLs ... |
| CVE-2023-38474 | MEDIUM | 6.1 | 0.4% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Campaign Monitor C... |
| CVE-2023-32291 | MEDIUM | 5.4 | 0.5% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MonsterInsights Pr... |
| CVE-2023-49733 | CRITICAL | 9.8 | 1.3% | Nov 30, 2023 | Improper Restriction of XML External Entity Reference vulnerability in Apache Cocoon.This issue affects Apache Cocoon: f... |
| CVE-2023-48329 | MEDIUM | 4.8 | 0.4% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeBard Fast Cust... |
| CVE-2023-48326 | MEDIUM | 6.1 | 0.4% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Ma... |
| CVE-2023-48322 | MEDIUM | 6.1 | 0.4% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eDoc Intelligence ... |
| CVE-2023-48289 | MEDIUM | 5.4 | 0.4% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SpreadsheetConvert... |
| CVE-2023-47854 | MEDIUM | 5.4 | 0.4% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Howard Ehrenberg P... |
| CVE-2023-47851 | MEDIUM | 5.4 | 0.3% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Akhtarujjaman Shuv... |
| CVE-2023-47850 | MEDIUM | 5.4 | 0.4% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PeepSo Community b... |
| CVE-2023-47777 | MEDIUM | 5.4 | 0.7% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WooComm... |
| CVE-2023-47505 | MEDIUM | 5.4 | 25.3% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor.Com Elem... |
| CVE-2023-45050 | MEDIUM | 5.4 | 0.5% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic Jetpack... |
| CVE-2023-41136 | MEDIUM | 4.8 | 0.4% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Laurence/OhMyBox.I... |
| CVE-2023-48743 | MEDIUM | 6.1 | 0.4% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paul Menard Simply... |
| CVE-2023-48737 | MEDIUM | 4.8 | 0.4% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Trijaya Digital... |
| CVE-2023-48336 | MEDIUM | 5.4 | 0.4% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cybernetikz Easy S... |
| CVE-2023-49620 | MEDIUM | 6.5 | 1.1% | Nov 30, 2023 | Before DolphinScheduler version 3.1.0, the login user could delete UDF function in the resource center unauthorized (whi... |
| CVE-2023-49701 | CRITICAL | 9.8 | 0.5% | Nov 30, 2023 | Memory Corruption in SIM management while USIMPhase2init |
| CVE-2023-49700 | HIGH | 7.5 | 0.4% | Nov 30, 2023 | Security best practices violations, a string operation in Streamingmedia will write past the end of fixed-size destinati... |
| CVE-2023-49699 | HIGH | 7.8 | 0.2% | Nov 30, 2023 | Memory Corruption in IMS while calling VoLTE Streamingmedia Interface |
| CVE-2023-49095 | HIGH | 7.5 | 0.6% | Nov 30, 2023 | nexkey is a microblogging platform. Insufficient validation of ActivityPub requests received in inbox could allow any us... |
| CVE-2023-49081 | MEDIUM | 5.3 | 0.9% | Nov 30, 2023 | aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for... |
| CVE-2023-49077 | MEDIUM | 6.1 | 0.4% | Nov 30, 2023 | Mailcow: dockerized is an open source groupware/email suite based on docker. A Cross-Site Scripting (XSS) vulnerability ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now