2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45050 | MEDIUM | 5.4 | 0.5% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic Jetpack... |
| CVE-2023-41136 | MEDIUM | 4.8 | 0.4% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Laurence/OhMyBox.I... |
| CVE-2023-48743 | MEDIUM | 6.1 | 0.4% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paul Menard Simply... |
| CVE-2023-48737 | MEDIUM | 4.8 | 0.4% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Trijaya Digital... |
| CVE-2023-48336 | MEDIUM | 5.4 | 0.4% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cybernetikz Easy S... |
| CVE-2023-49620 | MEDIUM | 6.5 | 1.1% | Nov 30, 2023 | Before DolphinScheduler version 3.1.0, the login user could delete UDF function in the resource center unauthorized (whi... |
| CVE-2023-49701 | CRITICAL | 9.8 | 0.5% | Nov 30, 2023 | Memory Corruption in SIM management while USIMPhase2init |
| CVE-2023-49700 | HIGH | 7.5 | 0.4% | Nov 30, 2023 | Security best practices violations, a string operation in Streamingmedia will write past the end of fixed-size destinati... |
| CVE-2023-49699 | HIGH | 7.8 | 0.2% | Nov 30, 2023 | Memory Corruption in IMS while calling VoLTE Streamingmedia Interface |
| CVE-2023-49095 | HIGH | 7.5 | 0.6% | Nov 30, 2023 | nexkey is a microblogging platform. Insufficient validation of ActivityPub requests received in inbox could allow any us... |
| CVE-2023-49081 | MEDIUM | 5.3 | 0.9% | Nov 30, 2023 | aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for... |
| CVE-2023-49077 | MEDIUM | 6.1 | 0.4% | Nov 30, 2023 | Mailcow: dockerized is an open source groupware/email suite based on docker. A Cross-Site Scripting (XSS) vulnerability ... |
| CVE-2023-49052 | HIGH | 8.8 | 2.4% | Nov 30, 2023 | File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script ... |
| CVE-2023-49087 | HIGH | 7.5 | 0.2% | Nov 30, 2023 | xml-security is a library that implements XML signatures and encryption. Validation of an XML signature requires verific... |
| CVE-2023-49076 | MEDIUM | 6.5 | 0.3% | Nov 30, 2023 | Customer-data-framework allows management of customer data within Pimcore. There are no tokens or headers to prevent CSR... |
| CVE-2023-47418 | CRITICAL | 9.8 | 1.5% | Nov 30, 2023 | Remote Code Execution (RCE) vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface i... |
| CVE-2023-5275 | MEDIUM | 4.7 | 0.3% | Nov 30, 2023 | Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-serv... |
| CVE-2023-5274 | MEDIUM | 4.7 | 0.3% | Nov 30, 2023 | Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-serv... |
| CVE-2023-49097 | HIGH | 8.8 | 0.8% | Nov 30, 2023 | ZITADEL is an identity infrastructure system. ZITADEL uses the notification triggering requests Forwarded or X-Forwarded... |
| CVE-2023-49094 | MEDIUM | 4.3 | 0.7% | Nov 30, 2023 | Symbolicator is a symbolication service for native stacktraces and minidumps with symbol server support. An attacker cou... |
| CVE-2023-47464 | HIGH | 8.8 | 22.6% | Nov 30, 2023 | Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbi... |
| CVE-2023-47463 | CRITICAL | 9.8 | 1.3% | Nov 30, 2023 | Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbi... |
| CVE-2023-5772 | MEDIUM | 4.3 | 0.3% | Nov 30, 2023 | The Debug Log Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ... |
| CVE-2023-5247 | HIGH | 7.8 | 0.3% | Nov 30, 2023 | Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA E... |
| CVE-2023-4474 | CRITICAL | 9.8 | 29.7% | Nov 30, 2023 | The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now