2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-30585 | HIGH | 7.5 | 1.5% | Nov 28, 2023 | A vulnerability has been identified in the Node.js (.msi version) installation process, specifically affecting Windows u... |
| CVE-2023-47437 | MEDIUM | 5.4 | 0.5% | Nov 28, 2023 | A vulnerability has been identified in Pachno 1.0.6 allowing an authenticated attacker to execute a cross-site scripting... |
| CVE-2023-29770 | HIGH | 8.8 | 0.9% | Nov 28, 2023 | In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file w... |
| CVE-2023-49145 | MEDIUM | 5.4 | 1.2% | Nov 27, 2023 | Apache NiFi 0.7.0 through 1.23.2 include the JoltTransformJSON Processor, which provides an advanced configuration user ... |
| CVE-2023-48188 | CRITICAL | 9.8 | 1.3% | Nov 27, 2023 | SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 allows a remote attacker to execute arbitrar... |
| CVE-2023-46480 | CRITICAL | 9.8 | 1.6% | Nov 27, 2023 | An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ... |
| CVE-2023-46355 | MEDIUM | 5.3 | 0.5% | Nov 27, 2023 | In the module "CSV Feeds PRO" (csvfeeds) < 2.6.1 from Bl Modules for PrestaShop, a guest can download personal informati... |
| CVE-2023-46349 | CRITICAL | 9.8 | 0.8% | Nov 27, 2023 | In the module "Product Catalog (CSV, Excel) Export/Update" (updateproducts) < 3.8.5 from MyPrestaModules for PrestaShop,... |
| CVE-2023-42366 | MEDIUM | 5.5 | 0.4% | Nov 27, 2023 | A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159. |
| CVE-2023-42365 | MEDIUM | 5.5 | 0.4% | Nov 27, 2023 | A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar functio... |
| CVE-2023-42364 | MEDIUM | 5.5 | 0.4% | Nov 27, 2023 | A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk patte... |
| CVE-2023-5885 | MEDIUM | 6.5 | 1.1% | Nov 27, 2023 | The discontinued FFS Colibri product allows a remote user to access files on the system including files containing login... |
| CVE-2023-5773 | — | — | — | Nov 27, 2023 | Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-6136. Reason: This record is a reservatio... |
| CVE-2023-42363 | MEDIUM | 5.5 | 0.4% | Nov 27, 2023 | A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1. |
| CVE-2023-32062 | MEDIUM | 4.3 | 0.5% | Nov 27, 2023 | OroPlatform is a package that assists system and user calendar management. Back-office users can access information from... |
| CVE-2023-49044 | CRITICAL | 9.8 | 1.4% | Nov 27, 2023 | Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid p... |
| CVE-2023-49030 | HIGH | 7.5 | 0.9% | Nov 27, 2023 | SQL Injection vulnerability in32ns KLive v.2019-1-19 and before allows a remote attacker to obtain sensitive information... |
| CVE-2023-48034 | MEDIUM | 6.1 | 0.2% | Nov 27, 2023 | An issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless key... |
| CVE-2023-49316 | HIGH | 7.5 | 0.8% | Nov 27, 2023 | In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service. |
| CVE-2023-6329 | CRITICAL | 9.8 | 65.2% | Nov 27, 2023 | An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll c... |
| CVE-2023-5974 | CRITICAL | 9.8 | 3.1% | Nov 27, 2023 | The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery (SSRF) via the `path` parame... |
| CVE-2023-5958 | MEDIUM | 6.1 | 0.5% | Nov 27, 2023 | The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the bac... |
| CVE-2023-5942 | MEDIUM | 5.4 | 0.5% | Nov 27, 2023 | The Medialist WordPress plugin before 1.4.1 does not validate and escape some of its shortcode attributes before outputt... |
| CVE-2023-5906 | HIGH | 7.5 | 0.8% | Nov 27, 2023 | The Job Manager & Career WordPress plugin before 1.4.4 contains a vulnerability in the Directory Listings system, which ... |
| CVE-2023-5845 | MEDIUM | 5.3 | 0.6% | Nov 27, 2023 | The Simple Social Media Share Buttons WordPress plugin before 5.1.1 leaks password-protected post content to unauthentic... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now