2023 CVE Vulnerabilities
31,397 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-48646 | HIGH | 7.2 | 82.2% | Nov 22, 2023 | Zoho ManageEngine RecoveryManager Plus before 6070 allows admin users to execute arbitrary commands via proxy settings. |
| CVE-2023-48106 | HIGH | 8.8 | 0.9% | Nov 22, 2023 | Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted f... |
| CVE-2023-47765 | HIGH | 8.8 | 0.3% | Nov 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin <= 2... |
| CVE-2023-47758 | HIGH | 8.8 | 0.3% | Nov 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Mondula GmbH Multi Step Form plugin <= 1.7.11 versions. |
| CVE-2023-47755 | MEDIUM | 6.1 | 0.4% | Nov 22, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AazzTech WooCommer... |
| CVE-2023-47467 | MEDIUM | 6.5 | 1.1% | Nov 22, 2023 | Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive informat... |
| CVE-2023-47251 | MEDIUM | 6.5 | 1.7% | Nov 22, 2023 | In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the print function of the ... |
| CVE-2023-47250 | HIGH | 8.8 | 1.4% | Nov 22, 2023 | In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, broken Access Control on X11 server sockets allows ... |
| CVE-2023-47014 | MEDIUM | 6.5 | 0.3% | Nov 22, 2023 | A Cross-Site Request Forgery (CSRF) vulnerability in Sourcecodester Sticky Notes App Using PHP with Source Code v.1.0 al... |
| CVE-2023-46357 | CRITICAL | 9.8 | 0.7% | Nov 22, 2023 | In the module "Cross Selling in Modal Cart" (motivationsale) < 3.5.0 from MyPrestaModules for PrestaShop, a guest can pe... |
| CVE-2023-43887 | HIGH | 8.1 | 1.0% | Nov 22, 2023 | Libde265 v1.0.12 was discovered to contain multiple buffer overflows via the num_tile_columns and num_tile_row parameter... |
| CVE-2023-25987 | HIGH | 8.8 | 0.3% | Nov 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Aleksandar Urošević My YouTube Channel plugin <= 3.23.3 versions. |
| CVE-2023-25986 | HIGH | 8.8 | 0.3% | Nov 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WattIsIt PayGreen – Ancienne version plugin <= 4.10.2 versions. |
| CVE-2023-6157 | HIGH | 8.8 | 0.9% | Nov 22, 2023 | Improper neutralization of livestatus command delimiters in ajax_search in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p... |
| CVE-2023-6156 | HIGH | 8.8 | 0.9% | Nov 22, 2023 | Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk <= 2.0.0p39, < 2.1.0p37... |
| CVE-2023-47316 | MEDIUM | 5.4 | 0.4% | Nov 22, 2023 | Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control. The Web panel allows users to gain access to po... |
| CVE-2023-47315 | HIGH | 8.8 | 0.8% | Nov 22, 2023 | Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret. The secret is ha... |
| CVE-2023-47314 | MEDIUM | 5.4 | 0.4% | Nov 22, 2023 | Headwind MDM Web panel 5.22.1 is vulnerable to cross-site scripting (XSS). The file upload function allows APK and arbit... |
| CVE-2023-47313 | MEDIUM | 5.4 | 0.8% | Nov 22, 2023 | Headwind MDM Web panel 5.22.1 is vulnerable to Directory Traversal. The application uses an API call to move the uploade... |
| CVE-2023-47312 | MEDIUM | 6.5 | 0.4% | Nov 22, 2023 | Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to Login Credential Leakage via Audit Entrie... |
| CVE-2023-45377 | CRITICAL | 9.8 | 0.7% | Nov 22, 2023 | In the module "Chronopost Official" (chronopost) for PrestaShop, a guest can perform SQL injection. The script PHP `canc... |
| CVE-2023-43082 | MEDIUM | 5.9 | 0.3% | Nov 22, 2023 | Dell Unity prior to 5.3 contains a 'man in the middle' vulnerability in the vmadapter component. If a customer has a ce... |
| CVE-2023-20241 | MEDIUM | 5.5 | 0.2% | Nov 22, 2023 | Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an aut... |
| CVE-2023-20240 | MEDIUM | 5.5 | 0.2% | Nov 22, 2023 | Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an aut... |
| CVE-2023-20084 | MEDIUM | 4.4 | 0.2% | Nov 22, 2023 | A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attack... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now