2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6296 | MEDIUM | 6.1 | 0.8% | Nov 26, 2023 | A vulnerability was found in osCommerce 4. It has been rated as problematic. Affected by this issue is some unknown func... |
| CVE-2023-49312 | CRITICAL | 9.1 | 0.7% | Nov 26, 2023 | Precision Bridge PrecisionBridge.exe (aka the thick client) before 7.3.21 allows an integrity violation in which the sam... |
| CVE-2023-6293 | HIGH | 7.1 | 0.6% | Nov 24, 2023 | Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6. |
| CVE-2023-6277 | MEDIUM | 6.5 | 1.8% | Nov 24, 2023 | An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to... |
| CVE-2023-49298 | HIGH | 7.5 | 1.2% | Nov 24, 2023 | OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficien... |
| CVE-2023-48708 | MEDIUM | 6.5 | 0.6% | Nov 24, 2023 | CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. In affected versions successful lo... |
| CVE-2023-48707 | MEDIUM | 6.5 | 0.3% | Nov 24, 2023 | CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. The `secretKey` value is an import... |
| CVE-2023-48312 | CRITICAL | 9.8 | 0.6% | Nov 24, 2023 | capsule-proxy is a reverse proxy for the capsule operator project. Affected versions are subject to a privilege escalati... |
| CVE-2023-48712 | HIGH | 8.8 | 0.7% | Nov 24, 2023 | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. In affected versions there is a privilege escala... |
| CVE-2023-48711 | LOW | 3.7 | 0.5% | Nov 24, 2023 | google-translate-api-browser is an npm package which interfaces with the google translate web api. A Server-Side Request... |
| CVE-2023-6276 | HIGH | 7.5 | 0.6% | Nov 24, 2023 | A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. This affects an unknown part of the ... |
| CVE-2023-6275 | MEDIUM | 6.1 | 2.4% | Nov 24, 2023 | A vulnerability was found in TOTVS Fluig Platform 1.6.x/1.7.x/1.8.0/1.8.1. It has been rated as problematic. Affected by... |
| CVE-2023-6274 | CRITICAL | 9.8 | 2.9% | Nov 24, 2023 | A vulnerability was found in Byzoro Smart S80 up to 20231108. It has been declared as critical. Affected by this vulnera... |
| CVE-2023-46575 | CRITICAL | 9.8 | 1.3% | Nov 24, 2023 | A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensit... |
| CVE-2023-38914 | — | — | — | Nov 24, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-6251 | LOW | 3.5 | 0.2% | Nov 24, 2023 | Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, <= 2.0.0p39 allow an authenticated attacker to dele... |
| CVE-2023-48796 | HIGH | 7.5 | 1.2% | Nov 24, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler. The information ex... |
| CVE-2023-44303 | HIGH | 7.5 | 0.5% | Nov 24, 2023 | RVTools, Version 3.9.2 and above, contain a sensitive data exposure vulnerability in the password encryption utility (R... |
| CVE-2023-33706 | MEDIUM | 6.5 | 0.6% | Nov 24, 2023 | SysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a modified sid parameter t... |
| CVE-2023-26279 | HIGH | 7.8 | 0.2% | Nov 24, 2023 | IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to imprope... |
| CVE-2023-49216 | MEDIUM | 5.4 | 0.4% | Nov 23, 2023 | Usedesk before 1.7.57 allows profile stored XSS. |
| CVE-2023-49215 | MEDIUM | 6.1 | 0.4% | Nov 23, 2023 | Usedesk before 1.7.57 allows filter reflected XSS. |
| CVE-2023-49214 | CRITICAL | 9.8 | 0.8% | Nov 23, 2023 | Usedesk before 1.7.57 allows chat template injection. |
| CVE-2023-49213 | HIGH | 8.8 | 2.1% | Nov 23, 2023 | The API endpoints in Ironman PowerShell Universal 3.0.0 through 4.2.0 allow remote attackers to execute arbitrary comman... |
| CVE-2023-47529 | HIGH | 7.5 | 1.0% | Nov 23, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeIsle Cloud Templates & Patterns collect... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now