2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-47244 | HIGH | 7.5 | 0.6% | Nov 23, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Omnisend Email Marketing for WooCommerce by ... |
| CVE-2023-49210 | CRITICAL | 9.8 | 1.9% | Nov 23, 2023 | The openssl (aka node-openssl) NPM package through 2.0.0 was characterized as "a nonsense wrapper with no real purpose" ... |
| CVE-2023-5972 | HIGH | 7.8 | 0.3% | Nov 23, 2023 | A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel. This issue ... |
| CVE-2023-49208 | CRITICAL | 9.8 | 0.9% | Nov 23, 2023 | scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation... |
| CVE-2023-33202 | MEDIUM | 5.5 | 0.9% | Nov 23, 2023 | Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue within the Bouncy Castle org.bounc... |
| CVE-2023-6118 | HIGH | 7.5 | 0.8% | Nov 23, 2023 | Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP ... |
| CVE-2023-4677 | CRITICAL | 9.8 | 0.5% | Nov 23, 2023 | Cron log backup files contain administrator session IDs. It is trivial for any attacker who can reach the Pandora FMS Co... |
| CVE-2023-41812 | HIGH | 8.8 | 0.6% | Nov 23, 2023 | Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not P... |
| CVE-2023-41811 | MEDIUM | 6.1 | 0.3% | Nov 23, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all... |
| CVE-2023-41810 | MEDIUM | 6.1 | 0.3% | Nov 23, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all... |
| CVE-2023-41808 | HIGH | 7.5 | 0.5% | Nov 23, 2023 | Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows... |
| CVE-2023-41807 | HIGH | 8.8 | 0.7% | Nov 23, 2023 | Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows... |
| CVE-2023-41806 | HIGH | 7.5 | 0.5% | Nov 23, 2023 | Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability causes... |
| CVE-2023-41792 | MEDIUM | 6.1 | 0.2% | Nov 23, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). This vulnerabil... |
| CVE-2023-41791 | MEDIUM | 5.4 | 0.5% | Nov 23, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all... |
| CVE-2023-41790 | CRITICAL | 9.8 | 0.6% | Nov 23, 2023 | Uncontrolled Search Path Element vulnerability in Pandora FMS on all allows Leveraging/Manipulating Configuration File S... |
| CVE-2023-41789 | MEDIUM | 6.1 | 0.5% | Nov 23, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all... |
| CVE-2023-41788 | HIGH | 8.8 | 0.7% | Nov 23, 2023 | Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not P... |
| CVE-2023-41787 | HIGH | 7.5 | 0.5% | Nov 23, 2023 | Uncontrolled Search Path Element vulnerability in Pandora FMS on all allows Leveraging/Manipulating Configuration File S... |
| CVE-2023-41786 | MEDIUM | 6.5 | 0.5% | Nov 23, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pandora FMS on all allows File Discovery. Th... |
| CVE-2023-4595 | MEDIUM | 6.5 | 0.7% | Nov 23, 2023 | An information exposure vulnerability has been found, the exploitation of which could allow a remote user to retrieve se... |
| CVE-2023-4594 | MEDIUM | 5.4 | 0.4% | Nov 23, 2023 | Stored XSS vulnerability. This vulnerability could allow an attacker to store a malicious JavaScript payload via GET and... |
| CVE-2023-4593 | MEDIUM | 6.5 | 1.1% | Nov 23, 2023 | Path traversal vulnerability whose exploitation could allow an authenticated remote user to bypass SecurityManager's int... |
| CVE-2023-4406 | MEDIUM | 6.1 | 0.5% | Nov 23, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KC Group E-Commerc... |
| CVE-2023-43123 | MEDIUM | 5.5 | 0.3% | Nov 23, 2023 | On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now