2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-38880 | CRITICAL | 9.8 | 1.0% | Nov 20, 2023 | The Community Edition version 9.0 of OS4ED's openSIS Classic has a broken access control vulnerability in the database b... |
| CVE-2023-38879 | HIGH | 7.5 | 3.7% | Nov 20, 2023 | The Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to read arbitrary files via a direc... |
| CVE-2023-48292 | HIGH | 8.8 | 22.9% | Nov 20, 2023 | The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior ... |
| CVE-2023-48241 | HIGH | 7.5 | 72.8% | Nov 20, 2023 | XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 14.10.15, 15.5.1, a... |
| CVE-2023-48240 | HIGH | 8.8 | 0.7% | Nov 20, 2023 | XWiki Platform is a generic wiki platform. The rendered diff in XWiki embeds images to be able to compare the contents a... |
| CVE-2023-48223 | MEDIUM | 5.9 | 0.7% | Nov 20, 2023 | fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to version 3.3.2, the fast-jwt library does not proper... |
| CVE-2023-48221 | HIGH | 8.8 | 0.9% | Nov 20, 2023 | wire-avs provides Audio, Visual, and Signaling (AVS) functionality sure the secure messaging software Wire. Prior to ver... |
| CVE-2023-48218 | MEDIUM | 5.3 | 0.6% | Nov 20, 2023 | The Strapi Protected Populate Plugin protects `get` endpoints from revealing too much information. Prior to version 1.3.... |
| CVE-2023-35762 | CRITICAL | 9.8 | 1.7% | Nov 20, 2023 | Versions of INEA ME RTU firmware 3.36b and prior are vulnerable to operating system (OS) command injection, which could... |
| CVE-2023-29155 | CRITICAL | 9.8 | 0.9% | Nov 20, 2023 | Versions of INEA ME RTU firmware 3.36b and prior do not require authentication to the "root" account on the host system ... |
| CVE-2023-36013 | MEDIUM | 6.5 | 1.4% | Nov 20, 2023 | PowerShell Information Disclosure Vulnerability |
| CVE-2023-6197 | MEDIUM | 5.4 | 0.2% | Nov 20, 2023 | The Audio Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including... |
| CVE-2023-6196 | HIGH | 8.8 | 0.3% | Nov 20, 2023 | The Audio Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including... |
| CVE-2023-48090 | HIGH | 7.1 | 0.3% | Nov 20, 2023 | GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leaks in extract_attributes media_tools/m3u8.c:329. |
| CVE-2023-48039 | MEDIUM | 5.5 | 0.3% | Nov 20, 2023 | GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leak in gf_mpd_parse_string media_tools/mpd.c:75. |
| CVE-2023-47772 | MEDIUM | 5.4 | 0.4% | Nov 20, 2023 | Contributor+ Stored Cross-Site Scripting (XSS) vulnerability in Slider Revolution <= 6.6.14. |
| CVE-2023-6045 | HIGH | 7.8 | 0.2% | Nov 20, 2023 | in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through t... |
| CVE-2023-5593 | HIGH | 7.8 | 0.2% | Nov 20, 2023 | The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could al... |
| CVE-2023-47217 | MEDIUM | 5.5 | 0.2% | Nov 20, 2023 | in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through buffer overflow. |
| CVE-2023-46705 | MEDIUM | 5.5 | 0.2% | Nov 20, 2023 | in OpenHarmony v3.2.2 and prior versions allow a local attacker causes system information leak through type confusion. |
| CVE-2023-46100 | MEDIUM | 5.5 | 0.2% | Nov 20, 2023 | in OpenHarmony v3.2.2 and prior versions allow a local attacker get sensitive buffer information through use of uninitia... |
| CVE-2023-43612 | HIGH | 7.8 | 0.2% | Nov 20, 2023 | in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary file read and write through improper preservat... |
| CVE-2023-42774 | MEDIUM | 5.5 | 0.2% | Nov 20, 2023 | in OpenHarmony v3.2.2 and prior versions allow a local attacker get confidential information through incorrect default ... |
| CVE-2023-3116 | HIGH | 7.1 | 0.2% | Nov 20, 2023 | in OpenHarmony v3.2.2 and prior versions allow a local attacker get confidential information or rewrite sensitive file t... |
| CVE-2023-46302 | CRITICAL | 9.8 | 1.7% | Nov 20, 2023 | Apache Software Foundation Apache Submarine has a bug when serializing against yaml. The bug is caused by snakeyaml htt... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now