2023 CVE Vulnerabilities
31,248 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-2361 | MEDIUM | 5.4 | 0.5% | Apr 28, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-29489 | MEDIUM | 6.1 | 65.5% | Apr 27, 2023 | An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ... |
| CVE-2023-29471 | MEDIUM | 5.5 | 0.2% | Apr 27, 2023 | Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credent... |
| CVE-2023-29950 | MEDIUM | 5.5 | 0.3% | Apr 27, 2023 | swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDs_fillstyle at modules/... |
| CVE-2023-28286 | MEDIUM | 6.1 | 0.6% | Apr 27, 2023 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
| CVE-2023-28261 | MEDIUM | 5.7 | 0.6% | Apr 27, 2023 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2023-27860 | MEDIUM | 5.3 | 0.5% | Apr 27, 2023 | IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could disclose sensitive information in an error message. This informat... |
| CVE-2023-30852 | MEDIUM | 4.9 | 0.8% | Apr 27, 2023 | Pimcore is an open source data and experience management platform. Prior to version 10.5.21, the `/admin/misc/script-pro... |
| CVE-2023-2350 | MEDIUM | 5.4 | 0.6% | Apr 27, 2023 | A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0. Affected b... |
| CVE-2023-2349 | MEDIUM | 5.4 | 0.6% | Apr 27, 2023 | A vulnerability classified as problematic has been found in SourceCodester Service Provider Management System 1.0. Affec... |
| CVE-2023-30338 | MEDIUM | 5.4 | 0.4% | Apr 27, 2023 | Multiple stored cross-site scripting (XSS) vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web... |
| CVE-2023-2343 | MEDIUM | 5.4 | 0.4% | Apr 27, 2023 | Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-2342 | MEDIUM | 5.4 | 0.4% | Apr 27, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-2341 | MEDIUM | 6.1 | 1.1% | Apr 27, 2023 | Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-24966 | MEDIUM | 6.1 | 0.4% | Apr 27, 2023 | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to e... |
| CVE-2023-30444 | MEDIUM | 6.5 | 0.4% | Apr 27, 2023 | IBM Watson Machine Learning on Cloud Pak for Data 4.0 and 4.5 is vulnerable to server-side request forgery (SSRF). This ... |
| CVE-2023-2340 | MEDIUM | 5.4 | 0.5% | Apr 27, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-2339 | MEDIUM | 5.4 | 0.5% | Apr 27, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-2336 | MEDIUM | 6.5 | 0.7% | Apr 27, 2023 | Path Traversal in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-2328 | MEDIUM | 5.4 | 0.4% | Apr 27, 2023 | Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-2327 | MEDIUM | 5.4 | 0.4% | Apr 27, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-2323 | MEDIUM | 5.4 | 0.5% | Apr 27, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-2322 | MEDIUM | 5.4 | 0.6% | Apr 27, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-31290 | MEDIUM | 5.9 | 1.0% | Apr 27, 2023 | Trust Wallet Core before 3.1.1, as used in the Trust Wallet browser extension before 0.0.183, allows theft of funds beca... |
| CVE-2023-31286 | MEDIUM | 5.3 | 1.0% | Apr 27, 2023 | An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When a password reset request occurs, the serv... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now