2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-48659 | CRITICAL | 9.8 | 0.9% | Nov 17, 2023 | An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing. |
| CVE-2023-48658 | CRITICAL | 9.8 | 0.9% | Nov 17, 2023 | An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php lacks a checkParam function for alphanumerics, un... |
| CVE-2023-48657 | CRITICAL | 9.8 | 0.9% | Nov 17, 2023 | An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters. |
| CVE-2023-48656 | CRITICAL | 9.8 | 0.9% | Nov 17, 2023 | An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses. |
| CVE-2023-48655 | CRITICAL | 9.8 | 0.9% | Nov 17, 2023 | An issue was discovered in MISP before 2.4.176. app/Controller/Component/IndexFilterComponent.php does not properly filt... |
| CVE-2023-47675 | HIGH | 7.2 | 1.0% | Nov 17, 2023 | CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary ... |
| CVE-2023-47283 | MEDIUM | 4.9 | 1.2% | Nov 17, 2023 | Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrati... |
| CVE-2023-42428 | MEDIUM | 6.5 | 1.3% | Nov 17, 2023 | Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrati... |
| CVE-2023-38130 | HIGH | 8.1 | 0.4% | Nov 17, 2023 | Cross-site request forgery (CSRF) vulnerability in CubeCart prior to 6.5.3 allows a remote unauthenticated attacker to d... |
| CVE-2023-48649 | MEDIUM | 5.4 | 0.6% | Nov 17, 2023 | Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows stored XSS on the Admin page via an uploaded file name. |
| CVE-2023-48648 | CRITICAL | 9.8 | 1.2% | Nov 17, 2023 | Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows unauthorized access because directories can be created with insec... |
| CVE-2023-48031 | CRITICAL | 9.8 | 1.4% | Nov 17, 2023 | OpenSupports v4.11.0 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the comment function, an attac... |
| CVE-2023-45387 | CRITICAL | 9.8 | 0.7% | Nov 17, 2023 | In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 5.0.0 from MyPrestaModul... |
| CVE-2023-45382 | HIGH | 7.5 | 0.8% | Nov 17, 2023 | In the module "SoNice Retour" (sonice_retour) up to version 2.1.0 from Common-Services for PrestaShop, a guest can downl... |
| CVE-2023-48078 | CRITICAL | 9.8 | 0.8% | Nov 17, 2023 | SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands ... |
| CVE-2023-48237 | MEDIUM | 4.3 | 0.7% | Nov 16, 2023 | Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and us... |
| CVE-2023-48236 | MEDIUM | 4.3 | 0.7% | Nov 16, 2023 | Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values l... |
| CVE-2023-48235 | MEDIUM | 4.3 | 0.7% | Nov 16, 2023 | Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an over... |
| CVE-2023-48234 | MEDIUM | 4.3 | 0.7% | Nov 16, 2023 | Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for ... |
| CVE-2023-48233 | MEDIUM | 4.3 | 0.7% | Nov 16, 2023 | Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a (signe... |
| CVE-2023-48232 | MEDIUM | 4.3 | 0.7% | Nov 16, 2023 | Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset fo... |
| CVE-2023-48231 | MEDIUM | 4.3 | 0.7% | Nov 16, 2023 | Vim is an open source command line text editor. When closing a window, vim may try to access already freed window struct... |
| CVE-2023-47687 | HIGH | 8.8 | 0.3% | Nov 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in VJInfotech Woo Custom and Sequential Order Number plugin <= 2.6.0 ver... |
| CVE-2023-47686 | HIGH | 8.8 | 0.3% | Nov 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.2.2 ve... |
| CVE-2023-47025 | MEDIUM | 5.5 | 0.3% | Nov 16, 2023 | An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now