2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-48222 | MEDIUM | 5.4 | 0.4% | Nov 16, 2023 | Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In affected versions a... |
| CVE-2023-47688 | HIGH | 8.8 | 0.3% | Nov 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Alexufo Youtube SpeedLoad plugin <= 0.6.3 versions. |
| CVE-2023-47642 | MEDIUM | 4.3 | 0.5% | Nov 16, 2023 | Zulip is an open-source team collaboration tool. It was discovered by the Zulip development team that active users who h... |
| CVE-2023-47112 | MEDIUM | 4.3 | 0.5% | Nov 16, 2023 | Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In affected versions a... |
| CVE-2023-40314 | MEDIUM | 6.1 | 0.4% | Nov 16, 2023 | Cross-site scripting in bootstrap.jsp in multiple versions of OpenNMS Meridian and Horizon allows an attacker access ... |
| CVE-2023-6020 | HIGH | 7.5 | 14.7% | Nov 16, 2023 | LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication. |
| CVE-2023-6014 | CRITICAL | 9.8 | 1.2% | Nov 16, 2023 | An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment. |
| CVE-2023-46214 | HIGH | 8.8 | 89.1% | Nov 16, 2023 | In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet la... |
| CVE-2023-46213 | MEDIUM | 4.8 | 0.5% | Nov 16, 2023 | In Splunk Enterprise versions below 9.0.7 and 9.1.2, ineffective escaping in the “Show syntax Highlighted” feature can r... |
| CVE-2023-39926 | MEDIUM | 6.1 | 0.4% | Nov 16, 2023 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Acurax Under Construction / Maintenance Mode from Acurax plug... |
| CVE-2023-36026 | MEDIUM | 4.3 | 0.8% | Nov 16, 2023 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2023-36008 | MEDIUM | 6.6 | 0.6% | Nov 16, 2023 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2023-34375 | MEDIUM | 6.1 | 0.4% | Nov 16, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in 10Web SEO by 10Web plugin <= 1.2.9 versions. |
| CVE-2023-32957 | MEDIUM | 4.8 | 0.4% | Nov 16, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Dazzlersoft Team Members Showcase plugin <= 1.3.4 vers... |
| CVE-2023-32796 | MEDIUM | 6.1 | 0.4% | Nov 16, 2023 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in MingoCommerce WooCommerce Product Enquiry plugin <= 2.3.4 ver... |
| CVE-2023-28621 | MEDIUM | 6.1 | 0.4% | Nov 16, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wishfulthemes Rais... |
| CVE-2023-48134 | HIGH | 7.5 | 0.7% | Nov 16, 2023 | nagayama_copabowl Line 13.6.1 is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor. |
| CVE-2023-47512 | MEDIUM | 6.1 | 0.4% | Nov 16, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Gravity Master Product Enquiry for WooCommerce plugin <= 3... |
| CVE-2023-47511 | MEDIUM | 4.8 | 0.4% | Nov 16, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SO WP Pinyin Slugs plugin <= 2.3.0 versions. |
| CVE-2023-47509 | MEDIUM | 6.1 | 0.4% | Nov 16, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ioannup Edit WooCommerce Templates plugin <= 1.1.1 version... |
| CVE-2023-47508 | MEDIUM | 6.1 | 0.4% | Nov 16, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Averta Master Slider Pro plugin <= 3.6.5 versions. |
| CVE-2023-47245 | MEDIUM | 4.8 | 0.4% | Nov 16, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Viewer plugin <= 1.7 versions. |
| CVE-2023-47242 | MEDIUM | 5.4 | 0.4% | Nov 16, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.... |
| CVE-2023-47240 | MEDIUM | 5.4 | 0.4% | Nov 16, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Codeboxr CBX Map for Google Map & OpenStreetMap ... |
| CVE-2023-47239 | MEDIUM | 5.4 | 0.4% | Nov 16, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Scott Paterson Easy PayPal Shopping Cart plugin ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now