2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-34062 | HIGH | 7.5 | 1.1% | Nov 15, 2023 | In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can se... |
| CVE-2023-46672 | MEDIUM | 5.5 | 0.3% | Nov 15, 2023 | An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstanc... |
| CVE-2023-6133 | MEDIUM | 4.9 | 0.9% | Nov 15, 2023 | The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient blacklisting on the 'for... |
| CVE-2023-4889 | MEDIUM | 5.4 | 0.4% | Nov 15, 2023 | The Shareaholic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'shareaholic' shortcode in version... |
| CVE-2023-47586 | HIGH | 7.8 | 0.3% | Nov 15, 2023 | Multiple heap-based buffer overflow vulnerabilities exist in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 ... |
| CVE-2023-47585 | HIGH | 7.8 | 0.3% | Nov 15, 2023 | Out-of-bounds read vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a ... |
| CVE-2023-47584 | HIGH | 7.8 | 0.3% | Nov 15, 2023 | Out-of-bounds write vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a... |
| CVE-2023-47583 | HIGH | 7.8 | 0.3% | Nov 15, 2023 | Multiple out-of-bounds read vulnerabilities exist in TELLUS Simulator V4.0.17.0 and earlier. If a user opens a specially... |
| CVE-2023-47582 | HIGH | 7.8 | 0.3% | Nov 15, 2023 | Access of uninitialized pointer vulnerability exists in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earli... |
| CVE-2023-47581 | HIGH | 7.8 | 0.3% | Nov 15, 2023 | Out-of-bounds read vulnerability exists in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user... |
| CVE-2023-47580 | HIGH | 7.8 | 0.3% | Nov 15, 2023 | Multiple improper restriction of operations within the bounds of a memory buffer issues exist in TELLUS V4.0.17.0 and ea... |
| CVE-2023-47446 | MEDIUM | 5.4 | 0.4% | Nov 15, 2023 | Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting (XSS) on the profile.php page via fullname param... |
| CVE-2023-47445 | CRITICAL | 9.8 | 0.8% | Nov 15, 2023 | Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page. |
| CVE-2023-41597 | MEDIUM | 6.1 | 1.2% | Nov 15, 2023 | EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /admin/t... |
| CVE-2023-40923 | HIGH | 8.8 | 0.7% | Nov 15, 2023 | MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php vi... |
| CVE-2023-6032 | MEDIUM | 5.3 | 0.6% | Nov 15, 2023 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that coul... |
| CVE-2023-5987 | MEDIUM | 6.1 | 0.4% | Nov 15, 2023 | A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could ca... |
| CVE-2023-5986 | MEDIUM | 6.1 | 0.5% | Nov 15, 2023 | A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading... |
| CVE-2023-5985 | MEDIUM | 4.8 | 0.4% | Nov 15, 2023 | A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability exists that could cause compromise... |
| CVE-2023-5984 | MEDIUM | 4.9 | 0.3% | Nov 15, 2023 | A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be upload... |
| CVE-2023-47678 | CRITICAL | 9.1 | 0.7% | Nov 15, 2023 | An improper access control vulnerability exists in RT-AC87U all versions. An attacker may read or write files that are n... |
| CVE-2023-47309 | MEDIUM | 5.4 | 0.4% | Nov 15, 2023 | Nukium nkmgls before version 3.0.2 is vulnerable to Cross Site Scripting (XSS) via NkmGlsCheckoutModuleFrontController::... |
| CVE-2023-47308 | CRITICAL | 9.8 | 0.7% | Nov 15, 2023 | In the module "Newsletter Popup PRO with Voucher/Coupon code" (newsletterpop) before version 2.6.1 from Active Design fo... |
| CVE-2023-43979 | CRITICAL | 9.8 | 0.7% | Nov 15, 2023 | ETS Soft ybc_blog before v4.4.0 was discovered to contain a SQL injection vulnerability via the component Ybc_blogBlogMo... |
| CVE-2023-46121 | LOW | 3.7 | 0.3% | Nov 15, 2023 | yt-dlp is a youtube-dl fork with additional features and fixes. The Generic Extractor in yt-dlp is vulnerable to an atta... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now