2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-39537 | HIGH | 7.8 | 0.2% | Nov 14, 2023 | AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network... |
| CVE-2023-39536 | HIGH | 7.8 | 0.2% | Nov 14, 2023 | AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network... |
| CVE-2023-39535 | HIGH | 7.8 | 0.2% | Nov 14, 2023 | AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network... |
| CVE-2023-36558 | MEDIUM | 5.5 | 1.1% | Nov 14, 2023 | ASP.NET Core Security Feature Bypass Vulnerability |
| CVE-2023-36038 | HIGH | 7.5 | 2.8% | Nov 14, 2023 | ASP.NET Core Denial of Service Vulnerability |
| CVE-2023-5528 | HIGH | 8.8 | 3.6% | Nov 14, 2023 | A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes ... |
| CVE-2023-47641 | MEDIUM | 6.5 | 0.8% | Nov 14, 2023 | aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a secu... |
| CVE-2023-47640 | HIGH | 8.8 | 0.4% | Nov 14, 2023 | DataHub is an open-source metadata platform. The HMAC signature for DataHub Frontend sessions was being signed using a S... |
| CVE-2023-47631 | HIGH | 8.8 | 0.4% | Nov 14, 2023 | vantage6 is a framework to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party... |
| CVE-2023-47630 | HIGH | 7.1 | 0.3% | Nov 14, 2023 | Kyverno is a policy engine designed for Kubernetes. An issue was found in Kyverno that allowed an attacker to control th... |
| CVE-2023-47627 | HIGH | 7.5 | 0.9% | Nov 14, 2023 | aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. The HTTP parser in AIOHTTP has numerous ... |
| CVE-2023-47549 | MEDIUM | 6.1 | 0.4% | Nov 14, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability on 302 response page in spider-themes EazyDocs plugin <= 2.3.... |
| CVE-2023-47547 | MEDIUM | 6.1 | 0.4% | Nov 14, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPFactory Products, Order & Customers Export for WooCommer... |
| CVE-2023-47546 | MEDIUM | 4.8 | 0.4% | Nov 14, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Walter Pinem OneClick Chat to Order plugin <= 1.0.4.2 ... |
| CVE-2023-47545 | MEDIUM | 5.4 | 0.4% | Nov 14, 2023 | Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Fatcat Apps Forms for Mailchimp by Optin Cat – Grow Y... |
| CVE-2023-47544 | MEDIUM | 6.1 | 0.4% | Nov 14, 2023 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Atarim Visual Website Collaboration, Feedback & Project Manag... |
| CVE-2023-47533 | MEDIUM | 4.8 | 0.4% | Nov 14, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Countdown and CountUp, WooCommerce Sales Time... |
| CVE-2023-47130 | CRITICAL | 9.8 | 3.1% | Nov 14, 2023 | Yii is an open source PHP web framework. yiisoft/yii before version 1.1.29 are vulnerable to Remote Code Execution (RCE)... |
| CVE-2023-46132 | MEDIUM | 6.5 | 0.5% | Nov 14, 2023 | Hyperledger Fabric is an open source permissioned distributed ledger framework. Combining two molecules to one another, ... |
| CVE-2023-36437 | HIGH | 8.8 | 2.0% | Nov 14, 2023 | Azure DevOps Server Remote Code Execution Vulnerability |
| CVE-2023-36049 | CRITICAL | 9.8 | 6.8% | Nov 14, 2023 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2023-36007 | MEDIUM | 4.1 | 1.1% | Nov 14, 2023 | Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability |
| CVE-2023-34060 | CRITICAL | 9.8 | 1.3% | Nov 14, 2023 | VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director Appliance ... |
| CVE-2023-47646 | MEDIUM | 4.8 | 0.4% | Nov 14, 2023 | Auth. (Shop Manager+) Stored Cross-Site Scripting (XSS) vulnerability in CedCommerce Recently viewed and most viewed pro... |
| CVE-2023-47554 | MEDIUM | 4.8 | 0.4% | Nov 14, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DenK BV Actueel Financieel Nieuws – Denk Internet Solu... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now