2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-47550 | MEDIUM | 6.1 | 0.2% | Nov 14, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in RedNao Donations Made Easy – Smart Donations allows Stored XSS.This i... |
| CVE-2023-47384 | MEDIUM | 5.5 | 0.3% | Nov 14, 2023 | MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gf_isom_add_chapte... |
| CVE-2023-47127 | MEDIUM | 5.4 | 0.6% | Nov 14, 2023 | TYPO3 is an open source PHP based web content management system released under the GNU GPL. In typo3 installations there... |
| CVE-2023-47126 | MEDIUM | 5.3 | 0.7% | Nov 14, 2023 | TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions the log... |
| CVE-2023-47125 | MEDIUM | 6.1 | 0.6% | Nov 14, 2023 | TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM pro... |
| CVE-2023-26222 | MEDIUM | 5.4 | 0.5% | Nov 14, 2023 | The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO ... |
| CVE-2023-47658 | MEDIUM | 4.8 | 0.4% | Nov 14, 2023 | Auth. (ShopManager+) Stored Cross-Site Scripting (XSS) vulnerability in actpro Extra Product Options for WooCommerce plu... |
| CVE-2023-47656 | MEDIUM | 5.4 | 0.4% | Nov 14, 2023 | Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 ver... |
| CVE-2023-47654 | MEDIUM | 5.4 | 0.4% | Nov 14, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in livescore.Bz BZScore – Live Score plugin <= 1.03... |
| CVE-2023-47653 | MEDIUM | 4.8 | 0.4% | Nov 14, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Abu Bakar TWB Woocommerce Reviews plugin <= 1.7.5 vers... |
| CVE-2023-40719 | MEDIUM | 5.5 | 0.2% | Nov 14, 2023 | A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 an... |
| CVE-2023-40540 | MEDIUM | 4.4 | 0.2% | Nov 14, 2023 | Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privileged user t... |
| CVE-2023-40220 | MEDIUM | 4.4 | 0.2% | Nov 14, 2023 | Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable inform... |
| CVE-2023-39412 | HIGH | 8.8 | 0.3% | Nov 14, 2023 | Cross-site request forgery in some Intel Unison software may allow an authenticated user to potentially enable escalatio... |
| CVE-2023-39411 | MEDIUM | 4.4 | 0.2% | Nov 14, 2023 | Improper input validationation for some Intel Unison software may allow a privileged user to potentially enable denial o... |
| CVE-2023-39230 | HIGH | 7.8 | 0.2% | Nov 14, 2023 | Insecure inherited permissions in some Intel Rapid Storage Technology software before version 16.8.5.1014.9 may allow an... |
| CVE-2023-39228 | HIGH | 7.5 | 0.7% | Nov 14, 2023 | Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of... |
| CVE-2023-39221 | HIGH | 8.8 | 0.4% | Nov 14, 2023 | Improper access control for some Intel Unison software may allow an authenticated user to potentially enable escalation ... |
| CVE-2023-38570 | HIGH | 7.8 | 0.2% | Nov 14, 2023 | Access of memory location after end of buffer for some Intel Unison software may allow an authenticated user to potentia... |
| CVE-2023-38411 | HIGH | 7.8 | 0.2% | Nov 14, 2023 | Improper access control in the Intel Smart Campus android application before version 9.4 may allow an authenticated user... |
| CVE-2023-38131 | MEDIUM | 6.5 | 0.7% | Nov 14, 2023 | Improper input validationation for some Intel Unison software may allow an authenticated user to potentially enable deni... |
| CVE-2023-36860 | HIGH | 8.8 | 0.7% | Nov 14, 2023 | Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalatio... |
| CVE-2023-34997 | HIGH | 7.8 | 0.2% | Nov 14, 2023 | Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0... |
| CVE-2023-34431 | MEDIUM | 6.7 | 0.2% | Nov 14, 2023 | Improper input validation in some Intel(R) Server Board BIOS firmware may allow a privileged user to potentially enable ... |
| CVE-2023-34430 | HIGH | 7.8 | 0.2% | Nov 14, 2023 | Uncontrolled search path in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authentic... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now