2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-36039 | HIGH | 8 | 73.0% | Nov 14, 2023 | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2023-36037 | HIGH | 7.8 | 1.2% | Nov 14, 2023 | Microsoft Excel Security Feature Bypass Vulnerability |
| CVE-2023-36036 | HIGH | 7.8 | 16.5% | Nov 14, 2023 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2023-36035 | HIGH | 8 | 86.6% | Nov 14, 2023 | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2023-36033 | HIGH | 7.8 | 12.0% | Nov 14, 2023 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2023-36031 | MEDIUM | 5.4 | 0.9% | Nov 14, 2023 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
| CVE-2023-36030 | MEDIUM | 6.1 | 0.9% | Nov 14, 2023 | Microsoft Dynamics 365 Sales Spoofing Vulnerability |
| CVE-2023-36028 | CRITICAL | 9.8 | 2.9% | Nov 14, 2023 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
| CVE-2023-36025 | HIGH | 8.8 | 88.2% | Nov 14, 2023 | Windows SmartScreen Security Feature Bypass Vulnerability |
| CVE-2023-36021 | HIGH | 8 | 1.7% | Nov 14, 2023 | Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability |
| CVE-2023-36018 | CRITICAL | 9.8 | 1.5% | Nov 14, 2023 | Visual Studio Code Jupyter Extension Spoofing Vulnerability |
| CVE-2023-36017 | HIGH | 8.8 | 25.3% | Nov 14, 2023 | Windows Scripting Engine Memory Corruption Vulnerability |
| CVE-2023-36016 | LOW | 3.4 | 1.3% | Nov 14, 2023 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
| CVE-2023-34991 | CRITICAL | 9.8 | 28.8% | Nov 14, 2023 | A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.... |
| CVE-2023-33304 | MEDIUM | 5.5 | 0.2% | Nov 14, 2023 | A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an ... |
| CVE-2023-28002 | MEDIUM | 6.7 | 0.2% | Nov 14, 2023 | An improper validation of integrity check value vulnerability [CWE-354] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.... |
| CVE-2023-26205 | HIGH | 8.8 | 0.6% | Nov 14, 2023 | An improper access control vulnerability [CWE-284] in FortiADC automation feature 7.1.0 through 7.1.2, 7.0 all versions,... |
| CVE-2023-6131 | HIGH | 8.8 | 1.0% | Nov 14, 2023 | Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. |
| CVE-2023-6130 | HIGH | 8.8 | 1.0% | Nov 14, 2023 | Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. |
| CVE-2023-48094 | MEDIUM | 6.1 | 0.3% | Nov 14, 2023 | A cross-site scripting (XSS) vulnerability in CesiumJS v1.111 allows attackers to execute arbitrary code in the context ... |
| CVE-2023-47660 | MEDIUM | 4.8 | 0.4% | Nov 14, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Wham Product Visibility by Country for WooCommerce ... |
| CVE-2023-47659 | MEDIUM | 5.4 | 0.4% | Nov 14, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Lavacode Lava Directory Manager plugin <= 1.1.34... |
| CVE-2023-6128 | MEDIUM | 5.4 | 0.6% | Nov 14, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. |
| CVE-2023-6127 | MEDIUM | 5.4 | 0.4% | Nov 14, 2023 | Unrestricted Upload of File with Dangerous Type in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4... |
| CVE-2023-6126 | CRITICAL | 9.8 | 0.7% | Nov 14, 2023 | Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now