2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-31247 | CRITICAL | 9.8 | 1.7% | Nov 14, 2023 | A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP... |
| CVE-2023-28391 | CRITICAL | 9.8 | 1.5% | Nov 14, 2023 | A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.0... |
| CVE-2023-28379 | CRITICAL | 9.8 | 1.7% | Nov 14, 2023 | A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01... |
| CVE-2023-27882 | CRITICAL | 9.8 | 1.8% | Nov 14, 2023 | A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-H... |
| CVE-2023-25181 | CRITICAL | 9.8 | 1.7% | Nov 14, 2023 | A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. ... |
| CVE-2023-24585 | CRITICAL | 9.8 | 1.2% | Nov 14, 2023 | An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A spec... |
| CVE-2023-6109 | LOW | 3.7 | 0.4% | Nov 14, 2023 | The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This i... |
| CVE-2023-47609 | HIGH | 8.8 | 1.1% | Nov 14, 2023 | SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute ... |
| CVE-2023-45881 | MEDIUM | 6.1 | 0.5% | Nov 14, 2023 | GibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resources_addQuick_ajaxProcess.php file upload with resu... |
| CVE-2023-45880 | HIGH | 7.2 | 1.2% | Nov 14, 2023 | GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template builder. An attacker can crea... |
| CVE-2023-45879 | MEDIUM | 5.4 | 0.5% | Nov 14, 2023 | GibbonEdu Gibbon version 25.0.0 allows HTML Injection via an IFRAME element to the Messager component. |
| CVE-2023-45878 | CRITICAL | 9.8 | 63.1% | Nov 14, 2023 | GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not ... |
| CVE-2023-43902 | CRITICAL | 9.8 | 0.8% | Nov 14, 2023 | Incorrect access control in the Forgot Your Password function of eMudhra emSigner v2.8.7 allows unauthenticated attacker... |
| CVE-2023-43901 | HIGH | 7.5 | 0.4% | Nov 14, 2023 | Incorrect access control in the AdHoc User creation form of eMudhra emSigner v2.8.7 allows unauthenticated attackers to ... |
| CVE-2023-43900 | MEDIUM | 6.5 | 0.6% | Nov 14, 2023 | Insecure Direct Object References (IDOR) in eMudhra emSigner v2.8.7 allow authenticated attackers to gain unauthorized a... |
| CVE-2023-42326 | HIGH | 8.8 | 64.0% | Nov 14, 2023 | An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the inte... |
| CVE-2023-6006 | MEDIUM | 6.7 | 0.4% | Nov 14, 2023 | This vulnerability potentially allows local attackers to escalate privileges on affected installations of PaperCut NG. A... |
| CVE-2023-42327 | MEDIUM | 5.4 | 55.4% | Nov 14, 2023 | Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a cr... |
| CVE-2023-42325 | MEDIUM | 5.4 | 57.9% | Nov 14, 2023 | Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a cr... |
| CVE-2023-31754 | MEDIUM | 4.8 | 0.4% | Nov 14, 2023 | Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Admin pan... |
| CVE-2023-46446 | MEDIUM | 6.8 | 0.9% | Nov 14, 2023 | An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet inject... |
| CVE-2023-46445 | MEDIUM | 5.9 | 0.6% | Nov 14, 2023 | An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-mi... |
| CVE-2023-45560 | HIGH | 7.5 | 0.7% | Nov 14, 2023 | An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel acce... |
| CVE-2023-45558 | HIGH | 7.5 | 0.7% | Nov 14, 2023 | An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token. |
| CVE-2023-47629 | HIGH | 8 | 0.5% | Nov 14, 2023 | DataHub is an open-source metadata platform. In affected versions sign-up through an invite link does not properly restr... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now