2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2023-1202MEDIUM6.5Permission bypass when importing or synchronizing entries in User vault in Devolutions Remote Desktop Manager 2023.1.9...
CVE-2023-1799MEDIUM5.4A vulnerability, which was classified as problematic, was found in EyouCMS up to 1.5.4. This affects an unknown part of ...
CVE-2023-1798MEDIUM5.4A vulnerability, which was classified as problematic, has been found in EyouCMS up to 1.5.4. Affected by this issue is s...
CVE-2023-1796MEDIUM5.4A vulnerability classified as problematic has been found in SourceCodester Employee Payslip Generator 1.0. Affected is a...
CVE-2023-1795MEDIUM6.1A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been rated as problematic. T...
CVE-2023-1794MEDIUM6.1A vulnerability was found in SourceCodester Police Crime Record Management System 1.0. It has been declared as problemat...
CVE-2023-0197MEDIUM6.5NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious user in a guest VM can cause...
CVE-2023-0194MEDIUM4.6NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer driver, where an inval...
CVE-2023-0188MEDIUM5.5NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an unpr...
CVE-2023-0187MEDIUM5.5NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-...
CVE-2023-28844MEDIUM6.5Nextcloud server is an open source home cloud implementation. In affected versions users that should not be able to down...
CVE-2023-28645MEDIUM6.5Nextcloud richdocuments is a Nextcloud app integrating the office suit Collabora Online. In affected versions the secure...
CVE-2023-27163MEDIUM6.5request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baske...
CVE-2023-29140MEDIUM5.3An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. Attackers might be able to see ...
CVE-2023-29139MEDIUM6.5An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. When a user with checkuserlog permissio...
CVE-2023-29137MEDIUM4.3An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. The UserImpactHandler for Growt...
CVE-2023-1777MEDIUM5.3Mattermost allows an attacker to request a preview of an existing message when creating a new message via the createPost...
CVE-2023-1776MEDIUM5.4Boards in Mattermost allows an attacker to upload a malicious SVG image file as an attachment to a card and share it usi...
CVE-2023-1775MEDIUM6.5When running in a High Availability configuration, Mattermost fails to sanitize some of the user_updated and post_delete...
CVE-2023-1774MEDIUM5.4When processing an email invite to a private channel on a team, Mattermost fails to validate the inviter's permission to...
CVE-2023-1772MEDIUM4.8A vulnerability was found in DataGear up to 4.5.1. It has been classified as problematic. This affects an unknown part o...
CVE-2023-1771MEDIUM6.1A vulnerability was found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as problematic. Affect...
CVE-2023-1060MEDIUM6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YKM YKM CRM allows...
CVE-2023-1258MEDIUM5.3Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardw...
CVE-2023-28756MEDIUM5.3A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles inval...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now