2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-46737 | MEDIUM | 5.3 | 0.6% | Nov 7, 2023 | Cosign is a sigstore signing tool for OCI containers. Cosign is susceptible to a denial of service by an attacker contro... |
| CVE-2023-46730 | HIGH | 8.8 | 0.6% | Nov 7, 2023 | Group-Office is an enterprise CRM and groupware tool. In affected versions there is full Server-Side Request Forgery (SS... |
| CVE-2023-46501 | CRITICAL | 9.1 | 1.3% | Nov 7, 2023 | An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view a... |
| CVE-2023-41798 | HIGH | 8.8 | 0.5% | Nov 7, 2023 | Improper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist – WordPress Business Direct... |
| CVE-2023-32966 | MEDIUM | 6.1 | 0.2% | Nov 7, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab Jazz Popups leads to Stored XSS.This issue affects Jazz Popup... |
| CVE-2023-28499 | MEDIUM | 5.4 | 0.5% | Nov 7, 2023 | Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in simonpedge Slide Anything – Responsive Content / HTML... |
| CVE-2023-0898 | HIGH | 7.3 | 0.3% | Nov 7, 2023 | General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in... |
| CVE-2023-5179 | HIGH | 7.8 | 0.3% | Nov 7, 2023 | An issue was discovered in Open Design Alliance Drawings SDK before 2024.10. A corrupted value for the start of MiniFat ... |
| CVE-2023-4295 | HIGH | 7.8 | 0.3% | Nov 7, 2023 | A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. |
| CVE-2023-4272 | MEDIUM | 5.5 | 0.3% | Nov 7, 2023 | A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory. ... |
| CVE-2023-47360 | HIGH | 7.5 | 0.9% | Nov 7, 2023 | Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length. |
| CVE-2023-47359 | CRITICAL | 9.8 | 1.1% | Nov 7, 2023 | Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in fun... |
| CVE-2023-42659 | HIGH | 8.8 | 0.9% | Nov 7, 2023 | In WS_FTP Server versions prior to 8.7.6 and 8.8.4, an unrestricted file upload flaw has been identified. An authentic... |
| CVE-2023-41425 | MEDIUM | 6.1 | 54.3% | Nov 7, 2023 | Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code... |
| CVE-2023-3889 | HIGH | 7.8 | 0.2% | Nov 7, 2023 | A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared... |
| CVE-2023-36527 | HIGH | 8.8 | 0.5% | Nov 7, 2023 | Improper Neutralization of Formula Elements in a CSV File vulnerability in BestWebSoft Post to CSV by BestWebSoft.This i... |
| CVE-2023-25983 | HIGH | 8.8 | 1.1% | Nov 7, 2023 | Improper Neutralization of Formula Elements in a CSV File vulnerability in WPOmnia KB Support.This issue affects KB Supp... |
| CVE-2023-23796 | CRITICAL | 9.8 | 0.5% | Nov 7, 2023 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Muneeb Form Builder | Create Responsive Conta... |
| CVE-2023-23678 | HIGH | 7.2 | 0.6% | Nov 7, 2023 | Improper Neutralization of Formula Elements in a CSV File vulnerability in WPEkaClub WP Cookie Consent ( for GDPR, CCPA ... |
| CVE-2023-22719 | CRITICAL | 9.8 | 0.6% | Nov 7, 2023 | Improper Neutralization of Formula Elements in a CSV File vulnerability in GiveWP.This issue affects GiveWP: from n/a th... |
| CVE-2023-47456 | CRITICAL | 9.1 | 0.8% | Nov 7, 2023 | Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by function fromSetWirelessR... |
| CVE-2023-47455 | CRITICAL | 9.1 | 0.8% | Nov 7, 2023 | Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are dire... |
| CVE-2023-33481 | CRITICAL | 9.8 | 0.7% | Nov 7, 2023 | RemoteClinic 2.0 is vulnerable to a time-based blind SQL injection attack in the 'start' GET parameter of patients/index... |
| CVE-2023-33480 | HIGH | 8.8 | 1.9% | Nov 7, 2023 | RemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a remote attacker with low-privileged ... |
| CVE-2023-33479 | CRITICAL | 9.8 | 0.7% | Nov 7, 2023 | RemoteClinic version 2.0 contains a SQL injection vulnerability in the /staff/edit.php file. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now