2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-32818 | MEDIUM | 6.7 | 0.1% | Nov 6, 2023 | In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege... |
| CVE-2023-20702 | HIGH | 7.5 | 1.1% | Nov 6, 2023 | In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of... |
| CVE-2023-46802 | MEDIUM | 5.5 | 0.2% | Nov 6, 2023 | e-Tax software Version3.0.10 and earlier improperly restricts XML external entity references (XXE) due to the configurat... |
| CVE-2023-47272 | MEDIUM | 6.1 | 0.6% | Nov 6, 2023 | Roundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content-Disposition header (used fo... |
| CVE-2023-47271 | MEDIUM | 5.3 | 0.6% | Nov 6, 2023 | PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other pr... |
| CVE-2023-47260 | MEDIUM | 6.1 | 0.4% | Nov 5, 2023 | Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails. |
| CVE-2023-47259 | MEDIUM | 6.1 | 0.4% | Nov 5, 2023 | Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter. |
| CVE-2023-47258 | MEDIUM | 6.1 | 0.4% | Nov 5, 2023 | Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter. |
| CVE-2023-47249 | MEDIUM | 6.5 | 0.5% | Nov 5, 2023 | In International Color Consortium DemoIccMAX 79ecb74, a CIccXmlArrayType:::ParseText function (for unsigned short) in Ic... |
| CVE-2023-46981 | CRITICAL | 9.8 | 1.1% | Nov 5, 2023 | SQL injection vulnerability in Novel-Plus v.4.2.0 allows a remote attacker to execute arbitrary code via a crafted scrip... |
| CVE-2023-46964 | MEDIUM | 6.1 | 0.5% | Nov 5, 2023 | Cross Site Scripting (XSS) vulnerability in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5 allows a remote attac... |
| CVE-2023-46963 | MEDIUM | 5.3 | 0.5% | Nov 4, 2023 | An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attack... |
| CVE-2023-46382 | HIGH | 7.5 | 2.5% | Nov 4, 2023 | LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) use... |
| CVE-2023-46381 | HIGH | 8.2 | 7.4% | Nov 4, 2023 | LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) lac... |
| CVE-2023-46380 | HIGH | 7.5 | 2.5% | Nov 4, 2023 | LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) sen... |
| CVE-2023-40922 | CRITICAL | 9.8 | 0.5% | Nov 4, 2023 | kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocs_id_cart parameter at KerawenDe... |
| CVE-2023-40215 | HIGH | 7.2 | 0.5% | Nov 4, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Demonisblack demon... |
| CVE-2023-38391 | HIGH | 7.2 | 0.5% | Nov 4, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themesgrove Onepag... |
| CVE-2023-35910 | HIGH | 8.8 | 0.5% | Nov 4, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nucleus_genius Qua... |
| CVE-2023-32741 | HIGH | 7.2 | 0.6% | Nov 4, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in IT Path Solutions ... |
| CVE-2023-45189 | MEDIUM | 6.5 | 0.5% | Nov 3, 2023 | A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7... |
| CVE-2023-36677 | HIGH | 8.8 | 0.6% | Nov 3, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Pro... |
| CVE-2023-47235 | HIGH | 7.5 | 0.7% | Nov 3, 2023 | An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EO... |
| CVE-2023-47234 | HIGH | 7.5 | 0.9% | Nov 3, 2023 | An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message w... |
| CVE-2023-47233 | MEDIUM | 4.3 | 0.3% | Nov 3, 2023 | The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unpl... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now