2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-41726 | HIGH | 7.8 | 0.6% | Nov 3, 2023 | Ivanti Avalanche Incorrect Default Permissions allows Local Privilege Escalation Vulnerability |
| CVE-2023-41725 | HIGH | 7.8 | 0.7% | Nov 3, 2023 | Ivanti Avalanche EnterpriseServer Service Unrestricted File Upload Local Privilege Escalation Vulnerability |
| CVE-2023-3893 | HIGH | 8.8 | 2.9% | Nov 3, 2023 | A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi... |
| CVE-2023-39301 | MEDIUM | 4.3 | 0.3% | Nov 3, 2023 | A server-side request forgery (SSRF) vulnerability has been reported to affect several QNAP operating system versions. I... |
| CVE-2023-39299 | HIGH | 7.5 | 0.6% | Nov 3, 2023 | A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow us... |
| CVE-2023-36529 | CRITICAL | 9.8 | 0.5% | Nov 3, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Favethemes Houzez ... |
| CVE-2023-34179 | HIGH | 7.2 | 0.7% | Nov 3, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Groundhogg Inc. Gr... |
| CVE-2023-32508 | HIGH | 7.2 | 0.7% | Nov 3, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rolf van Gelder Or... |
| CVE-2023-32121 | HIGH | 7.2 | 0.7% | Nov 3, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Highfivery LLC Zer... |
| CVE-2023-25990 | HIGH | 8.8 | 0.7% | Nov 3, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS ... |
| CVE-2023-25800 | HIGH | 8.8 | 0.7% | Nov 3, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS ... |
| CVE-2023-25700 | CRITICAL | 9.8 | 0.7% | Nov 3, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS ... |
| CVE-2023-23369 | CRITICAL | 9.8 | 14.4% | Nov 3, 2023 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, ... |
| CVE-2023-23368 | CRITICAL | 9.8 | 18.7% | Nov 3, 2023 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, ... |
| CVE-2023-46980 | CRITICAL | 9.8 | 1.5% | Nov 3, 2023 | An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privile... |
| CVE-2023-46404 | CRITICAL | 9.9 | 1.9% | Nov 3, 2023 | PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulnerable to remote code execution (RCE) by escaping ... |
| CVE-2023-5946 | MEDIUM | 6.1 | 0.4% | Nov 3, 2023 | The Digirisk plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'current_group_id' parameter i... |
| CVE-2023-5088 | HIGH | 7 | 0.3% | Nov 3, 2023 | A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset... |
| CVE-2023-5945 | MEDIUM | 5.4 | 0.3% | Nov 3, 2023 | The video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0.... |
| CVE-2023-5707 | MEDIUM | 5.4 | 0.5% | Nov 3, 2023 | The SEO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slider' shortcode and... |
| CVE-2023-46947 | HIGH | 8.8 | 1.3% | Nov 3, 2023 | Subrion 4.2.1 has a remote command execution vulnerability in the backend. |
| CVE-2023-3961 | CRITICAL | 9.8 | 2.7% | Nov 3, 2023 | A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain socke... |
| CVE-2023-26015 | CRITICAL | 9.8 | 0.7% | Nov 3, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Chris Richardson M... |
| CVE-2023-25960 | CRITICAL | 9.8 | 0.7% | Nov 3, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zendrop Zendrop – ... |
| CVE-2023-4592 | MEDIUM | 6.1 | 0.4% | Nov 3, 2023 | A Cross-Site Scripting vulnerability has been detected in WPN-XM Serverstack affecting version 0.8.6. This vulnerability... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now