2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-4591 | CRITICAL | 9.8 | 0.6% | Nov 3, 2023 | A local file inclusion vulnerability has been found in WPN-XM Serverstack affecting version 0.8.6, which would allow an ... |
| CVE-2023-41652 | CRITICAL | 9.8 | 0.9% | Nov 3, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVP... |
| CVE-2023-3277 | CRITICAL | 9.8 | 2.9% | Nov 3, 2023 | The MStore API plugin for WordPress is vulnerable to Unauthorized Account Access and Privilege Escalation in versions up... |
| CVE-2023-34383 | CRITICAL | 9.8 | 0.6% | Nov 3, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP Project ... |
| CVE-2023-4769 | HIGH | 8.8 | 3.3% | Nov 3, 2023 | A SSRF vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0, specifically the /smtpConfi... |
| CVE-2023-4768 | MEDIUM | 6.1 | 2.9% | Nov 3, 2023 | A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerabilit... |
| CVE-2023-4767 | MEDIUM | 6.1 | 2.9% | Nov 3, 2023 | A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerabilit... |
| CVE-2023-4043 | HIGH | 7.5 | 0.8% | Nov 3, 2023 | In Eclipse Parsson before versions 1.1.4 and 1.0.5, Parsing JSON from untrusted sources can lead malicious actors to exp... |
| CVE-2023-1476 | HIGH | 7 | 0.2% | Nov 3, 2023 | A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue ... |
| CVE-2023-5824 | HIGH | 7.5 | 3.3% | Nov 3, 2023 | A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. Howeve... |
| CVE-2023-4091 | MEDIUM | 6.5 | 1.3% | Nov 3, 2023 | A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permis... |
| CVE-2023-46848 | HIGH | 7.5 | 10.2% | Nov 3, 2023 | Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Reques... |
| CVE-2023-46847 | HIGH | 7.5 | 88.4% | Nov 3, 2023 | Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to... |
| CVE-2023-46846 | MEDIUM | 5.3 | 5.3% | Nov 3, 2023 | SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform R... |
| CVE-2023-42670 | MEDIUM | 6.5 | 1.3% | Nov 3, 2023 | A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiat... |
| CVE-2023-1194 | HIGH | 8.1 | 1.1% | Nov 3, 2023 | An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samb... |
| CVE-2023-5948 | MEDIUM | 5.5 | 0.3% | Nov 3, 2023 | Improper Authorization in GitHub repository teamamaze/amazefileutilities prior to 1.91. |
| CVE-2023-5763 | CRITICAL | 9.8 | 0.7% | Nov 3, 2023 | In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote ... |
| CVE-2023-41357 | HIGH | 8.8 | 0.6% | Nov 3, 2023 | Galaxy Software Services Corporation Vitals ESP is an online knowledge base management portal, it has insufficient filte... |
| CVE-2023-41356 | MEDIUM | 6.5 | 0.9% | Nov 3, 2023 | NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal vulnerability. An unauthentic... |
| CVE-2023-41344 | HIGH | 7.5 | 1.0% | Nov 3, 2023 | NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal vulnerability. An unauthentic... |
| CVE-2023-41355 | CRITICAL | 9.8 | 0.6% | Nov 3, 2023 | Chunghwa Telecom NOKIA G-040W-Q Firewall function has a vulnerability of input validation for ICMP redirect messages. An... |
| CVE-2023-41354 | MEDIUM | 5.3 | 0.4% | Nov 3, 2023 | Chunghwa Telecom NOKIA G-040W-Q Firewall function does not block ICMP TIMESTAMP requests by default, an unauthenticated ... |
| CVE-2023-41353 | HIGH | 8.8 | 0.5% | Nov 3, 2023 | Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user p... |
| CVE-2023-41352 | HIGH | 7.2 | 1.2% | Nov 3, 2023 | Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient filtering for user input. A remote attacker with adm... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now