2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45326 | — | — | — | Nov 2, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-45325 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' ... |
| CVE-2023-45324 | — | — | — | Nov 2, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-45323 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' par... |
| CVE-2023-42802 | CRITICAL | 9.8 | 0.8% | Nov 2, 2023 | GLPI is a free asset and IT management software package. Starting in version 10.0.7 and prior to version 10.0.10, an unv... |
| CVE-2023-29047 | HIGH | 7.3 | 0.3% | Nov 2, 2023 | Imageconverter API endpoints provided methods that were not sufficiently validating and sanitizing client input, allowin... |
| CVE-2023-29046 | MEDIUM | 4.3 | 0.5% | Nov 2, 2023 | Connections to external data sources, like e-mail autoconfiguration, were not terminated in case they hit a timeout, ins... |
| CVE-2023-29045 | MEDIUM | 5.4 | 0.4% | Nov 2, 2023 | Documents operations, in this case "drawing", could be manipulated to contain invalid data types, possibly script code. ... |
| CVE-2023-29044 | MEDIUM | 5.4 | 0.4% | Nov 2, 2023 | Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be inje... |
| CVE-2023-29043 | MEDIUM | 6.1 | 0.3% | Nov 2, 2023 | Presentations may contain references to images, which are user-controlled, and could include malicious script code that ... |
| CVE-2023-26456 | MEDIUM | 5.4 | 0.4% | Nov 2, 2023 | Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before ... |
| CVE-2023-26455 | HIGH | 7.8 | 0.2% | Nov 2, 2023 | RMI was not requiring authentication when calling ChronosRMIService:setEventOrganizer. Attackers with local or adjacent ... |
| CVE-2023-26454 | HIGH | 8.8 | 0.4% | Nov 2, 2023 | Requests to fetch image metadata could be abused to include SQL queries that would be executed unchecked. Exploiting thi... |
| CVE-2023-26453 | HIGH | 8.8 | 0.4% | Nov 2, 2023 | Requests to cache an image could be abused to include SQL queries that would be executed unchecked. Exploiting this vuln... |
| CVE-2023-26452 | HIGH | 8.8 | 0.4% | Nov 2, 2023 | Requests to cache an image and return its metadata could be abused to include SQL queries that would be executed uncheck... |
| CVE-2023-46475 | MEDIUM | 5.4 | 0.4% | Nov 2, 2023 | A Stored Cross-Site Scripting vulnerability was discovered in ZenTao 18.3 where a user can create a project, and in the ... |
| CVE-2023-5918 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected i... |
| CVE-2023-5860 | HIGH | 7.2 | 1.0% | Nov 2, 2023 | The Icons Font Loader plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation i... |
| CVE-2023-43336 | HIGH | 8.8 | 0.8% | Nov 2, 2023 | Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access contr... |
| CVE-2023-43193 | MEDIUM | 6.1 | 0.5% | Nov 2, 2023 | Submitty before v22.06.00 is vulnerable to Cross Site Scripting (XSS). An attacker can create a malicious link in the fo... |
| CVE-2023-3164 | MEDIUM | 5.5 | 0.3% | Nov 2, 2023 | A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/t... |
| CVE-2023-5917 | MEDIUM | 6.1 | 0.5% | Nov 2, 2023 | A vulnerability, which was classified as problematic, has been found in phpBB up to 3.3.10. This issue affects the funct... |
| CVE-2023-5916 | MEDIUM | 4.3 | 0.5% | Nov 2, 2023 | A vulnerability classified as critical has been found in Lissy93 Dashy 2.1.1. This affects an unknown part of the file /... |
| CVE-2023-43087 | MEDIUM | 6.5 | 0.4% | Nov 2, 2023 | Dell PowerScale OneFS 8.2.x, 9.0.0.x-9.5.0.x contains an improper handling of insufficient permissions. A low privilege... |
| CVE-2023-43076 | MEDIUM | 6.5 | 0.6% | Nov 2, 2023 | Dell PowerScale OneFS 8.2.x,9.0.0.x-9.5.0.x contains a denial-of-service vulnerability. A low privilege remote attacker... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now