2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-5920 | LOW | 3.3 | 0.2% | Nov 2, 2023 | Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for ot... |
| CVE-2023-5876 | MEDIUM | 5.3 | 0.5% | Nov 2, 2023 | Mattermost fails to properly validate a RegExp built off the server URL path, allowing an attacker in control of an enro... |
| CVE-2023-5875 | MEDIUM | 5.3 | 0.3% | Nov 2, 2023 | Mattermost Desktop fails to correctly handle permissions or prompt the user for consent on certain sensitive ones allowi... |
| CVE-2023-5606 | MEDIUM | 4.8 | 0.3% | Nov 2, 2023 | The ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in versions 4.8.6 through 4.9... |
| CVE-2023-46595 | MEDIUM | 5.4 | 0.3% | Nov 2, 2023 | Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor allows an attacker to obtain victim’s domain cre... |
| CVE-2023-47204 | CRITICAL | 9.8 | 0.8% | Nov 2, 2023 | Unsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python ... |
| CVE-2023-46695 | HIGH | 7.5 | 49.8% | Nov 2, 2023 | An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is ... |
| CVE-2023-5408 | HIGH | 7.2 | 1.1% | Nov 2, 2023 | A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift... |
| CVE-2023-46327 | MEDIUM | 5.9 | 0.4% | Nov 2, 2023 | Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a fa... |
| CVE-2023-45019 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' p... |
| CVE-2023-45018 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' p... |
| CVE-2023-45017 | — | — | — | Nov 2, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-45016 | — | — | — | Nov 2, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-45015 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' param... |
| CVE-2023-45014 | — | — | — | Nov 2, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-45013 | — | — | — | Nov 2, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-45012 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_email'... |
| CVE-2023-45114 | — | — | — | Nov 2, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-45113 | — | — | — | Nov 2, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-45112 | — | — | — | Nov 2, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-45111 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' para... |
| CVE-2023-5910 | MEDIUM | 6.1 | 0.4% | Nov 2, 2023 | A vulnerability was found in PopojiCMS 2.0.1 and classified as problematic. This issue affects some unknown processing o... |
| CVE-2023-45203 | MEDIUM | 6.1 | 0.4% | Nov 1, 2023 | Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the login.p... |
| CVE-2023-45202 | MEDIUM | 6.1 | 0.4% | Nov 1, 2023 | Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.ph... |
| CVE-2023-44954 | MEDIUM | 5.4 | 0.6% | Nov 1, 2023 | Cross Site Scripting vulnerability in BigTree CMS v.4.5.7 allows a remote attacker to execute arbitrary code via the ID ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now