2023 CVE Vulnerabilities
31,397 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-5514 | MEDIUM | 5.3 | 0.4% | Nov 1, 2023 | The response messages received from the eSOMS report generation using certain parameter queries with full file path can... |
| CVE-2023-2622 | MEDIUM | 4.3 | 0.4% | Nov 1, 2023 | Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the... |
| CVE-2023-2621 | MEDIUM | 6.5 | 0.5% | Nov 1, 2023 | The McFeeder server (distributed as part of SSW package), is susceptible to an arbitrary file write vulnerability on th... |
| CVE-2023-5899 | HIGH | 8.8 | 0.3% | Nov 1, 2023 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
| CVE-2023-5898 | HIGH | 8.8 | 0.3% | Nov 1, 2023 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
| CVE-2023-5897 | HIGH | 8.8 | 0.2% | Nov 1, 2023 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/customLocale prior to 1.2.0-1. |
| CVE-2023-5896 | MEDIUM | 5.4 | 0.3% | Nov 1, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4. |
| CVE-2023-5895 | MEDIUM | 5.4 | 0.4% | Nov 1, 2023 | Cross-site Scripting (XSS) - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
| CVE-2023-5894 | MEDIUM | 5.4 | 0.4% | Nov 1, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository pkp/ojs prior to 3.3.0-16. |
| CVE-2023-5893 | HIGH | 8.8 | 0.3% | Nov 1, 2023 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
| CVE-2023-5892 | MEDIUM | 5.4 | 0.4% | Nov 1, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
| CVE-2023-5891 | MEDIUM | 5.4 | 0.4% | Nov 1, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
| CVE-2023-5890 | MEDIUM | 5.4 | 0.4% | Nov 1, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
| CVE-2023-5889 | HIGH | 8.2 | 0.4% | Nov 1, 2023 | Insufficient Session Expiration in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
| CVE-2023-47099 | MEDIUM | 5.4 | 0.4% | Nov 1, 2023 | A Stored Cross-Site Scripting (XSS) vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers... |
| CVE-2023-47098 | MEDIUM | 4.8 | 0.5% | Nov 1, 2023 | A Stored Cross-Site Scripting (XSS) vulnerability in the Manage Extra Admins under Administration Options in Virtualmin ... |
| CVE-2023-47097 | MEDIUM | 5.4 | 0.4% | Nov 1, 2023 | A Stored Cross-Site Scripting (XSS) vulnerability in the Server Template under System Setting in Virtualmin 7.7 allows r... |
| CVE-2023-47096 | MEDIUM | 5.4 | 0.4% | Nov 1, 2023 | A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin ... |
| CVE-2023-47095 | MEDIUM | 5.4 | 0.4% | Nov 1, 2023 | A Stored Cross-Site Scripting (XSS) vulnerability in the Custom fields of Edit Virtual Server under System Customization... |
| CVE-2023-47094 | MEDIUM | 5.4 | 0.4% | Nov 1, 2023 | A Stored Cross-Site Scripting (XSS) vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows r... |
| CVE-2023-46278 | MEDIUM | 6.5 | 0.6% | Nov 1, 2023 | Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.1.0 to 4.1.1 allows a remote authenticated at... |
| CVE-2023-46378 | MEDIUM | 5.4 | 0.4% | Oct 31, 2023 | Stored Cross Site Scripting (XSS) vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted stri... |
| CVE-2023-39695 | MEDIUM | 5.3 | 0.4% | Oct 31, 2023 | Insufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to arbitrarily change transmitter... |
| CVE-2023-37833 | LOW | 2.7 | 0.4% | Oct 31, 2023 | Improper access control in Elenos ETG150 FM transmitter v3.12 allows attackers to make arbitrary configuration edits tha... |
| CVE-2023-5306 | — | — | — | Oct 31, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now