2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-5889 | HIGH | 8.2 | 0.4% | Nov 1, 2023 | Insufficient Session Expiration in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
| CVE-2023-47099 | MEDIUM | 5.4 | 0.4% | Nov 1, 2023 | A Stored Cross-Site Scripting (XSS) vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers... |
| CVE-2023-47098 | MEDIUM | 4.8 | 0.5% | Nov 1, 2023 | A Stored Cross-Site Scripting (XSS) vulnerability in the Manage Extra Admins under Administration Options in Virtualmin ... |
| CVE-2023-47097 | MEDIUM | 5.4 | 0.4% | Nov 1, 2023 | A Stored Cross-Site Scripting (XSS) vulnerability in the Server Template under System Setting in Virtualmin 7.7 allows r... |
| CVE-2023-47096 | MEDIUM | 5.4 | 0.4% | Nov 1, 2023 | A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin ... |
| CVE-2023-47095 | MEDIUM | 5.4 | 0.4% | Nov 1, 2023 | A Stored Cross-Site Scripting (XSS) vulnerability in the Custom fields of Edit Virtual Server under System Customization... |
| CVE-2023-47094 | MEDIUM | 5.4 | 0.4% | Nov 1, 2023 | A Stored Cross-Site Scripting (XSS) vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows r... |
| CVE-2023-46278 | MEDIUM | 6.5 | 0.6% | Nov 1, 2023 | Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.1.0 to 4.1.1 allows a remote authenticated at... |
| CVE-2023-46378 | MEDIUM | 5.4 | 0.4% | Oct 31, 2023 | Stored Cross Site Scripting (XSS) vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted stri... |
| CVE-2023-39695 | MEDIUM | 5.3 | 0.4% | Oct 31, 2023 | Insufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to arbitrarily change transmitter... |
| CVE-2023-37833 | LOW | 2.7 | 0.4% | Oct 31, 2023 | Improper access control in Elenos ETG150 FM transmitter v3.12 allows attackers to make arbitrary configuration edits tha... |
| CVE-2023-5306 | — | — | — | Oct 31, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-44486 | — | — | — | Oct 31, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-44485 | — | — | — | Oct 31, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-44484 | MEDIUM | 6.1 | 0.4% | Oct 31, 2023 | Online Blood Donation Management System v1.0 is vulnerable to a Stored Cross-Site Scripting vulnerability. The 'firstNam... |
| CVE-2023-46485 | CRITICAL | 9.8 | 1.2% | Oct 31, 2023 | An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setTracero... |
| CVE-2023-46484 | CRITICAL | 9.8 | 1.2% | Oct 31, 2023 | An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setLedCfg ... |
| CVE-2023-43295 | LOW | 3.5 | 0.2% | Oct 31, 2023 | Cross Site Request Forgery vulnerability in Click Studios (SA) Pty Ltd Passwordstate v.Build 9785 and before allows a lo... |
| CVE-2023-3955 | HIGH | 8.8 | 3.4% | Oct 31, 2023 | A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalat... |
| CVE-2023-3676 | HIGH | 8.8 | 11.7% | Oct 31, 2023 | A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalat... |
| CVE-2023-39610 | MEDIUM | 6.5 | 0.3% | Oct 31, 2023 | An issue in TP-Link Tapo C100 v1.1.15 Build 211130 Rel.15378n(4555) and before allows attackers to cause a Denial of Ser... |
| CVE-2023-20886 | MEDIUM | 6.1 | 0.4% | Oct 31, 2023 | VMware Workspace ONE UEM console contains an open redirect vulnerability. A malicious actor may be able to redirect a ... |
| CVE-2023-41377 | — | — | — | Oct 31, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2023-45955 | HIGH | 7.5 | 0.6% | Oct 31, 2023 | An issue discovered in Nanoleaf Light strip v3.5.10 allows attackers to cause a denial of service via crafted write bind... |
| CVE-2023-37832 | HIGH | 7.5 | 0.6% | Oct 31, 2023 | A lack of rate limiting in Elenos ETG150 FM transmitter v3.12 allows attackers to obtain user credentials via brute forc... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now