2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-5412 | MEDIUM | 6.5 | 1.5% | Oct 31, 2023 | The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcod... |
| CVE-2023-46210 | MEDIUM | 4.8 | 0.3% | Oct 31, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WebCource WC Captcha plugin <= 1.4 versions. |
| CVE-2023-46451 | MEDIUM | 5.4 | 0.4% | Oct 31, 2023 | Best Courier Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the change username field. |
| CVE-2023-46361 | MEDIUM | 6.5 | 0.8% | Oct 31, 2023 | Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2_error at /jbig2dec/jbig2.c. |
| CVE-2023-45996 | HIGH | 8.8 | 1.1% | Oct 31, 2023 | SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker ... |
| CVE-2023-43139 | CRITICAL | 9.8 | 0.9% | Oct 31, 2023 | An issue in franfinance before v.2.0.27 allows a remote attacker to execute arbitrary code via the validation.php, and c... |
| CVE-2023-36263 | CRITICAL | 9.8 | 0.5% | Oct 31, 2023 | Prestashop opartlimitquantity 1.4.5 and before is vulnerable to SQL Injection. OpartlimitquantityAlertlimitModuleFrontCo... |
| CVE-2023-47174 | CRITICAL | 9.8 | 1.0% | Oct 31, 2023 | Thorn SFTP gateway 3.4.x before 3.4.4 uses Pivotal Spring Framework for Java deserialization of untrusted data, which is... |
| CVE-2023-46356 | CRITICAL | 9.8 | 0.6% | Oct 31, 2023 | In the module "CSV Feeds PRO" (csvfeeds) before 2.6.1 from Bl Modules for PrestaShop, a guest can perform SQL injection.... |
| CVE-2023-45378 | CRITICAL | 9.8 | 0.5% | Oct 31, 2023 | In the module "PrestaBlog" (prestablog) version 4.4.7 and before from HDclic for PrestaShop, a guest can perform SQL inj... |
| CVE-2023-27846 | CRITICAL | 9.8 | 0.6% | Oct 31, 2023 | SQL injection vulnerability found in PrestaShop themevolty v.4.0.8 and before allow a remote attacker to gain privileges... |
| CVE-2023-46040 | MEDIUM | 5.4 | 0.5% | Oct 31, 2023 | Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a... |
| CVE-2023-45899 | HIGH | 7.5 | 0.8% | Oct 31, 2023 | An issue in the component SuperUserSetuserModuleFrontController:init() of idnovate superuser before v2.4.2 allows attack... |
| CVE-2023-5867 | MEDIUM | 5.4 | 0.4% | Oct 31, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2. |
| CVE-2023-5866 | MEDIUM | 5.7 | 0.3% | Oct 31, 2023 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1. |
| CVE-2023-5865 | CRITICAL | 9.8 | 0.6% | Oct 31, 2023 | Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2. |
| CVE-2023-5864 | MEDIUM | 4.8 | 0.5% | Oct 31, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1. |
| CVE-2023-5863 | MEDIUM | 6.1 | 1.1% | Oct 31, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2. |
| CVE-2023-5862 | LOW | 3.3 | 0.3% | Oct 31, 2023 | Missing Authorization in GitHub repository hamza417/inure prior to Build95. |
| CVE-2023-5861 | MEDIUM | 4.8 | 0.4% | Oct 31, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0. |
| CVE-2023-31794 | MEDIUM | 5.5 | 0.2% | Oct 31, 2023 | MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdf_mark_list_push. This vulnerability al... |
| CVE-2023-46139 | MEDIUM | 5.7 | 0.2% | Oct 31, 2023 | KernelSU is a Kernel based root solution for Android. Starting in version 0.6.1 and prior to version 0.7.0, if a KernelS... |
| CVE-2023-46138 | MEDIUM | 5.3 | 0.3% | Oct 31, 2023 | JumpServer is an open source bastion host and maintenance security audit system that complies with 4A specifications. Pr... |
| CVE-2023-46129 | HIGH | 7.5 | 0.4% | Oct 31, 2023 | NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise,... |
| CVE-2023-46502 | CRITICAL | 9.8 | 0.7% | Oct 30, 2023 | An issue in openCRX v.5.2.2 allows a remote attacker to read internal files and execute server side request forgery atta... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now