2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45799 | CRITICAL | 9.8 | 0.3% | Oct 30, 2023 | In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. T... |
| CVE-2023-45798 | CRITICAL | 9.8 | 0.6% | Oct 30, 2023 | In Yettiesoft VestCert versions 2.36 to 2.5.29, a vulnerability exists due to improper validation of third-party modules... |
| CVE-2023-45797 | CRITICAL | 9.8 | 0.8% | Oct 30, 2023 | A Buffer overflow vulnerability in DreamSecurity MagicLine4NX versions 1.0.0.1 to 1.0.0.26 allows an attacker to remotel... |
| CVE-2023-45746 | MEDIUM | 5.4 | 0.4% | Oct 30, 2023 | Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary ... |
| CVE-2023-44141 | HIGH | 7.8 | 0.3% | Oct 30, 2023 | Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a sp... |
| CVE-2023-46867 | MEDIUM | 6.5 | 0.5% | Oct 30, 2023 | In International Color Consortium DemoIccMAX 79ecb74, CIccXformMatrixTRC::GetCurve in IccCmm.cpp in libSampleICC.a has a... |
| CVE-2023-46866 | MEDIUM | 6.5 | 0.6% | Oct 30, 2023 | In International Color Consortium DemoIccMAX 79ecb74, CIccCLUT::Interp3d in IccProfLib/IccTagLut.cpp in libSampleICC.a a... |
| CVE-2023-5842 | MEDIUM | 4.8 | 0.5% | Oct 30, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5. |
| CVE-2023-46865 | HIGH | 7.2 | 20.3% | Oct 30, 2023 | /api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PH... |
| CVE-2023-4393 | MEDIUM | 6.1 | 0.3% | Oct 30, 2023 | HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform... |
| CVE-2023-46864 | MEDIUM | 5.3 | 0.7% | Oct 30, 2023 | Peppermint Ticket Management through 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/ticket/1/file/d... |
| CVE-2023-46863 | HIGH | 7.5 | 0.9% | Oct 30, 2023 | Peppermint Ticket Management before 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/users/file/downl... |
| CVE-2023-44002 | — | — | — | Oct 30, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-46862 | MEDIUM | 4.7 | 0.2% | Oct 29, 2023 | An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an io_uring/fdinfo.c io_ur... |
| CVE-2023-40685 | HIGH | 7.8 | 0.1% | Oct 29, 2023 | Management Central as part of IBM i 7.2, 7.3, 7.4, and 7.5 Navigator contains a local privilege escalation vulnerability... |
| CVE-2023-5840 | HIGH | 8.8 | 0.7% | Oct 29, 2023 | Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9. |
| CVE-2023-5839 | HIGH | 7.8 | 0.3% | Oct 29, 2023 | Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9. |
| CVE-2023-5838 | CRITICAL | 9.8 | 0.5% | Oct 29, 2023 | Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9. |
| CVE-2023-46858 | MEDIUM | 5.4 | 0.6% | Oct 29, 2023 | Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher. NOTE: the Moodl... |
| CVE-2023-43041 | MEDIUM | 4.9 | 0.5% | Oct 29, 2023 | IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain ... |
| CVE-2023-40686 | HIGH | 7.8 | 0.1% | Oct 29, 2023 | Management Central as part of IBM i 7.2, 7.3, 7.4, and 7.5 Navigator contains a local privilege escalation vulnerability... |
| CVE-2023-5837 | MEDIUM | 6.1 | 0.4% | Oct 28, 2023 | A vulnerability classified as problematic was found in AlexanderLivanov FotosCMS2 up to 2.4.3. This vulnerability affect... |
| CVE-2023-5836 | CRITICAL | 9.8 | 0.4% | Oct 28, 2023 | A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been rated as critical. Affected by this is... |
| CVE-2023-46854 | MEDIUM | 6.1 | 0.4% | Oct 28, 2023 | Proxmox proxmox-widget-toolkit before 4.0.9, as used in multiple Proxmox products, allows XSS via the edit notes feature... |
| CVE-2023-45897 | MEDIUM | 5.5 | 0.4% | Oct 28, 2023 | exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now