2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-5835 | MEDIUM | 6.1 | 0.4% | Oct 28, 2023 | A vulnerability classified as problematic was found in hu60t hu60wap6. Affected by this vulnerability is the function ma... |
| CVE-2023-5426 | HIGH | 7.5 | 0.5% | Oct 28, 2023 | The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capa... |
| CVE-2023-5425 | HIGH | 8.8 | 0.5% | Oct 28, 2023 | The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capa... |
| CVE-2023-46215 | HIGH | 7.5 | 1.2% | Oct 28, 2023 | Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider, Apache Airflow. Sensi... |
| CVE-2023-46570 | CRITICAL | 9.8 | 0.9% | Oct 28, 2023 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h... |
| CVE-2023-46569 | CRITICAL | 9.8 | 0.9% | Oct 28, 2023 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-d... |
| CVE-2023-46468 | HIGH | 7.8 | 0.5% | Oct 28, 2023 | An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the cus... |
| CVE-2023-46467 | MEDIUM | 5.4 | 0.5% | Oct 28, 2023 | Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via... |
| CVE-2023-43322 | HIGH | 8.8 | 1.1% | Oct 28, 2023 | ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.... |
| CVE-2023-46587 | HIGH | 7.8 | 0.2% | Oct 27, 2023 | Buffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute arbitrary code via a crafted... |
| CVE-2023-5834 | HIGH | 7.8 | 0.2% | Oct 27, 2023 | HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, int... |
| CVE-2023-46490 | MEDIUM | 6.5 | 1.4% | Oct 27, 2023 | SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the form_actio... |
| CVE-2023-5830 | CRITICAL | 9.8 | 61.0% | Oct 27, 2023 | A vulnerability classified as critical has been found in ColumbiaSoft Document Locator. This affects an unknown part of ... |
| CVE-2023-46510 | CRITICAL | 9.8 | 0.8% | Oct 27, 2023 | An issue in ZIONCOM (Hong Kong) Technology Limited A7000R v.4.1cu.4154 allows an attacker to execute arbitrary code via ... |
| CVE-2023-46509 | CRITICAL | 9.8 | 0.8% | Oct 27, 2023 | An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.ph... |
| CVE-2023-46211 | MEDIUM | 5.4 | 0.3% | Oct 27, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Brainstorm Force Ultimate Addons for WPBakery Pa... |
| CVE-2023-46209 | MEDIUM | 6.1 | 0.3% | Oct 27, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in G5Theme Grid Plus – Unlimited grid plugin <= 1.3.2 version... |
| CVE-2023-46208 | MEDIUM | 6.1 | 0.3% | Oct 27, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing ... |
| CVE-2023-46200 | MEDIUM | 4.8 | 0.3% | Oct 27, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Stephen Darlington, Wandle Software Limited Smart App ... |
| CVE-2023-44480 | HIGH | 8.8 | 0.6% | Oct 27, 2023 | Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setcasu... |
| CVE-2023-40140 | HIGH | 7.8 | 0.2% | Oct 27, 2023 | In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code du... |
| CVE-2023-40139 | MEDIUM | 5.5 | 0.1% | Oct 27, 2023 | In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lea... |
| CVE-2023-40138 | LOW | 3.3 | 0.1% | Oct 27, 2023 | In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lea... |
| CVE-2023-40137 | LOW | 3.3 | 0.1% | Oct 27, 2023 | In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused depu... |
| CVE-2023-40136 | LOW | 3.3 | 0.1% | Oct 27, 2023 | In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now