2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-44219 | HIGH | 7.8 | 0.2% | Oct 27, 2023 | A local privilege escalation vulnerability in SonicWall Directory Services Connector Windows MSI client 4.1.21 and earli... |
| CVE-2023-34059 | HIGH | 7 | 0.4% | Oct 27, 2023 | open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with no... |
| CVE-2023-34058 | HIGH | 7.5 | 0.7% | Oct 27, 2023 | VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operat... |
| CVE-2023-34057 | HIGH | 7.8 | 0.2% | Oct 27, 2023 | VMware Tools contains a local privilege escalation vulnerability. A malicious actor with local user access to a guest vi... |
| CVE-2023-5051 | MEDIUM | 5.4 | 0.4% | Oct 27, 2023 | The CallRail Phone Call Tracking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'callrail_for... |
| CVE-2023-46818 | HIGH | 7.2 | 13.9% | Oct 27, 2023 | An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by ... |
| CVE-2023-46816 | HIGH | 8.8 | 0.6% | Oct 27, 2023 | An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. A Server Site Template Injection (SSTI) vulne... |
| CVE-2023-46815 | HIGH | 8.8 | 0.6% | Oct 27, 2023 | An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. An Unrestricted File Upload vulnerability has... |
| CVE-2023-46504 | MEDIUM | 5.4 | 0.4% | Oct 27, 2023 | Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute a... |
| CVE-2023-46503 | MEDIUM | 6.1 | 0.5% | Oct 27, 2023 | Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to execute arbitrary code ... |
| CVE-2023-45499 | CRITICAL | 9.8 | 7.9% | Oct 27, 2023 | VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain hardcoded credentials. |
| CVE-2023-45498 | CRITICAL | 9.8 | 20.5% | Oct 27, 2023 | VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability... |
| CVE-2023-46813 | HIGH | 7 | 0.7% | Oct 27, 2023 | An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO regis... |
| CVE-2023-44375 | — | — | — | Oct 27, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-44162 | — | — | — | Oct 27, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-43738 | — | — | — | Oct 27, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-5814 | HIGH | 8.8 | 0.4% | Oct 27, 2023 | A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been classified as critical. This affects a... |
| CVE-2023-5813 | HIGH | 8.8 | 0.4% | Oct 27, 2023 | A vulnerability was found in SourceCodester Task Reminder System 1.0 and classified as critical. Affected by this issue ... |
| CVE-2023-5812 | HIGH | 8.8 | 0.7% | Oct 27, 2023 | A vulnerability has been found in flusity CMS and classified as critical. Affected by this vulnerability is the function... |
| CVE-2023-5811 | MEDIUM | 4.8 | 0.5% | Oct 27, 2023 | A vulnerability, which was classified as problematic, was found in flusity CMS. Affected is the function loadPostAddForm... |
| CVE-2023-5810 | MEDIUM | 4.8 | 0.5% | Oct 27, 2023 | A vulnerability, which was classified as problematic, has been found in flusity CMS. This issue affects the function loa... |
| CVE-2023-46505 | MEDIUM | 6.1 | 0.4% | Oct 27, 2023 | Cross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code via the content1 param... |
| CVE-2023-46376 | HIGH | 7.5 | 0.4% | Oct 27, 2023 | Zentao Biz version 8.7 and before is vulnerable to Information Disclosure. |
| CVE-2023-46375 | HIGH | 8.8 | 0.3% | Oct 27, 2023 | ZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF). |
| CVE-2023-46491 | MEDIUM | 6.1 | 0.4% | Oct 27, 2023 | ZenTao Biz version 4.1.3 and before has a Cross Site Scripting (XSS) vulnerability in the Version Library. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now