2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-46374 | MEDIUM | 6.1 | 0.4% | Oct 27, 2023 | ZenTao Enterprise Edition version 4.1.3 and before is vulnerable to Cross Site Scripting (XSS). |
| CVE-2023-42188 | MEDIUM | 6.5 | 0.2% | Oct 27, 2023 | IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery (CSRF). |
| CVE-2023-44268 | — | — | — | Oct 26, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-43737 | — | — | — | Oct 26, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-27170 | HIGH | 7.5 | 0.8% | Oct 26, 2023 | Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName pa... |
| CVE-2023-5805 | CRITICAL | 9.8 | 0.6% | Oct 26, 2023 | A vulnerability was found in SourceCodester Simple Real Estate Portal System 1.0. It has been classified as critical. Af... |
| CVE-2023-43352 | HIGH | 7.8 | 0.5% | Oct 26, 2023 | An issue in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted payload to the Conten... |
| CVE-2023-42406 | CRITICAL | 9.8 | 1.9% | Oct 26, 2023 | SQL injection vulnerability in D-Link Online behavior audit gateway DAR-7000 V31R02B1413C allows a remote attacker to ob... |
| CVE-2023-38328 | MEDIUM | 4.9 | 0.6% | Oct 26, 2023 | An issue was discovered in eGroupWare 17.1.20190111. An Improper Password Storage vulnerability affects the setup panel ... |
| CVE-2023-46748 | HIGH | 8.8 | 4.5% | Oct 26, 2023 | An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticat... |
| CVE-2023-46747 | CRITICAL | 9.8 | 96.5% | Oct 26, 2023 | Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BI... |
| CVE-2023-46665 | CRITICAL | 9.8 | 0.7% | Oct 26, 2023 | Sielco PolyEco1000 is vulnerable to an authentication bypass vulnerability due to an attacker modifying... |
| CVE-2023-46664 | CRITICAL | 9.1 | 0.5% | Oct 26, 2023 | Sielco PolyEco1000 is vulnerable to an improper access control vulnerability when the application provides ... |
| CVE-2023-46663 | HIGH | 8.1 | 0.4% | Oct 26, 2023 | Sielco PolyEco1000 is vulnerable to an attacker bypassing authorization and accessing resources behind protecte... |
| CVE-2023-39726 | CRITICAL | 9.8 | 1.0% | Oct 26, 2023 | An issue in Mintty v.3.6.4 and before allows a remote attacker to execute arbitrary code via crafted commands to the ter... |
| CVE-2023-33559 | HIGH | 8.8 | 0.7% | Oct 26, 2023 | A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrar... |
| CVE-2023-33558 | HIGH | 7.5 | 0.5% | Oct 26, 2023 | An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to... |
| CVE-2023-5804 | CRITICAL | 9.8 | 0.7% | Oct 26, 2023 | A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as critical. This issue... |
| CVE-2023-5754 | CRITICAL | 9.8 | 0.5% | Oct 26, 2023 | Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote passw... |
| CVE-2023-46662 | HIGH | 7.5 | 0.6% | Oct 26, 2023 | Sielco PolyEco1000 is vulnerable to an information disclosure vulnerability due to improper access control enforcem... |
| CVE-2023-46661 | CRITICAL | 9.8 | 0.5% | Oct 26, 2023 | Sielco PolyEco1000 is vulnerable to an attacker escalating their privileges by modifying passwords in POST requests. ... |
| CVE-2023-44267 | CRITICAL | 9.8 | 0.7% | Oct 26, 2023 | Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'lnm' parameter of ... |
| CVE-2023-39936 | HIGH | 7.8 | 0.3% | Oct 26, 2023 | In Ashlar-Vellum Graphite v13.0.48, the affected application lacks proper validation of user-supplied data when parsi... |
| CVE-2023-39427 | HIGH | 7.8 | 0.2% | Oct 26, 2023 | In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build (1204.77), the affected applications lac... |
| CVE-2023-0897 | CRITICAL | 9.8 | 0.5% | Oct 26, 2023 | Sielco PolyEco1000 is vulnerable to a session hijack vulnerability due to the cookie being vulnerable to a brute force ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now