2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-31416 | MEDIUM | 5.3 | 0.4% | Oct 26, 2023 | Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requ... |
| CVE-2023-5796 | HIGH | 8.8 | 0.7% | Oct 26, 2023 | A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unk... |
| CVE-2023-5795 | HIGH | 8.8 | 0.8% | Oct 26, 2023 | A vulnerability was found in CodeAstro POS System 1.0. It has been declared as critical. Affected by this vulnerability ... |
| CVE-2023-5794 | CRITICAL | 9.8 | 0.7% | Oct 26, 2023 | A vulnerability was found in PHPGurukul Online Railway Catering System 1.0. It has been classified as critical. Affected... |
| CVE-2023-5793 | MEDIUM | 5.4 | 0.4% | Oct 26, 2023 | A vulnerability was found in flusity CMS and classified as problematic. This issue affects the function loadCustomBlocCr... |
| CVE-2023-46435 | CRITICAL | 9.8 | 0.6% | Oct 26, 2023 | Sourcecodester Packers and Movers Management System v1.0 is vulnerable to SQL Injection via mpms/?p=services/view_servic... |
| CVE-2023-31419 | HIGH | 7.5 | 60.7% | Oct 26, 2023 | A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause... |
| CVE-2023-31418 | HIGH | 7.5 | 1.2% | Oct 26, 2023 | An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer. An unauthenticated user... |
| CVE-2023-31417 | MEDIUM | 4.4 | 0.2% | Oct 26, 2023 | Elasticsearch generally filters out sensitive information and credentials before logging to the audit log. It was found ... |
| CVE-2023-5792 | CRITICAL | 9.8 | 0.6% | Oct 26, 2023 | A vulnerability has been found in SourceCodester Sticky Notes App 1.0 and classified as critical. This vulnerability aff... |
| CVE-2023-5791 | MEDIUM | 6.1 | 0.5% | Oct 26, 2023 | A vulnerability, which was classified as problematic, was found in SourceCodester Sticky Notes App 1.0. This affects an ... |
| CVE-2023-5790 | CRITICAL | 9.8 | 0.8% | Oct 26, 2023 | A vulnerability classified as critical was found in SourceCodester File Manager App 1.0. Affected by this vulnerability ... |
| CVE-2023-5789 | MEDIUM | 4.8 | 0.5% | Oct 26, 2023 | A vulnerability classified as problematic has been found in Dragon Path 707GR1 up to 20231022. Affected is an unknown fu... |
| CVE-2023-5624 | HIGH | 7.2 | 0.5% | Oct 26, 2023 | Under certain conditions, Nessus Network Monitor was found to not properly enforce input validation. This could allow a... |
| CVE-2023-5623 | HIGH | 7.8 | 0.2% | Oct 26, 2023 | NNM failed to properly set ACLs on its installation directory, which could allow a low privileged user to run arbitrary... |
| CVE-2023-5622 | HIGH | 8.8 | 0.5% | Oct 26, 2023 | Under certain conditions, Nessus Network Monitor could allow a low privileged user to escalate privileges to NT AUTHORI... |
| CVE-2023-46666 | MEDIUM | 6.5 | 0.4% | Oct 26, 2023 | An issue was discovered when using Document Level Security and the SPO "Limited Access" functionality in Elastic Sharepo... |
| CVE-2023-45317 | HIGH | 8.8 | 0.2% | Oct 26, 2023 | The application interface allows users to perform certain actions via HTTP requests without performing any validity ch... |
| CVE-2023-45228 | MEDIUM | 6.5 | 0.4% | Oct 26, 2023 | The application suffers from improper access control when editing users. A user with read permissions can manipulate ... |
| CVE-2023-43208 | CRITICAL | 9.8 | 82.7% | Oct 26, 2023 | NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that ... |
| CVE-2023-42769 | CRITICAL | 9.8 | 0.8% | Oct 26, 2023 | The cookie session ID is of insufficient length and can be exploited by brute force, which may allow a remote attacker ... |
| CVE-2023-41966 | HIGH | 8.8 | 0.6% | Oct 26, 2023 | The application suffers from a privilege escalation vulnerability. A user with read permissions can elevate privileg... |
| CVE-2023-5787 | HIGH | 8.8 | 0.7% | Oct 26, 2023 | A vulnerability was found in Shaanxi Chanming Education Technology Score Query System 5.0. It has been rated as critical... |
| CVE-2023-5786 | HIGH | 8.8 | 0.8% | Oct 26, 2023 | A vulnerability was found in GeoServer GeoWebCache up to 1.15.1. It has been declared as problematic. This vulnerability... |
| CVE-2023-5785 | HIGH | 7.5 | 0.6% | Oct 26, 2023 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now