2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-30492 | MEDIUM | 5.4 | 0.3% | Oct 26, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vark Minimum Purchase for WooCommerce plugin <= ... |
| CVE-2023-5798 | HIGH | 8.8 | 0.7% | Oct 26, 2023 | The Assistant WordPress plugin before 1.4.4 does not validate a parameter before making a request to it via wp_remote_ge... |
| CVE-2023-5139 | HIGH | 7.8 | 0.4% | Oct 26, 2023 | Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver |
| CVE-2023-46754 | MEDIUM | 5.3 | 0.4% | Oct 26, 2023 | The admin panel for Obl.ong before 1.1.2 allows authorization bypass because the email OTP feature accepts arbitrary num... |
| CVE-2023-46753 | MEDIUM | 5.9 | 0.8% | Oct 26, 2023 | An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without manda... |
| CVE-2023-46752 | MEDIUM | 5.9 | 0.8% | Oct 26, 2023 | An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MP_REACH_NLRI data, leading to a crash. |
| CVE-2023-31421 | HIGH | 7.5 | 0.3% | Oct 26, 2023 | It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whe... |
| CVE-2023-31422 | HIGH | 7.5 | 0.7% | Oct 26, 2023 | An issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error. Th... |
| CVE-2023-46667 | HIGH | 8.1 | 0.5% | Oct 26, 2023 | An issue was discovered in Fleet Server >= v8.10.0 and < v8.10.3 where Agent enrolment tokens are being inserted into th... |
| CVE-2023-46668 | CRITICAL | 9.1 | 0.3% | Oct 26, 2023 | If Elastic Endpoint (v7.9.0 - v8.10.3) is configured to use a non-default option in which the logging level is explicitl... |
| CVE-2023-46345 | HIGH | 7.5 | 0.6% | Oct 26, 2023 | Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c. |
| CVE-2023-43906 | MEDIUM | 6.1 | 0.4% | Oct 26, 2023 | Xolo CMS v0.11 was discovered to contain a reflected cross-site scripting (XSS) vulnerability. |
| CVE-2023-43905 | HIGH | 7.5 | 0.4% | Oct 26, 2023 | Incorrect access control in writercms v1.1.0 allows attackers to directly obtain backend account passwords via unspecifi... |
| CVE-2023-30969 | MEDIUM | 6.5 | 0.4% | Oct 26, 2023 | The Palantir Tiles1 service was found to be vulnerable to an API wide issue where the service was not performing authen... |
| CVE-2023-30967 | HIGH | 7.5 | 0.6% | Oct 26, 2023 | Gotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowing an unaut... |
| CVE-2023-46584 | CRITICAL | 9.8 | 0.7% | Oct 25, 2023 | SQL Injection vulnerability in PHPGurukul Nipah virus (NiV) " Testing Management System v.1.0 allows a remote attacker t... |
| CVE-2023-46583 | MEDIUM | 6.1 | 0.5% | Oct 25, 2023 | Cross-Site Scripting (XSS) vulnerability in PHPGurukul Nipah virus (NiV) " Testing Management System v.1.0 allows attack... |
| CVE-2023-46232 | MEDIUM | 5.3 | 0.6% | Oct 25, 2023 | era-compiler-vyper is the EraVM Vyper compiler for zkSync Era, a layer 2 rollup that uses zero-knowledge proofs to scale... |
| CVE-2023-38849 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request. |
| CVE-2023-38848 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | An issue in rmc R Beauty CLINIC Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET r... |
| CVE-2023-38847 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | An issue in CHRISTINA JAPAN Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET reque... |
| CVE-2023-38846 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | An issue in Marbre Lapin Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request. |
| CVE-2023-38845 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | An issue in Anglaise Company Anglaise.Company v.13.6.1 allows a remote attacker to obtain sensitive information via craf... |
| CVE-2023-46233 | CRITICAL | 9.1 | 0.6% | Oct 25, 2023 | crypto-js is a JavaScript library of crypto standards. Prior to version 4.2.0, crypto-js PBKDF2 is 1,000 times weaker th... |
| CVE-2023-46137 | MEDIUM | 5.3 | 0.8% | Oct 25, 2023 | Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP r... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now