2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-46125 | MEDIUM | 6.5 | 0.7% | Oct 25, 2023 | Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime ... |
| CVE-2023-46124 | HIGH | 7.2 | 0.7% | Oct 25, 2023 | Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime en... |
| CVE-2023-46123 | MEDIUM | 5.3 | 0.7% | Oct 25, 2023 | jumpserver is an open source bastion machine, professional operation and maintenance security audit system that complies... |
| CVE-2023-46120 | HIGH | 7.5 | 1.1% | Oct 25, 2023 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. ... |
| CVE-2023-46119 | HIGH | 7.5 | 1.1% | Oct 25, 2023 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Parse Server cra... |
| CVE-2023-46118 | MEDIUM | 4.9 | 1.1% | Oct 25, 2023 | RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making... |
| CVE-2023-46102 | HIGH | 8.8 | 0.4% | Oct 25, 2023 | The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and... |
| CVE-2023-46071 | MEDIUM | 6.1 | 0.4% | Oct 25, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ClickDatos Protección de Datos RGPD plugin <= 3.1.0 versio... |
| CVE-2023-46070 | MEDIUM | 6.1 | 0.4% | Oct 25, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Emmanuel GEORJON EG-Attachments plugin <= 2.1.3 versions. |
| CVE-2023-46069 | MEDIUM | 5.4 | 0.4% | Oct 25, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Osmansorkar Ajax Archive Calendar plugin <= 2.6.... |
| CVE-2023-46068 | MEDIUM | 4.8 | 0.4% | Oct 25, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in XQueue GmbH Maileon for WordPress plugin <= 2.16.0 ver... |
| CVE-2023-46010 | CRITICAL | 9.8 | 1.2% | Oct 25, 2023 | An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php component. |
| CVE-2023-45990 | HIGH | 8 | 0.7% | Oct 25, 2023 | Insecure Permissions vulnerability in WenwenaiCMS v.1.0 allows a remote attacker to escalate privileges. |
| CVE-2023-45960 | — | — | — | Oct 25, 2023 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further inv... |
| CVE-2023-45851 | HIGH | 8.8 | 0.4% | Oct 25, 2023 | The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any serv... |
| CVE-2023-45844 | MEDIUM | 6.8 | 0.3% | Oct 25, 2023 | The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an ar... |
| CVE-2023-45837 | MEDIUM | 6.1 | 0.4% | Oct 25, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in XYDAC Ultimate Taxonomy Manager plugin <= 2.0 versions. |
| CVE-2023-45835 | MEDIUM | 6.1 | 0.4% | Oct 25, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Libsyn Libsyn Publisher Hub plugin <= 1.4.4 versions. |
| CVE-2023-45833 | MEDIUM | 4.8 | 0.4% | Oct 25, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in LeadSquared Suite plugin <= 0.7.4 versions. |
| CVE-2023-45832 | MEDIUM | 4.8 | 0.4% | Oct 25, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Martin Gibson WP GoToWebinar plugin <= 14.45 versions. |
| CVE-2023-45829 | MEDIUM | 5.4 | 0.4% | Oct 25, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in HappyBox Newsletter & Bulk Email Sender – Email ... |
| CVE-2023-45772 | MEDIUM | 6.1 | 0.4% | Oct 25, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Scribit Proofreading plugin <= 1.0.11 versions. |
| CVE-2023-45770 | MEDIUM | 6.1 | 0.4% | Oct 25, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Fastwpspeed Fast WP Speed plugin <= 1.0.0 versions. |
| CVE-2023-45769 | MEDIUM | 6.1 | 0.5% | Oct 25, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Alex Raven WP Report Post plugin <= 2.1.2 versions. |
| CVE-2023-45768 | MEDIUM | 4.8 | 0.4% | Oct 25, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Stephanie Leary Next Page plugin <= 1.5.2 versions. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now