2023 CVE Vulnerabilities
31,397 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-0563 | MEDIUM | 4.8 | 34.8% | Jan 28, 2023 | A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects a... |
| CVE-2023-23629 | MEDIUM | 6.3 | 0.4% | Jan 28, 2023 | Metabase is an open source data analytics platform. Affected versions are subject to Improper Privilege Management. As i... |
| CVE-2023-23628 | MEDIUM | 4.1 | 0.4% | Jan 28, 2023 | Metabase is an open source data analytics platform. Affected versions are subject to Exposure of Sensitive Information t... |
| CVE-2023-23627 | MEDIUM | 6.1 | 0.5% | Jan 28, 2023 | Sanitize is an allowlist-based HTML and CSS sanitizer. Versions 5.0.0 and later, prior to 6.0.1, are vulnerable to Cross... |
| CVE-2023-23624 | MEDIUM | 5.3 | 0.6% | Jan 28, 2023 | Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and version 3.1.0.beta2 o... |
| CVE-2023-23620 | MEDIUM | 5.3 | 0.7% | Jan 28, 2023 | Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and 3.1.0.beta2 on the `b... |
| CVE-2023-23616 | MEDIUM | 4.3 | 0.7% | Jan 28, 2023 | Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and 3.1.0.beta2 on the `b... |
| CVE-2023-22737 | MEDIUM | 6.5 | 0.7% | Jan 28, 2023 | wire-server provides back end services for Wire, a team communication and collaboration platform. Prior to version 2022-... |
| CVE-2023-0557 | MEDIUM | 5.3 | 0.9% | Jan 27, 2023 | The ContentStudio plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including,... |
| CVE-2023-0556 | MEDIUM | 6.5 | 1.0% | Jan 27, 2023 | The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on severa... |
| CVE-2023-0553 | MEDIUM | 4.4 | 0.5% | Jan 27, 2023 | The Quick Restaurant Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters ... |
| CVE-2023-0549 | MEDIUM | 5.4 | 0.7% | Jan 27, 2023 | A vulnerability, which was classified as problematic, has been found in YAFNET up to 3.1.10. This issue affects some unk... |
| CVE-2023-0534 | MEDIUM | 4.7 | 0.6% | Jan 27, 2023 | A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System ... |
| CVE-2023-0533 | MEDIUM | 4.7 | 0.6% | Jan 27, 2023 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management Sy... |
| CVE-2023-0532 | MEDIUM | 4.7 | 0.6% | Jan 27, 2023 | A vulnerability classified as critical was found in SourceCodester Online Tours & Travels Management System 1.0. Affecte... |
| CVE-2023-0531 | MEDIUM | 4.7 | 0.6% | Jan 27, 2023 | A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management System 1.0. Af... |
| CVE-2023-0529 | MEDIUM | 6.3 | 0.6% | Jan 27, 2023 | A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been declared as critic... |
| CVE-2023-0528 | MEDIUM | 6.3 | 0.6% | Jan 27, 2023 | A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as crit... |
| CVE-2023-0527 | MEDIUM | 6.1 | 6.2% | Jan 27, 2023 | A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as problematic. Affected... |
| CVE-2023-24060 | MEDIUM | 5 | 0.5% | Jan 27, 2023 | Haven 5d15944 allows Server-Side Request Forgery (SSRF) via the feed[url]= Feeds functionality. Authenticated users with... |
| CVE-2023-22740 | MEDIUM | 6.5 | 0.7% | Jan 27, 2023 | Discourse is an open source platform for community discussion. Versions prior to 3.1.0.beta1 (beta) (tests-passed) are v... |
| CVE-2023-0519 | MEDIUM | 5.4 | 0.5% | Jan 26, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4. |
| CVE-2023-0488 | MEDIUM | 5.4 | 0.8% | Jan 26, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42. |
| CVE-2023-0470 | MEDIUM | 5.4 | 0.6% | Jan 26, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4. |
| CVE-2023-24495 | MEDIUM | 6.5 | 0.9% | Jan 26, 2023 | A Server Side Request Forgery (SSRF) vulnerability exists in Tenable.sc due to improper validation of session & user-acc... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now