2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-39816 | — | — | — | Oct 25, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-39815 | — | — | — | Oct 25, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-39814 | — | — | — | Oct 25, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-39740 | HIGH | 8.2 | 0.6% | Oct 25, 2023 | The leakage of the client secret in Onigiriya-musubee Line 13.6.1 allows attackers to obtain the channel access token an... |
| CVE-2023-39739 | HIGH | 8.2 | 0.6% | Oct 25, 2023 | The leakage of the client secret in REGINA SWEETS&BAKERY Line 13.6.1 allows attackers to obtain the channel access token... |
| CVE-2023-39737 | HIGH | 8.2 | 0.6% | Oct 25, 2023 | The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send cra... |
| CVE-2023-39736 | HIGH | 8.2 | 0.6% | Oct 25, 2023 | The leakage of the client secret in Fukunaga_memberscard Line 13.6.1 allows attackers to obtain the channel access token... |
| CVE-2023-39735 | HIGH | 8.2 | 0.6% | Oct 25, 2023 | The leakage of the client secret in Uomasa_Saiji_news Line 13.6.1 allows attackers to obtain the channel access token an... |
| CVE-2023-39734 | HIGH | 8.2 | 0.6% | Oct 25, 2023 | The leakage of the client secret in VISION MEAT WORKS TrackDiner10/10_mc Line v13.6.1 allows attackers to obtain the cha... |
| CVE-2023-39733 | HIGH | 8.2 | 0.6% | Oct 25, 2023 | The leakage of the client secret in TonTon-Tei Line v13.6.1 allows attackers to obtain the channel access token and send... |
| CVE-2023-39732 | HIGH | 8.2 | 0.6% | Oct 25, 2023 | The leakage of the client secret in Tokueimaru_waiting Line 13.6.1 allows attackers to obtain the channel access token a... |
| CVE-2023-39619 | HIGH | 7.5 | 1.1% | Oct 25, 2023 | ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpS... |
| CVE-2023-39231 | MEDIUM | 6.5 | 0.5% | Oct 25, 2023 | PingFederate using the PingOne MFA adapter allows a new MFA device to be paired without requiring second factor authenti... |
| CVE-2023-39219 | HIGH | 7.5 | 0.6% | Oct 25, 2023 | PingFederate Administrative Console dependency contains a weakness where console becomes unresponsive with crafted Java ... |
| CVE-2023-38041 | HIGH | 7 | 0.7% | Oct 25, 2023 | A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU) race condition. When a p... |
| CVE-2023-37913 | HIGH | 8.8 | 1.1% | Oct 25, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in ver... |
| CVE-2023-37912 | HIGH | 8.8 | 1.2% | Oct 25, 2023 | XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. Prior t... |
| CVE-2023-37911 | MEDIUM | 6.5 | 0.8% | Oct 25, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in ver... |
| CVE-2023-37910 | HIGH | 8.1 | 0.6% | Oct 25, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting with t... |
| CVE-2023-37909 | HIGH | 8.8 | 1.6% | Oct 25, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in ver... |
| CVE-2023-37908 | CRITICAL | 9.6 | 1.1% | Oct 25, 2023 | XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. The cle... |
| CVE-2023-37283 | CRITICAL | 9.8 | 0.7% | Oct 25, 2023 | Under a very specific and highly unrecommended configuration, authentication bypass is possible in the PingFederate Iden... |
| CVE-2023-36085 | MEDIUM | 6.1 | 0.5% | Oct 25, 2023 | The sisqualWFM 7.1.319.103 thru 7.1.319.111 for Android, has a host header injection vulnerability in its "/sisqualIdent... |
| CVE-2023-34447 | MEDIUM | 6.1 | 0.7% | Oct 25, 2023 | iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, on `pages/UI.php`, ... |
| CVE-2023-34446 | MEDIUM | 6.1 | 0.5% | Oct 25, 2023 | iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, when displaying `pa... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now