2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-34085 | MEDIUM | 4.3 | 0.5% | Oct 25, 2023 | When an AWS DynamoDB table is used for user attribute storage, it is possible to retrieve the attributes of another user... |
| CVE-2023-34056 | MEDIUM | 4.3 | 0.7% | Oct 25, 2023 | vCenter Server contains a partial information disclosure vulnerability. A malicious actor with non-administrative privil... |
| CVE-2023-34048 | CRITICAL | 9.8 | 99.4% | Oct 25, 2023 | vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious a... |
| CVE-2023-31582 | HIGH | 7.5 | 0.6% | Oct 25, 2023 | jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less. |
| CVE-2023-31581 | CRITICAL | 9.8 | 0.8% | Oct 25, 2023 | Dromara Sureness before v1.0.8 was discovered to use a hardcoded key. |
| CVE-2023-31580 | MEDIUM | 5.9 | 0.5% | Oct 25, 2023 | light-oauth2 before version 2.1.27 obtains the public key without any verification. This could allow attackers to authen... |
| CVE-2023-30912 | CRITICAL | 9.8 | 1.2% | Oct 25, 2023 | A remote code execution issue exists in HPE OneView. |
| CVE-2023-29973 | MEDIUM | 4.9 | 1.6% | Oct 25, 2023 | Pfsense CE version 2.6.0 is vulnerable to No rate limit which can lead to an attacker creating multiple malicious users ... |
| CVE-2023-27377 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | Missing authentication in the StudentPopupDetails_EmergencyContactDetails method in IDAttend’s IDWeb application ... |
| CVE-2023-27376 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | Missing authentication in the StudentPopupDetails_StudentDetails method in IDAttend’s IDWeb application 3.1.052 an... |
| CVE-2023-27375 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | Missing authentication in the StudentPopupDetails_ContactDetails method in IDAttend’s IDWeb application 3.1.052 an... |
| CVE-2023-27262 | CRITICAL | 9.1 | 0.8% | Oct 25, 2023 | Unauthenticated SQL injection in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier... |
| CVE-2023-27261 | MEDIUM | 6.5 | 0.5% | Oct 25, 2023 | Missing authentication in the DeleteAssignments method in IDAttend’s IDWeb application 3.1.052 and earlier allow... |
| CVE-2023-27260 | CRITICAL | 9.1 | 0.6% | Oct 25, 2023 | Unauthenticated SQL injection in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier... |
| CVE-2023-27259 | HIGH | 7.5 | 0.5% | Oct 25, 2023 | Missing authentication in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows e... |
| CVE-2023-27258 | HIGH | 7.5 | 0.5% | Oct 25, 2023 | Missing authentication in the GetStudentGroupStudents method in IDAttend’s IDWeb application 3.1.052 and earlier all... |
| CVE-2023-27257 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | Missing authentication in the GetActiveToiletPasses method in IDAttend’s IDWeb application 3.1.052 and earlier allows... |
| CVE-2023-27256 | MEDIUM | 5.3 | 0.6% | Oct 25, 2023 | Missing authentication in the GetLogFiles method in IDAttend’s IDWeb application 3.1.052 and earlier allows retrieval ... |
| CVE-2023-27255 | CRITICAL | 9.1 | 0.8% | Oct 25, 2023 | Unauthenticated SQL injection in the DeleteRoomChanges method in IDAttend’s IDWeb application 3.1.052 and earlier ... |
| CVE-2023-27254 | CRITICAL | 9.1 | 0.8% | Oct 25, 2023 | Unauthenticated SQL injection in the GetRoomChanges method in IDAttend’s IDWeb application 3.1.052 and earlier allo... |
| CVE-2023-26584 | CRITICAL | 9.1 | 0.6% | Oct 25, 2023 | Unauthenticated SQL injection in the GetStudentInconsistencies method in IDAttend’s IDWeb application 3.1.052 and ea... |
| CVE-2023-26583 | CRITICAL | 9.1 | 0.6% | Oct 25, 2023 | Unauthenticated SQL injection in the GetCurrentPeriod method in IDAttend’s IDWeb application 3.1.052 and earlier allo... |
| CVE-2023-26582 | CRITICAL | 9.1 | 0.6% | Oct 25, 2023 | Unauthenticated SQL injection in the GetExcursionDetails method in IDAttend’s IDWeb application 3.1.052 and earlier al... |
| CVE-2023-26581 | CRITICAL | 9.1 | 0.6% | Oct 25, 2023 | Unauthenticated SQL injection in the GetVisitors method in IDAttend’s IDWeb application 3.1.052 and earlier allows extr... |
| CVE-2023-26580 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | Unauthenticated arbitrary file read in the IDAttend’s IDWeb application 3.1.013 allows the retrieval of any file present... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now