2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-26579 | MEDIUM | 5.3 | 0.5% | Oct 25, 2023 | Missing authentication in the DeleteStaff method in IDAttend’s IDWeb application 3.1.013 allows deletion of staff inform... |
| CVE-2023-26578 | HIGH | 8.8 | 1.5% | Oct 25, 2023 | Arbitrary file upload to web root in the IDAttend’s IDWeb application 3.1.013 allows authenticated attackers to upload d... |
| CVE-2023-26577 | MEDIUM | 5.4 | 0.4% | Oct 25, 2023 | Stored cross-site scripting in the IDAttend’s IDWeb application 3.1.052 and earlier allows attackers to hijack the brows... |
| CVE-2023-26576 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | Missing authentication in the SearchStudentsRFID method in IDAttend’s IDWeb application 3.1.052 and earlier allows ext... |
| CVE-2023-26575 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | Missing authentication in the SearchStudentsStaff method in IDAttend’s IDWeb application 3.1.052 and earlier allows ext... |
| CVE-2023-26574 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | Missing authentication in the SearchStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extractio... |
| CVE-2023-26573 | CRITICAL | 9.1 | 0.7% | Oct 25, 2023 | Missing authentication in the SetDB method in IDAttend’s IDWeb application 3.1.052 and earlier allows denial of service ... |
| CVE-2023-26572 | CRITICAL | 9.1 | 0.8% | Oct 25, 2023 | Unauthenticated SQL injection in the GetExcursionList method in IDAttend’s IDWeb application 3.1.052 and earlier allows ... |
| CVE-2023-26571 | HIGH | 7.5 | 0.6% | Oct 25, 2023 | Missing authentication in the SetStudentNotes method in IDAttend’s IDWeb application 3.1.052 and earlier allows modific... |
| CVE-2023-26570 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | Missing authentication in the StudentPopupDetails_Timetable method in IDAttend’s IDWeb application 3.1.052 and earlier a... |
| CVE-2023-26569 | CRITICAL | 9.1 | 0.8% | Oct 25, 2023 | Unauthenticated SQL injection in the StudentPopupDetails_Timetable method in IDAttend’s IDWeb application 3.1.052 and ea... |
| CVE-2023-26568 | CRITICAL | 9.1 | 0.8% | Oct 25, 2023 | Unauthenticated SQL injection in the GetStudentGroupStudents method in IDAttend’s IDWeb application 3.1.052 and earlier ... |
| CVE-2023-26219 | HIGH | 8.8 | 0.4% | Oct 25, 2023 | The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver... |
| CVE-2023-25032 | MEDIUM | 4.8 | 0.4% | Oct 25, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Print, PDF, Email by PrintFriendly plugin <= 5.5.1 ver... |
| CVE-2023-23767 | — | — | — | Oct 25, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by GitHub as it was issued in error. |
| CVE-2023-20273 | HIGH | 7.2 | 89.6% | Oct 25, 2023 | A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject c... |
| CVE-2023-1356 | MEDIUM | 6.1 | 0.4% | Oct 25, 2023 | Reflected cross-site scripting in the StudentSearch component in IDAttend’s IDWeb application 3.1.052 and earlier allows... |
| CVE-2023-46059 | MEDIUM | 4.8 | 0.6% | Oct 24, 2023 | Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary c... |
| CVE-2023-46058 | MEDIUM | 4.8 | 0.6% | Oct 24, 2023 | Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary c... |
| CVE-2023-33517 | HIGH | 7.5 | 0.7% | Oct 23, 2023 | carRental 1.0 is vulnerable to Incorrect Access Control (Arbitrary File Read on the Back-end System). |
| CVE-2023-5633 | HIGH | 7.8 | 0.3% | Oct 23, 2023 | The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in... |
| CVE-2023-45998 | MEDIUM | 5.4 | 0.3% | Oct 23, 2023 | kodbox 1.44 is vulnerable to Cross Site Scripting (XSS). Customizing global HTML results in storing XSS. |
| CVE-2023-44760 | MEDIUM | 4.8 | 0.6% | Oct 23, 2023 | Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete CMS v.9.2.1 allow an attacker to execute arbitrary code ... |
| CVE-2023-43358 | MEDIUM | 5.4 | 0.5% | Oct 23, 2023 | Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cra... |
| CVE-2023-45966 | HIGH | 7.5 | 0.6% | Oct 23, 2023 | umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery (SSRF) vulnerability. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now