2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-38193 | HIGH | 8.8 | 1.3% | Oct 21, 2023 | An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Remote Code Execution via a crafted sendmail command l... |
| CVE-2023-38192 | MEDIUM | 6.1 | 1.1% | Oct 21, 2023 | An issue was discovered in SuperWebMailer 9.00.0.01710. It allows superadmincreate.php XSS via crafted incorrect passwor... |
| CVE-2023-38190 | HIGH | 8.8 | 0.7% | Oct 21, 2023 | An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Export SQL Injection via the size parameter. |
| CVE-2023-45682 | HIGH | 7.1 | 0.6% | Oct 21, 2023 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of boun... |
| CVE-2023-45681 | HIGH | 7.8 | 0.5% | Oct 21, 2023 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory writ... |
| CVE-2023-45680 | MEDIUM | 5.5 | 0.5% | Oct 21, 2023 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allo... |
| CVE-2023-45679 | HIGH | 7.8 | 0.5% | Oct 21, 2023 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allo... |
| CVE-2023-45678 | HIGH | 7.8 | 0.7% | Oct 21, 2023 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of buff... |
| CVE-2023-45677 | HIGH | 7.8 | 0.5% | Oct 21, 2023 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of boun... |
| CVE-2023-45676 | HIGH | 7.8 | 0.5% | Oct 21, 2023 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of boun... |
| CVE-2023-45675 | HIGH | 7.8 | 0.8% | Oct 21, 2023 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of boun... |
| CVE-2023-45667 | HIGH | 7.5 | 1.1% | Oct 21, 2023 | stb_image is a single file MIT licensed library for processing images. If `stbi__load_gif_main` in `stbi_load_gif_from_... |
| CVE-2023-45666 | CRITICAL | 9.8 | 1.0% | Oct 21, 2023 | stb_image is a single file MIT licensed library for processing images. It may look like `stbi__load_gif_main` doesn’t g... |
| CVE-2023-45664 | HIGH | 8.8 | 0.9% | Oct 21, 2023 | stb_image is a single file MIT licensed library for processing images. A crafted image file can trigger `stbi__load_gif_... |
| CVE-2023-45663 | MEDIUM | 5.5 | 0.7% | Oct 21, 2023 | stb_image is a single file MIT licensed library for processing images. The stbi__getn function reads a specified number ... |
| CVE-2023-45662 | HIGH | 8.1 | 0.7% | Oct 21, 2023 | stb_image is a single file MIT licensed library for processing images. When `stbi_set_flip_vertically_on_load` is set to... |
| CVE-2023-45661 | HIGH | 7.1 | 0.6% | Oct 21, 2023 | stb_image is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds me... |
| CVE-2023-43346 | MEDIUM | 5.4 | 0.5% | Oct 20, 2023 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary co... |
| CVE-2023-43357 | MEDIUM | 5.4 | 0.5% | Oct 20, 2023 | Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cra... |
| CVE-2023-43356 | MEDIUM | 5.4 | 0.5% | Oct 20, 2023 | Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cra... |
| CVE-2023-43355 | MEDIUM | 5.4 | 0.5% | Oct 20, 2023 | Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cra... |
| CVE-2023-43354 | MEDIUM | 5.4 | 0.5% | Oct 20, 2023 | Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cra... |
| CVE-2023-43353 | MEDIUM | 5.4 | 0.5% | Oct 20, 2023 | Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cra... |
| CVE-2023-38191 | MEDIUM | 6.1 | 0.5% | Oct 20, 2023 | An issue was discovered in SuperWebMailer 9.00.0.01710. It allows spamtest_external.php XSS via a crafted filename. |
| CVE-2023-32786 | HIGH | 7.5 | 0.6% | Oct 20, 2023 | In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrar... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now