2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-32785 | — | — | — | Oct 20, 2023 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-36189. Reason: This record is a duplicate of CVE-2023-... |
| CVE-2023-5682 | CRITICAL | 9.8 | 0.7% | Oct 20, 2023 | A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of ... |
| CVE-2023-5681 | HIGH | 7.2 | 0.6% | Oct 20, 2023 | A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This ... |
| CVE-2023-37824 | CRITICAL | 9.8 | 0.5% | Oct 20, 2023 | Sitolog sitologapplicationconnect v7.8.a and before was discovered to contain a SQL injection vulnerability via the comp... |
| CVE-2023-46117 | HIGH | 8.8 | 0.8% | Oct 20, 2023 | reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform sc... |
| CVE-2023-45805 | HIGH | 7.8 | 0.5% | Oct 20, 2023 | pdm is a Python package and dependency manager supporting the latest PEP standards. It's possible to craft a malicious `... |
| CVE-2023-5690 | HIGH | 8.8 | 0.4% | Oct 20, 2023 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2. |
| CVE-2023-5689 | MEDIUM | 5.4 | 0.5% | Oct 20, 2023 | Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2. |
| CVE-2023-5688 | MEDIUM | 5.4 | 0.6% | Oct 20, 2023 | Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2. |
| CVE-2023-5687 | HIGH | 8.8 | 0.3% | Oct 20, 2023 | Cross-Site Request Forgery (CSRF) in GitHub repository mosparo/mosparo prior to 1.0.3. |
| CVE-2023-5686 | HIGH | 8.8 | 0.8% | Oct 20, 2023 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. |
| CVE-2023-23373 | HIGH | 8.8 | 1.1% | Oct 20, 2023 | An OS command injection vulnerability has been reported to affect QUSBCam2. If exploited, the vulnerability could allow ... |
| CVE-2023-3965 | MEDIUM | 6.1 | 0.4% | Oct 20, 2023 | The nsc theme for WordPress is vulnerable to Reflected Cross-Site Scripting via prototype pollution in versions up to, a... |
| CVE-2023-3962 | MEDIUM | 6.1 | 0.4% | Oct 20, 2023 | The Winters theme for WordPress is vulnerable to Reflected Cross-Site Scripting via prototype pollution in versions up t... |
| CVE-2023-3933 | MEDIUM | 6.1 | 0.4% | Oct 20, 2023 | The Your Journey theme for WordPress is vulnerable to Reflected Cross-Site Scripting via prototype pollution in versions... |
| CVE-2023-3487 | HIGH | 7.8 | 0.2% | Oct 20, 2023 | An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when readi... |
| CVE-2023-46287 | MEDIUM | 6.1 | 0.5% | Oct 20, 2023 | XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php. |
| CVE-2023-5618 | MEDIUM | 5.4 | 0.4% | Oct 20, 2023 | The Modern Footnotes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in ver... |
| CVE-2023-44483 | MEDIUM | 6.5 | 1.2% | Oct 20, 2023 | All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, a... |
| CVE-2023-44256 | MEDIUM | 6.5 | 1.2% | Oct 20, 2023 | A server-side request forgery vulnerability [CWE-918] in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2... |
| CVE-2023-34045 | HIGH | 7.8 | 0.2% | Oct 20, 2023 | VMware Fusion(13.x prior to 13.5) contains a local privilege escalation vulnerability that occurs during installation f... |
| CVE-2023-34046 | HIGH | 7 | 0.1% | Oct 20, 2023 | VMware Fusion(13.x prior to 13.5) contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during instal... |
| CVE-2023-34044 | MEDIUM | 6 | 0.2% | Oct 20, 2023 | VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerability that... |
| CVE-2023-5656 | — | — | — | Oct 20, 2023 | Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-5533. Reason: This record is a reservatio... |
| CVE-2023-5615 | MEDIUM | 5.4 | 0.4% | Oct 20, 2023 | The Skype Legacy Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'skype-statu... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now