2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-2325 | MEDIUM | 5.4 | 0.4% | Oct 20, 2023 | Stored XSS Vulnerability in M-Files Classic Web versions before 23.10 and LTS Service Release Versions before 23.2 LTS S... |
| CVE-2023-40361 | HIGH | 7.8 | 0.3% | Oct 20, 2023 | SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker ... |
| CVE-2023-5668 | MEDIUM | 5.4 | 0.3% | Oct 20, 2023 | The WhatsApp Share Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'whatsapp' ... |
| CVE-2023-5614 | MEDIUM | 5.4 | 0.4% | Oct 20, 2023 | The Theme Switcha plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'theme_switcha_list... |
| CVE-2023-5613 | MEDIUM | 5.4 | 0.4% | Oct 20, 2023 | The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tpsscode' sho... |
| CVE-2023-46277 | HIGH | 7.8 | 0.3% | Oct 20, 2023 | please (aka pleaser) through 0.5.4 allows privilege escalation through the TIOCSTI and/or TIOCLINUX ioctl. (If both TIOC... |
| CVE-2023-34052 | HIGH | 7.8 | 0.2% | Oct 20, 2023 | VMware Aria Operations for Logs contains a deserialization vulnerability. A malicious actor with non-administrative acce... |
| CVE-2023-34051 | CRITICAL | 9.8 | 44.7% | Oct 20, 2023 | VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can... |
| CVE-2023-46267 | — | — | — | Oct 20, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-5631. Reason: This candidate is a duplicate of C... |
| CVE-2023-45471 | MEDIUM | 5.4 | 0.4% | Oct 20, 2023 | The QAD Search Server is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to, and including, 1.0.0.315 due... |
| CVE-2023-45394 | MEDIUM | 5.4 | 0.4% | Oct 20, 2023 | Stored Cross-Site Scripting (XSS) vulnerability in the Company field in the "Request a Quote" Section of Small CRM v3.0 ... |
| CVE-2023-5655 | — | — | — | Oct 20, 2023 | Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-5534. Reason: This record is a reservatio... |
| CVE-2023-5647 | — | — | — | Oct 20, 2023 | Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-5212. Reason: This record is a reservatio... |
| CVE-2023-5646 | — | — | — | Oct 20, 2023 | Rejected reason: ** REJECT **DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-5241. Reason: This record is a reservatio... |
| CVE-2023-46115 | MEDIUM | 5.5 | 0.2% | Oct 20, 2023 | Tauri is a framework for building binaries for all major desktop platforms. This advisory is not describing a vulnerabil... |
| CVE-2023-41894 | MEDIUM | 5.3 | 0.4% | Oct 20, 2023 | Home assistant is an open source home automation. The assessment verified that webhooks available in the webhook compone... |
| CVE-2023-41893 | MEDIUM | 5.4 | 0.4% | Oct 20, 2023 | Home assistant is an open source home automation. The audit team’s analyses confirmed that the `redirect_uri` and `clien... |
| CVE-2023-39731 | MEDIUM | 5.3 | 0.4% | Oct 20, 2023 | The leakage of the client secret in Kaibutsunosato v13.6.1 allows attackers to obtain the channel access token and send ... |
| CVE-2023-44385 | HIGH | 8.8 | 0.3% | Oct 19, 2023 | The Home Assistant Companion for iOS and macOS app up to version 2023.4 are vulnerable to Client-Side Request Forgery. A... |
| CVE-2023-43345 | HIGH | 8.6 | 0.4% | Oct 19, 2023 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary co... |
| CVE-2023-43340 | MEDIUM | 5.2 | 0.5% | Oct 19, 2023 | Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a cr... |
| CVE-2023-41899 | HIGH | 7.2 | 0.5% | Oct 19, 2023 | Home assistant is an open source home automation. In affected versions the `hassio.addon_stdin` is vulnerable to a parti... |
| CVE-2023-41898 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | Home assistant is an open source home automation. The Home Assistant Companion for Android app up to version 2023.8.2 is... |
| CVE-2023-41897 | CRITICAL | 9.6 | 0.9% | Oct 19, 2023 | Home assistant is an open source home automation. Home Assistant server does not set any HTTP security headers, includin... |
| CVE-2023-41896 | CRITICAL | 9 | 0.3% | Oct 19, 2023 | Home assistant is an open source home automation. Whilst auditing the frontend code to identify hidden parameters, Cure5... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now