2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-41895 | CRITICAL | 9.6 | 0.7% | Oct 19, 2023 | Home assistant is an open source home automation. The Home Assistant login page allows users to use their local Home Ass... |
| CVE-2023-45819 | MEDIUM | 6.1 | 0.6% | Oct 19, 2023 | TinyMCE is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in TinyMCE’s Notif... |
| CVE-2023-45818 | MEDIUM | 6.1 | 0.6% | Oct 19, 2023 | TinyMCE is an open source rich text editor. A mutation cross-site scripting (mXSS) vulnerability was discovered in TinyM... |
| CVE-2023-45815 | MEDIUM | 5.4 | 0.4% | Oct 19, 2023 | ArchiveBox is an open source self-hosted web archiving system. Any users who are using the `wget` extractor and view the... |
| CVE-2023-45280 | MEDIUM | 5.4 | 0.5% | Oct 19, 2023 | Yamcs 5.8.6 allows XSS (issue 2 of 2). It comes with a Bucket as its primary storage mechanism. Buckets allow for the up... |
| CVE-2023-45279 | MEDIUM | 5.4 | 0.4% | Oct 19, 2023 | Yamcs 5.8.6 allows XSS (issue 1 of 2). It comes with a Bucket as its primary storage mechanism. Buckets allow for the up... |
| CVE-2023-44690 | HIGH | 7.5 | 0.2% | Oct 19, 2023 | Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py |
| CVE-2023-43875 | MEDIUM | 6.1 | 0.8% | Oct 19, 2023 | Multiple Cross-Site Scripting (XSS) vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to ex... |
| CVE-2023-43359 | MEDIUM | 5.4 | 0.5% | Oct 19, 2023 | Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cra... |
| CVE-2023-43344 | MEDIUM | 5.4 | 0.6% | Oct 19, 2023 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary co... |
| CVE-2023-43342 | MEDIUM | 5.4 | 0.5% | Oct 19, 2023 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary co... |
| CVE-2023-43341 | MEDIUM | 6.1 | 0.6% | Oct 19, 2023 | Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via ... |
| CVE-2023-45823 | HIGH | 7.5 | 0.6% | Oct 19, 2023 | Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for... |
| CVE-2023-45822 | MEDIUM | 5.3 | 0.5% | Oct 19, 2023 | Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for... |
| CVE-2023-45821 | MEDIUM | 6.3 | 0.2% | Oct 19, 2023 | Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for... |
| CVE-2023-30132 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptog... |
| CVE-2023-30131 | CRITICAL | 9.8 | 0.8% | Oct 19, 2023 | An issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands, gain escalated privilege,... |
| CVE-2023-27795 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static XOR key. |
| CVE-2023-27793 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges via weak ... |
| CVE-2023-27792 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges via lack of permissions ... |
| CVE-2023-45376 | CRITICAL | 9.8 | 0.7% | Oct 19, 2023 | In the module "Carousels Pack - Instagram, Products, Brands, Supplier" (hicarouselspack) for PrestaShop up to version 1.... |
| CVE-2023-43492 | CRITICAL | 9.8 | 0.9% | Oct 19, 2023 | In Weintek's cMT3000 HMI Web CGI device, the cgi-bin codesys.cgi contains a stack-based buffer overflow, which ... |
| CVE-2023-40145 | HIGH | 8.8 | 1.2% | Oct 19, 2023 | In Weintek's cMT3000 HMI Web CGI device, an anonymous attacker can execute arbitrary commands after login to th... |
| CVE-2023-38584 | CRITICAL | 9.8 | 1.1% | Oct 19, 2023 | In Weintek's cMT3000 HMI Web CGI device, the cgi-bin command_wb.cgi contains a stack-based buffer overflow, which... |
| CVE-2023-30633 | MEDIUM | 5.3 | 0.2% | Oct 19, 2023 | An issue was discovered in TrEEConfigDriver in Insyde InsydeH2O with kernel 5.0 through 5.5. It can report false TPM PCR... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now