2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-27791 | HIGH | 8.1 | 0.7% | Oct 19, 2023 | An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG. |
| CVE-2023-45992 | CRITICAL | 9.6 | 0.6% | Oct 19, 2023 | A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could... |
| CVE-2023-45826 | MEDIUM | 6.5 | 1.9% | Oct 19, 2023 | Leantime is an open source project management system. A 'userId' variable in `app/domain/files/repositories/class.files.... |
| CVE-2023-45825 | MEDIUM | 5.5 | 0.2% | Oct 19, 2023 | ydb-go-sdk is a pure Go native and database/sql driver for the YDB platform. Since ydb-go-sdk v3.48.6 if you use a custo... |
| CVE-2023-45820 | MEDIUM | 6.5 | 0.7% | Oct 19, 2023 | Directus is a real-time API and App dashboard for managing SQL database content. In affected versions any Directus insta... |
| CVE-2023-45809 | LOW | 2.7 | 0.5% | Oct 19, 2023 | Wagtail is an open source content management system built on Django. A user with a limited-permission editor account for... |
| CVE-2023-45381 | CRITICAL | 9.8 | 0.5% | Oct 19, 2023 | In the module "Creative Popup" (creativepopup) up to version 1.6.9 from WebshopWorks for PrestaShop, a guest can perform... |
| CVE-2023-43986 | CRITICAL | 9.8 | 0.5% | Oct 19, 2023 | DM Concept configurator before v4.9.4 was discovered to contain a SQL injection vulnerability via the component Configur... |
| CVE-2023-42666 | MEDIUM | 5.3 | 0.4% | Oct 19, 2023 | The affected product is vulnerable to an exposure of sensitive information to an unauthorized actor vulnera... |
| CVE-2023-42435 | HIGH | 8.8 | 0.2% | Oct 19, 2023 | The affected product is vulnerable to a cross-site request forgery vulnerability, which may allow an attacker to pe... |
| CVE-2023-41089 | HIGH | 8.8 | 0.5% | Oct 19, 2023 | The affected product is vulnerable to an improper authentication vulnerability, which may allow an attacker to ... |
| CVE-2023-41088 | MEDIUM | 6.5 | 0.2% | Oct 19, 2023 | The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which ... |
| CVE-2023-40153 | MEDIUM | 6.1 | 0.3% | Oct 19, 2023 | The affected product is vulnerable to a cross-site scripting vulnerability, which could allow an attacker to access the... |
| CVE-2023-5059 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | Santesoft Sante FFT Imaging lacks proper validation of user-supplied data when parsing DICOM files. This could lead... |
| CVE-2023-39431 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an ... |
| CVE-2023-38128 | HIGH | 7.8 | 0.7% | Oct 19, 2023 | An out-of-bounds write vulnerability exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. A specia... |
| CVE-2023-38127 | HIGH | 7.8 | 0.6% | Oct 19, 2023 | An integer overflow exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. A specially crafted docum... |
| CVE-2023-35986 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to a sta... |
| CVE-2023-34366 | HIGH | 7.8 | 0.6% | Oct 19, 2023 | A use-after-free vulnerability exists in the Figure stream parsing functionality of Ichitaro 2023 1.0.1.59372. A special... |
| CVE-2023-45665 | — | — | — | Oct 19, 2023 | Rejected reason: This CVE is a duplicate of another CVE. |
| CVE-2023-45281 | MEDIUM | 6.1 | 0.4% | Oct 19, 2023 | An issue in Yamcs 5.8.6 allows attackers to obtain the session cookie via upload of crafted HTML file. |
| CVE-2023-45278 | CRITICAL | 9.1 | 1.6% | Oct 19, 2023 | Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbi... |
| CVE-2023-45277 | HIGH | 7.5 | 1.0% | Oct 19, 2023 | Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functionality of th... |
| CVE-2023-35126 | HIGH | 7.8 | 0.5% | Oct 19, 2023 | An out-of-bounds write vulnerability exists within the parsers for both the "DocumentViewStyles" and "DocumentEditStyles... |
| CVE-2023-46033 | MEDIUM | 6.8 | 0.3% | Oct 19, 2023 | D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now