2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-37503 | CRITICAL | 9.8 | 0.5% | Oct 19, 2023 | HCL Compass is vulnerable to insecure password requirements. An attacker could easily guess the password and gain access... |
| CVE-2023-5639 | MEDIUM | 5.4 | 0.4% | Oct 19, 2023 | The Team Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tmfshortcode' shor... |
| CVE-2023-5638 | MEDIUM | 5.4 | 0.5% | Oct 19, 2023 | The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wcj_image' shortcode ... |
| CVE-2023-5336 | MEDIUM | 6.5 | 0.6% | Oct 19, 2023 | The iPanorama 360 – WordPress Virtual Tour Builder plugin for WordPress is vulnerable to SQL Injection via the plugin's ... |
| CVE-2023-4645 | MEDIUM | 5.3 | 0.6% | Oct 19, 2023 | The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 v... |
| CVE-2023-37504 | MEDIUM | 6.5 | 0.3% | Oct 19, 2023 | HCL Compass is vulnerable to failure to invalidate sessions. The application does not invalidate authenticated sessions ... |
| CVE-2023-36857 | MEDIUM | 6.5 | 0.3% | Oct 19, 2023 | Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a replay vulnerability which could allo... |
| CVE-2023-34441 | HIGH | 8.2 | 0.2% | Oct 19, 2023 | Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a cleartext transmission vulnerability ... |
| CVE-2023-34437 | HIGH | 7.5 | 0.5% | Oct 19, 2023 | Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a vulnerability in their password retrieva... |
| CVE-2023-45909 | MEDIUM | 6.1 | 0.3% | Oct 18, 2023 | zzzcms v2.2.0 was discovered to contain an open redirect vulnerability. |
| CVE-2023-37502 | HIGH | 8.8 | 0.5% | Oct 18, 2023 | HCL Compass is vulnerable to lack of file upload security. An attacker could upload files containing active code that c... |
| CVE-2023-45958 | MEDIUM | 6.1 | 0.3% | Oct 18, 2023 | Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the backup_pa... |
| CVE-2023-45814 | MEDIUM | 5.3 | 0.4% | Oct 18, 2023 | Bunkum is an open-source protocol-agnostic request server for custom game servers. First, a little bit of background. So... |
| CVE-2023-45812 | HIGH | 7.5 | 0.7% | Oct 18, 2023 | The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that us... |
| CVE-2023-45146 | CRITICAL | 10 | 1.0% | Oct 18, 2023 | XXL-RPC is a high performance, distributed RPC framework. With it, a TCP server can be set up using the Netty framework ... |
| CVE-2023-43801 | HIGH | 7.1 | 0.3% | Oct 18, 2023 | Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/v2/pkgs/... |
| CVE-2023-43800 | HIGH | 7.8 | 0.2% | Oct 18, 2023 | Arduino Create Agent is a package to help manage Arduino development. The vulnerability affects the endpoint `/v2/pkgs/t... |
| CVE-2023-45813 | HIGH | 7.5 | 0.8% | Oct 18, 2023 | Torbot is an open source tor network intelligence tool. In affected versions the `torbot.modules.validators.validate_lin... |
| CVE-2023-45145 | LOW | 3.6 | 0.4% | Oct 18, 2023 | Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusti... |
| CVE-2023-43803 | HIGH | 7.1 | 0.3% | Oct 18, 2023 | Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/v2/pkgs/... |
| CVE-2023-43802 | HIGH | 7.8 | 0.4% | Oct 18, 2023 | Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/upload` ... |
| CVE-2023-4601 | CRITICAL | 9.8 | 0.6% | Oct 18, 2023 | A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosur... |
| CVE-2023-35663 | HIGH | 7.5 | 0.3% | Oct 18, 2023 | In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This coul... |
| CVE-2023-35656 | HIGH | 7.5 | 0.3% | Oct 18, 2023 | In multiple functions of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds c... |
| CVE-2023-26300 | HIGH | 7.8 | 0.2% | Oct 18, 2023 | A potential security vulnerability has been identified in the system BIOS for certain HP PC products which might allow e... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now