2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45912 | HIGH | 7.5 | 0.6% | Oct 18, 2023 | WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing unauthenticated attackers ... |
| CVE-2023-45911 | CRITICAL | 9.8 | 0.8% | Oct 18, 2023 | An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user wi... |
| CVE-2023-30911 | HIGH | 7.5 | 0.5% | Oct 18, 2023 | HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service. |
| CVE-2023-20261 | MEDIUM | 6.5 | 0.5% | Oct 18, 2023 | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve... |
| CVE-2023-5642 | CRITICAL | 9.8 | 16.7% | Oct 18, 2023 | Advantech R-SeeNet v2.4.23 allows an unauthenticated remote attacker to read from and write to the snmpmon.ini file, whi... |
| CVE-2023-46009 | HIGH | 7.8 | 0.3% | Oct 18, 2023 | gifsicle-1.94 was found to have a floating point exception (FPE) vulnerability via resize_stream at src/xform.c. |
| CVE-2023-45383 | HIGH | 7.5 | 0.6% | Oct 18, 2023 | In the module "SoNice etiquetage" (sonice_etiquetage) up to version 2.5.9 from Common-Services for PrestaShop, a guest c... |
| CVE-2023-43250 | HIGH | 7.8 | 0.6% | Oct 18, 2023 | XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow. There is a User Mode Write AV via a crafted image file. Attacker... |
| CVE-2023-5631 | MEDIUM | 5.4 | 70.9% | Oct 18, 2023 | Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a ... |
| CVE-2023-45632 | MEDIUM | 6.1 | 0.3% | Oct 18, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WebDorado SpiderVPlayer plugin <= 1.5.22 versions. |
| CVE-2023-45630 | MEDIUM | 6.1 | 0.3% | Oct 18, 2023 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails pl... |
| CVE-2023-45628 | MEDIUM | 5.4 | 0.3% | Oct 18, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in QROkes QR Twitter Widget plugin <= 0.2.3 version... |
| CVE-2023-45607 | MEDIUM | 5.4 | 0.3% | Oct 18, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Hector Cabrera WordPress Popular Posts plugin <=... |
| CVE-2023-45604 | MEDIUM | 4.8 | 0.3% | Oct 18, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Scott Reilly Get Custom Field Values plugin <= 4.0.1 v... |
| CVE-2023-45602 | MEDIUM | 6.1 | 0.3% | Oct 18, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Shopfiles Ltd Ebook Store plugin <= 5.785 versions. |
| CVE-2023-30781 | MEDIUM | 6.1 | 0.3% | Oct 18, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Theme Blvd Tweeple plugin <= 0.9.5 versions. |
| CVE-2023-46007 | CRITICAL | 9.8 | 0.7% | Oct 18, 2023 | Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_staff.php... |
| CVE-2023-46006 | CRITICAL | 9.8 | 0.7% | Oct 18, 2023 | Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_user.php. |
| CVE-2023-46005 | CRITICAL | 9.8 | 0.7% | Oct 18, 2023 | Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_branch.ph... |
| CVE-2023-46004 | HIGH | 7.2 | 0.7% | Oct 18, 2023 | Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the update_user function. |
| CVE-2023-45608 | MEDIUM | 5.4 | 0.3% | Oct 18, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Nicola Modugno Smart Cookie Kit plugin <= 2.3.1 ... |
| CVE-2023-45073 | MEDIUM | 4.8 | 0.3% | Oct 18, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Michael Koch Mendeley Plugin plugin <= 1.3.2 versions. |
| CVE-2023-45072 | MEDIUM | 4.8 | 0.3% | Oct 18, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kardi Order auto complete for WooCommerce plugin <= 1.... |
| CVE-2023-45071 | MEDIUM | 6.1 | 0.3% | Oct 18, 2023 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly... |
| CVE-2023-45070 | MEDIUM | 6.1 | 0.4% | Oct 18, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Frien... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now