2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45952 | CRITICAL | 9.8 | 0.8% | Oct 17, 2023 | An arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage v1.7.0 allows attackers to execute ... |
| CVE-2023-45951 | CRITICAL | 9.8 | 0.7% | Oct 17, 2023 | lylme_spage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php. |
| CVE-2023-45803 | MEDIUM | 4.2 | 0.5% | Oct 17, 2023 | urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HTTP request body when... |
| CVE-2023-27133 | CRITICAL | 9.8 | 0.8% | Oct 17, 2023 | TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILES(X86)%\TSplus-Rem... |
| CVE-2023-27132 | CRITICAL | 9.8 | 0.9% | Oct 17, 2023 | TSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the HTML source code for the secure si... |
| CVE-2023-37537 | HIGH | 7.8 | 0.2% | Oct 17, 2023 | An unquoted service path vulnerability in HCL AppScan Presence, deployed as a Windows service in HCL AppScan on Cloud (A... |
| CVE-2023-45907 | HIGH | 8.8 | 0.3% | Oct 17, 2023 | Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/delet... |
| CVE-2023-45906 | HIGH | 8.8 | 0.3% | Oct 17, 2023 | Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/user/add. |
| CVE-2023-45905 | HIGH | 8.8 | 0.3% | Oct 17, 2023 | Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/add. |
| CVE-2023-45904 | HIGH | 8.8 | 0.3% | Oct 17, 2023 | Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /variable/update. |
| CVE-2023-45903 | HIGH | 8.8 | 0.3% | Oct 17, 2023 | Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/label/delete. |
| CVE-2023-45902 | HIGH | 8.8 | 0.3% | Oct 17, 2023 | Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/del... |
| CVE-2023-45901 | HIGH | 8.8 | 0.3% | Oct 17, 2023 | Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin\/category\/add... |
| CVE-2023-43959 | HIGH | 8.8 | 1.6% | Oct 17, 2023 | An issue in YeaLinkSIP-T19P-E2 v.53.84.0.15 allows a remote privileged attacker to execute arbitrary code via a crafted ... |
| CVE-2023-20598 | HIGH | 7.8 | 0.5% | Oct 17, 2023 | An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an I... |
| CVE-2023-44824 | HIGH | 7.8 | 0.3% | Oct 17, 2023 | An issue in Expense Management System v.1.0 allows a local attacker to execute arbitrary code via a crafted file uploade... |
| CVE-2023-43777 | MEDIUM | 6.5 | 0.3% | Oct 17, 2023 | Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining param... |
| CVE-2023-43776 | MEDIUM | 6.6 | 0.1% | Oct 17, 2023 | Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unautho... |
| CVE-2023-42627 | MEDIUM | 5.4 | 2.3% | Oct 17, 2023 | Multiple stored cross-site scripting (XSS) vulnerabilities in the Commerce module in Liferay Portal 7.3.5 through 7.4.3.... |
| CVE-2023-45007 | MEDIUM | 6.1 | 0.3% | Oct 17, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Fotomoto plugin <= 1.2.8 versions. |
| CVE-2023-45006 | MEDIUM | 6.1 | 0.3% | Oct 17, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ByConsole WooODT Lite – WooCommerce Order Delivery or Pick... |
| CVE-2023-45004 | MEDIUM | 6.1 | 0.3% | Oct 17, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wp3sixty Woo Custom Emails plugin <= 2.2 versions. |
| CVE-2023-42628 | MEDIUM | 5.4 | 2.2% | Oct 17, 2023 | Stored cross-site scripting (XSS) vulnerability in the Wiki widget in Liferay Portal 7.1.0 through 7.4.3.87, and Liferay... |
| CVE-2023-39902 | HIGH | 7.8 | 0.1% | Oct 17, 2023 | A software vulnerability has been identified in the U-Boot Secondary Program Loader (SPL) before 2023.07 on select NXP i... |
| CVE-2023-45010 | MEDIUM | 4.8 | 0.3% | Oct 17, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alex MacArthur Complete Open Graph plugin <= 3.4.5 ver... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now