2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45660 | MEDIUM | 4.3 | 0.6% | Oct 16, 2023 | Nextcloud mail is an email app for the Nextcloud home server platform. In affected versions a missing check of origin, t... |
| CVE-2023-45151 | HIGH | 8.8 | 0.5% | Oct 16, 2023 | Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext... |
| CVE-2023-45148 | MEDIUM | 4.3 | 0.7% | Oct 16, 2023 | Nextcloud is an open source home cloud server. When Memcached is used as `memcache.distributed` the rate limiting in Nex... |
| CVE-2023-43120 | HIGH | 8.8 | 0.7% | Oct 16, 2023 | An issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and before 31.7.1 allows attac... |
| CVE-2023-40180 | HIGH | 7.5 | 0.9% | Oct 16, 2023 | silverstripe-graphql is a package which serves Silverstripe data in GraphQL representations. An attacker could use a re... |
| CVE-2023-45985 | HIGH | 7.5 | 0.7% | Oct 16, 2023 | TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack ove... |
| CVE-2023-45984 | CRITICAL | 9.8 | 0.7% | Oct 16, 2023 | TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack over... |
| CVE-2023-45690 | MEDIUM | 4.9 | 1.5% | Oct 16, 2023 | Default file permissions on South River Technologies' Titan MFT and Titan SFTP servers on Linux allows a user that's aut... |
| CVE-2023-45689 | MEDIUM | 6.5 | 0.8% | Oct 16, 2023 | Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux al... |
| CVE-2023-45688 | MEDIUM | 4.3 | 0.6% | Oct 16, 2023 | Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an auth... |
| CVE-2023-45687 | HIGH | 8.8 | 1.2% | Oct 16, 2023 | A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Windows allo... |
| CVE-2023-45686 | HIGH | 7.2 | 1.0% | Oct 16, 2023 | Insufficient path validation when writing a file via WebDAV in South River Technologies' Titan MFT and Titan SFTP server... |
| CVE-2023-45685 | CRITICAL | 9.1 | 1.4% | Oct 16, 2023 | Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers... |
| CVE-2023-20198 | CRITICAL | 10 | 99.6% | Oct 16, 2023 | Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS... |
| CVE-2023-46087 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin <= 1.4.14.3 versions. |
| CVE-2023-5575 | MEDIUM | 6.5 | 0.6% | Oct 16, 2023 | Improper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and earlier allows an attacker... |
| CVE-2023-46066 | MEDIUM | 5.4 | 0.3% | Oct 16, 2023 | Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Codedrafty Mediabay – Media Library Folders plugin <=... |
| CVE-2023-44987 | MEDIUM | 4.8 | 0.3% | Oct 16, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Timely - Appointment software Timely Booking Button pl... |
| CVE-2023-45836 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in XYDAC Ultimate Taxonomy Manager plugin <= 2.0 versions. |
| CVE-2023-45831 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Pixelative, Mohsin Rafique AMP WP – Google AMP For WordPress plugin <... |
| CVE-2023-45763 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Taggbox plugin <= 2.9 versions. |
| CVE-2023-45753 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Gilles Dumas which template file plugin <= 4.6.0 versions. |
| CVE-2023-45752 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in 10 Quality Post Gallery plugin <= 2.3.12 versions. |
| CVE-2023-45749 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Alexey Golubnichenko AGP Font Awesome Collection plugin <= 3.2.4 vers... |
| CVE-2023-45748 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in MailMunch MailChimp Forms by MailMunch plugin <= 3.1.4 versions. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now