2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-45871HIGH7.5An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3....
CVE-2023-5585MEDIUM6.1A vulnerability was found in SourceCodester Online Motorcycle Rental System 1.0. It has been declared as problematic. Th...
CVE-2023-45863MEDIUM6.4An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a r...
CVE-2023-45862MEDIUM5.5An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before ...
CVE-2023-40367MEDIUM5.4IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri...
CVE-2023-30994HIGH7.5IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly ...
CVE-2023-45176MEDIUM5.5IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through 1...
CVE-2023-35024HIGH7.6IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21...
CVE-2023-5582MEDIUM5.4A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0. This issue affects some unknown pr...
CVE-2023-5581MEDIUM6.1A vulnerability classified as problematic was found in SourceCodester Medicine Tracker System 1.0. This vulnerability af...
CVE-2023-5580CRITICAL9.8A vulnerability classified as critical has been found in SourceCodester Library System 1.0. This affects an unknown part...
CVE-2023-5579MEDIUM6.5A vulnerability was found in yhz66 Sandbox 6.1.0. It has been rated as problematic. Affected by this issue is some unkno...
CVE-2023-1259MEDIUM5.5The Hotjar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the hotjar_site_id in versions up to, a...
CVE-2023-5578MEDIUM5.4A vulnerability was detected in Portábilis i-Educar up to 2.7.5. Affected is an unknown function of the file \intranet\a...
CVE-2023-45348MEDIUM4.3Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticated user to retrieve s...
CVE-2023-42792MEDIUM6.5Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with lim...
CVE-2023-42780MEDIUM6.5Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to...
CVE-2023-42663MEDIUM6.5Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specifi...
CVE-2023-45856CRITICAL9.8qdPM 9.2 allows remote code execution by using the Add Attachments feature of Edit Project to upload a .php file to the ...
CVE-2023-45855HIGH7.5qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI.
CVE-2023-44037HIGH7.5An issue in ZPE Systems, Inc Nodegrid OS v.5.8.10 thru v.5.8.13 and v.5.10.3 thru v.5.10.5 allows a remote attacker to o...
CVE-2023-26155CRITICAL9.8All versions of the package node-qpdf are vulnerable to Command Injection such that the package-exported method encrypt(...
CVE-2023-30154CRITICAL9.8Multiple improper neutralization of SQL parameters in module AfterMail (aftermailpresta) for PrestaShop, before version ...
CVE-2023-30148MEDIUM5.4Multiple Stored Cross Site Scripting (XSS) vulnerabilities in Opart opartmultihtmlblock before version 2.0.12 and Opart ...
CVE-2023-45853CRITICAL9.8MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 ...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now