2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-41680 | MEDIUM | 6.1 | 0.5% | Oct 13, 2023 | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSa... |
| CVE-2023-33303 | HIGH | 8.1 | 0.4% | Oct 13, 2023 | A insufficient session expiration in Fortinet FortiEDR version 5.0.0 through 5.0.1 allows attacker to execute unauthoriz... |
| CVE-2023-45393 | MEDIUM | 6.5 | 0.5% | Oct 13, 2023 | An indirect object reference (IDOR) in GRANDING UTime Master v9.0.7-Build:Apr 4,2023 allows authenticated attackers to a... |
| CVE-2023-45391 | MEDIUM | 4.8 | 0.4% | Oct 13, 2023 | A stored cross-site scripting (XSS) vulnerability in the Create A New Employee function of Granding UTime Master v9.0.7-... |
| CVE-2023-45109 | HIGH | 8.8 | 0.2% | Oct 13, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in ZAKSTAN WhitePage plugin <= 1.1.5 versions. |
| CVE-2023-5240 | HIGH | 7.5 | 0.6% | Oct 13, 2023 | Improper access control in PAM propagation scripts in Devolutions Server 2023.2.8.0 and ealier allows an attack with per... |
| CVE-2023-4995 | MEDIUM | 5.4 | 0.3% | Oct 13, 2023 | The Embed Calendly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'calendly' shortcode in version... |
| CVE-2023-4829 | MEDIUM | 5.4 | 0.4% | Oct 13, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository froxlor/froxlor prior to 2.0.22. |
| CVE-2023-4517 | MEDIUM | 5.4 | 0.4% | Oct 13, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository hestiacp/hestiacp prior to 1.8.6. |
| CVE-2023-45468 | HIGH | 7.5 | 0.7% | Oct 13, 2023 | Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp. This vulnerability allows attacke... |
| CVE-2023-45467 | CRITICAL | 9.8 | 1.9% | Oct 13, 2023 | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Ti... |
| CVE-2023-45466 | CRITICAL | 9.8 | 1.9% | Oct 13, 2023 | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pin_host parameter in the WPS... |
| CVE-2023-45465 | CRITICAL | 9.8 | 1.8% | Oct 13, 2023 | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in t... |
| CVE-2023-45464 | HIGH | 7.5 | 0.6% | Oct 13, 2023 | Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter. This vulnerability allo... |
| CVE-2023-45463 | HIGH | 7.5 | 0.6% | Oct 13, 2023 | Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN_0040dabc functi... |
| CVE-2023-45162 | CRITICAL | 9.8 | 0.6% | Oct 13, 2023 | Affected 1E Platform versions have a Blind SQL Injection vulnerability that can lead to arbitrary code execution. Appl... |
| CVE-2023-45130 | HIGH | 7.5 | 0.9% | Oct 13, 2023 | Frontier is Substrate's Ethereum compatibility layer. Prior to commit aea528198b3b226e0d20cce878551fd4c0e3d5d0, at the e... |
| CVE-2023-45108 | HIGH | 8.8 | 0.2% | Oct 13, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Mailrelay plugin <= 2.1.1 versions. |
| CVE-2023-45107 | HIGH | 8.8 | 0.2% | Oct 13, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in GoodBarber plugin <= 1.0.22 versions. |
| CVE-2023-39960 | HIGH | 7.5 | 0.6% | Oct 13, 2023 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server starting with 2... |
| CVE-2023-29464 | CRITICAL | 9.1 | 9.6% | Oct 13, 2023 | FactoryTalk Linx, in the Rockwell Automation PanelView Plus, allows an unauthenticated threat actor to read data from m... |
| CVE-2023-43079 | HIGH | 7.8 | 0.2% | Oct 13, 2023 | Dell OpenManage Server Administrator, versions 11.0.0.0 and prior, contains an Improper Access Control vulnerability. A... |
| CVE-2023-39999 | MEDIUM | 4.3 | 1.0% | Oct 13, 2023 | Exposure of Sensitive Information to an Unauthorized Actor in WordPress from 6.3 through 6.3.1, from 6.2 through 6.2.2, ... |
| CVE-2023-5573 | MEDIUM | 6.5 | 0.5% | Oct 13, 2023 | Allocation of Resources Without Limits or Throttling in GitHub repository vriteio/vrite prior to 0.3.0. |
| CVE-2023-5572 | CRITICAL | 9.8 | 0.8% | Oct 13, 2023 | Server-Side Request Forgery (SSRF) in GitHub repository vriteio/vrite prior to 0.3.0. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now