2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-27314 | HIGH | 7.5 | 0.6% | Oct 12, 2023 | ONTAP 9 versions prior to 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8, 9.12.1P2 and 9.13.1 are susceptible to a vulnerability... |
| CVE-2023-27313 | HIGH | 8.8 | 0.5% | Oct 12, 2023 | SnapCenter versions 3.x and 4.x prior to 4.9 are susceptible to a vulnerability which may allow an authenticated unpriv... |
| CVE-2023-27312 | MEDIUM | 4.3 | 0.3% | Oct 12, 2023 | SnapCenter Plugin for VMware vSphere versions 4.6 prior to 4.9 are susceptible to a vulnerability which may allow authe... |
| CVE-2023-43149 | HIGH | 8.8 | 0.5% | Oct 12, 2023 | SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an admin user w... |
| CVE-2023-37637 | — | — | — | Oct 12, 2023 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-38817. Reason: This record is a reservation duplicate ... |
| CVE-2023-5072 | HIGH | 7.5 | 1.4% | Oct 12, 2023 | Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string o... |
| CVE-2023-45143 | LOW | 3.5 | 1.2% | Oct 12, 2023 | Undici is an HTTP/1.1 client written from scratch for Node.js. Prior to version 5.26.2, Undici already cleared Authoriza... |
| CVE-2023-45142 | HIGH | 7.5 | 1.4% | Oct 12, 2023 | OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. A handler wrapper out of the box ... |
| CVE-2023-45138 | CRITICAL | 9.6 | 71.2% | Oct 12, 2023 | Change Request is an pplication allowing users to request changes on a wiki without publishing the changes directly. Sta... |
| CVE-2023-45133 | HIGH | 8.8 | 0.5% | Oct 12, 2023 | Babel is a compiler for writingJavaScript. In `@babel/traverse` prior to versions 7.23.2 and 8.0.0-alpha.4 and all versi... |
| CVE-2023-43147 | HIGH | 8.8 | 0.5% | Oct 12, 2023 | PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery (CSRF) to add an admin user via the Add... |
| CVE-2023-32634 | HIGH | 7.4 | 0.4% | Oct 12, 2023 | An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.... |
| CVE-2023-32275 | MEDIUM | 4.4 | 0.4% | Oct 12, 2023 | An information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4.41-9782-beta and 5.01.... |
| CVE-2023-31192 | MEDIUM | 5.3 | 0.8% | Oct 12, 2023 | An information disclosure vulnerability exists in the ClientConnect() functionality of SoftEther VPN 5.01.9674. A specia... |
| CVE-2023-27516 | HIGH | 7.8 | 0.5% | Oct 12, 2023 | An authentication bypass vulnerability exists in the CiRpcAccepted() functionality of SoftEther VPN 4.41-9782-beta and 5... |
| CVE-2023-27395 | HIGH | 8.1 | 1.4% | Oct 12, 2023 | A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket() functionality of SoftEther VPN 4.41-... |
| CVE-2023-25774 | HIGH | 7.5 | 0.7% | Oct 12, 2023 | A denial-of-service vulnerability exists in the vpnserver ConnectionAccept() functionality of SoftEther VPN 5.02. A set ... |
| CVE-2023-23581 | HIGH | 7.5 | 0.8% | Oct 12, 2023 | A denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9... |
| CVE-2023-22325 | MEDIUM | 5.9 | 0.8% | Oct 12, 2023 | A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-97... |
| CVE-2023-22308 | HIGH | 7.5 | 0.7% | Oct 12, 2023 | An integer underflow vulnerability exists in the vpnserver OvsProcessData functionality of SoftEther VPN 5.01.9674 and 5... |
| CVE-2023-45106 | HIGH | 8.8 | 0.2% | Oct 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Fedor Urvanov, Aram Kocharyan Urvanov Syntax Highlighter plugin <= 2.... |
| CVE-2023-45103 | HIGH | 8.8 | 0.2% | Oct 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in YAS Global Team Permalinks Customizer plugin <= 2.8.2 versions. |
| CVE-2023-45102 | HIGH | 8.8 | 0.2% | Oct 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Blog Manager Light plugin <= 1.20 versions. |
| CVE-2023-41131 | HIGH | 8.8 | 0.2% | Oct 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Jonk @ Follow me Darling Sp*tify Play Button for WordPress plugin <= ... |
| CVE-2023-32124 | HIGH | 8.8 | 0.2% | Oct 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Arul Prasad J Publish Confirm Message plugin <= 1.3.1 versions. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now