2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-41365 | MEDIUM | 4.3 | 0.3% | Oct 10, 2023 | SAP Business One (B1i) - version 10.0, allows an authorized attacker to retrieve the details stack trace of the fault me... |
| CVE-2023-40310 | HIGH | 7.5 | 0.8% | Oct 10, 2023 | SAP PowerDesigner Client - version 16.7, does not sufficiently validate BPMN2 XML document imported from an untrusted so... |
| CVE-2023-5471 | HIGH | 7.5 | 0.6% | Oct 10, 2023 | A vulnerability, which was classified as critical, was found in codeprojects Farmacia 1.0. Affected is an unknown functi... |
| CVE-2023-44848 | HIGH | 8.1 | 0.6% | Oct 10, 2023 | An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_template.php component. |
| CVE-2023-44847 | HIGH | 7.2 | 0.9% | Oct 10, 2023 | An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ Weixin.php component. |
| CVE-2023-44846 | HIGH | 8.8 | 1.0% | Oct 10, 2023 | An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ notify.php component. |
| CVE-2023-5463 | HIGH | 7.8 | 0.3% | Oct 9, 2023 | A vulnerability was found in XINJE XDPPro up to 3.7.17a. It has been rated as critical. Affected by this issue is some u... |
| CVE-2023-5462 | HIGH | 7.5 | 0.9% | Oct 9, 2023 | A vulnerability was found in XINJE XD5E-30R-E 3.5.3b. It has been declared as critical. Affected by this vulnerability i... |
| CVE-2023-43899 | CRITICAL | 9.8 | 0.5% | Oct 9, 2023 | hansun CMS v1.0 was discovered to contain a SQL injection vulnerability via the component /ajax/ajax_login.ashx. |
| CVE-2023-43641 | HIGH | 8.8 | 16.6% | Oct 9, 2023 | libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-o... |
| CVE-2023-44813 | MEDIUM | 6.1 | 1.8% | Oct 9, 2023 | Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a c... |
| CVE-2023-44812 | MEDIUM | 6.1 | 1.9% | Oct 9, 2023 | Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a c... |
| CVE-2023-43271 | CRITICAL | 9.1 | 0.6% | Oct 9, 2023 | Incorrect access control in 70mai a500s v1.2.119 allows attackers to directly access and delete the video files of the d... |
| CVE-2023-5461 | MEDIUM | 5.9 | 0.4% | Oct 9, 2023 | A vulnerability was found in Delta Electronics WPLSoft 2.51. It has been classified as problematic. Affected is an unkno... |
| CVE-2023-44821 | MEDIUM | 5.5 | 0.3% | Oct 9, 2023 | Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect Gif_Realloc calls, might allow a denia... |
| CVE-2023-44811 | HIGH | 8.8 | 0.9% | Oct 9, 2023 | Cross Site Request Forgery (CSRF) vulnerability in MooSocial v.3.1.8 allows a remote attacker to execute arbitrary code ... |
| CVE-2023-44467 | CRITICAL | 9.8 | 0.9% | Oct 9, 2023 | langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-202... |
| CVE-2023-44392 | CRITICAL | 9 | 0.7% | Oct 9, 2023 | Garden provides automation for Kubernetes development and testing. Prior tov ersions 0.13.17 and 0.12.65, Garden has a d... |
| CVE-2023-5460 | MEDIUM | 5.7 | 0.4% | Oct 9, 2023 | A vulnerability was found in Delta Electronics WPLSoft up to 2.51 and classified as problematic. This issue affects some... |
| CVE-2023-5459 | HIGH | 7.5 | 0.9% | Oct 9, 2023 | A vulnerability has been found in Delta Electronics DVP32ES2 PLC 1.48 and classified as critical. This vulnerability aff... |
| CVE-2023-41672 | HIGH | 8.8 | 0.2% | Oct 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Rémi Leclercq Hide admin notices – Admin Notification Center plugin <... |
| CVE-2023-41670 | HIGH | 8.8 | 0.2% | Oct 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Palasthotel (in person: Edward Bock) Use Memcached plugin <= 1.0.4 ve... |
| CVE-2023-41669 | HIGH | 8.8 | 0.2% | Oct 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in DAEXT Live News plugin <= 1.06 versions. |
| CVE-2023-41668 | HIGH | 8.8 | 0.2% | Oct 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Leadster plugin <= 1.1.2 versions. |
| CVE-2023-41667 | HIGH | 8.8 | 0.2% | Oct 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Ulf Benjaminsson WP-dTree plugin <= 4.4.5 versions. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now