2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-36338 | MEDIUM | 5.3 | 0.3% | Dec 15, 2025 | Inventory Management System 1 was discovered to contain a SQL injection vulnerability. |
| CVE-2023-36337 | MEDIUM | 6.1 | 0.2% | Dec 15, 2025 | A reflected cross-site scripting (XSS) vulnerability in the component /index.php/cuzh4 of PHP Inventory Management Syste... |
| CVE-2023-53775 | MEDIUM | 6.5 | 0.4% | Dec 10, 2025 | Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by e... |
| CVE-2023-53773 | MEDIUM | 5.3 | 0.5% | Dec 9, 2025 | MiniDVBLinux 5.4 contains an unauthenticated vulnerability in the tv_action.sh script that allows remote attackers to ge... |
| CVE-2023-23729 | MEDIUM | 5.4 | 0.2% | Dec 9, 2025 | Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2023-22675 | MEDIUM | 4.3 | 0.1% | Dec 9, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Taylor Hawkes WP Fast Cache allows Cross Site Request Forgery.This is... |
| CVE-2023-53735 | MEDIUM | 5.3 | 0.3% | Dec 4, 2025 | WEBIGniter 28.7.23 contains a cross-site scripting vulnerability in the user creation process that allows unauthenticate... |
| CVE-2023-7328 | MEDIUM | 5.3 | 0.3% | Nov 14, 2025 | Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the user manageme... |
| CVE-2023-7323 | MEDIUM | 5.4 | 0.5% | Oct 30, 2025 | Nagios Log Server versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Create User function. In... |
| CVE-2023-7321 | MEDIUM | 5.4 | 0.5% | Oct 30, 2025 | Nagios Log Server versions prior to 2.1.14 are vulnerable to cross-site scripting (XSS) via the Snapshots Page. Untruste... |
| CVE-2023-7319 | MEDIUM | 5.4 | 0.5% | Oct 30, 2025 | Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Percentile Calcula... |
| CVE-2023-7318 | MEDIUM | 5.4 | 0.6% | Oct 30, 2025 | Nagios XI versions prior to < 2024R1.0.2 are vulnerable to cross-site scripting (XSS) via the Nagios Core Command Expans... |
| CVE-2023-7316 | MEDIUM | 5.4 | 0.6% | Oct 30, 2025 | Nagios XI versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Graph Explorer component. Insuff... |
| CVE-2023-7315 | MEDIUM | 5.4 | 0.5% | Oct 30, 2025 | Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Graph Explorer component. Insuff... |
| CVE-2023-7314 | MEDIUM | 5.4 | 0.5% | Oct 30, 2025 | Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Bandwidth Report component. Insu... |
| CVE-2023-7313 | MEDIUM | 5.4 | 0.5% | Oct 30, 2025 | Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Bulk Modifications tool. Insuffi... |
| CVE-2023-7312 | MEDIUM | 4.8 | 1.0% | Oct 30, 2025 | Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability when adding or configuri... |
| CVE-2023-53690 | MEDIUM | 4.8 | 0.8% | Oct 30, 2025 | Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD authentic... |
| CVE-2023-53689 | MEDIUM | 4.8 | 0.9% | Oct 30, 2025 | Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting (XSS) vulnerability in the license key co... |
| CVE-2023-53688 | MEDIUM | 5.4 | 0.3% | Oct 30, 2025 | Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) and cross-site request forgery (CSRF) vi... |
| CVE-2023-32199 | MEDIUM | 4.3 | 0.2% | Oct 29, 2025 | A vulnerability has been identified within Rancher Manager, where after removing a custom GlobalRole that gives admini... |
| CVE-2023-7320 | MEDIUM | 5.3 | 0.3% | Oct 29, 2025 | The WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 7... |
| CVE-2023-37749 | MEDIUM | 5.3 | 0.4% | Oct 27, 2025 | Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attackers to view users' da... |
| CVE-2023-37401 | MEDIUM | 5.3 | 0.2% | Oct 9, 2025 | IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be truste... |
| CVE-2023-53687 | MEDIUM | 5.5 | 0.1% | Oct 7, 2025 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung_tty: Fix a memory leak in s3c2... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now