2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-5312 | — | — | — | Oct 6, 2023 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-43226. Reason: This candidate is a ... |
| CVE-2023-40556 | HIGH | 8.8 | 0.2% | Oct 6, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Greg Ross Schedule Posts Calendar plugin <= 5.2 versions. |
| CVE-2023-26153 | CRITICAL | 9.8 | 3.2% | Oct 6, 2023 | Versions of the package geokit-rails before 2.5.0 are vulnerable to Command Injection due to unsafe deserialisation of Y... |
| CVE-2023-45243 | MEDIUM | 5.5 | 0.2% | Oct 5, 2023 | Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Cyber Protec... |
| CVE-2023-45242 | MEDIUM | 5.5 | 0.2% | Oct 5, 2023 | Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Cyber Protec... |
| CVE-2023-45241 | MEDIUM | 5.5 | 0.2% | Oct 5, 2023 | Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect Cloud Agent (Li... |
| CVE-2023-45240 | MEDIUM | 5.5 | 0.2% | Oct 5, 2023 | Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux... |
| CVE-2023-44214 | MEDIUM | 5.5 | 0.2% | Oct 5, 2023 | Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux... |
| CVE-2023-44213 | MEDIUM | 5.5 | 0.2% | Oct 5, 2023 | Sensitive information disclosure due to excessive collection of system information. The following products are affected:... |
| CVE-2023-44212 | HIGH | 7.1 | 0.2% | Oct 5, 2023 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr... |
| CVE-2023-44211 | HIGH | 7.1 | 0.2% | Oct 5, 2023 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr... |
| CVE-2023-43343 | MEDIUM | 5.4 | 0.7% | Oct 5, 2023 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary co... |
| CVE-2023-43269 | CRITICAL | 9.8 | 0.6% | Oct 5, 2023 | pigcms up to 7.0 was discovered to contain an arbitrary file upload vulnerability. |
| CVE-2023-5441 | MEDIUM | 5.5 | 0.4% | Oct 5, 2023 | NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960. |
| CVE-2023-39323 | HIGH | 8.1 | 1.7% | Oct 5, 2023 | Line directives ("//line") can be used to bypass the restrictions on "//go:cgo_" directives, allowing blocked linker and... |
| CVE-2023-44024 | CRITICAL | 9.8 | 0.8% | Oct 5, 2023 | SQL injection vulnerability in KnowBand Module One Page Checkout, Social Login & Mailchimp (supercheckout) v.8.0.3 and b... |
| CVE-2023-43983 | CRITICAL | 9.8 | 0.5% | Oct 5, 2023 | Presto Changeo attributegrid up to 2.0.3 was discovered to contain a SQL injection vulnerability via the component disab... |
| CVE-2023-43981 | CRITICAL | 9.8 | 0.6% | Oct 5, 2023 | Presto Changeo testsitecreator up to 1.1.1 was discovered to contain a deserialization vulnerability via the component d... |
| CVE-2023-43284 | HIGH | 8.8 | 1.9% | Oct 5, 2023 | D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices allow an authenticated remote attacker to... |
| CVE-2023-40920 | CRITICAL | 9.8 | 0.6% | Oct 5, 2023 | Prixan prixanconnect up to v1.62 was discovered to contain a SQL injection vulnerability via the component CartsGuruCata... |
| CVE-2023-43260 | MEDIUM | 6.1 | 0.4% | Oct 5, 2023 | Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting (XSS) vulnerab... |
| CVE-2023-42755 | MEDIUM | 5.5 | 0.4% | Oct 5, 2023 | A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may g... |
| CVE-2023-42754 | MEDIUM | 5.5 | 0.4% | Oct 5, 2023 | A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be asso... |
| CVE-2023-41175 | MEDIUM | 6.5 | 1.3% | Oct 5, 2023 | A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote ... |
| CVE-2023-40745 | MEDIUM | 6.5 | 1.1% | Oct 5, 2023 | LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (applicatio... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now