2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-41658 | MEDIUM | 6.1 | 0.3% | Sep 29, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Photo Gallery Slideshow & Masonry ... |
| CVE-2023-41657 | MEDIUM | 4.8 | 0.3% | Sep 29, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Groundhogg Inc. HollerBox plugin <= 2.3.2 versions. |
| CVE-2023-41655 | MEDIUM | 4.8 | 0.3% | Sep 29, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Andreas Heigl authLdap plugin <= 2.5.9 versions. |
| CVE-2023-39308 | MEDIUM | 6.1 | 0.5% | Sep 29, 2023 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in UserFeedback Team User Feedback plugin <= 1.0.7 versions. |
| CVE-2023-43944 | MEDIUM | 5.4 | 0.4% | Sep 29, 2023 | A Stored Cross Site Scripting (XSS) vulnerability was found in SourceCodester Task Management System 1.0. It allows atta... |
| CVE-2023-43909 | CRITICAL | 9.1 | 0.7% | Sep 29, 2023 | Hospital Management System thru commit 4770d was discovered to contain a SQL injection vulnerability via the app_contact... |
| CVE-2023-5288 | CRITICAL | 9.8 | 0.6% | Sep 29, 2023 | A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration settings. ... |
| CVE-2023-5261 | CRITICAL | 9.8 | 0.8% | Sep 29, 2023 | A vulnerability, which was classified as critical, was found in Tongda OA 2017. Affected is an unknown function of the f... |
| CVE-2023-5260 | CRITICAL | 9.8 | 0.7% | Sep 29, 2023 | A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This i... |
| CVE-2023-5259 | MEDIUM | 4.9 | 1.0% | Sep 29, 2023 | A vulnerability classified as problematic was found in ForU CMS. This vulnerability affects unknown code of the file /ad... |
| CVE-2023-5258 | CRITICAL | 9.8 | 0.6% | Sep 29, 2023 | A vulnerability classified as critical has been found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the f... |
| CVE-2023-5257 | MEDIUM | 5.7 | 0.8% | Sep 29, 2023 | A vulnerability was found in WhiteHSBG JNDIExploit 1.4 on Windows. It has been rated as problematic. Affected by this is... |
| CVE-2023-5196 | MEDIUM | 6.5 | 0.6% | Sep 29, 2023 | Mattermost fails to enforce character limits in all possible notification props allowing an attacker to send a really lo... |
| CVE-2023-5195 | MEDIUM | 5.4 | 0.4% | Sep 29, 2023 | Mattermost fails to properly validate the permissions when soft deleting a team allowing a team member to soft delete ot... |
| CVE-2023-5194 | MEDIUM | 4.3 | 0.3% | Sep 29, 2023 | Mattermost fails to properly validate permissions when demoting and deactivating a user allowing for a system/user manag... |
| CVE-2023-5193 | LOW | 2.7 | 0.5% | Sep 29, 2023 | Mattermost fails to properly check permissions when retrieving a post allowing for a System Role with the permission to ... |
| CVE-2023-5159 | LOW | 2.7 | 0.4% | Sep 29, 2023 | Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user ... |
| CVE-2023-3413 | HIGH | 7.5 | 0.6% | Sep 29, 2023 | An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting fr... |
| CVE-2023-5198 | MEDIUM | 4.3 | 0.4% | Sep 29, 2023 | An issue has been discovered in GitLab affecting all versions prior to 16.2.7, all versions starting from 16.3 before 16... |
| CVE-2023-3922 | HIGH | 7.1 | 0.4% | Sep 29, 2023 | An issue has been discovered in GitLab affecting all versions starting from 8.15 before 16.2.8, all versions starting fr... |
| CVE-2023-32477 | HIGH | 7.8 | 0.2% | Sep 29, 2023 | Dell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control vulnerability. A local low-... |
| CVE-2023-4532 | MEDIUM | 4.3 | 0.4% | Sep 29, 2023 | An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting fr... |
| CVE-2023-44469 | MEDIUM | 4.3 | 0.5% | Sep 29, 2023 | A Server-Side Request Forgery issue in the OpenID Connect Issuer in LemonLDAP::NG before 2.17.1 allows authenticated rem... |
| CVE-2023-3979 | MEDIUM | 4.3 | 0.4% | Sep 29, 2023 | An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.2.8, all versions starting fr... |
| CVE-2023-3920 | MEDIUM | 4.3 | 0.4% | Sep 29, 2023 | An issue has been discovered in GitLab affecting all versions starting from 11.2 before 16.2.8, all versions starting fr... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now