2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-41564 | MEDIUM | 6.1 | 1.0% | Sep 8, 2023 | An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute ar... |
| CVE-2023-4844 | HIGH | 7.5 | 0.5% | Sep 8, 2023 | A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been classified as critical. This affec... |
| CVE-2023-42278 | HIGH | 7.5 | 0.7% | Sep 8, 2023 | hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse(). |
| CVE-2023-42277 | CRITICAL | 9.8 | 0.8% | Sep 8, 2023 | hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath. |
| CVE-2023-42276 | CRITICAL | 9.8 | 0.8% | Sep 8, 2023 | hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray. |
| CVE-2023-40306 | MEDIUM | 6.1 | 0.3% | Sep 8, 2023 | SAP S/4HANA Manage Catalog Items and Cross-Catalog searches Fiori apps allow an attacker to redirect users to a maliciou... |
| CVE-2023-30995 | HIGH | 7.5 | 0.8% | Sep 8, 2023 | IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist restricti... |
| CVE-2023-24965 | MEDIUM | 5.3 | 0.4% | Sep 8, 2023 | IBM Aspera Faspex 5.0.5 does not restrict or incorrectly restricts access to a resource from an unauthorized actor. IBM... |
| CVE-2023-41318 | MEDIUM | 5.4 | 0.4% | Sep 8, 2023 | matrix-media-repo is a highly customizable multi-domain media repository for the Matrix chat ecosystem. In affected vers... |
| CVE-2023-32332 | MEDIUM | 5.4 | 0.5% | Sep 8, 2023 | IBM Maximo Application Suite 8.9, 8.10 and IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 are vulnerable to HTML injection... |
| CVE-2023-42268 | CRITICAL | 9.8 | 0.7% | Sep 8, 2023 | Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/s... |
| CVE-2023-41578 | HIGH | 7.5 | 0.8% | Sep 8, 2023 | Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection... |
| CVE-2023-41575 | MEDIUM | 5.4 | 0.4% | Sep 8, 2023 | Multiple stored cross-site scripting (XSS) vulnerabilities in /bbdms/sign-up.php of Blood Bank & Donor Management v2.2 a... |
| CVE-2023-41338 | MEDIUM | 5.3 | 0.5% | Sep 8, 2023 | Fiber is an Express inspired web framework built in the go language. Versions of gofiber prior to 2.49.2 did not properl... |
| CVE-2023-38736 | HIGH | 7.8 | 0.4% | Sep 8, 2023 | IBM QRadar WinCollect Agent 10.0 through 10.1.6, when installed to run as ADMIN or SYSTEM, is vulnerable to a local esca... |
| CVE-2023-4782 | HIGH | 7.8 | 0.3% | Sep 8, 2023 | Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the `init` operation if run on maliciously craf... |
| CVE-2023-39712 | MEDIUM | 6.1 | 0.6% | Sep 8, 2023 | Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows atta... |
| CVE-2023-28010 | MEDIUM | 5.3 | 0.3% | Sep 8, 2023 | In some configuration scenarios, the Domino server host name can be exposed. This information could be used to target fu... |
| CVE-2023-4843 | MEDIUM | 4.8 | 0.3% | Sep 8, 2023 | Pega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Busines... |
| CVE-2023-39322 | HIGH | 7.5 | 1.1% | Sep 8, 2023 | QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing... |
| CVE-2023-39321 | HIGH | 7.5 | 1.1% | Sep 8, 2023 | Processing an incomplete post-handshake message for a QUIC connection can cause a panic. |
| CVE-2023-39320 | CRITICAL | 9.8 | 1.4% | Sep 8, 2023 | The go.mod toolchain directive, introduced in Go 1.21, can be leveraged to execute scripts and binaries relative to the ... |
| CVE-2023-39319 | MEDIUM | 6.1 | 0.8% | Sep 8, 2023 | The html/template package does not apply the proper rules for handling occurrences of "<script", "<!--", and "</script" ... |
| CVE-2023-39318 | MEDIUM | 6.1 | 0.8% | Sep 8, 2023 | The html/template package does not properly handle HTML-like "" comment tokens, nor hashbang "#!" comment tokens, in <sc... |
| CVE-2023-39676 | MEDIUM | 6.1 | 1.3% | Sep 8, 2023 | FieldPopupNewsletter Prestashop Module v1.0.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerabi... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now