2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-38007 | MEDIUM | 5.4 | 0.2% | Jun 27, 2025 | IBM Cloud Pak System 2.3.5.0, 2.3.3.7, 2.3.3.7 iFix1 on Power and 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.4.0, 2.3.4.... |
| CVE-2023-25998 | HIGH | 8.1 | 0.5% | Jun 27, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2023-44915 | HIGH | 7.1 | 0.3% | Jun 25, 2025 | A cross-site scripting (XSS) vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute... |
| CVE-2023-47030 | CRITICAL | 9.8 | 0.6% | Jun 23, 2025 | An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive informa... |
| CVE-2023-47029 | CRITICAL | 9.8 | 0.6% | Jun 23, 2025 | An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive informa... |
| CVE-2023-47031 | CRITICAL | 9.8 | 0.6% | Jun 23, 2025 | An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to escalate privileges via a crafted POST request to t... |
| CVE-2023-50450 | HIGH | 8.4 | 0.1% | Jun 23, 2025 | An issue was discovered in Sensopart VISOR Vision Sensors before 2.10.0.2 allows local users to perform unspecified acti... |
| CVE-2023-47295 | CRITICAL | 9.8 | 0.5% | Jun 23, 2025 | A CSV injection vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands via injectin... |
| CVE-2023-47294 | HIGH | 8.1 | 0.3% | Jun 23, 2025 | An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, l... |
| CVE-2023-47032 | CRITICAL | 9.8 | 0.7% | Jun 23, 2025 | Password Vulnerability in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code via a crafted ... |
| CVE-2023-48978 | CRITICAL | 9.8 | 0.9% | Jun 23, 2025 | An issue in NCR ITM Web terminal v.4.4.0 and v.4.4.4 allows a remote attacker to execute arbitrary code via a crafted sc... |
| CVE-2023-47298 | MEDIUM | 4.3 | 0.2% | Jun 23, 2025 | An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoi... |
| CVE-2023-47297 | CRITICAL | 9.8 | 0.5% | Jun 23, 2025 | A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands, inc... |
| CVE-2023-5600 | LOW | 3.1 | 0.2% | Jun 20, 2025 | An issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.3.6, all versions starting... |
| CVE-2023-45256 | MEDIUM | 5.4 | 0.2% | Jun 12, 2025 | Multiple SQL injection vulnerabilities in the EuroInformation MoneticoPaiement module before 1.1.1 for PrestaShop allow ... |
| CVE-2023-36636 | — | — | — | Jun 12, 2025 | Rejected reason: Not used |
| CVE-2023-48786 | MEDIUM | 4.3 | 0.3% | Jun 10, 2025 | A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before ... |
| CVE-2023-29184 | LOW | 2.3 | 0.2% | Jun 10, 2025 | An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through... |
| CVE-2023-20599 | HIGH | 7.9 | 0.2% | Jun 10, 2025 | Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto C... |
| CVE-2023-26005 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2023-25999 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2023-26003 | HIGH | 7.6 | 0.4% | Jun 6, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vipul Jariwala WP ... |
| CVE-2023-26002 | MEDIUM | 4.3 | 0.2% | Jun 6, 2025 | Missing Authorization vulnerability in 6Storage 6Storage Rentals allows Exploiting Incorrectly Configured Access Control... |
| CVE-2023-26001 | MEDIUM | 5.9 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marchetti Design N... |
| CVE-2023-26000 | MEDIUM | 5.9 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hanhdo205 Bang tin... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now