2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-40876 | MEDIUM | 5.4 | 0.4% | Aug 24, 2023 | DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freeli... |
| CVE-2023-40875 | MEDIUM | 5.4 | 0.4% | Aug 24, 2023 | DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /de... |
| CVE-2023-40874 | MEDIUM | 5.4 | 0.4% | Aug 24, 2023 | DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /de... |
| CVE-2023-40371 | MEDIUM | 5.5 | 0.1% | Aug 24, 2023 | IBM AIX 7.2, 7.3, VIOS 3.1's OpenSSH implementation could allow a non-privileged local user to access files outside of t... |
| CVE-2023-34040 | HIGH | 7.8 | 2.2% | Aug 24, 2023 | In Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector e... |
| CVE-2023-32516 | MEDIUM | 6.1 | 0.4% | Aug 24, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GloriaFood Restaurant Menu – Food Ordering System – Table ... |
| CVE-2023-32511 | MEDIUM | 6.1 | 0.4% | Aug 24, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Booking Ultra Pro Booking Ultra Pro Appointments Booking C... |
| CVE-2023-32510 | MEDIUM | 6.1 | 0.4% | Aug 24, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Rolf van Gelder Order Your Posts Manually plugin <= 2.2.5 ... |
| CVE-2023-38289 | — | — | — | Aug 24, 2023 | Rejected reason: Not a Security Issue. |
| CVE-2023-38288 | — | — | — | Aug 24, 2023 | Rejected reason: Not a Security Issue. |
| CVE-2023-3705 | HIGH | 7.5 | 1.1% | Aug 24, 2023 | The vulnerability exists in CP-Plus NVR due to an improper input handling at the web-based management interface of the a... |
| CVE-2023-4513 | HIGH | 7.5 | 0.5% | Aug 24, 2023 | BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injecti... |
| CVE-2023-4512 | HIGH | 7.5 | 0.5% | Aug 24, 2023 | CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file |
| CVE-2023-4511 | HIGH | 7.5 | 0.4% | Aug 24, 2023 | BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injec... |
| CVE-2023-4230 | MEDIUM | 5.3 | 0.4% | Aug 24, 2023 | A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which has t... |
| CVE-2023-4229 | MEDIUM | 4.7 | 0.3% | Aug 24, 2023 | A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, potentially... |
| CVE-2023-4228 | MEDIUM | 4.3 | 0.3% | Aug 24, 2023 | A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, where the s... |
| CVE-2023-3704 | MEDIUM | 5.3 | 0.5% | Aug 24, 2023 | The vulnerability exists in CP-Plus DVR due to an improper input validation within the web-based management interface of... |
| CVE-2023-4227 | MEDIUM | 6.5 | 0.3% | Aug 24, 2023 | A vulnerability has been identified in the ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which c... |
| CVE-2023-40573 | HIGH | 8.8 | 1.0% | Aug 24, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki supports ... |
| CVE-2023-40572 | HIGH | 8 | 0.5% | Aug 24, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The create acti... |
| CVE-2023-32559 | HIGH | 7.5 | 1.5% | Aug 24, 2023 | A privilege escalation vulnerability exists in the experimental policy mechanism in all active release lines: 16.x, 18.x... |
| CVE-2023-41028 | HIGH | 8.8 | 0.8% | Aug 23, 2023 | A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticat... |
| CVE-2023-3453 | HIGH | 8.1 | 0.3% | Aug 23, 2023 | ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allo... |
| CVE-2023-38422 | HIGH | 7.5 | 0.5% | Aug 23, 2023 | Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the manage... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now