2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-33013 | HIGH | 8.8 | 1.4% | Aug 14, 2023 | A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)... |
| CVE-2023-28768 | MEDIUM | 6.5 | 0.3% | Aug 14, 2023 | Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1... |
| CVE-2023-4322 | CRITICAL | 9.8 | 0.9% | Aug 14, 2023 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. |
| CVE-2023-31041 | HIGH | 7.5 | 0.3% | Aug 14, 2023 | An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information c... |
| CVE-2023-30754 | MEDIUM | 6.1 | 0.4% | Aug 14, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in AdFoxly AdFoxly – Ad Manager, AdSense Ads & Ads.Txt plugin... |
| CVE-2023-30752 | MEDIUM | 4.8 | 0.4% | Aug 14, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Silvia Pfeiffer and Andrew Nimmo External Videos plugi... |
| CVE-2023-30751 | MEDIUM | 4.8 | 0.4% | Aug 14, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in iControlWP Article Directory Redux plugin <= 1.0.2 ver... |
| CVE-2023-30749 | MEDIUM | 4.8 | 0.4% | Aug 14, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ihomefinder Optima Express + MarketBoost IDX Plugin pl... |
| CVE-2023-30489 | MEDIUM | 6.1 | 0.4% | Aug 14, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Email Subscription Popup plugin <=... |
| CVE-2023-28535 | MEDIUM | 6.1 | 0.4% | Aug 14, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Paytm Paytm Payment Donation plugin <= 2.2.0 versions. |
| CVE-2023-30483 | MEDIUM | 6.1 | 0.4% | Aug 14, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Watu Quiz plugin <= 3.3.9.2 versions. |
| CVE-2023-30477 | MEDIUM | 4.8 | 0.4% | Aug 14, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Essitco AFFILIATE Solution plugin <= 1.0 versions. |
| CVE-2023-30475 | MEDIUM | 6.1 | 0.4% | Aug 14, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Elliot Sowersby, RelyWP WooCommerce Affiliate Plugin – Cou... |
| CVE-2023-29097 | MEDIUM | 4.8 | 0.4% | Aug 14, 2023 | Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in a3rev Software a3 Portfolio plugin <= 3.1.0 versions. |
| CVE-2023-37070 | MEDIUM | 4.8 | 0.5% | Aug 14, 2023 | Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-30188 | HIGH | 7.5 | 1.8% | Aug 14, 2023 | Memory Exhaustion vulnerability in ONLYOFFICE Document Server 4.0.3 through 7.3.2 allows remote attackers to cause a den... |
| CVE-2023-30187 | CRITICAL | 9.8 | 1.9% | Aug 14, 2023 | An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to... |
| CVE-2023-30186 | CRITICAL | 9.8 | 1.8% | Aug 14, 2023 | A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitr... |
| CVE-2023-37847 | CRITICAL | 9.8 | 0.7% | Aug 14, 2023 | novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability. |
| CVE-2023-4321 | MEDIUM | 6.1 | 0.6% | Aug 14, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3. |
| CVE-2023-3160 | HIGH | 7.8 | 0.2% | Aug 14, 2023 | The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or... |
| CVE-2023-40305 | MEDIUM | 5.5 | 0.4% | Aug 14, 2023 | GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file. |
| CVE-2023-40303 | HIGH | 7.8 | 0.4% | Aug 14, 2023 | GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions ... |
| CVE-2023-3267 | HIGH | 8.8 | 1.7% | Aug 14, 2023 | When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. T... |
| CVE-2023-3266 | CRITICAL | 9.8 | 0.8% | Aug 14, 2023 | A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now