2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-47716 | HIGH | 8.8 | 0.4% | Mar 1, 2024 | IBM CP4BA - Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a user to gain the privileges ... |
| CVE-2023-6132 | HIGH | 7.8 | 0.2% | Feb 29, 2024 | The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary cod... |
| CVE-2023-6090 | HIGH | 7.2 | 0.6% | Feb 29, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Mollie Mollie Payments for WooCommerce.This issue affec... |
| CVE-2023-52483 | HIGH | 7.8 | 0.2% | Feb 29, 2024 | In the Linux kernel, the following vulnerability has been resolved: mctp: perform route lookups under a RCU read-side l... |
| CVE-2023-52482 | HIGH | 7.8 | 0.3% | Feb 29, 2024 | In the Linux kernel, the following vulnerability has been resolved: x86/srso: Add SRSO mitigation for Hygon processors ... |
| CVE-2023-52480 | HIGH | 7 | 0.5% | Feb 29, 2024 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup an... |
| CVE-2023-52479 | HIGH | 8.8 | 0.6% | Feb 29, 2024 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix uaf in smb20_oplock_break_ack drop refe... |
| CVE-2023-52475 | HIGH | 7.8 | 0.2% | Feb 29, 2024 | In the Linux kernel, the following vulnerability has been resolved: Input: powermate - fix use-after-free in powermate_... |
| CVE-2023-47874 | HIGH | 8.8 | 0.4% | Feb 29, 2024 | Missing Authorization vulnerability in Perfmatters.This issue affects Perfmatters: from n/a through 2.1.6. |
| CVE-2023-51696 | HIGH | 8.8 | 0.2% | Feb 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in СleanTalk - Anti-Spam Protection Spam protection, Anti-Spam, FireWall... |
| CVE-2023-51531 | HIGH | 8.8 | 0.2% | Feb 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Thrive Themes Thrive Automator.This issue affects Thrive Automator: f... |
| CVE-2023-51530 | HIGH | 8.8 | 0.2% | Feb 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in GS Plugins Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery a... |
| CVE-2023-51529 | HIGH | 8.8 | 0.2% | Feb 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Mega – Absolute Addons For Elementor.This issue affects ... |
| CVE-2023-51528 | HIGH | 8.8 | 0.2% | Feb 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue ... |
| CVE-2023-7106 | HIGH | 8.8 | 0.8% | Feb 29, 2024 | A vulnerability was found in code-projects E-Commerce Website 1.0. It has been declared as critical. Affected by this vu... |
| CVE-2023-51779 | HIGH | 7 | 0.3% | Feb 29, 2024 | bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_s... |
| CVE-2023-51774 | HIGH | 8.4 | 0.2% | Feb 29, 2024 | The json-jwt (aka JSON::JWT) gem 1.16.3 for Ruby sometimes allows bypass of identity checks via a sign/encryption confus... |
| CVE-2023-50658 | HIGH | 7.5 | 0.8% | Feb 29, 2024 | The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large p2... |
| CVE-2023-50437 | HIGH | 8.6 | 0.7% | Feb 29, 2024 | An issue was discovered in Couchbase Server before 7.2.x before 7.2.4. otpCookie is shown with full admin on pools/defau... |
| CVE-2023-38372 | HIGH | 7.5 | 0.6% | Feb 29, 2024 | An unauthorized attacker who has obtained an IBM Watson IoT Platform 1.0 security authentication token can use it to imp... |
| CVE-2023-34198 | HIGH | 7.3 | 0.5% | Feb 29, 2024 | In Stormshield Network Security (SNS) 1.0.0 through 3.7.36 before 3.7.37, 3.8.0 through 3.11.24 before 3.11.25, 4.0.0 th... |
| CVE-2023-25926 | HIGH | 8.2 | 1.4% | Feb 29, 2024 | IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to an XML External Entity Inje... |
| CVE-2023-25921 | HIGH | 8.8 | 1.1% | Feb 29, 2024 | IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer f... |
| CVE-2023-49338 | HIGH | 7.5 | 0.6% | Feb 28, 2024 | Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin/stats and /admin/vitals end... |
| CVE-2023-45859 | HIGH | 7.6 | 0.5% | Feb 28, 2024 | In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now