2023 CVE Vulnerabilities

31,411 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-38046MEDIUM4.9A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privil...
CVE-2023-37630MEDIUM6.1Online Piggery Management System 1.0 is vulnerable to Cross Site Scripting (XSS). An unauthenticated user can POST JavaS...
CVE-2023-37629CRITICAL9.8Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenticated user can upload a php file by send...
CVE-2023-37628CRITICAL9.8Online Piggery Management System 1.0 is vulnerable to SQL Injection.
CVE-2023-37965HIGH7.1A missing permission check in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers with Overall/Read permissi...
CVE-2023-37964HIGH8.8A cross-site request forgery (CSRF) vulnerability in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers to ...
CVE-2023-37963MEDIUM5.4A missing permission check in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attackers with Overall/Read pe...
CVE-2023-37962HIGH8.8A cross-site request forgery (CSRF) vulnerability in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attacke...
CVE-2023-37961HIGH8.8A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Auth Plugin 1.14 and earlier allows attackers to t...
CVE-2023-37960MEDIUM6.5Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with...
CVE-2023-37959MEDIUM6.5A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read pe...
CVE-2023-37958HIGH8.8A cross-site request forgery (CSRF) vulnerability in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attacke...
CVE-2023-37957HIGH8.8A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline restFul API Plugin 0.11 and earlier allows attacke...
CVE-2023-37956MEDIUM6.5A missing permission check in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers with Overall/Re...
CVE-2023-37955MEDIUM6.5A cross-site request forgery (CSRF) vulnerability in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows at...
CVE-2023-37954MEDIUM4.3A cross-site request forgery (CSRF) vulnerability in Jenkins Rebuilder Plugin 320.v5a_0933a_e7d61 and earlier allows att...
CVE-2023-37953MEDIUM6.5A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to co...
CVE-2023-37952MEDIUM6.5A cross-site request forgery (CSRF) vulnerability in Jenkins mabl Plugin 0.0.46 and earlier allows attackers to connect ...
CVE-2023-37951MEDIUM6.5Jenkins mabl Plugin 0.0.46 and earlier does not set the appropriate context for credentials lookup, allowing attackers w...
CVE-2023-37950MEDIUM4.3A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to en...
CVE-2023-37949HIGH7.1A missing permission check in Jenkins Orka by MacStadium Plugin 1.33 and earlier allows attackers with Overall/Read perm...
CVE-2023-37948LOW3.7Jenkins Oracle Cloud Infrastructure Compute Plugin 1.0.16 and earlier does not validate SSH host keys when connecting OC...
CVE-2023-37947MEDIUM6.1Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after log...
CVE-2023-37946HIGH8.8Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login.
CVE-2023-37945MEDIUM4.3A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows attack...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now