2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-38739 | HIGH | 8.8 | 0.2% | Jan 31, 2025 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site request forg... |
| CVE-2023-0092 | MEDIUM | 4.9 | 0.6% | Jan 31, 2025 | An authenticated user who has read access to the juju controller model, may construct a remote request to download an ar... |
| CVE-2023-6195 | MEDIUM | 4.3 | 0.3% | Jan 31, 2025 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.5 prior to 16.9.7, starting from 16... |
| CVE-2023-29080 | HIGH | 8.5 | 0.2% | Jan 30, 2025 | Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding Instal... |
| CVE-2023-37413 | MEDIUM | 5.3 | 0.3% | Jan 29, 2025 | IBM Aspera Faspex 5.0.0 through 5.0.10 could disclose sensitive username information due to an observable response discr... |
| CVE-2023-37412 | MEDIUM | 4.9 | 0.3% | Jan 29, 2025 | IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes without proper access contro... |
| CVE-2023-37398 | CRITICAL | 9.8 | 0.3% | Jan 29, 2025 | IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes ... |
| CVE-2023-35907 | CRITICAL | 9.8 | 0.3% | Jan 29, 2025 | IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes ... |
| CVE-2023-33838 | MEDIUM | 4.9 | 0.2% | Jan 29, 2025 | IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should ... |
| CVE-2023-35017 | MEDIUM | 5.9 | 0.2% | Jan 29, 2025 | IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtaine... |
| CVE-2023-50316 | CRITICAL | 9.8 | 0.3% | Jan 28, 2025 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 is vulnerable to SQL injection. A remote... |
| CVE-2023-52292 | MEDIUM | 5.4 | 0.2% | Jan 27, 2025 | IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to stored cross-site scripti... |
| CVE-2023-47159 | MEDIUM | 4.3 | 0.3% | Jan 27, 2025 | IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enume... |
| CVE-2023-46187 | MEDIUM | 5.4 | 0.3% | Jan 27, 2025 | IBM InfoSphere Master Data Management 11.6, 12.0, and 14.0 is vulnerable to stored cross-site scripting. This vulnerabil... |
| CVE-2023-50946 | MEDIUM | 6.5 | 0.3% | Jan 26, 2025 | IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that they should not have acc... |
| CVE-2023-50945 | MEDIUM | 5.5 | 0.1% | Jan 26, 2025 | IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user. |
| CVE-2023-38009 | MEDIUM | 5.9 | 0.2% | Jan 26, 2025 | IBM Cognos Mobile Client 1.1 iOS may be vulnerable to information disclosure through man in the middle techniques due to... |
| CVE-2023-38716 | HIGH | 7.5 | 0.3% | Jan 25, 2025 | IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could disclose sensitive ... |
| CVE-2023-38714 | HIGH | 7.5 | 0.3% | Jan 25, 2025 | IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, ... |
| CVE-2023-38713 | HIGH | 7.5 | 0.3% | Jan 25, 2025 | IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, ... |
| CVE-2023-38271 | MEDIUM | 6.5 | 0.3% | Jan 25, 2025 | IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, ... |
| CVE-2023-38013 | HIGH | 7.5 | 0.3% | Jan 25, 2025 | IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, ... |
| CVE-2023-38012 | MEDIUM | 5.3 | 0.5% | Jan 25, 2025 | IBM Cloud Pak System 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could allow a remote att... |
| CVE-2023-46401 | CRITICAL | 9.8 | 0.5% | Jan 23, 2025 | KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function. |
| CVE-2023-46400 | CRITICAL | 9.8 | 0.4% | Jan 23, 2025 | KWHotel 0.47 is vulnerable to CSV Formula Injection in the add guest function. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now