2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-42234 | MEDIUM | 5.4 | 0.2% | Jan 13, 2025 | Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request Forgery (CSRF) via the WSCView fu... |
| CVE-2023-42233 | MEDIUM | 6.1 | 0.2% | Jan 13, 2025 | Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the Filter/FilterEdit... |
| CVE-2023-42232 | HIGH | 7.5 | 0.9% | Jan 13, 2025 | Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function... |
| CVE-2023-42231 | HIGH | 8.1 | 0.3% | Jan 13, 2025 | Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can d... |
| CVE-2023-42230 | MEDIUM | 6.1 | 0.3% | Jan 13, 2025 | Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the WSCView/Save func... |
| CVE-2023-42229 | MEDIUM | 6.5 | 0.7% | Jan 13, 2025 | Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal. Arbitrary files can be created ... |
| CVE-2023-42228 | HIGH | 8.8 | 0.4% | Jan 13, 2025 | Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can e... |
| CVE-2023-42227 | HIGH | 7.5 | 0.7% | Jan 13, 2025 | Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function. |
| CVE-2023-42226 | HIGH | 7.5 | 0.7% | Jan 13, 2025 | Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment functio... |
| CVE-2023-42225 | HIGH | 7.5 | 0.7% | Jan 13, 2025 | Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Attachment/DownloadTempF... |
| CVE-2023-28354 | CRITICAL | 9.8 | 1.2% | Jan 9, 2025 | An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call check_nrpe against aff... |
| CVE-2023-24012 | HIGH | 8.2 | 0.3% | Jan 9, 2025 | An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and ... |
| CVE-2023-24011 | HIGH | 8.2 | 0.3% | Jan 9, 2025 | An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and ... |
| CVE-2023-24010 | HIGH | 8.2 | 0.3% | Jan 9, 2025 | An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and ... |
| CVE-2023-1907 | HIGH | 7.5 | 0.4% | Jan 9, 2025 | A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be... |
| CVE-2023-38037 | MEDIUM | 5.5 | 0.3% | Jan 9, 2025 | ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. The temporary file's permissi... |
| CVE-2023-28362 | MEDIUM | 4 | 0.3% | Jan 9, 2025 | The redirect_to method in Rails allows provided values to contain characters which are not legal in an HTTP header value... |
| CVE-2023-28120 | MEDIUM | 5.3 | 0.9% | Jan 9, 2025 | There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user inp... |
| CVE-2023-27539 | MEDIUM | 5.3 | 1.1% | Jan 9, 2025 | There is a denial of service vulnerability in the header parsing component of Rack. |
| CVE-2023-27531 | MEDIUM | 5.3 | 0.5% | Jan 9, 2025 | There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code |
| CVE-2023-23913 | MEDIUM | 6.3 | 0.6% | Jan 9, 2025 | There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML ... |
| CVE-2023-35685 | HIGH | 7.8 | 0.1% | Jan 8, 2025 | In DevmemIntMapPages of devicemem_server.c, there is a possible physical page uaf due to a logic error in the code. This... |
| CVE-2023-52955 | HIGH | 7.5 | 0.2% | Jan 8, 2025 | Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulner... |
| CVE-2023-52954 | HIGH | 7.5 | 0.1% | Jan 8, 2025 | Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability... |
| CVE-2023-52953 | CRITICAL | 9.1 | 0.3% | Jan 8, 2025 | Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affec... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now