2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-54413 | MEDIUM | 6.1 | — | Oct 22, 2026 | WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that all... |
| CVE-2023-38375 | MEDIUM | 6.1 | 0.3% | Oct 19, 2026 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embe... |
| CVE-2023-54412 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability in Email Template permis... |
| CVE-2023-54411 | MEDIUM | 5.9 | 0.3% | Oct 12, 2026 | Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derive... |
| CVE-2023-54410 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Frappe before 13.22.0 contains an improper authorization vulnerability that allows authenticated users to rename documen... |
| CVE-2023-54409 | MEDIUM | 4.8 | — | Oct 12, 2026 | Frappe before 13.46.1 and 14.x before 14.20.0 contains a cross-site scripting vulnerability because the html2text functi... |
| CVE-2023-54408 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | Frappe before 13.52.0 and 14.x before 14.31.0 contains an HTML injection vulnerability caused by weak escaping of user-s... |
| CVE-2023-54407 | MEDIUM | 4.9 | 0.3% | Oct 12, 2026 | Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to v... |
| CVE-2023-54406 | MEDIUM | 4.9 | 0.3% | Oct 12, 2026 | Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can... |
| CVE-2023-25996 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. Booster Elite for WooCommerce booster-e... |
| CVE-2023-5649 | MEDIUM | 5.5 | 0.1% | Oct 8, 2026 | An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a... |
| CVE-2023-5648 | MEDIUM | 6.1 | 0.3% | Oct 8, 2026 | In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL... |
| CVE-2023-51769 | MEDIUM | 6.1 | 0.2% | Sep 14, 2026 | Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages. |
| CVE-2023-50462 | MEDIUM | 5.3 | 0.3% | Sep 14, 2026 | An issue was discovered in the content_consent (aka Content Consent) extension through 2.0.1 for TYPO3. It fails to veri... |
| CVE-2023-50460 | MEDIUM | 5.4 | 0.2% | Sep 14, 2026 | An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticate... |
| CVE-2023-50459 | MEDIUM | 5.4 | 0.2% | Sep 14, 2026 | An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for ... |
| CVE-2023-46035 | MEDIUM | 5.9 | 0.4% | Sep 14, 2026 | The svg_optimizer gem before 0.3.0 for Ruby performs entity expansion on untrusted documents. |
| CVE-2023-45023 | MEDIUM | 4.2 | 0.1% | Sep 14, 2026 | The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the ... |
| CVE-2023-40772 | MEDIUM | 4.3 | 1.0% | Sep 14, 2026 | A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information ... |
| CVE-2023-34854 | MEDIUM | 6.6 | 0.2% | Sep 14, 2026 | HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function. |
| CVE-2023-29377 | MEDIUM | 6.6 | 0.5% | Sep 14, 2026 | An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By us... |
| CVE-2023-54396 | MEDIUM | 6.5 | 0.4% | Sep 9, 2026 | PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT data during deserialization. Attackers ... |
| CVE-2023-54395 | MEDIUM | 4.3 | 0.3% | Sep 9, 2026 | PocketMine-MP versions before 4.12.5 contain a denial-of-service vulnerability in ModalFormResponsePacket processing tha... |
| CVE-2023-54394 | MEDIUM | 4.3 | 0.4% | Sep 9, 2026 | PocketMine-MP before 4.18.0-ALPHA2 fails to rate-limit mismatch type InventoryTransactionPacket requests, allowing attac... |
| CVE-2023-54392 | MEDIUM | 6.5 | 0.4% | Sep 9, 2026 | PocketMine-MP versions >= 4.20.0 before 4.22.3 (and before 5.2.1 in the 5.x branch) fail to validate NBT tag types in Bl... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now