2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-22640 | HIGH | 8.8 | 0.9% | May 3, 2023 | A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0... |
| CVE-2023-22637 | CRITICAL | 9 | 0.6% | May 3, 2023 | An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiN... |
| CVE-2023-1178 | MEDIUM | 5.7 | 0.9% | May 3, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from 1... |
| CVE-2023-0805 | HIGH | 8.1 | 0.8% | May 3, 2023 | An issue has been discovered in GitLab EE affecting all versions starting from 15.2 before 15.9.6, all versions starting... |
| CVE-2023-0756 | HIGH | 8 | 1.0% | May 3, 2023 | An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15.... |
| CVE-2023-30205 | MEDIUM | 4.8 | 0.3% | May 3, 2023 | A stored cross-site scripting (XSS) vulnerability in DouPHP v1.7 allows attackers to execute arbitrary web scripts or HT... |
| CVE-2023-30204 | CRITICAL | 9.8 | 0.6% | May 3, 2023 | Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the judge_id parameter at /ph... |
| CVE-2023-2069 | MEDIUM | 4.3 | 0.8% | May 3, 2023 | An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting fr... |
| CVE-2023-1965 | MEDIUM | 6.5 | 0.4% | May 3, 2023 | An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting... |
| CVE-2023-1836 | MEDIUM | 5.4 | 0.8% | May 3, 2023 | A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 15.9.6, all v... |
| CVE-2023-1265 | MEDIUM | 4.5 | 0.8% | May 3, 2023 | An issue has been discovered in GitLab affecting all versions starting from 11.9 before 15.9.6, all versions starting fr... |
| CVE-2023-1204 | MEDIUM | 4.3 | 0.5% | May 3, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions star... |
| CVE-2023-0485 | MEDIUM | 6.5 | 1.0% | May 3, 2023 | An issue has been discovered in GitLab affecting all versions starting from 13.11 before 15.8.5, all versions starting f... |
| CVE-2023-0155 | MEDIUM | 5.4 | 0.8% | May 3, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1. Open redirects was p... |
| CVE-2023-30300 | MEDIUM | 5.5 | 0.3% | May 3, 2023 | An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop. |
| CVE-2023-24744 | MEDIUM | 6.1 | 0.5% | May 3, 2023 | Cross Site Scripting (XSS) vulnerability in Rediker Software AdminPlus 6.1.91.00 allows remote attackers to run arbitrar... |
| CVE-2023-25827 | MEDIUM | 6.1 | 0.9% | May 3, 2023 | Due to insufficient validation of parameters reflected in error messages by the legacy HTTP query API and the logging e... |
| CVE-2023-25826 | CRITICAL | 9.8 | 35.6% | May 3, 2023 | Due to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted OS co... |
| CVE-2023-26017 | MEDIUM | 4.8 | 0.4% | May 3, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BlueGlass Jobs for WordPress plugin <= 2.5.10.2 versio... |
| CVE-2023-25967 | HIGH | 8.8 | 0.3% | May 3, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in PeepSo Community by PeepSo plugin <= 6.0.2.0 versions. |
| CVE-2023-23881 | MEDIUM | 4.8 | 0.4% | May 3, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GreenTreeLabs Circles Gallery plugin <= 1.0.10 version... |
| CVE-2023-23875 | MEDIUM | 4.8 | 0.4% | May 3, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Himanshu Bing Site Verification plugin using Meta Tag ... |
| CVE-2023-23830 | MEDIUM | 6.1 | 0.4% | May 3, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team ProfilePress plugin <= 4.5.4 ... |
| CVE-2023-29240 | MEDIUM | 5.4 | 0.4% | May 3, 2023 | An authenticated attacker granted a Viewer or Auditor role on a BIG-IQ can upload arbitrary files using an undisclosed i... |
| CVE-2023-29163 | HIGH | 7.5 | 0.6% | May 3, 2023 | When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traff... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now