2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-42797 | HIGH | 7.2 | 0.5% | Jan 9, 2024 | A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.20), CP-8050 MASTER MODULE (All ... |
| CVE-2023-50930 | HIGH | 7.1 | 0.2% | Jan 9, 2024 | An issue was discovered in savignano S/Notify before 4.0.2 for Jira. While an administrative user is logged on, the conf... |
| CVE-2023-39336 | HIGH | 8.8 | 10.0% | Jan 9, 2024 | An unspecified SQL Injection vulnerability in Ivanti Endpoint Manager released prior to 2022 SU 5 allows an attacker wi... |
| CVE-2023-27098 | HIGH | 7.5 | 0.5% | Jan 9, 2024 | TP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel. |
| CVE-2023-50162 | HIGH | 7.2 | 1.0% | Jan 9, 2024 | SQL injection vulnerability in EmpireCMS v7.5, allows remote attackers to execute arbitrary code and obtain sensitive in... |
| CVE-2023-52074 | HIGH | 8.8 | 0.3% | Jan 8, 2024 | FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component system/site/webconfig_updagt... |
| CVE-2023-52073 | HIGH | 8.8 | 0.3% | Jan 8, 2024 | FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/config_footer_u... |
| CVE-2023-52072 | HIGH | 8.8 | 0.3% | Jan 8, 2024 | FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/userconfig_upda... |
| CVE-2023-7218 | HIGH | 7.2 | 1.3% | Jan 8, 2024 | A vulnerability, which was classified as critical, was found in Totolink N350RT 9.3.5u.6139_B202012. Affected is the fun... |
| CVE-2023-52202 | HIGH | 7.2 | 0.6% | Jan 8, 2024 | Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Folder Feedburner Playlist Fr... |
| CVE-2023-52201 | HIGH | 8.8 | 0.5% | Jan 8, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brian D. Goad pTyp... |
| CVE-2023-52142 | HIGH | 8.8 | 0.5% | Jan 8, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cool Plugins Event... |
| CVE-2023-51508 | HIGH | 7.5 | 0.5% | Jan 8, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Database Cleaner: Clean, Optimize... |
| CVE-2023-51490 | HIGH | 7.5 | 0.5% | Jan 8, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPMU DEV Defender Security – Malware Scanner... |
| CVE-2023-51408 | HIGH | 7.5 | 0.5% | Jan 8, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StudioWombat WP Optin Wheel – Gamified Optin... |
| CVE-2023-51406 | HIGH | 7.5 | 0.5% | Jan 8, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team FastDup – Fastest WordPress Migra... |
| CVE-2023-49961 | HIGH | 7.5 | 0.4% | Jan 8, 2024 | WALLIX Bastion 7.x, 8.x, 9.x and 10.x and WALLIX Access Manager 3.x and 4.x have Incorrect Access Control which can lead... |
| CVE-2023-52216 | HIGH | 8.8 | 0.2% | Jan 8, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Yevhen Kotelnytskyi JS & CSS Script Optimizer.This issue affects JS &... |
| CVE-2023-52206 | HIGH | 7.2 | 0.5% | Jan 8, 2024 | Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-bui... |
| CVE-2023-52205 | HIGH | 7.2 | 0.6% | Jan 8, 2024 | Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 SoundCloud Player with Playlist Free.This iss... |
| CVE-2023-52204 | HIGH | 8.8 | 0.5% | Jan 8, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Javik Randomize.Th... |
| CVE-2023-47890 | HIGH | 8.8 | 1.1% | Jan 8, 2024 | pyLoad 0.5.0 is vulnerable to Unrestricted File Upload. |
| CVE-2023-6845 | HIGH | 8.8 | 0.3% | Jan 8, 2024 | The CommentTweets WordPress plugin through 0.6 does not have CSRF checks in some places, which could allow attackers to ... |
| CVE-2023-6750 | HIGH | 7.5 | 2.0% | Jan 8, 2024 | The Clone WordPress plugin before 2.4.3 uses buffer files to store in-progress backup informations, which is stored at a... |
| CVE-2023-6631 | HIGH | 7.8 | 0.2% | Jan 8, 2024 | PowerSYSTEM Center versions 2020 Update 16 and prior contain a vulnerability that may allow an authorized local user to ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now