2023 CVE Vulnerabilities

31,442 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-25027MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Chained Quiz plugin <= 1.3.2.5 versions.
CVE-2023-25024MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Icegram Icegram Collect plugin <= 1.3.8 versions.
CVE-2023-25023MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Saleswonder.Biz Webinar ignition plugin <= 2.14.2 vers...
CVE-2023-25022MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Watu Quiz plugin <= 3.3.8 versions.
CVE-2023-25046MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Podlove Podlove Podcast Publisher plugin <= 3.8.2 vers...
CVE-2023-24398MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Snap Creek Software EZP Coming Soon Page plugin <= 1.0...
CVE-2023-25061MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter...
CVE-2023-25059MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in avalex GmbH avalex – Automatically secure legal texts ...
CVE-2023-24402MEDIUM4.8Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Veribo, Roland Murg WP Booking System – Booking Calendar plug...
CVE-2023-1937MEDIUM4.3A vulnerability, which was classified as problematic, was found in zhenfeng13 My-Blog. Affected is an unknown function o...
CVE-2023-28051HIGH7.8 Dell Power Manager, versions 3.10 and prior, contains an Improper Access Control vulnerability. A low-privileged attack...
CVE-2023-29478CRITICAL9.8BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to a...
CVE-2023-26978CRITICAL9.8TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName p...
CVE-2023-26848CRITICAL9.8TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org paramete...
CVE-2023-26820HIGH7.5siteproxy v1.0 was discovered to contain a path traversal vulnerability via the component index.js.
CVE-2023-26817HIGH8.8codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution (RCE) vulnerability via the c...
CVE-2023-27021CRITICAL9.8Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the formSetFirewallCfg function....
CVE-2023-27020CRITICAL9.8Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the saveParentControlInfo functi...
CVE-2023-27019CRITICAL9.8Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_458FBC function. This vu...
CVE-2023-27018CRITICAL9.8Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45EC1C function. This vu...
CVE-2023-27017CRITICAL9.8Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45DC58 function. This vu...
CVE-2023-27016CRITICAL9.8Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the R7WebsSecurityHandler functi...
CVE-2023-27015CRITICAL9.8Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_4A75C0 function. This vu...
CVE-2023-27014CRITICAL9.8Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_46AC38 function. This vu...
CVE-2023-27013CRITICAL9.8Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the get_parentControl_list_Info ...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now