2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-23886 | MEDIUM | 5.4 | 0.6% | Dec 9, 2024 | Missing Authorization vulnerability in mg12 WP-RecentComments allows Exploiting Incorrectly Configured Access Control Se... |
| CVE-2023-23868 | MEDIUM | 5.4 | 0.6% | Dec 9, 2024 | Missing Authorization vulnerability in WPFactory Cost of Goods for WooCommerce allows Exploiting Incorrectly Configured ... |
| CVE-2023-23834 | CRITICAL | 9.8 | 0.6% | Dec 9, 2024 | Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2023-23825 | HIGH | 8.8 | 0.5% | Dec 9, 2024 | Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2023-23823 | MEDIUM | 4.3 | 0.4% | Dec 9, 2024 | Missing Authorization vulnerability in Clever Widgets Enhanced Text Widget allows Exploiting Incorrectly Configured Acce... |
| CVE-2023-23814 | LOW | 3.8 | 0.4% | Dec 9, 2024 | Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Exploiting Incorrectly Configured... |
| CVE-2023-23726 | MEDIUM | 5.4 | 0.3% | Dec 9, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Tickera.com Tickera allows Cross Site Request Forgery.This issue affe... |
| CVE-2023-23725 | MEDIUM | 4.3 | 0.5% | Dec 9, 2024 | Missing Authorization vulnerability in Chris Baldelomar Shortcodes allows Exploiting Incorrectly Configured Access Contr... |
| CVE-2023-23716 | MEDIUM | 4.3 | 0.5% | Dec 9, 2024 | Missing Authorization vulnerability in Zendesk Zendesk Support for WordPress allows Exploiting Incorrectly Configured Ac... |
| CVE-2023-23715 | HIGH | 8.8 | 0.5% | Dec 9, 2024 | Missing Authorization vulnerability in JobBoardWP JobBoardWP – Job Board Listings and Submissions allows Exploiting Inco... |
| CVE-2023-22708 | MEDIUM | 4.3 | 0.6% | Dec 9, 2024 | Missing Authorization vulnerability in Karim Salman Kraken.io Image Optimizer allows Exploiting Incorrectly Configured A... |
| CVE-2023-22701 | CRITICAL | 9.8 | 1.0% | Dec 9, 2024 | Missing Authorization vulnerability in Shopfiles Ltd Ebook Store allows Exploiting Incorrectly Configured Access Control... |
| CVE-2023-50913 | CRITICAL | 9.1 | 0.4% | Dec 5, 2024 | Oxide control plane software before 5 allows SSRF. |
| CVE-2023-48010 | CRITICAL | 9.8 | 0.4% | Dec 5, 2024 | STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface. Code running as... |
| CVE-2023-6978 | MEDIUM | 6.1 | 0.3% | Dec 4, 2024 | The WP Job Manager – Company Profiles plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'comp... |
| CVE-2023-52944 | MEDIUM | 4.3 | 0.4% | Dec 4, 2024 | Incorrect authorization vulnerability in ActionRule webapi component in Synology Surveillance Station before 9.2.0-11289... |
| CVE-2023-52943 | MEDIUM | 4.3 | 0.4% | Dec 4, 2024 | Incorrect authorization vulnerability in Alert.Setting webapi component in Synology Surveillance Station before 9.2.0-11... |
| CVE-2023-7255 | — | — | — | Dec 3, 2024 | Rejected reason: Assigned as duplicate and no longer used. |
| CVE-2023-52922 | HIGH | 7.8 | 0.3% | Nov 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: Fix UAF in bcm_proc_show() BUG: KASAN: s... |
| CVE-2023-29001 | HIGH | 7.5 | 0.5% | Nov 27, 2024 | Contiki-NG is an open-source, cross-platform operating system for IoT devices. The Contiki-NG operating system processes... |
| CVE-2023-2142 | MEDIUM | 6.1 | 0.4% | Nov 26, 2024 | In Nunjucks versions prior to version 3.2.4, it was possible to bypass the restrictions which are provided by the autoe... |
| CVE-2023-1521 | HIGH | 7.8 | 0.4% | Nov 26, 2024 | On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the ... |
| CVE-2023-0163 | HIGH | 8.4 | 0.3% | Nov 26, 2024 | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Mozilla Convi... |
| CVE-2023-45181 | MEDIUM | 6.1 | 0.3% | Nov 25, 2024 | IBM Jazz Foundation 7.0.2 and below are vulnerable to cross-site scripting. This vulnerability allows users to embed arb... |
| CVE-2023-26280 | MEDIUM | 5.3 | 0.4% | Nov 25, 2024 | IBM Jazz Foundation 7.0.2 and 7.0.3 could allow a user to change their dashboard using a specially crafted HTTP request ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now