2023 CVE Vulnerabilities

31,442 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-20027HIGH8.6A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Softwar...
CVE-2023-28610CRITICAL9.8The update process in OMICRON StationGuard and OMICRON StationScout before 2.21 can be exploited by providing a modified...
CVE-2023-28772MEDIUM6.7An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow.
CVE-2023-27135CRITICAL9.8TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled param...
CVE-2023-27078CRITICAL9.8A command injection issue was found in TP-Link MR3020 v.1_150921 that allows a remote attacker to execute arbitrary comm...
CVE-2023-27077HIGH7.5Stack Overflow vulnerability found in 360 D901 allows a remote attacker to cause a Distributed Denial of Service (DDOS) ...
CVE-2023-23728MEDIUM5.4Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Flipclock plugin <= 1.7.4 versions.
CVE-2023-23722MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP eBay Product Feeds plugin <= 3.3.1 ver...
CVE-2023-22702MEDIUM5.4Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Appl...
CVE-2023-27655Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservatio...
CVE-2023-27079HIGH7.5Command Injection vulnerability found in Tenda G103 v.1.0.05 allows an attacker to obtain sensitive information via a cr...
CVE-2023-23864MEDIUM5.4Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Michael Aronoff Very Simple Google Maps plugin <= 2.8.4...
CVE-2023-23650MEDIUM5.4Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in MainWP MainWP Code Snippets Extension plugin <= 4...
CVE-2023-22716MEDIUM4.8Auth. (admin+) Cross-Site Scripting vulnerability in OOPSpam OOPSpam Anti-Spam plugin <= 1.1.35 versions.
CVE-2023-22715MEDIUM4.8Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Lester 'GaMerZ' Chan WP-CommentNavi plugin <= 1.12.1 versions...
CVE-2023-22712MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TemplatesNext TemplatesNext ToolKit plugin <= 3....
CVE-2023-28422MEDIUM4.8Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plug...
CVE-2023-22704MEDIUM6.1Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin <= 8.1.8 versions.
CVE-2023-1595HIGH7.2A vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unkn...
CVE-2023-1594CRITICAL9.8A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService o...
CVE-2023-1593MEDIUM6.1A vulnerability, which was classified as problematic, has been found in SourceCodester Automatic Question Paper Generato...
CVE-2023-1592CRITICAL9.8A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This v...
CVE-2023-1591CRITICAL9.8A vulnerability classified as critical has been found in SourceCodester Automatic Question Paper Generator System 1.0. T...
CVE-2023-1590CRITICAL9.8A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. Thi...
CVE-2023-1589CRITICAL9.8A vulnerability has been found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now