2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-52903MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: io_uring: lock overflowing for IOPOLL syzbot repor...
CVE-2023-52902MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: nommu: fix memory leak in do_mmap() error path The...
CVE-2023-52901MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Check endpoint is valid before dereferen...
CVE-2023-52900MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix general protection fault in nilfs_btree...
CVE-2023-52899MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: Add exception protection processing for vd in axi_c...
CVE-2023-52898MEDIUM4.7In the Linux kernel, the following vulnerability has been resolved: xhci: Fix null pointer dereference when host dies ...
CVE-2023-52897MEDIUM4.7In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: do not warn on record without old_ro...
CVE-2023-52896MEDIUM4.7In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between quota rescan and disable le...
CVE-2023-52895MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: don't reissue in case of poll race o...
CVE-2023-52894MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: fix potential NULL ptr deref in...
CVE-2023-52893MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: gsmi: fix null-deref in gsmi_get_variable We can g...
CVE-2023-1673——Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r...
CVE-2023-3419HIGH7.2The tagDiv Opt-In Builder plugin is vulnerable to Blind SQL Injection via the 'couponId' parameter of the 'recreate_stri...
CVE-2023-3416HIGH7.2The tagDiv Opt-In Builder plugin is vulnerable to Blind SQL Injection via the 'subscriptionCouponId' parameter via the '...
CVE-2023-0714CRITICAL9.8The Metform Elementor Contact Form Builder for WordPress is vulnerable to Arbitrary File Upload due to insufficient file...
CVE-2023-5505MEDIUM6.8The BackWPup plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.0.1 via the j...
CVE-2023-52889MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix null pointer deref when receiving skb...
CVE-2023-3409MEDIUM4.3The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.1. This...
CVE-2023-3408MEDIUM4.3The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.1. This...
CVE-2023-4730MEDIUM5.3The LadiApp plugn for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on ...
CVE-2023-4604MEDIUM6.1The Slideshow, Image Slider by 2J plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘post’ pa...
CVE-2023-4507MEDIUM6.1The Admission AppManager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'q' parameter in v...
CVE-2023-4027MEDIUM5.3The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability che...
CVE-2023-4025MEDIUM5.3The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability che...
CVE-2023-4024MEDIUM5.3The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability che...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now