2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-29096HIGH8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contac...
CVE-2023-28788HIGH8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Page Visit Counter...
CVE-2023-28491HIGH7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Slidesho...
CVE-2023-26525HIGH8.1Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs Dokan – Bes...
CVE-2023-7018HIGH7.8Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
CVE-2023-30750HIGH8.1Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeMindsSolut...
CVE-2023-30495HIGH8.1Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Ultimate ...
CVE-2023-5011HIGH8.8Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursename' ...
CVE-2023-5010HIGH8.8Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursecode' ...
CVE-2023-5007HIGH8.8Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'id' paramete...
CVE-2023-49825HIGH8.1Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PenciDesign Soleda...
CVE-2023-35916HIGH7.5Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution Bui...
CVE-2023-35914HIGH7.5Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Woo Subscriptions.This issue affects Woo S...
CVE-2023-33330HIGH8.1Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Automa...
CVE-2023-33209HIGH8.1Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CrawlSpider SEO Ch...
CVE-2023-32128HIGH7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adastra Crypto Cry...
CVE-2023-31092HIGH8.1Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Foxskav Easy Bet.T...
CVE-2023-47852HIGH7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper Link ...
CVE-2023-36520HIGH8.1Authorization Bypass Through User-Controlled Key vulnerability in MarketingFire Editorial Calendar.This issue affects Ed...
CVE-2023-35876HIGH8.1Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Square.This issue affects WooC...
CVE-2023-32590HIGH7.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daniel Söderström ...
CVE-2023-50249HIGH7.5Sentry-Javascript is official Sentry SDKs for JavaScript. A ReDoS (Regular expression Denial of Service) vulnerability h...
CVE-2023-46147HIGH8.8Deserialization of Untrusted Data vulnerability in Themify Themify Ultra.This issue affects Themify Ultra: from n/a thro...
CVE-2023-37871HIGH7.5Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce GoCardless.This issue affects GoCardless: ...
CVE-2023-6562HIGH7.5JPX Fragment List (flst) box vulnerability in Kakadu 7.9 allows an attacker to exfiltrate local and remote files reachab...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now