2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-49854 | HIGH | 8.8 | 0.3% | Dec 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Tribe Interactive Caddy – Smart Side Cart for WooCommerce.This issue ... |
| CVE-2023-32727 | HIGH | 7.2 | 0.9% | Dec 18, 2023 | An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious comman... |
| CVE-2023-32726 | HIGH | 8.1 | 0.7% | Dec 18, 2023 | The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS se... |
| CVE-2023-32725 | HIGH | 8.8 | 0.8% | Dec 18, 2023 | The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The ... |
| CVE-2023-41314 | HIGH | 8.2 | 0.9% | Dec 18, 2023 | The api /api/snapshot and /api/get_log_file would allow unauthenticated access. It could allow a DoS attack or get arbit... |
| CVE-2023-6909 | HIGH | 7.5 | 89.7% | Dec 18, 2023 | Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. |
| CVE-2023-50981 | HIGH | 7.5 | 0.8% | Dec 18, 2023 | ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (infinite loop)... |
| CVE-2023-50980 | HIGH | 7.5 | 0.8% | Dec 18, 2023 | gf2n.cpp in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (application crash) via ... |
| CVE-2023-6904 | HIGH | 8.8 | 0.3% | Dec 17, 2023 | A vulnerability classified as problematic was found in Jahastech NxFilter 4.3.2.5. This vulnerability affects unknown co... |
| CVE-2023-3907 | HIGH | 8.8 | 0.6% | Dec 17, 2023 | A privilege escalation vulnerability in GitLab EE affecting all versions from 16.0 prior to 16.4.4, 16.5 prior to 16.5.4... |
| CVE-2023-50271 | HIGH | 7.5 | 0.5% | Dec 17, 2023 | A potential security vulnerability has been identified with HP-UX System Management Homepage (SMH). This vulnerability ... |
| CVE-2023-49834 | HIGH | 8.8 | 0.3% | Dec 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 FOX – Currency Switcher Professional for WooCommerce.This ... |
| CVE-2023-49824 | HIGH | 8.8 | 0.2% | Dec 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite Product Catalog Feed by PixelYourSite.This issue affect... |
| CVE-2023-49816 | HIGH | 8.8 | 0.3% | Dec 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Innovative Solutions Fix My Feed RSS Repair.This issue affects Fix My... |
| CVE-2023-49775 | HIGH | 8.8 | 0.3% | Dec 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Denis Kobozev CSV Importer.This issue affects CSV Importer: from n/a ... |
| CVE-2023-49769 | HIGH | 8.8 | 0.3% | Dec 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Dr... |
| CVE-2023-49751 | HIGH | 8.8 | 0.3% | Dec 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu Block for Font Awesome.This issue affects Block for F... |
| CVE-2023-24380 | HIGH | 8.8 | 0.3% | Dec 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Webbjocke Simple Wp Sitemap.This issue affects Simple Wp Sitemap: fro... |
| CVE-2023-6893 | HIGH | 7.5 | 70.2% | Dec 17, 2023 | A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK) and classified as proble... |
| CVE-2023-6891 | HIGH | 7.8 | 0.3% | Dec 17, 2023 | A vulnerability has been found in PeaZip 9.4.0 and classified as problematic. Affected by this vulnerability is an unkno... |
| CVE-2023-50784 | HIGH | 7.5 | 1.9% | Dec 16, 2023 | A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remote attacker... |
| CVE-2023-39340 | HIGH | 7.5 | 2.4% | Dec 16, 2023 | A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific reque... |
| CVE-2023-50728 | HIGH | 7.5 | 0.7% | Dec 15, 2023 | octokit/webhooks is a GitHub webhook events toolset for Node.js. Starting in 9.26.0 and prior to 9.26.3, 10.9.2, 11.1.2,... |
| CVE-2023-50265 | HIGH | 7.5 | 0.9% | Dec 15, 2023 | Bazarr manages and downloads subtitles. Prior to 1.3.1, the /api/swaggerui/static endpoint in bazarr/app/ui.py does not ... |
| CVE-2023-50264 | HIGH | 7.5 | 0.9% | Dec 15, 2023 | Bazarr manages and downloads subtitles. Prior to 1.3.1, Bazarr contains an arbitrary file read in /system/backup/downloa... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now