2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-27460 | HIGH | 8.8 | 0.4% | Jun 3, 2024 | Missing Authorization vulnerability in CodePeople, paypaldev CP Contact Form with Paypal allows Functionality Misuse.Thi... |
| CVE-2023-27437 | LOW | 3.7 | 0.3% | Jun 3, 2024 | Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf allows Functionality Misuse.This issue affe... |
| CVE-2023-26523 | MEDIUM | 4.3 | 0.3% | Jun 3, 2024 | Missing Authorization vulnerability in CodePeople Calculated Fields Form allows Functionality Misuse.This issue affects ... |
| CVE-2023-26521 | MEDIUM | 4.3 | 0.3% | Jun 3, 2024 | Missing Authorization vulnerability in CodePeople Search in Place allows Functionality Misuse.This issue affects Search ... |
| CVE-2023-24373 | CRITICAL | 9.8 | 0.4% | Jun 3, 2024 | External Control of Assumed-Immutable Web Parameter vulnerability in WpDevArt Booking calendar, Appointment Booking Syst... |
| CVE-2023-23738 | MEDIUM | 5.3 | 0.3% | Jun 3, 2024 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Brai... |
| CVE-2023-23735 | MEDIUM | 6.1 | 0.3% | Jun 3, 2024 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force Spectra ... |
| CVE-2023-23730 | MEDIUM | 5.3 | 0.4% | Jun 3, 2024 | Improper Restriction of Excessive Authentication Attempts vulnerability in Brainstorm Force Spectra allows Functionality... |
| CVE-2023-52162 | MEDIUM | 6.7 | 0.6% | Jun 3, 2024 | Mercusys MW325R EU V3 (Firmware MW325R(EU)_V3_1.11.0 Build 221019) is vulnerable to a stack-based buffer overflow, which... |
| CVE-2023-51219 | CRITICAL | 9.6 | 0.5% | Jun 3, 2024 | A deep link validation issue in KakaoTalk 10.4.3 allowed a remote adversary to direct users to run any attacker-controll... |
| CVE-2023-43556 | HIGH | 8.8 | 0.1% | Jun 3, 2024 | Memory corruption in Hypervisor when platform information mentioned is not aligned. |
| CVE-2023-43555 | HIGH | 7.5 | 0.2% | Jun 3, 2024 | Information disclosure in Video while parsing mp2 clip with invalid section length. |
| CVE-2023-43551 | HIGH | 7.5 | 0.3% | Jun 3, 2024 | Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase a... |
| CVE-2023-43545 | HIGH | 7.8 | 0.1% | Jun 3, 2024 | Memory corruption when more scan frequency list or channels are sent from the user space. |
| CVE-2023-43544 | HIGH | 7.8 | 0.1% | Jun 3, 2024 | Memory corruption when IPC callback handle is used after it has been released during register callback by another thread... |
| CVE-2023-43543 | HIGH | 7 | 0.1% | Jun 3, 2024 | Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of... |
| CVE-2023-43542 | HIGH | 7.8 | 0.1% | Jun 3, 2024 | Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked. |
| CVE-2023-43538 | HIGH | 7.8 | 0.1% | Jun 3, 2024 | Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization. |
| CVE-2023-43537 | HIGH | 7.5 | 0.2% | Jun 3, 2024 | Information disclosure while handling T2LM Action Frame in WLAN Host. |
| CVE-2023-48789 | MEDIUM | 6.5 | 0.5% | Jun 3, 2024 | A client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6.0.14 allows attacker t... |
| CVE-2023-51436 | MEDIUM | 5.9 | 0.2% | Jun 3, 2024 | Cross-site scripting vulnerability exists in UNIVERSAL PASSPORT RX versions 1.0.0 to 1.0.8, which may allow a remote aut... |
| CVE-2023-42427 | MEDIUM | 6.5 | 0.3% | Jun 3, 2024 | Cross-site scripting vulnerability exists in UNIVERSAL PASSPORT RX versions 1.0.0 to 1.0.7, which may allow a remote aut... |
| CVE-2023-6382 | MEDIUM | 5.4 | 0.3% | Jun 1, 2024 | The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl... |
| CVE-2023-46810 | HIGH | 7.3 | 0.3% | May 31, 2024 | A local privilege escalation vulnerability in Ivanti Secure Access Client for Linux before 22.7R1, allows a low privileg... |
| CVE-2023-38551 | HIGH | 8.2 | 1.0% | May 31, 2024 | A CRLF Injection vulnerability in Ivanti Connect Secure (9.x, 22.x) allows an authenticated high-privileged user to inje... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now