2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-27330 | HIGH | 7.8 | 3.9% | May 3, 2024 | Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote att... |
| CVE-2023-27329 | HIGH | 7.8 | 3.9% | May 3, 2024 | Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attacke... |
| CVE-2023-27328 | HIGH | 7.8 | 0.3% | May 3, 2024 | Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attac... |
| CVE-2023-27327 | HIGH | 7.5 | 0.4% | May 3, 2024 | Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows... |
| CVE-2023-27326 | HIGH | 8.2 | 1.3% | May 3, 2024 | Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local... |
| CVE-2023-27325 | HIGH | 7.8 | 0.4% | May 3, 2024 | Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows lo... |
| CVE-2023-27324 | HIGH | 7.8 | 0.4% | May 3, 2024 | Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows lo... |
| CVE-2023-27323 | HIGH | 7.8 | 0.2% | May 3, 2024 | Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows ... |
| CVE-2023-27322 | HIGH | 7.8 | 0.4% | May 3, 2024 | Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows lo... |
| CVE-2023-7067 | MEDIUM | 4.3 | 0.3% | May 2, 2024 | The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) pl... |
| CVE-2023-7064 | HIGH | 7.5 | 0.9% | May 2, 2024 | The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to PHP Object Injection in all vers... |
| CVE-2023-7030 | MEDIUM | 6.4 | 0.3% | May 2, 2024 | The Collapse-O-Matic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'expand' shortco... |
| CVE-2023-6962 | MEDIUM | 5.3 | 0.4% | May 2, 2024 | The WP Meta SEO plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includin... |
| CVE-2023-6961 | MEDIUM | 6.1 | 0.4% | May 2, 2024 | The WP Meta SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Referer’ header in all versio... |
| CVE-2023-6731 | MEDIUM | 4.3 | 0.4% | May 2, 2024 | The WP Show Posts plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on... |
| CVE-2023-6214 | HIGH | 7.5 | 0.6% | May 2, 2024 | The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all ... |
| CVE-2023-50685 | HIGH | 7.5 | 1.2% | May 2, 2024 | An issue in Hipcam Cameras RealServer v.1.0 allows a remote attacker to cause a denial of service via a crafted script t... |
| CVE-2023-47727 | MEDIUM | 4.3 | 0.3% | May 2, 2024 | IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.20.0 could al... |
| CVE-2023-37244 | HIGH | 7 | 0.2% | May 2, 2024 | The affected AutomationManager.AgentService.exe application contains a TOCTOU race condition vulnerability that allows s... |
| CVE-2023-41971 | HIGH | 7.8 | 0.2% | May 2, 2024 | An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Windows a... |
| CVE-2023-41970 | HIGH | 7.8 | 0.1% | May 2, 2024 | An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on Windows during the Repair A... |
| CVE-2023-28798 | CRITICAL | 9.8 | 0.4% | May 2, 2024 | An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code ex... |
| CVE-2023-51631 | MEDIUM | 6.8 | 1.0% | May 2, 2024 | D-Link DIR-X3260 prog.cgi SetUsersSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnera... |
| CVE-2023-46295 | CRITICAL | 9.8 | 0.9% | May 1, 2024 | An issue was discovered in Teledyne FLIR M300 2.00-19. Unauthenticated remote code execution can occur in the web server... |
| CVE-2023-46294 | LOW | 3.4 | 0.1% | May 1, 2024 | An issue was discovered in Teledyne FLIR M300 2.00-19. User account passwords are encrypted locally, and can be decrypte... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now