2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-20248 | MEDIUM | 5.4 | 0.4% | Apr 24, 2024 | A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow ... |
| CVE-2023-51477 | CRITICAL | 9.8 | 0.7% | Apr 24, 2024 | Improper Authentication vulnerability in BUDDYBOSS DMCC BuddyBoss Theme allows Accessing Functionality Not Properly Cons... |
| CVE-2023-51472 | CRITICAL | 9.8 | 0.7% | Apr 24, 2024 | Improper Authentication vulnerability in Mestres do WP Checkout Mestres WP allows Privilege Escalation.This issue affect... |
| CVE-2023-51471 | HIGH | 8.2 | 0.6% | Apr 24, 2024 | Improper Authentication vulnerability in Mestres do WP Checkout Mestres WP allows Accessing Functionality Not Properly C... |
| CVE-2023-51425 | CRITICAL | 9.8 | 0.6% | Apr 24, 2024 | Improper Privilege Management vulnerability in Jacques Malgrange Rencontre – Dating Site allows Privilege Escalation.Thi... |
| CVE-2023-51405 | CRITICAL | 9.8 | 0.7% | Apr 24, 2024 | Improper Authentication vulnerability in Repute Infosystems BookingPress allows Accessing Functionality Not Properly Con... |
| CVE-2023-48763 | MEDIUM | 5.3 | 0.4% | Apr 24, 2024 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS vulnerability in Crocoblock JetFormBuilder ... |
| CVE-2023-47774 | MEDIUM | 5.4 | 0.3% | Apr 24, 2024 | Improper Restriction of Rendered UI Layers or Frames vulnerability in Automattic Jetpack allows Clickjacking.This issue ... |
| CVE-2023-47504 | CRITICAL | 9.8 | 1.5% | Apr 24, 2024 | Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly... |
| CVE-2023-32127 | MEDIUM | 5.3 | 0.4% | Apr 24, 2024 | Missing Authorization vulnerability in Daniel Powney Multi Rating allows Functionality Misuse.This issue affects Multi R... |
| CVE-2023-31090 | HIGH | 8.8 | 0.8% | Apr 24, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Fr... |
| CVE-2023-25790 | MEDIUM | 5.3 | 0.5% | Apr 24, 2024 | Improper Authentication, Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabil... |
| CVE-2023-25785 | MEDIUM | 5.3 | 0.4% | Apr 24, 2024 | Missing Authorization vulnerability in Shoaib Saleem WP Post Rating allows Functionality Misuse.This issue affects WP Po... |
| CVE-2023-23989 | MEDIUM | 6.5 | 0.4% | Apr 24, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss Registra... |
| CVE-2023-23985 | MEDIUM | 5.3 | 0.4% | Apr 24, 2024 | Missing Authorization vulnerability in Quiz Maker team Quiz Maker.This issue affects Quiz Maker: from n/a through 6.3.9.... |
| CVE-2023-23976 | HIGH | 7.5 | 0.5% | Apr 24, 2024 | Incorrect Default Permissions vulnerability in Metagauss RegistrationMagic allows Accessing Functionality Not Properly C... |
| CVE-2023-7253 | MEDIUM | 6.1 | 0.6% | Apr 24, 2024 | The Import WP WordPress plugin before 2.13.1 does not prevent users with the administrator role from pinging conducting... |
| CVE-2023-48939 | — | — | — | Apr 23, 2024 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-48938 | — | — | — | Apr 23, 2024 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-47357 | — | — | — | Apr 23, 2024 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-47731 | MEDIUM | 5.4 | 0.3% | Apr 23, 2024 | IBM QRadar Suite Software 1.10.12.0 through 1.10.19.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 is vulne... |
| CVE-2023-48184 | LOW | 3.9 | 0.3% | Apr 23, 2024 | QuickJS before 7414e5f has a quickjs.h JS_FreeValueRT use-after-free because of incorrect garbage collection of async fu... |
| CVE-2023-48183 | HIGH | 7.5 | 0.6% | Apr 23, 2024 | QuickJS before c4cdd61 has a build_for_in_iterator NULL pointer dereference because of an erroneous lexical scope of "th... |
| CVE-2023-6833 | MEDIUM | 4.4 | 0.2% | Apr 23, 2024 | Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Administrator allows local users to... |
| CVE-2023-38302 | MEDIUM | 4.3 | 0.4% | Apr 22, 2024 | A certain software build for the Sharp Rouvo V device (SHARP/VZW_STTM21VAPP/STTM21VAPP:12/SP1A.210812.016/1KN0_0_530:use... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now