2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-51499 | MEDIUM | 4.3 | 0.4% | Apr 12, 2024 | Missing Authorization vulnerability in WooCommerce WooCommerce Shipping Per Product.This issue affects WooCommerce Shipp... |
| CVE-2023-51409 | CRITICAL | 9.8 | 63.3% | Apr 12, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affect... |
| CVE-2023-47714 | MEDIUM | 5.4 | 0.3% | Apr 12, 2024 | IBM Sterling File Gateway 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scri... |
| CVE-2023-49528 | HIGH | 8 | 0.4% | Apr 12, 2024 | Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code an... |
| CVE-2023-44856 | MEDIUM | 6.1 | 0.5% | Apr 12, 2024 | Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitra... |
| CVE-2023-44855 | MEDIUM | 6.5 | 0.5% | Apr 12, 2024 | Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019 allows a remote attacker to execute arbitrar... |
| CVE-2023-44857 | HIGH | 8.1 | 0.9% | Apr 12, 2024 | An issue in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to ... |
| CVE-2023-44854 | MEDIUM | 6.1 | 0.5% | Apr 12, 2024 | Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitra... |
| CVE-2023-44853 | MEDIUM | 4.8 | 0.3% | Apr 12, 2024 | \An issue was discovered in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a cr... |
| CVE-2023-44852 | HIGH | 8.2 | 0.6% | Apr 12, 2024 | Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitra... |
| CVE-2023-50307 | MEDIUM | 5.4 | 0.3% | Apr 12, 2024 | IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site sc... |
| CVE-2023-45186 | MEDIUM | 5.4 | 0.3% | Apr 12, 2024 | IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site sc... |
| CVE-2023-6678 | MEDIUM | 6.5 | 0.6% | Apr 12, 2024 | An issue has been discovered in GitLab EE affecting all versions before 16.8.6, all versions starting from 16.9 before 1... |
| CVE-2023-6489 | MEDIUM | 6.5 | 0.6% | Apr 12, 2024 | A denial of service vulnerability was identified in GitLab CE/EE, versions 16.7.7 prior to 16.8.6, 16.9 prior to 16.9.4 ... |
| CVE-2023-48865 | MEDIUM | 6.5 | 0.6% | Apr 11, 2024 | An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via execute_mode parameter ... |
| CVE-2023-5394 | HIGH | 7.4 | 0.7% | Apr 11, 2024 | Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overfl... |
| CVE-2023-5393 | HIGH | 7.4 | 0.7% | Apr 11, 2024 | Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in po... |
| CVE-2023-5392 | HIGH | 7.5 | 0.5% | Apr 11, 2024 | C300 information leak due to an analysis feature which allows extracting more memory over the network than required by t... |
| CVE-2023-50949 | HIGH | 8.1 | 0.3% | Apr 11, 2024 | IBM QRadar SIEM 7.5 could allow an unauthorized user to perform unauthorized actions due to improper certificate validat... |
| CVE-2023-29483 | HIGH | 7 | 1.9% | Apr 11, 2024 | eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution... |
| CVE-2023-32295 | MEDIUM | 6.3 | 0.4% | Apr 11, 2024 | Missing Authorization vulnerability in Alex Tselegidis Easy!Appointments.This issue affects Easy!Appointments: from n/a ... |
| CVE-2023-32228 | MEDIUM | 4.6 | 0.2% | Apr 11, 2024 | A firmware bug which may lead to misinterpretation of data in the AMC2-4WCF and AMC2-2WCF allowing an adversary to grant... |
| CVE-2023-6257 | MEDIUM | 4.3 | 0.4% | Apr 11, 2024 | The Inline Related Posts WordPress plugin before 3.6.0 is missing authorization in an AJAX action to ensure that users a... |
| CVE-2023-6811 | HIGH | 7.2 | 0.4% | Apr 11, 2024 | The Language Translate Widget for WordPress – ConveyThis plugin for WordPress is vulnerable to Stored Cross-Site Scripti... |
| CVE-2023-51672 | HIGH | 7.5 | 0.5% | Apr 11, 2024 | Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a thro... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now