2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-51142 | HIGH | 7.5 | 0.9% | Apr 11, 2024 | An issue in ZKTeco BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information. |
| CVE-2023-51141 | MEDIUM | 6.5 | 0.8% | Apr 11, 2024 | An issue in ZKTeko BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information via the Authentic... |
| CVE-2023-27607 | MEDIUM | 5.4 | 0.4% | Apr 11, 2024 | Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Reward... |
| CVE-2023-52070 | HIGH | 8.4 | 0.3% | Apr 10, 2024 | JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the 'setSeriesNeedle(int index, int type)... |
| CVE-2023-6916 | HIGH | 7.5 | 0.6% | Apr 10, 2024 | Audit records for OpenAPI requests may include sensitive information. This could lead to unauthorized accesses and pr... |
| CVE-2023-2794 | HIGH | 8.1 | 1.2% | Apr 10, 2024 | A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_delive... |
| CVE-2023-6385 | MEDIUM | 4.3 | 0.2% | Apr 10, 2024 | The WordPress Ping Optimizer WordPress plugin through 2.35.1.3.0 does not have CSRF checks in some places, which could a... |
| CVE-2023-50347 | CRITICAL | 9.8 | 0.6% | Apr 10, 2024 | HCL DRYiCE MyXalytics is impacted by an insecure SQL interface vulnerability, potentially giving an attacker the ability... |
| CVE-2023-6236 | HIGH | 7.3 | 0.3% | Apr 10, 2024 | A flaw was found in Red Hat Enterprise Application Platform 8. When an OIDC app that serves multiple tenants attempts to... |
| CVE-2023-40148 | MEDIUM | 6.5 | 0.5% | Apr 10, 2024 | Server-side request forgery (SSRF) in PingFederate allows unauthenticated http requests to attack network resources and ... |
| CVE-2023-7046 | HIGH | 7.5 | 0.4% | Apr 9, 2024 | The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, SSL Score plugin for WordPress... |
| CVE-2023-6999 | HIGH | 8.8 | 1.3% | Apr 9, 2024 | The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Remote Code Exxecution via shortcode in... |
| CVE-2023-6993 | MEDIUM | 6.4 | 0.4% | Apr 9, 2024 | The Custom post types, Custom Fields & more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl... |
| CVE-2023-6967 | HIGH | 8.8 | 0.8% | Apr 9, 2024 | The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to SQL Injection via shortcode in all vers... |
| CVE-2023-6965 | MEDIUM | 4.3 | 0.6% | Apr 9, 2024 | The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Missing Authorization in all versions u... |
| CVE-2023-6964 | MEDIUM | 6.4 | 0.4% | Apr 9, 2024 | The Gutenberg Blocks by Kadence Blocks – Page Builder Features plugin for WordPress is vulnerable to Server-Side Request... |
| CVE-2023-6799 | MEDIUM | 5.9 | 0.7% | Apr 9, 2024 | The WP Reset – Most Advanced WordPress Reset Tool plugin for WordPress is vulnerable to Sensitive Information Exposure i... |
| CVE-2023-6777 | MEDIUM | 6.5 | 0.8% | Apr 9, 2024 | The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to unauthenticated API key disclosure in ver... |
| CVE-2023-6695 | MEDIUM | 6.5 | 0.5% | Apr 9, 2024 | The Beaver Themer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includ... |
| CVE-2023-6694 | MEDIUM | 5.4 | 0.3% | Apr 9, 2024 | The Beaver Themer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all... |
| CVE-2023-6486 | MEDIUM | 5.4 | 0.6% | Apr 9, 2024 | The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custo... |
| CVE-2023-49913 | HIGH | 8.8 | 1.9% | Apr 9, 2024 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350... |
| CVE-2023-49912 | HIGH | 8.8 | 1.8% | Apr 9, 2024 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350... |
| CVE-2023-49911 | HIGH | 8.8 | 1.8% | Apr 9, 2024 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350... |
| CVE-2023-49910 | HIGH | 8.8 | 1.8% | Apr 9, 2024 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now