2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-33999 | HIGH | 7.1 | 0.3% | Jun 11, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in WPVibes WP Mail Lo... |
| CVE-2023-43688 | HIGH | 7.5 | 0.2% | Jun 9, 2026 | An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). There is a Heap buffer overflow i... |
| CVE-2023-29146 | HIGH | 8.2 | 0.1% | Jun 9, 2026 | The utility functions used by Malwarebytes EDR 1.0.11 on Linux for calculating a cryptographic hash of data bytes trunca... |
| CVE-2023-54351 | HIGH | 7.2 | 0.2% | Jun 8, 2026 | WordPress Sonaar Music Plugin 4.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attac... |
| CVE-2023-54350 | HIGH | 8.7 | 0.5% | Jun 8, 2026 | WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder connector that allows ... |
| CVE-2023-5502 | HIGH | 8.2 | 0.3% | Jun 4, 2026 | On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and routing en... |
| CVE-2023-52945 | HIGH | 7.8 | 0.1% | May 27, 2026 | Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-13... |
| CVE-2023-31317 | HIGH | 8.8 | 0.1% | May 15, 2026 | Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an... |
| CVE-2023-31316 | HIGH | 7.1 | 0.1% | May 15, 2026 | Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure P... |
| CVE-2023-27753 | HIGH | 8 | 0.3% | May 12, 2026 | An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a c... |
| CVE-2023-42346 | HIGH | 7.5 | 0.2% | May 8, 2026 | Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external host. |
| CVE-2023-42344 | HIGH | 7.3 | 2.3% | May 8, 2026 | Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain sensitive information via a cmis-online/... |
| CVE-2023-54348 | HIGH | 8.8 | 0.4% | May 5, 2026 | ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers to inject spreadsheet formulas... |
| CVE-2023-54347 | HIGH | 7.5 | 0.5% | May 5, 2026 | OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protect... |
| CVE-2023-54346 | HIGH | 7.5 | 0.3% | May 5, 2026 | WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulnerability that allows unauthenticated att... |
| CVE-2023-54345 | HIGH | 8.8 | 0.6% | May 5, 2026 | Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in RestrictedPython that allows authenticated us... |
| CVE-2023-3634 | HIGH | 8.8 | 0.6% | Apr 16, 2026 | In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of u... |
| CVE-2023-54359 | HIGH | 8.2 | 0.3% | Apr 9, 2026 | WordPress adivaha Travel Plugin 2.3 contains a time-based blind SQL injection vulnerability that allows unauthenticated ... |
| CVE-2023-7343 | HIGH | 8.5 | 0.1% | Apr 2, 2026 | Hirschmann Industrial HiVision versions 05.0.00 through 08.3.01 prior to 08.3.02 contain an arbitrary code execution vul... |
| CVE-2023-7342 | HIGH | 8.8 | 0.3% | Apr 2, 2026 | HiSecOS web server versions 03.4.00 prior to 04.1.00 contains a privilege escalation vulnerability that allows authentic... |
| CVE-2023-7338 | HIGH | 7.7 | 0.5% | Mar 26, 2026 | Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authen... |
| CVE-2023-43010 | HIGH | 8.8 | 0.9% | Mar 12, 2026 | The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.... |
| CVE-2023-7337 | HIGH | 7.5 | 1.3% | Mar 4, 2026 | The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to SQL Injection via the 'js... |
| CVE-2023-31044 | HIGH | 8.8 | 0.2% | Mar 3, 2026 | An issue was discovered in Nokia Impact before Mobile 23_FP1. In Impact DM 19.11 onwards, a remote authenticated user, u... |
| CVE-2023-31364 | HIGH | 8.3 | 0.2% | Feb 26, 2026 | Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtu... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now