2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-30991 | HIGH | 7.5 | 0.8% | Oct 16, 2023 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to denial of service with ... |
| CVE-2023-45131 | HIGH | 7.5 | 1.8% | Oct 16, 2023 | Discourse is an open source platform for community discussion. New chat messages can be read by making an unauthenticate... |
| CVE-2023-44388 | HIGH | 7.5 | 0.5% | Oct 16, 2023 | Discourse is an open source platform for community discussion. A malicious request can cause production log files to qui... |
| CVE-2023-38740 | HIGH | 7.5 | 0.8% | Oct 16, 2023 | IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a spec... |
| CVE-2023-38728 | HIGH | 7.5 | 0.8% | Oct 16, 2023 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of servic... |
| CVE-2023-45141 | HIGH | 8.8 | 0.3% | Oct 16, 2023 | Fiber is an express inspired web framework written in Go. A Cross-Site Request Forgery (CSRF) vulnerability has been ide... |
| CVE-2023-45128 | HIGH | 8.8 | 0.3% | Oct 16, 2023 | Fiber is an express inspired web framework written in Go. A Cross-Site Request Forgery (CSRF) vulnerability has been ide... |
| CVE-2023-42459 | HIGH | 7.5 | 0.8% | Oct 16, 2023 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). I... |
| CVE-2023-38720 | HIGH | 7.5 | 0.8% | Oct 16, 2023 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 and 11.5 is vulnerable to denial of service with ... |
| CVE-2023-30987 | HIGH | 7.5 | 0.8% | Oct 16, 2023 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of servic... |
| CVE-2023-5133 | HIGH | 7.5 | 0.5% | Oct 16, 2023 | This user-activity-log-pro WordPress plugin before 2.3.4 retrieves client IP addresses from potentially untrusted header... |
| CVE-2023-5003 | HIGH | 7.5 | 25.9% | Oct 16, 2023 | The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffe... |
| CVE-2023-4971 | HIGH | 7.2 | 1.0% | Oct 16, 2023 | The Weaver Xtreme Theme Support WordPress plugin before 6.3.1 unserialises the content of an imported file, which could ... |
| CVE-2023-4861 | HIGH | 7.2 | 1.3% | Oct 16, 2023 | The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments wh... |
| CVE-2023-4776 | HIGH | 8.8 | 0.7% | Oct 16, 2023 | The School Management System WordPress plugin before 2.2.5 uses the WordPress esc_sql() function on a field not delimite... |
| CVE-2023-4691 | HIGH | 7.2 | 0.7% | Oct 16, 2023 | The WordPress Online Booking and Scheduling Plugin WordPress plugin before 22.4 does not properly sanitise and escape a ... |
| CVE-2023-4643 | HIGH | 8.8 | 0.8% | Oct 16, 2023 | The Enable Media Replace WordPress plugin before 4.1.3 unserializes user input via the Remove Background feature, which ... |
| CVE-2023-43121 | HIGH | 7.5 | 1.0% | Oct 16, 2023 | A Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.... |
| CVE-2023-43118 | HIGH | 8.8 | 0.3% | Oct 16, 2023 | Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32... |
| CVE-2023-3155 | HIGH | 7.2 | 0.8% | Oct 16, 2023 | The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to Arbitrary File Read and Delete due to a lack ... |
| CVE-2023-3154 | HIGH | 7.5 | 0.7% | Oct 16, 2023 | The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to PHAR Deserialization due to a lack of input p... |
| CVE-2023-45151 | HIGH | 8.8 | 0.5% | Oct 16, 2023 | Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext... |
| CVE-2023-43120 | HIGH | 8.8 | 0.7% | Oct 16, 2023 | An issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and before 31.7.1 allows attac... |
| CVE-2023-40180 | HIGH | 7.5 | 0.9% | Oct 16, 2023 | silverstripe-graphql is a package which serves Silverstripe data in GraphQL representations. An attacker could use a re... |
| CVE-2023-45985 | HIGH | 7.5 | 0.7% | Oct 16, 2023 | TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack ove... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now