2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45638 | HIGH | 8.8 | 0.3% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in euPago Eupago Gateway For Woocommerce plugin <= 3.1.9 versions. |
| CVE-2023-45629 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails plugin <= ... |
| CVE-2023-45606 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Lasso Simple URLs plugin <= 120 versions. |
| CVE-2023-45605 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Christopher Finke Feed Statistics plugin <= 4.1 versions. |
| CVE-2023-45274 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in SendPulse SendPulse Free Web Push plugin <= 1.3.1 versions. |
| CVE-2023-45273 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Matt McKenny Stout Google Calendar plugin <= 1.2.3 versions. |
| CVE-2023-43667 | HIGH | 7.5 | 1.2% | Oct 16, 2023 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apac... |
| CVE-2023-3392 | HIGH | 7.2 | 0.8% | Oct 16, 2023 | The Read More & Accordion WordPress plugin before 3.2.7 unserializes user input provided via the settings, which could a... |
| CVE-2023-21415 | HIGH | 8.1 | 0.6% | Oct 16, 2023 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to pa... |
| CVE-2023-21413 | HIGH | 7.2 | 1.2% | Oct 16, 2023 | GoSecure on behalf of Genetec Inc. has found a flaw that allows for a remote code execution during the installation of A... |
| CVE-2023-45898 | HIGH | 7.8 | 0.3% | Oct 16, 2023 | The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent. |
| CVE-2023-38280 | HIGH | 7.8 | 0.2% | Oct 16, 2023 | IBM HMC (Hardware Management Console) 10.1.1010.0 and 10.2.1030.0 could allow a local user to escalate their privileges ... |
| CVE-2023-40377 | HIGH | 7.8 | 0.1% | Oct 16, 2023 | Backup, Recovery, and Media Services (BRMS) for IBM i 7.2, 7.3, and 7.4 contains a local privilege escalation vulnerabil... |
| CVE-2023-35018 | HIGH | 7.2 | 0.4% | Oct 16, 2023 | IBM Security Verify Governance 10.0 could allow a privileged use to upload arbitrary files due to improper file validati... |
| CVE-2023-5590 | HIGH | 7.5 | 0.9% | Oct 15, 2023 | NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0. |
| CVE-2023-38312 | HIGH | 7.5 | 0.8% | Oct 15, 2023 | A directory traversal vulnerability in Valve Counter-Strike 8684 allows a client (with remote control access to a game s... |
| CVE-2023-40378 | HIGH | 7.8 | 0.1% | Oct 15, 2023 | IBM Directory Server for IBM i contains a local privilege escalation vulnerability. A malicious actor with command line... |
| CVE-2023-5586 | HIGH | 7.8 | 0.3% | Oct 15, 2023 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV. |
| CVE-2023-45871 | HIGH | 7.5 | 0.6% | Oct 15, 2023 | An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3.... |
| CVE-2023-30994 | HIGH | 7.5 | 0.2% | Oct 14, 2023 | IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly ... |
| CVE-2023-35024 | HIGH | 7.6 | 0.4% | Oct 14, 2023 | IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21... |
| CVE-2023-45855 | HIGH | 7.5 | 3.3% | Oct 14, 2023 | qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI. |
| CVE-2023-44037 | HIGH | 7.5 | 0.4% | Oct 14, 2023 | An issue in ZPE Systems, Inc Nodegrid OS v.5.8.10 thru v.5.8.13 and v.5.10.3 thru v.5.10.5 allows a remote attacker to o... |
| CVE-2023-4263 | HIGH | 8.8 | 0.5% | Oct 13, 2023 | Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver |
| CVE-2023-34976 | HIGH | 8.8 | 0.5% | Oct 13, 2023 | A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow aut... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now