2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-51474HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Pixelemu TerraClassifieds.This issue affects TerraClassifieds: from n...
CVE-2023-51521MEDIUM5.4Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master.This issue affects Quiz And Survey...
CVE-2023-51512HIGH8.8Cross Site Request Forgery (CSRF) vulnerability in WBW Product Table by WBW.This issue affects Product Table by WBW: fro...
CVE-2023-51510HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Atlas Gondal Export Media URLs.This issue affects Export Media URLs: ...
CVE-2023-51491HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Averta Depicter Slider.This issue affects Depicter Slider: from n/a t...
CVE-2023-51489HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Automattic, Inc. Crowdsignal Dashboard – Polls, Surveys & more.This i...
CVE-2023-51407HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Rocket Elements Split Test For Elementor.This issue affects Split Tes...
CVE-2023-7248CRITICAL9.8 Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests.  The vulne...
CVE-2023-7060HIGH7.5Zephyr OS IP packet handling does not properly drop IP packets arriving on an external interface with a source address e...
CVE-2023-51699MEDIUM6Fluid is an open source Kubernetes-native Distributed Dataset Orchestrator and Accelerator for data-intensive applicatio...
CVE-2023-7017CRITICAL9.8Sciener locks' firmware update mechanism do not authenticate or validate firmware updates if passed to the lock through ...
CVE-2023-7009HIGH8.2Some Sciener-based locks support plaintext message processing over Bluetooth Low Energy, allowing unencrypted malicious ...
CVE-2023-7007HIGH8.2Sciener server does not validate connection requests from the GatewayG2, allowing an impersonation attack that provides ...
CVE-2023-7006CRITICAL9.1The unlockKey character in a lock using Sciener firmware can be brute forced through repeated challenge requests, compro...
CVE-2023-7004MEDIUM6.5The TTLock App does not employ proper verification procedures to ensure that it is communicating with the expected devic...
CVE-2023-7003MEDIUM6.8The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, a...
CVE-2023-6960HIGH7.5TTLock App virtual keys and settings are only deleted client side, and if preserved, can access the lock after intended ...
CVE-2023-47699MEDIUM6.1IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embe...
CVE-2023-47147MEDIUM5.3IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow an attacker to overwrite a log message under specific conditions. ...
CVE-2023-46181LOW3.3IBM Sterling Secure Proxy 6.0.3 and 6.1.0 allows web pages to be stored locally which can be read by another user on the...
CVE-2023-51522HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Paid Member Subscriptions.This issue affects Paid Member S...
CVE-2023-51369HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in SysBasics Customize My Account for WooCommerce.This issue affects Cus...
CVE-2023-50898HIGH8.8Missing Authorization vulnerability in sirv.Com Sirv.This issue affects Sirv: from n/a through 7.1.2.
CVE-2023-50886HIGH8Cross-Site Request Forgery (CSRF), Incorrect Authorization vulnerability in wpWax Legal Pages.This issue affects Legal P...
CVE-2023-47162MEDIUM6.1IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embe...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now