2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-41504 | HIGH | 8.8 | 0.7% | Mar 13, 2024 | SQL Injection vulnerability in Student Enrollment In PHP 1.0 allows attackers to run arbitrary code via the Student Sear... |
| CVE-2023-36238 | MEDIUM | 6.5 | 0.5% | Mar 13, 2024 | Insecure Direct Object Reference (IDOR) in Bagisto v.1.5.1 allows an attacker to obtain sensitive information via the in... |
| CVE-2023-7015 | MEDIUM | 6.1 | 0.5% | Mar 13, 2024 | The File Manager Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tb' parameter in all ... |
| CVE-2023-6969 | MEDIUM | 4.3 | 0.5% | Mar 13, 2024 | The User Shortcodes Plus plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, a... |
| CVE-2023-6957 | MEDIUM | 5.4 | 0.4% | Mar 13, 2024 | The Fluent Forms plugin for WordPress by Fluent Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting ... |
| CVE-2023-6954 | MEDIUM | 5.4 | 0.5% | Mar 13, 2024 | The Download Manager Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s)... |
| CVE-2023-6880 | MEDIUM | 5.4 | 0.4% | Mar 13, 2024 | The Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages pl... |
| CVE-2023-6825 | CRITICAL | 9.9 | 6.0% | Mar 13, 2024 | The File Manager and File Manager Pro plugins for WordPress are vulnerable to Directory Traversal in versions up to, and... |
| CVE-2023-6809 | MEDIUM | 5.4 | 0.4% | Mar 13, 2024 | The Custom fields shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cf shortc... |
| CVE-2023-6785 | MEDIUM | 5.3 | 0.5% | Mar 13, 2024 | The Download Manager plugin for WordPress is vulnerable to unauthorized file download of files added via the plugin in a... |
| CVE-2023-5663 | HIGH | 8.8 | 0.8% | Mar 13, 2024 | The News Announcement Scroll plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions ... |
| CVE-2023-52608 | MEDIUM | 4.7 | 0.2% | Mar 13, 2024 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Check mailbox/SMT channel for c... |
| CVE-2023-43043 | MEDIUM | 5.5 | 0.2% | Mar 13, 2024 | IBM Maximo Application Suite - Maximo Mobile for EAM 8.10 and 8.11 could disclose sensitive information to a local user.... |
| CVE-2023-38723 | MEDIUM | 6.4 | 0.3% | Mar 13, 2024 | IBM Maximo Application Suite 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to em... |
| CVE-2023-32335 | HIGH | 7.5 | 0.5% | Mar 13, 2024 | IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL para... |
| CVE-2023-28517 | MEDIUM | 5.4 | 0.3% | Mar 13, 2024 | IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 is vulnerable to cross-site scripting. This vulnerabilit... |
| CVE-2023-4839 | MEDIUM | 4.8 | 0.3% | Mar 13, 2024 | The WP Go Maps for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and incl... |
| CVE-2023-7072 | HIGH | 7.5 | 0.6% | Mar 12, 2024 | The Post Grid Combo – 36+ Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all v... |
| CVE-2023-43279 | MEDIUM | 6.5 | 0.7% | Mar 12, 2024 | Null Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to crash the application ... |
| CVE-2023-43292 | MEDIUM | 6.1 | 0.4% | Mar 12, 2024 | Cross Site Scripting vulnerability in My Food Recipe Using PHP with Source Code v.1.0 allows a local attacker to execute... |
| CVE-2023-42308 | MEDIUM | 6.1 | 0.3% | Mar 12, 2024 | Cross Site Scripting (XSS) vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows at... |
| CVE-2023-42307 | MEDIUM | 6.1 | 0.4% | Mar 12, 2024 | Cross Site Scripting (XSS) vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary cod... |
| CVE-2023-5410 | HIGH | 8.2 | 0.2% | Mar 12, 2024 | A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow mem... |
| CVE-2023-30968 | MEDIUM | 6.8 | 0.5% | Mar 12, 2024 | One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting (XSS) vulnerability that could h... |
| CVE-2023-4780 | — | — | — | Mar 12, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-0590. Reason: This candidate is a d... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now