2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-29235HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Fugu Maintenance Switch plugin <= 1.5.2 versions.
CVE-2023-28791HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Gangesh Matta Simple Org Chart plugin <= 2.3.4 versions.
CVE-2023-40671HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in 大侠wp DX-auto-save-images plugin <= 1.4.0 versions.
CVE-2023-40008HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Gangesh Matta Simple Org Chart plugin <= 2.3.4 versions.
CVE-2023-27615HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Dipak C. Gajjar WP Super Minify plugin <= 1.5.1 versions.
CVE-2023-27448HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in MakeStories Team MakeStories (for Google Web Stories) plugin <= 2.8.0...
CVE-2023-25480HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Edi...
CVE-2023-25033HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Sumo Social Share Boost plugin <= 4.5 versions.
CVE-2023-36465HIGH7.1Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City go...
CVE-2023-45246HIGH7.1Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr...
CVE-2023-45244HIGH7.1Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr...
CVE-2023-40556HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Greg Ross Schedule Posts Calendar plugin <= 5.2 versions.
CVE-2023-44212HIGH7.1Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr...
CVE-2023-44211HIGH7.1Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr...
CVE-2023-39323HIGH8.1Line directives ("//line") can be used to bypass the restrictions on "//go:cgo_" directives, allowing blocked linker and...
CVE-2023-43284HIGH8.8D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices allow an authenticated remote attacker to...
CVE-2023-5346HIGH8.8Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corr...
CVE-2023-4401HIGH8.8 Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the CLI use of t...
CVE-2023-43072HIGH7.8 Dell SmartFabric Storage Software v1.4 (and earlier) contains an improper access control vulnerability in the CLI. A lo...
CVE-2023-43069HIGH7.8 Dell SmartFabric Storage Software v1.4 (and earlier) contain(s) an OS Command Injection Vulnerability in the CLI. An au...
CVE-2023-43068HIGH8.8 Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the restricted s...
CVE-2023-4570HIGH8.8An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to r...
CVE-2023-45160HIGH8.8In the affected version of the 1E Client, an ordinary user could subvert downloaded instruction resource files, e.g., to...
CVE-2023-44839HIGH7.5D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Encryption parameter in the SetWLanRadio...
CVE-2023-44838HIGH7.5D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the TXPower parameter in the SetWLanRadioSet...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now