2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-51839 | CRITICAL | 9.1 | 0.4% | Jan 29, 2024 | DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm. |
| CVE-2023-30970 | MEDIUM | 6.5 | 0.5% | Jan 29, 2024 | Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated use... |
| CVE-2023-22836 | MEDIUM | 5.4 | 0.3% | Jan 29, 2024 | In cases where a multi-tenant stack user is operating Foundry’s Linter service, and the user changes a group name from t... |
| CVE-2023-40551 | MEDIUM | 5.1 | 0.4% | Jan 29, 2024 | A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposu... |
| CVE-2023-40550 | MEDIUM | 5.5 | 0.4% | Jan 29, 2024 | An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensi... |
| CVE-2023-40549 | MEDIUM | 5.5 | 0.4% | Jan 29, 2024 | An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE bin... |
| CVE-2023-40546 | MEDIUM | 5.5 | 0.4% | Jan 29, 2024 | A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new varia... |
| CVE-2023-1705 | HIGH | 7.8 | 0.1% | Jan 29, 2024 | Missing Authorization vulnerability in Forcepoint F|One SmartEdge Agent on Windows (bgAutoinstaller service modules) all... |
| CVE-2023-7204 | HIGH | 7.5 | 0.6% | Jan 29, 2024 | The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which provid... |
| CVE-2023-7200 | MEDIUM | 6.1 | 0.4% | Jan 29, 2024 | The EventON WordPress plugin before 4.4.1 does not sanitise and escape a parameter before outputting it back in the page... |
| CVE-2023-7199 | MEDIUM | 5.3 | 0.6% | Jan 29, 2024 | The Relevanssi WordPress plugin before 4.22.0, Relevanssi Premium WordPress plugin before 2.25.0 allows any unauthentica... |
| CVE-2023-7089 | MEDIUM | 5.4 | 0.4% | Jan 29, 2024 | The Easy SVG Allow WordPress plugin through 1.0 does not sanitize uploaded SVG files, which could allow users with a rol... |
| CVE-2023-7074 | HIGH | 8.8 | 0.3% | Jan 29, 2024 | The WP SOCIAL BOOKMARK MENU WordPress plugin through 1.2 does not have CSRF check in place when updating its settings, w... |
| CVE-2023-6946 | HIGH | 8.8 | 0.3% | Jan 29, 2024 | The Autotitle for WordPress plugin through 1.0.3 does not have CSRF check in place when updating its settings, which cou... |
| CVE-2023-6633 | MEDIUM | 4.3 | 0.2% | Jan 29, 2024 | The Site Notes WordPress plugin through 2.0.0 does not have CSRF checks in some of its functionalities, which could allo... |
| CVE-2023-6530 | MEDIUM | 5.4 | 0.4% | Jan 29, 2024 | The TJ Shortcodes WordPress plugin through 0.1.3 does not validate and escape some of its shortcode attributes before ou... |
| CVE-2023-6503 | MEDIUM | 5.4 | 0.2% | Jan 29, 2024 | The WP Plugin Lister WordPress plugin through 2.1.0 does not have CSRF check in some places, and is missing sanitisation... |
| CVE-2023-6391 | HIGH | 8.8 | 0.3% | Jan 29, 2024 | The Custom User CSS WordPress plugin through 0.2 does not have CSRF check in place when updating its settings, which cou... |
| CVE-2023-6390 | HIGH | 8.8 | 0.3% | Jan 29, 2024 | The WordPress Users WordPress plugin through 1.4 does not have CSRF check in place when updating its settings, which cou... |
| CVE-2023-6389 | MEDIUM | 6.1 | 25.7% | Jan 29, 2024 | The WordPress Toolbar WordPress plugin through 2.2.6 redirects to any URL via the "wptbto" parameter. This makes it poss... |
| CVE-2023-6279 | HIGH | 7.1 | 0.5% | Jan 29, 2024 | The Woostify Sites Library WordPress plugin before 1.4.8 does not have authorisation in an AJAX action, allowing any aut... |
| CVE-2023-6278 | MEDIUM | 6.1 | 0.4% | Jan 29, 2024 | The Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo WordPress plugin before 2.2.25 does not sanitise and esc... |
| CVE-2023-6165 | MEDIUM | 4.8 | 0.4% | Jan 29, 2024 | The Restrict Usernames Emails Characters WordPress plugin before 3.1.4 does not sanitise and escape some of its settings... |
| CVE-2023-5956 | MEDIUM | 4.8 | 0.4% | Jan 29, 2024 | The Wp-Adv-Quiz WordPress plugin through 1.0.2 does not sanitise and escape some of its settings, which could allow high... |
| CVE-2023-5943 | MEDIUM | 4.8 | 0.4% | Jan 29, 2024 | The Wp-Adv-Quiz WordPress plugin before 1.0.3 does not sanitise and escape some of its settings, which could allow high ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now