2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-39233 | MEDIUM | 6.5 | 0.7% | Sep 27, 2023 | The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may disclos... |
| CVE-2023-38596 | MEDIUM | 5.5 | 0.3% | Sep 27, 2023 | The issue was addressed with improved handling of protocols. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watch... |
| CVE-2023-36851 | MEDIUM | 5.3 | 1.1% | Sep 27, 2023 | A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauth... |
| CVE-2023-35984 | MEDIUM | 4.3 | 0.7% | Sep 27, 2023 | The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS So... |
| CVE-2023-34043 | MEDIUM | 6.7 | 0.2% | Sep 27, 2023 | VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access... |
| CVE-2023-32421 | MEDIUM | 5.5 | 0.2% | Sep 27, 2023 | A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app ... |
| CVE-2023-32361 | MEDIUM | 5.5 | 0.3% | Sep 27, 2023 | The issue was addressed with improved handling of caches. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS ... |
| CVE-2023-30961 | MEDIUM | 6.1 | 0.4% | Sep 27, 2023 | Palantir Gotham was found to be vulnerable to a bug where under certain circumstances, the frontend could have applied a... |
| CVE-2023-30959 | MEDIUM | 5.4 | 0.3% | Sep 27, 2023 | In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result i... |
| CVE-2023-30493 | MEDIUM | 6.1 | 0.3% | Sep 27, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin <= 3.2.... |
| CVE-2023-30472 | MEDIUM | 6.1 | 0.3% | Sep 27, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in MyThemeShop URL Shortener by MyThemeShop plugin <= 1.0.17 ... |
| CVE-2023-30471 | MEDIUM | 6.1 | 0.3% | Sep 27, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cornel Raiu WP Search Analytics plugin <= 1.4.7 versions. |
| CVE-2023-2358 | MEDIUM | 4.9 | 0.2% | Sep 27, 2023 | Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.5.0.0 and 9.3.0.4, including 8.3.x.x, saves passw... |
| CVE-2023-28790 | MEDIUM | 4.8 | 0.3% | Sep 27, 2023 | Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Brett Shumaker Simple Staff List plugin <= 2.2.3 vers... |
| CVE-2023-28490 | MEDIUM | 6.1 | 0.4% | Sep 27, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Estatik Estatik Mortgage Calculator plugin <= 2.0.7 versio... |
| CVE-2023-27628 | MEDIUM | 5.4 | 0.3% | Sep 27, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Webvitaly Sitekit plugin <= 1.3 versions. |
| CVE-2023-27622 | MEDIUM | 4.8 | 0.3% | Sep 27, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Abel Ruiz GuruWalk Affiliates plugin <= 1.0.0 versions... |
| CVE-2023-27617 | MEDIUM | 4.8 | 0.3% | Sep 27, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions. |
| CVE-2023-27616 | MEDIUM | 6.1 | 0.3% | Sep 27, 2023 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions. |
| CVE-2023-25483 | MEDIUM | 4.8 | 0.3% | Sep 27, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ankit Agarwal, Priyanshu Mittal Easy Coming Soon plugi... |
| CVE-2023-23958 | MEDIUM | 6.5 | 0.5% | Sep 27, 2023 | Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability. |
| CVE-2023-23495 | MEDIUM | 5.5 | 0.2% | Sep 27, 2023 | A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma ... |
| CVE-2023-0833 | MEDIUM | 5.5 | 0.4% | Sep 27, 2023 | A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure ... |
| CVE-2023-43325 | MEDIUM | 6.1 | 1.9% | Sep 26, 2023 | A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows atta... |
| CVE-2023-4258 | MEDIUM | 6.5 | 0.5% | Sep 25, 2023 | In Bluetooth mesh implementation If provisionee has a public key that is sent OOB then during provisioning it can be sen... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now