2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-22527 | CRITICAL | 9.8 | 100.0% | Jan 16, 2024 | A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta... |
| CVE-2023-22526 | HIGH | 8.8 | 1.6% | Jan 16, 2024 | This High severity RCE (Remote Code Execution) vulnerability was introduced in version 7.19.0 of Confluence Data Center.... |
| CVE-2023-51282 | HIGH | 7.5 | 1.1% | Jan 16, 2024 | An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the... |
| CVE-2023-51257 | HIGH | 7.8 | 0.3% | Jan 16, 2024 | An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary ... |
| CVE-2023-51059 | HIGH | 8.8 | 0.9% | Jan 16, 2024 | An issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v.1.1.1 and before allows a remote attacker to escalate priv... |
| CVE-2023-43449 | HIGH | 8.8 | 0.8% | Jan 16, 2024 | An issue in HummerRisk HummerRisk v.1.10 thru 1.4.1 allows an authenticated attacker to execute arbitrary code via a cra... |
| CVE-2023-6457 | HIGH | 7.1 | 0.1% | Jan 16, 2024 | Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Windows (Hitachi Tuning Manager server componen... |
| CVE-2023-51810 | HIGH | 7.5 | 1.3% | Jan 16, 2024 | SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain s... |
| CVE-2023-49107 | HIGH | 7.5 | 0.4% | Jan 16, 2024 | Generation of Error Message Containing Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (... |
| CVE-2023-49106 | HIGH | 7.5 | 0.4% | Jan 16, 2024 | Missing Password Field Masking vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Agent component... |
| CVE-2023-48104 | MEDIUM | 6.1 | 1.0% | Jan 16, 2024 | Alinto SOGo before 5.9.1 is vulnerable to HTML Injection. |
| CVE-2023-47460 | HIGH | 8.8 | 1.2% | Jan 16, 2024 | SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /Di... |
| CVE-2023-47459 | MEDIUM | 6.5 | 0.8% | Jan 16, 2024 | An issue in Knovos Discovery v.22.67.0 allows a remote attacker to obtain sensitive information via the /DiscoveryReview... |
| CVE-2023-41619 | MEDIUM | 6.1 | 0.4% | Jan 16, 2024 | Emlog Pro v2.1.14 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/article.... |
| CVE-2023-7206 | HIGH | 7.8 | 0.2% | Jan 15, 2024 | In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a u... |
| CVE-2023-6991 | HIGH | 8.8 | 0.7% | Jan 15, 2024 | The JSM file_get_contents() Shortcode WordPress plugin before 2.7.1 does not validate one of its shortcode's parameters ... |
| CVE-2023-6941 | MEDIUM | 4.8 | 0.4% | Jan 15, 2024 | The Keap Official Opt-in Forms WordPress plugin through 1.0.11 does not sanitise and escape some of its settings, which ... |
| CVE-2023-6843 | MEDIUM | 4.3 | 0.4% | Jan 15, 2024 | The easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg WordPress p... |
| CVE-2023-6623 | CRITICAL | 9.8 | 50.7% | Jan 15, 2024 | The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers from overwriting local var... |
| CVE-2023-6620 | HIGH | 7.2 | 14.2% | Jan 15, 2024 | The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using... |
| CVE-2023-6163 | MEDIUM | 4.8 | 0.4% | Jan 15, 2024 | The WP Crowdfunding WordPress plugin before 2.1.10 does not sanitise and escape some of its settings, which could allow ... |
| CVE-2023-6066 | MEDIUM | 4.3 | 0.4% | Jan 15, 2024 | The WP Custom Widget area WordPress plugin through 1.2.5 does not properly apply capability and nonce checks on any of i... |
| CVE-2023-6050 | MEDIUM | 6.1 | 0.4% | Jan 15, 2024 | The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not sanitise and escape various parameters and generat... |
| CVE-2023-6049 | CRITICAL | 9.8 | 0.9% | Jan 15, 2024 | The Estatik Real Estate Plugin WordPress plugin before 4.1.1 unserializes user input via some of its cookies, which coul... |
| CVE-2023-6048 | MEDIUM | 6.5 | 0.6% | Jan 15, 2024 | The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not prevent user with low privileges on the site, like... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now