2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-4372 | MEDIUM | 5.4 | 19.7% | Jan 11, 2024 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'esi' shortcode in version... |
| CVE-2023-4248 | MEDIUM | 4.3 | 0.2% | Jan 11, 2024 | The GiveWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.33.3. Th... |
| CVE-2023-4247 | MEDIUM | 5.4 | 0.3% | Jan 11, 2024 | The GiveWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.33.3. Th... |
| CVE-2023-4246 | MEDIUM | 4.3 | 0.2% | Jan 11, 2024 | The GiveWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.33.3. Th... |
| CVE-2023-37644 | MEDIUM | 5.5 | 0.3% | Jan 11, 2024 | SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstr... |
| CVE-2023-6883 | MEDIUM | 4.3 | 0.3% | Jan 11, 2024 | The Easy Social Feed plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability... |
| CVE-2023-6699 | HIGH | 7.5 | 0.9% | Jan 11, 2024 | The WP Compress – Image Optimizer [All-In-One] plugin for WordPress is vulnerable to Directory Traversal in all versions... |
| CVE-2023-6520 | MEDIUM | 4.3 | 0.2% | Jan 11, 2024 | The WP 2FA – Two-factor authentication for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in... |
| CVE-2023-6506 | MEDIUM | 4.3 | 0.5% | Jan 11, 2024 | The WP 2FA – Two-factor authentication for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Refere... |
| CVE-2023-6446 | MEDIUM | 4.8 | 0.3% | Jan 11, 2024 | The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all v... |
| CVE-2023-6223 | MEDIUM | 4.3 | 0.3% | Jan 11, 2024 | The LearnPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includi... |
| CVE-2023-6630 | MEDIUM | 4.3 | 0.3% | Jan 11, 2024 | The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Insecure Direct Object Reference in al... |
| CVE-2023-5448 | HIGH | 8.8 | 0.3% | Jan 11, 2024 | The WP Register Profile With Shortcode plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up t... |
| CVE-2023-52274 | MEDIUM | 6.1 | 0.4% | Jan 11, 2024 | member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header. |
| CVE-2023-51073 | HIGH | 8.1 | 1.3% | Jan 11, 2024 | An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script... |
| CVE-2023-45171 | MEDIUM | 5.5 | 0.2% | Jan 11, 2024 | IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the kernel to cause... |
| CVE-2023-45169 | MEDIUM | 5.5 | 0.2% | Jan 11, 2024 | IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the pmsvcs kernel e... |
| CVE-2023-38267 | MEDIUM | 5.5 | 0.1% | Jan 11, 2024 | IBM Security Access Manager Appliance (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V... |
| CVE-2023-31003 | HIGH | 7.8 | 0.2% | Jan 11, 2024 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V... |
| CVE-2023-31001 | MEDIUM | 5.5 | 0.2% | Jan 11, 2024 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V... |
| CVE-2023-45175 | MEDIUM | 5.5 | 0.2% | Jan 11, 2024 | IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel e... |
| CVE-2023-45173 | MEDIUM | 5.5 | 0.2% | Jan 11, 2024 | IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the NFS kernel exte... |
| CVE-2023-51123 | CRITICAL | 9.8 | 24.4% | Jan 10, 2024 | An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted PO... |
| CVE-2023-49295 | MEDIUM | 6.5 | 1.2% | Jan 10, 2024 | quic-go is an implementation of the QUIC protocol (RFC 9000, RFC 9001, RFC 9002) in Go. An attacker can cause its peer t... |
| CVE-2023-42941 | MEDIUM | 4.8 | 0.2% | Jan 10, 2024 | The issue was addressed with improved checks. This issue is fixed in iOS 17.2 and iPadOS 17.2. An attacker in a privileg... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now