2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-49961 | HIGH | 7.5 | 0.4% | Jan 8, 2024 | WALLIX Bastion 7.x, 8.x, 9.x and 10.x and WALLIX Access Manager 3.x and 4.x have Incorrect Access Control which can lead... |
| CVE-2023-27739 | MEDIUM | 6.1 | 0.3% | Jan 8, 2024 | easyXDM 2.5 allows XSS via the xdm_e parameter. |
| CVE-2023-52271 | MEDIUM | 6.5 | 0.3% | Jan 8, 2024 | The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any (Protected Process ... |
| CVE-2023-52216 | HIGH | 8.8 | 0.2% | Jan 8, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Yevhen Kotelnytskyi JS & CSS Script Optimizer.This issue affects JS &... |
| CVE-2023-52213 | MEDIUM | 6.1 | 0.3% | Jan 8, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper Rate ... |
| CVE-2023-52206 | HIGH | 7.2 | 0.5% | Jan 8, 2024 | Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-bui... |
| CVE-2023-52205 | HIGH | 7.2 | 0.6% | Jan 8, 2024 | Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 SoundCloud Player with Playlist Free.This iss... |
| CVE-2023-52204 | HIGH | 8.8 | 0.5% | Jan 8, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Javik Randomize.Th... |
| CVE-2023-52203 | MEDIUM | 4.8 | 0.3% | Jan 8, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliver Seidel, Bas... |
| CVE-2023-52200 | CRITICAL | 9.8 | 0.3% | Jan 8, 2024 | Cross-Site Request Forgery (CSRF), Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember – Memb... |
| CVE-2023-51246 | MEDIUM | 5.4 | 0.3% | Jan 8, 2024 | A Cross Site Scripting (XSS) vulnerability in GetSimple CMS 3.3.16 exists when using Source Code Mode as a backend user ... |
| CVE-2023-50982 | CRITICAL | 9 | 1.3% | Jan 8, 2024 | Stud.IP 5.x through 5.3.3 allows XSS with resultant upload of executable files, because upload_action and edit_action in... |
| CVE-2023-47890 | HIGH | 8.8 | 1.1% | Jan 8, 2024 | pyLoad 0.5.0 is vulnerable to Unrestricted File Upload. |
| CVE-2023-6845 | HIGH | 8.8 | 0.3% | Jan 8, 2024 | The CommentTweets WordPress plugin through 0.6 does not have CSRF checks in some places, which could allow attackers to ... |
| CVE-2023-6750 | HIGH | 7.5 | 2.0% | Jan 8, 2024 | The Clone WordPress plugin before 2.4.3 uses buffer files to store in-progress backup informations, which is stored at a... |
| CVE-2023-6631 | HIGH | 7.8 | 0.2% | Jan 8, 2024 | PowerSYSTEM Center versions 2020 Update 16 and prior contain a vulnerability that may allow an authorized local user to ... |
| CVE-2023-6627 | MEDIUM | 6.1 | 0.6% | Jan 8, 2024 | The WP Go Maps (formerly WP Google Maps) WordPress plugin before 9.0.28 does not properly protect most of its REST API r... |
| CVE-2023-6555 | MEDIUM | 6.1 | 0.4% | Jan 8, 2024 | The Email Subscription Popup WordPress plugin before 1.2.20 does not sanitise and escape a parameter before outputting i... |
| CVE-2023-6532 | HIGH | 8.8 | 0.3% | Jan 8, 2024 | The WP Blogs' Planetarium WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, whi... |
| CVE-2023-6529 | MEDIUM | 6.1 | 0.2% | Jan 8, 2024 | The WP VR WordPress plugin before 8.3.15 does not authorisation and CSRF in a function hooked to admin_init, allowing un... |
| CVE-2023-6528 | HIGH | 8.8 | 1.4% | Jan 8, 2024 | The Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from unseriali... |
| CVE-2023-6505 | HIGH | 7.5 | 39.9% | Jan 8, 2024 | The Migrate WordPress Website & Backups WordPress plugin before 1.9.3 does not prevent directory listing in sensitive di... |
| CVE-2023-6383 | HIGH | 7.5 | 0.6% | Jan 8, 2024 | The Debug Log Manager WordPress plugin before 2.3.0 contains a Directory listing vulnerability was discovered, which all... |
| CVE-2023-6161 | MEDIUM | 6.1 | 0.4% | Jan 8, 2024 | The WP Crowdfunding WordPress plugin before 2.1.9 does not sanitise and escape a parameter before outputting it back in ... |
| CVE-2023-6141 | MEDIUM | 5.4 | 0.4% | Jan 8, 2024 | The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions, whi... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now