2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-52129 | HIGH | 8.8 | 0.2% | Jan 5, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Michael Winkler teachPress.This issue affects teachPress: from n/a th... |
| CVE-2023-52128 | HIGH | 8.8 | 0.2% | Jan 5, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in WhiteWP White Label – WordPress Custom Admin, Custom Login Page, and ... |
| CVE-2023-52127 | HIGH | 8.8 | 0.2% | Jan 5, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in WPClever WPC Product Bundles for WooCommerce.This issue affects WPC P... |
| CVE-2023-52123 | HIGH | 8.8 | 0.2% | Jan 5, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in WPChill Strong Testimonials.This issue affects Strong Testimonials: f... |
| CVE-2023-50027 | CRITICAL | 9.8 | 0.7% | Jan 5, 2024 | SQL Injection vulnerability in Buy Addons baproductzoommagnifier module for PrestaShop versions 1.0.16 and before, allow... |
| CVE-2023-52184 | HIGH | 8.8 | 0.2% | Jan 5, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in WP Job Portal WP Job Portal – A Complete Job Board.This issue affects... |
| CVE-2023-52178 | MEDIUM | 5.4 | 0.3% | Jan 5, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MojofyWP WP Affili... |
| CVE-2023-52150 | HIGH | 8.8 | 0.3% | Jan 5, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Ovation S.R.L. Dynamic Content for Elementor.This issue affects Dynam... |
| CVE-2023-51502 | CRITICAL | 9.8 | 0.6% | Jan 5, 2024 | Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This is... |
| CVE-2023-51277 | CRITICAL | 9.8 | 1.1% | Jan 5, 2024 | nbviewer-app (aka Jupyter Notebook Viewer) before 0.1.6 has the get-task-allow entitlement for release builds. |
| CVE-2023-52323 | MEDIUM | 5.9 | 0.6% | Jan 5, 2024 | PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger at... |
| CVE-2023-6493 | MEDIUM | 4.3 | 0.2% | Jan 5, 2024 | The Depicter Slider – Responsive Image Slider, Video Slider & Post Slider plugin for WordPress is vulnerable to Cross-Si... |
| CVE-2023-41782 | MEDIUM | 4.8 | 0.2% | Jan 5, 2024 | There is a DLL hijacking vulnerability in ZTE ZXCLOUD iRAI, an attacker could place a fake DLL file in a specific direc... |
| CVE-2023-5619 | — | — | — | Jan 4, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-6530. Reason: This candidate is a r... |
| CVE-2023-5442 | — | — | — | Jan 4, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-6991. Reason: This candidate is a ... |
| CVE-2023-51812 | CRITICAL | 9.8 | 1.1% | Jan 4, 2024 | Tenda AX3 v16.03.12.11 was discovered to contain a remote code execution (RCE) vulnerability via the list parameter at /... |
| CVE-2023-51154 | CRITICAL | 9.8 | 0.6% | Jan 4, 2024 | Jizhicms v2.5 was discovered to contain an arbitrary file download vulnerability via the component /admin/c/PluginsContr... |
| CVE-2023-6270 | HIGH | 7 | 0.4% | Jan 4, 2024 | A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly up... |
| CVE-2023-6551 | MEDIUM | 5.4 | 0.4% | Jan 4, 2024 | As a simple library, class.upload.php does not perform an in-depth check on uploaded files, allowing a stored XSS vulner... |
| CVE-2023-50867 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of... |
| CVE-2023-50866 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of... |
| CVE-2023-50865 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'city' parameter of the... |
| CVE-2023-50864 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelId' parameter of ... |
| CVE-2023-50863 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelIDHidden' paramet... |
| CVE-2023-50862 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelIDHidden' paramet... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now