2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50922 | HIGH | 7.2 | 0.9% | Jan 3, 2024 | An issue was discovered on GL.iNet devices through 4.5.0. Attackers who are able to steal the AdminToken cookie can exec... |
| CVE-2023-6986 | MEDIUM | 5.4 | 0.4% | Jan 3, 2024 | The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elem... |
| CVE-2023-47473 | HIGH | 7.5 | 1.0% | Jan 3, 2024 | Directory Traversal vulnerability in fuwushe.org iFair versions 23.8_ad0 and before allows an attacker to obtain sensiti... |
| CVE-2023-6981 | MEDIUM | 4.9 | 0.4% | Jan 3, 2024 | The WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc plugin for WordPress is vulnerab... |
| CVE-2023-6980 | MEDIUM | 4.3 | 0.2% | Jan 3, 2024 | The WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc plugin for WordPress is vulnerab... |
| CVE-2023-6600 | MEDIUM | 5.4 | 0.5% | Jan 3, 2024 | The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin for WordPress is vulnerable to unauthorized modificat... |
| CVE-2023-6524 | MEDIUM | 5.4 | 0.5% | Jan 3, 2024 | The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the map title para... |
| CVE-2023-42358 | HIGH | 7.7 | 0.6% | Jan 3, 2024 | An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers ... |
| CVE-2023-7027 | MEDIUM | 5.4 | 0.9% | Jan 3, 2024 | The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress i... |
| CVE-2023-6629 | MEDIUM | 6.1 | 0.4% | Jan 3, 2024 | The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress i... |
| CVE-2023-46308 | CRITICAL | 9.8 | 0.9% | Jan 3, 2024 | In Plotly plotly.js before 2.25.2, plot API calls have a risk of __proto__ being polluted in expandObjectPaths or nested... |
| CVE-2023-50344 | MEDIUM | 5.4 | 0.3% | Jan 3, 2024 | HCL DRYiCE MyXalytics is impacted by improper access control (Unauthenticated File Download) vulnerability. An unauthent... |
| CVE-2023-50343 | MEDIUM | 6.5 | 0.4% | Jan 3, 2024 | HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints a... |
| CVE-2023-50342 | MEDIUM | 4.3 | 0.3% | Jan 3, 2024 | HCL DRYiCE MyXalytics is impacted by an Insecure Direct Object Reference (IDOR) vulnerability. A user can obtain certai... |
| CVE-2023-50341 | HIGH | 7.5 | 0.4% | Jan 3, 2024 | HCL DRYiCE MyXalytics is impacted by Improper Access Control (Obsolete web pages) vulnerability. Discovery of outdated a... |
| CVE-2023-45724 | CRITICAL | 9.8 | 0.5% | Jan 3, 2024 | HCL DRYiCE MyXalytics product is impacted by unauthenticated file upload vulnerability. The web application permits the ... |
| CVE-2023-45723 | CRITICAL | 9.8 | 1.0% | Jan 3, 2024 | HCL DRYiCE MyXalytics is impacted by path traversal vulnerability which allows file upload capability. Certain endpoint... |
| CVE-2023-45722 | CRITICAL | 9.8 | 0.7% | Jan 3, 2024 | HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to ... |
| CVE-2023-50351 | CRITICAL | 9.1 | 0.2% | Jan 3, 2024 | HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compro... |
| CVE-2023-50350 | HIGH | 7.5 | 0.2% | Jan 3, 2024 | HCL DRYiCE MyXalytics is impacted by the use of a broken cryptographic algorithm for encryption, potentially giving an a... |
| CVE-2023-50348 | MEDIUM | 5.3 | 0.3% | Jan 3, 2024 | HCL DRYiCE MyXalytics is impacted by an improper error handling vulnerability. The application returns detailed error me... |
| CVE-2023-50346 | MEDIUM | 4.3 | 0.3% | Jan 3, 2024 | HCL DRYiCE MyXalytics is impacted by an information disclosure vulnerability. Certain endpoints within the application d... |
| CVE-2023-50345 | MEDIUM | 6.1 | 0.3% | Jan 3, 2024 | HCL DRYiCE MyXalytics is impacted by an Open Redirect vulnerability which could allow an attacker to redirect users to m... |
| CVE-2023-41783 | HIGH | 7.8 | 0.6% | Jan 3, 2024 | There is a command injection vulnerability of ZTE's ZXCLOUD iRAI. Due to the program failed to adequately validate the... |
| CVE-2023-41780 | HIGH | 7.8 | 0.2% | Jan 3, 2024 | There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the program failed to adequately validate the... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now