2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-52082 | CRITICAL | 9.8 | 0.5% | Dec 28, 2023 | Lychee is a free photo-management tool. Prior to 5.0.2, Lychee is vulnerable to an SQL injection on any binding when us... |
| CVE-2023-52081 | MEDIUM | 5.3 | 0.5% | Dec 28, 2023 | ffcss is a CLI interface to apply and configure Firefox CSS themes. Prior to 0.2.0, the function `lookupPreprocess()` is... |
| CVE-2023-52079 | MEDIUM | 6.5 | 0.7% | Dec 28, 2023 | msgpackr is a fast MessagePack NodeJS/JavaScript implementation. Prior to 1.10.1, when decoding user supplied MessagePac... |
| CVE-2023-50267 | MEDIUM | 4.3 | 0.3% | Dec 28, 2023 | MeterSphere is a one-stop open source continuous testing platform. Prior to 2.10.10-lts, the authenticated attackers can... |
| CVE-2023-7128 | HIGH | 8.8 | 0.7% | Dec 28, 2023 | A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects... |
| CVE-2023-7127 | CRITICAL | 9.8 | 0.7% | Dec 28, 2023 | A vulnerability classified as critical was found in code-projects Automated Voting System 1.0. This vulnerability affect... |
| CVE-2023-50470 | MEDIUM | 5.4 | 0.5% | Dec 28, 2023 | A cross-site scripting (XSS) vulnerability in the component admin_ Video.php of SeaCMS v12.8 allows attackers to execute... |
| CVE-2023-46987 | HIGH | 8.8 | 1.5% | Dec 28, 2023 | SeaCMS v12.9 was discovered to contain a remote code execution (RCE) vulnerability via the component /augap/adminip.php. |
| CVE-2023-7126 | HIGH | 8.8 | 0.7% | Dec 28, 2023 | A vulnerability classified as critical has been found in code-projects Automated Voting System 1.0. This affects an unkn... |
| CVE-2023-50855 | HIGH | 7.2 | 0.5% | Dec 28, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sam Perrow Pre* Pa... |
| CVE-2023-50854 | HIGH | 7.2 | 0.5% | Dec 28, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Squirrly Squirrly ... |
| CVE-2023-50853 | HIGH | 7.2 | 0.5% | Dec 28, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nasirahmed Advance... |
| CVE-2023-50852 | HIGH | 7.2 | 0.5% | Dec 28, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Boo... |
| CVE-2023-50851 | HIGH | 7.2 | 0.5% | Dec 28, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in N Squared Appointm... |
| CVE-2023-50849 | HIGH | 7.2 | 0.5% | Dec 28, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E2Pdf.Com E2Pdf – ... |
| CVE-2023-50848 | HIGH | 7.2 | 0.5% | Dec 28, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aaron J 404 Soluti... |
| CVE-2023-50873 | HIGH | 8.8 | 0.2% | Dec 28, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Marios Alexandrou Add Any Extension to Pages.This issue affects Add A... |
| CVE-2023-50860 | MEDIUM | 5.4 | 0.3% | Dec 28, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TMS Booking for Ap... |
| CVE-2023-50859 | MEDIUM | 5.4 | 0.3% | Dec 28, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum WP Crowdfu... |
| CVE-2023-50858 | HIGH | 8.8 | 0.2% | Dec 28, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Bill Minozzi Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop... |
| CVE-2023-50857 | HIGH | 7.2 | 0.5% | Dec 28, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Recover ... |
| CVE-2023-50856 | HIGH | 7.2 | 0.5% | Dec 28, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel B... |
| CVE-2023-50836 | MEDIUM | 4.8 | 0.3% | Dec 28, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ibericode HTML For... |
| CVE-2023-36381 | HIGH | 8.8 | 0.5% | Dec 28, 2023 | Deserialization of Untrusted Data vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a throu... |
| CVE-2023-32795 | HIGH | 7.2 | 0.7% | Dec 28, 2023 | Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now