2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-32513 | CRITICAL | 9.8 | 0.6% | Dec 28, 2023 | Deserialization of Untrusted Data vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform.This issue a... |
| CVE-2023-27447 | HIGH | 7.5 | 0.5% | Dec 28, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in VeronaLabs WP SMS – Messaging & SMS Notifica... |
| CVE-2023-51501 | MEDIUM | 6.1 | 0.4% | Dec 28, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Undsgn Uncode - Cr... |
| CVE-2023-50874 | MEDIUM | 5.4 | 0.3% | Dec 28, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Darren Cooney Word... |
| CVE-2023-4672 | MEDIUM | 6.1 | 0.3% | Dec 28, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Talent Software EC... |
| CVE-2023-4671 | CRITICAL | 9.8 | 0.6% | Dec 28, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software EC... |
| CVE-2023-45702 | MEDIUM | 5.5 | 0.2% | Dec 28, 2023 | An HCL UrbanCode Deploy Agent installed as a Windows service in a non-standard location could be subject to a denial of ... |
| CVE-2023-50038 | HIGH | 8.8 | 0.8% | Dec 28, 2023 | There is an arbitrary file upload vulnerability in the background of textpattern cms v4.8.8, which leads to the loss of ... |
| CVE-2023-45701 | MEDIUM | 6.5 | 0.5% | Dec 28, 2023 | HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is retu... |
| CVE-2023-50692 | HIGH | 8.8 | 0.9% | Dec 28, 2023 | File Upload vulnerability in JIZHICMS v.2.5, allows remote attacker to execute arbitrary code via a crafted file uploade... |
| CVE-2023-49469 | MEDIUM | 6.1 | 0.5% | Dec 28, 2023 | Reflected Cross Site Scripting (XSS) vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code... |
| CVE-2023-46989 | HIGH | 7.8 | 0.2% | Dec 28, 2023 | SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers... |
| CVE-2023-50445 | HIGH | 7.8 | 9.1% | Dec 28, 2023 | Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6, MT2500 v4.4.6, MT6000 ... |
| CVE-2023-51010 | MEDIUM | 5.3 | 0.4% | Dec 28, 2023 | An issue in the export component AdSdkH5Activity of com.sdjictec.qdmetro v4.2.2 allows attackers to open a crafted URL w... |
| CVE-2023-51006 | HIGH | 7.5 | 0.6% | Dec 28, 2023 | An issue in the openFile method of Chinese Perpetual Calendar v9.0.0 allows attackers to read any file via unspecified v... |
| CVE-2023-49230 | HIGH | 8.8 | 2.1% | Dec 28, 2023 | An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in captive portals allows att... |
| CVE-2023-49229 | MEDIUM | 4.3 | 0.5% | Dec 28, 2023 | An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in the administration web ser... |
| CVE-2023-49228 | MEDIUM | 6.4 | 0.5% | Dec 28, 2023 | An issue was discovered in Peplink Balance Two before 8.4.0. Console port authentication uses hard-coded credentials, wh... |
| CVE-2023-7124 | MEDIUM | 6.1 | 0.7% | Dec 28, 2023 | A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unk... |
| CVE-2023-34829 | MEDIUM | 6.5 | 0.2% | Dec 28, 2023 | Incorrect access control in TP-Link Tapo before v3.1.315 allows attackers to access user credentials in plaintext. |
| CVE-2023-7123 | CRITICAL | 9.8 | 0.7% | Dec 28, 2023 | A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracking System 1.0. This i... |
| CVE-2023-6879 | CRITICAL | 9.8 | 1.2% | Dec 27, 2023 | Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av... |
| CVE-2023-49003 | MEDIUM | 5.3 | 0.5% | Dec 27, 2023 | An issue in simplemobiletools Simple Dialer 5.18.1 allows an attacker to bypass intended access restrictions via interac... |
| CVE-2023-49002 | HIGH | 7.5 | 0.7% | Dec 27, 2023 | An issue in Xenom Technologies (sinous) Phone Dialer-voice Call Dialer v.1.2.5 allows an attacker to bypass intended acc... |
| CVE-2023-49001 | CRITICAL | 9.8 | 0.8% | Dec 27, 2023 | An issue in Indi Browser (aka kvbrowser) v.12.11.23 allows an attacker to bypass intended access restrictions via intera... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now