2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-52096 | HIGH | 7.5 | 0.6% | Dec 26, 2023 | SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (su... |
| CVE-2023-49438 | MEDIUM | 6.1 | 1.1% | Dec 26, 2023 | An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 allows attackers to redirect unsuspectin... |
| CVE-2023-48003 | MEDIUM | 6.1 | 0.5% | Dec 26, 2023 | An open redirect through HTML injection in user messages in Asp.Net Zero before 12.3.0 allows remote attackers to redire... |
| CVE-2023-6268 | MEDIUM | 6.1 | 0.4% | Dec 26, 2023 | The JSON Content Importer WordPress plugin before 1.5.4 does not sanitise and escape the tab parameter before outputting... |
| CVE-2023-6250 | HIGH | 7.5 | 0.5% | Dec 26, 2023 | The BestWebSoft's Like & Share WordPress plugin before 2.74 discloses the content of password protected posts to unauthe... |
| CVE-2023-6166 | MEDIUM | 6.1 | 0.4% | Dec 26, 2023 | The Quiz Maker WordPress plugin before 6.4.9.5 does not escape generated URLs before outputting them in attributes, lead... |
| CVE-2023-6155 | MEDIUM | 5.3 | 0.6% | Dec 26, 2023 | The Quiz Maker WordPress plugin before 6.4.9.5 does not adequately authorize the `ays_quiz_author_user_search` AJAX acti... |
| CVE-2023-6114 | HIGH | 7.5 | 30.9% | Dec 26, 2023 | The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listin... |
| CVE-2023-5991 | CRITICAL | 9.8 | 3.3% | Dec 26, 2023 | The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as do... |
| CVE-2023-5980 | MEDIUM | 4.8 | 0.4% | Dec 26, 2023 | The BSK Forms Blacklist WordPress plugin before 3.7 does not sanitise and escape some of its settings, which could allow... |
| CVE-2023-5939 | HIGH | 7.2 | 1.3% | Dec 26, 2023 | The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 loads the contents of the import file i... |
| CVE-2023-5931 | HIGH | 8.8 | 0.8% | Dec 26, 2023 | The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded,... |
| CVE-2023-5674 | HIGH | 8.8 | 10.8% | Dec 26, 2023 | The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using it in a SQL... |
| CVE-2023-5673 | HIGH | 8.8 | 1.1% | Dec 26, 2023 | The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file extensions uploading files to attach to em... |
| CVE-2023-5672 | MEDIUM | 6.5 | 0.7% | Dec 26, 2023 | The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to em... |
| CVE-2023-5645 | HIGH | 8.8 | 0.7% | Dec 26, 2023 | The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using it in a SQL... |
| CVE-2023-5644 | HIGH | 7.6 | 0.5% | Dec 26, 2023 | The WP Mail Log WordPress plugin before 1.1.3 does not correctly authorize its REST API endpoints, allowing users with t... |
| CVE-2023-5203 | HIGH | 7.5 | 2.2% | Dec 26, 2023 | The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the request URL or query ... |
| CVE-2023-52086 | HIGH | 8.1 | 0.7% | Dec 26, 2023 | resumable.php (aka PHP backend for resumable.js) 0.1.4 before 3c6dbf5 allows arbitrary file upload anywhere in the files... |
| CVE-2023-51102 | CRITICAL | 9.8 | 0.7% | Dec 26, 2023 | Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet. |
| CVE-2023-51101 | CRITICAL | 9.8 | 0.7% | Dec 26, 2023 | Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo. |
| CVE-2023-51100 | CRITICAL | 9.8 | 1.8% | Dec 26, 2023 | Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseI... |
| CVE-2023-51099 | CRITICAL | 9.8 | 1.9% | Dec 26, 2023 | Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formexeCommand . |
| CVE-2023-51098 | CRITICAL | 9.8 | 1.8% | Dec 26, 2023 | Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formSetDiagnoseI... |
| CVE-2023-51097 | CRITICAL | 9.8 | 0.8% | Dec 26, 2023 | Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now