2023 CVE Vulnerabilities

31,245 CVEs published in 2023.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2023-3774MEDIUM4.9An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting ...
CVE-2023-36942MEDIUM6.1A cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows att...
CVE-2023-3982MEDIUM4.8Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.2.
CVE-2023-3981MEDIUM4.9Server-Side Request Forgery (SSRF) in GitHub repository omeka/omeka-s prior to 4.0.2.
CVE-2023-3980MEDIUM4.8Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.2.
CVE-2023-36941MEDIUM6.1A cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows att...
CVE-2023-38491MEDIUM5.4Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6...
CVE-2023-3973MEDIUM6.1Cross-site Scripting (XSS) - Reflected in GitHub repository jgraph/drawio prior to 21.6.3.
CVE-2023-37979MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Saturday Drive Ninja Forms Contact Form plugin <= 3.6.25 v...
CVE-2023-37977MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPFunnels Team Drag & Drop Sales Funnel Builder for WordPr...
CVE-2023-37976MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Radio Forge Muses Player with Skins plugin <= 2.5 versions...
CVE-2023-37975MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RadiusTheme Variation Swatches for WooCommerce plugin <= 2...
CVE-2023-37970MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Matthew Fries MF Gig Calendar plugin <= 1.2 vers...
CVE-2023-37894MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RadiusTheme Variation Images Gallery for WooCommerce plugi...
CVE-2023-37993MEDIUM4.8Auth. Stored Cross-Site Scripting (XSS) vulnerability in maennchen1.De wpShopGermany IT-RECHT KANZLEI plugin <= 1.7 vers...
CVE-2023-37981MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPKube Authors List plugin <= 2.0.2 versions.
CVE-2023-37980MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gravity Master Custom Field For WP Job Manager plugin ...
CVE-2023-3970MEDIUM5.4A vulnerability, which was classified as problematic, was found in GZ Scripts Availability Booking Calendar PHP 1.0. Thi...
CVE-2023-3969MEDIUM5.4A vulnerability, which was classified as problematic, has been found in GZ Scripts Availability Booking Calendar PHP 1.0...
CVE-2023-3957MEDIUM4.3The ACF Photo Gallery Field plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficie...
CVE-2023-38608MEDIUM5.5The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.5. An app may be abl...
CVE-2023-38602MEDIUM5.5A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.6.8, macOS Vent...
CVE-2023-38593MEDIUM5.5A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, iOS 16.6 and iPadOS 16.6...
CVE-2023-38421MEDIUM5.5The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. Processi...
CVE-2023-38259MEDIUM5.5A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now