2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-5007 | HIGH | 8.8 | 0.7% | Dec 20, 2023 | Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'id' paramete... |
| CVE-2023-49825 | HIGH | 8.1 | 0.5% | Dec 20, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PenciDesign Soleda... |
| CVE-2023-49776 | CRITICAL | 9.8 | 0.6% | Dec 20, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hakan Demiray Sayf... |
| CVE-2023-49773 | CRITICAL | 9.8 | 0.7% | Dec 20, 2023 | Deserialization of Untrusted Data vulnerability in Tim Brattberg BCorp Shortcodes.This issue affects BCorp Shortcodes: f... |
| CVE-2023-49772 | CRITICAL | 9.8 | 0.7% | Dec 20, 2023 | Deserialization of Untrusted Data vulnerability in Phpbits Creative Studio Genesis Simple Love.This issue affects Genesi... |
| CVE-2023-3742 | MEDIUM | 6.8 | 0.2% | Dec 20, 2023 | Insufficient policy enforcement in ADB in Google Chrome on ChromeOS prior to 114.0.5735.90 allowed a local attacker to b... |
| CVE-2023-35916 | HIGH | 7.5 | 0.6% | Dec 20, 2023 | Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution Bui... |
| CVE-2023-35915 | CRITICAL | 9.8 | 0.7% | Dec 20, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic WooPaym... |
| CVE-2023-35914 | HIGH | 7.5 | 0.6% | Dec 20, 2023 | Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Woo Subscriptions.This issue affects Woo S... |
| CVE-2023-33330 | HIGH | 8.1 | 0.6% | Dec 20, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Automa... |
| CVE-2023-33209 | HIGH | 8.1 | 0.6% | Dec 20, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CrawlSpider SEO Ch... |
| CVE-2023-32743 | MEDIUM | 4.9 | 0.6% | Dec 20, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Automa... |
| CVE-2023-32128 | HIGH | 7.2 | 0.7% | Dec 20, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adastra Crypto Cry... |
| CVE-2023-31092 | HIGH | 8.1 | 0.6% | Dec 20, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Foxskav Easy Bet.T... |
| CVE-2023-47852 | HIGH | 7.2 | 0.6% | Dec 20, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper Link ... |
| CVE-2023-40010 | CRITICAL | 9.8 | 0.6% | Dec 20, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in realmag777 HUSKY –... |
| CVE-2023-36520 | HIGH | 8.1 | 0.4% | Dec 20, 2023 | Authorization Bypass Through User-Controlled Key vulnerability in MarketingFire Editorial Calendar.This issue affects Ed... |
| CVE-2023-35895 | CRITICAL | 9.8 | 0.9% | Dec 20, 2023 | IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when passing an... |
| CVE-2023-35876 | HIGH | 8.1 | 0.6% | Dec 20, 2023 | Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Square.This issue affects WooC... |
| CVE-2023-32590 | HIGH | 7.5 | 1.6% | Dec 20, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daniel Söderström ... |
| CVE-2023-28782 | CRITICAL | 9.8 | 0.6% | Dec 20, 2023 | Deserialization of Untrusted Data vulnerability in Rocketgenius Inc. Gravity Forms.This issue affects Gravity Forms: fro... |
| CVE-2023-6784 | MEDIUM | 4.3 | 0.4% | Dec 20, 2023 | A malicious user could potentially use the Sitefinity system for the distribution of phishing emails. |
| CVE-2023-51462 | MEDIUM | 5.4 | 0.4% | Dec 20, 2023 | Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerabilit... |
| CVE-2023-51461 | MEDIUM | 5.4 | 0.4% | Dec 20, 2023 | Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t... |
| CVE-2023-51460 | MEDIUM | 5.4 | 0.4% | Dec 20, 2023 | Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now