2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-51459 | MEDIUM | 5.4 | 0.4% | Dec 20, 2023 | Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerabilit... |
| CVE-2023-51458 | MEDIUM | 5.4 | 0.4% | Dec 20, 2023 | Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t... |
| CVE-2023-51457 | MEDIUM | 5.4 | 0.4% | Dec 20, 2023 | Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t... |
| CVE-2023-50249 | HIGH | 7.5 | 0.8% | Dec 20, 2023 | Sentry-Javascript is official Sentry SDKs for JavaScript. A ReDoS (Regular expression Denial of Service) vulnerability h... |
| CVE-2023-47507 | CRITICAL | 9.8 | 0.4% | Dec 20, 2023 | Deserialization of Untrusted Data vulnerability in Master Slider Master Slider Pro.This issue affects Master Slider Pro:... |
| CVE-2023-47236 | MEDIUM | 4.9 | 0.5% | Dec 20, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Avirtum iPages Fli... |
| CVE-2023-46311 | MEDIUM | 6.5 | 0.5% | Dec 20, 2023 | Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team Comments – wpDiscuz.This issue affects C... |
| CVE-2023-46147 | HIGH | 8.8 | 0.5% | Dec 20, 2023 | Deserialization of Untrusted Data vulnerability in Themify Themify Ultra.This issue affects Themify Ultra: from n/a thro... |
| CVE-2023-41796 | MEDIUM | 6.5 | 0.4% | Dec 20, 2023 | Authorization Bypass Through User-Controlled Key vulnerability in WP Sunshine Sunshine Photo Cart: Free Client Galleries... |
| CVE-2023-40555 | CRITICAL | 9.8 | 0.5% | Dec 20, 2023 | Deserialization of Untrusted Data vulnerability in UX-themes Flatsome | Multi-Purpose Responsive WooCommerce Theme.This ... |
| CVE-2023-38519 | MEDIUM | 4.9 | 0.6% | Dec 20, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MainWP MainWP Dash... |
| CVE-2023-38513 | MEDIUM | 5.4 | 0.3% | Dec 20, 2023 | Authorization Bypass Through User-Controlled Key vulnerability in Jordy Meow Photo Engine (Media Organizer & Lightroom).... |
| CVE-2023-37871 | HIGH | 7.5 | 0.5% | Dec 20, 2023 | Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce GoCardless.This issue affects GoCardless: ... |
| CVE-2023-6562 | HIGH | 7.5 | 0.7% | Dec 20, 2023 | JPX Fragment List (flst) box vulnerability in Kakadu 7.9 allows an attacker to exfiltrate local and remote files reachab... |
| CVE-2023-6912 | CRITICAL | 9.8 | 1.0% | Dec 20, 2023 | Lack of protection against brute force attacks in M-Files Server before 23.12.13205.0 allows an attacker unlimited authe... |
| CVE-2023-6910 | MEDIUM | 6.5 | 0.9% | Dec 20, 2023 | A vulnerable API method in M-Files Server before 23.12.13195.0 allows for uncontrolled resource consumption. Authenticat... |
| CVE-2023-6769 | MEDIUM | 4.6 | 0.7% | Dec 20, 2023 | Stored XSS vulnerability in Amazing Little Poll, affecting versions 1.3 and 1.4. This vulnerability allows a remote atta... |
| CVE-2023-6768 | CRITICAL | 9.8 | 1.0% | Dec 20, 2023 | Authentication bypass vulnerability in Amazing Little Poll affecting versions 1.3 and 1.4. This vulnerability could allo... |
| CVE-2023-50628 | CRITICAL | 9.8 | 1.2% | Dec 20, 2023 | Buffer Overflow vulnerability in libming version 0.4.8, allows attackers to execute arbitrary code and obtain sensitive ... |
| CVE-2023-50044 | CRITICAL | 9.8 | 0.9% | Dec 20, 2023 | Cesanta MJS 2.20.0 has a getprop_builtin_foreign out-of-bounds read if a Built-in API name occurs in a substring of an i... |
| CVE-2023-37544 | HIGH | 7.5 | 1.4% | Dec 20, 2023 | Improper Authentication vulnerability in Apache Pulsar WebSocket Proxy allows an attacker to connect to the /pingpong en... |
| CVE-2023-0011 | MEDIUM | 6.8 | 0.5% | Dec 20, 2023 | A flaw in the input validation in TOBY-L2 allows a user to execute arbitrary operating system commands using specificall... |
| CVE-2023-6977 | HIGH | 7.5 | 3.9% | Dec 20, 2023 | This vulnerability enables malicious users to read sensitive files on the server. |
| CVE-2023-6976 | HIGH | 8.8 | 1.0% | Dec 20, 2023 | This vulnerability is capable of writing arbitrary files into arbitrary locations on the remote filesystem in the contex... |
| CVE-2023-6975 | CRITICAL | 9.8 | 2.0% | Dec 20, 2023 | A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now