2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6856 | HIGH | 8.8 | 20.5% | Dec 19, 2023 | The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM... |
| CVE-2023-6135 | MEDIUM | 4.3 | 0.7% | Dec 19, 2023 | Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially all... |
| CVE-2023-50762 | MEDIUM | 4.3 | 0.6% | Dec 19, 2023 | When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text was never shown ... |
| CVE-2023-50761 | MEDIUM | 4.3 | 0.6% | Dec 19, 2023 | The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time. If... |
| CVE-2023-6730 | HIGH | 8.8 | 0.9% | Dec 19, 2023 | Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36. |
| CVE-2023-6945 | MEDIUM | 4.8 | 0.6% | Dec 19, 2023 | A vulnerability has been found in SourceCodester Online Student Management System 1.0 and classified as problematic. Aff... |
| CVE-2023-49736 | HIGH | 8.8 | 1.2% | Dec 19, 2023 | A where_in JINJA macro allows users to specify a quote, which combined with a carefully crafted statement would allow fo... |
| CVE-2023-49734 | MEDIUM | 6.5 | 0.9% | Dec 19, 2023 | An authenticated Gamma user has the ability to create a dashboard and add charts to it, this user would automatically be... |
| CVE-2023-49489 | MEDIUM | 6.1 | 0.7% | Dec 19, 2023 | Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive in... |
| CVE-2023-49006 | MEDIUM | 6.5 | 0.5% | Dec 19, 2023 | Cross Site Request Forgery (CSRF) vulnerability in Phpsysinfo version 3.4.3 allows a remote attacker to obtain sensitive... |
| CVE-2023-46104 | MEDIUM | 6.5 | 1.7% | Dec 19, 2023 | Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import data... |
| CVE-2023-50376 | MEDIUM | 6.1 | 0.5% | Dec 19, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in smp7, wp.Insider S... |
| CVE-2023-5432 | MEDIUM | 5.4 | 0.4% | Dec 19, 2023 | The Jquery news ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'jquery-news-ticker' shortc... |
| CVE-2023-5413 | MEDIUM | 5.4 | 0.4% | Dec 19, 2023 | The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'ihrss-... |
| CVE-2023-42015 | MEDIUM | 4.3 | 0.6% | Dec 19, 2023 | IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 is vulnerable to HTML inje... |
| CVE-2023-6940 | HIGH | 8.8 | 1.2% | Dec 19, 2023 | with only one user interaction(download a malicious config), attackers can gain full command execution on the victim sys... |
| CVE-2023-6488 | MEDIUM | 5.4 | 0.5% | Dec 19, 2023 | The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... |
| CVE-2023-6315 | HIGH | 7.8 | 0.3% | Dec 19, 2023 | Out-of-bouds read vulnerability in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute ar... |
| CVE-2023-6314 | HIGH | 7.8 | 0.3% | Dec 19, 2023 | Stack-based buffer overflow in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitr... |
| CVE-2023-44982 | HIGH | 7.5 | 1.4% | Dec 19, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Perfect Images (Manage Image Size... |
| CVE-2023-6918 | MEDIUM | 5.3 | 1.4% | Dec 19, 2023 | A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different sup... |
| CVE-2023-49819 | CRITICAL | 9.8 | 0.7% | Dec 19, 2023 | Deserialization of Untrusted Data vulnerability in Gordon Böhme, Antonio Leutsch Structured Content (JSON-LD) #wpsc.This... |
| CVE-2023-48751 | HIGH | 8.8 | 0.3% | Dec 19, 2023 | Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in Roland Barker, xnau webdesign Participants Dat... |
| CVE-2023-47754 | CRITICAL | 9.8 | 0.5% | Dec 19, 2023 | Missing Authorization vulnerability in Clever plugins Delete Duplicate Posts allows Accessing Functionality Not Properly... |
| CVE-2023-46212 | HIGH | 8.8 | 0.2% | Dec 19, 2023 | Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in TienCOP WP EXtra allows Accessing Functionalit... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now