2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-24590 | HIGH | 8.8 | 0.6% | Dec 18, 2023 | A format string issue in the Controller 6000's optional diagnostic web interface can be used to write/read from memor... |
| CVE-2023-23584 | MEDIUM | 4.3 | 0.5% | Dec 18, 2023 | An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an insufficiently-privileged user to ... |
| CVE-2023-23576 | MEDIUM | 4.3 | 0.3% | Dec 18, 2023 | Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site ... |
| CVE-2023-23570 | HIGH | 8.1 | 0.7% | Dec 18, 2023 | Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed and lead to invalid con... |
| CVE-2023-22439 | MEDIUM | 4.3 | 0.5% | Dec 18, 2023 | Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000 optional diagnostic web in... |
| CVE-2023-40691 | MEDIUM | 4.9 | 0.7% | Dec 18, 2023 | IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21... |
| CVE-2023-6295 | HIGH | 7.2 | 1.0% | Dec 18, 2023 | The SiteOrigin Widgets Bundle WordPress plugin before 1.51.0 does not validate user input before using it to generate pa... |
| CVE-2023-6289 | MEDIUM | 4.3 | 0.9% | Dec 18, 2023 | The Swift Performance Lite WordPress plugin before 2.3.6.15 does not prevent users from exporting the plugin's settings,... |
| CVE-2023-6272 | CRITICAL | 9.8 | 0.9% | Dec 18, 2023 | The Theme My Login 2FA WordPress plugin before 1.2 does not rate limit 2FA validation attempts, which may allow an attac... |
| CVE-2023-6222 | HIGH | 7.2 | 1.1% | Dec 18, 2023 | IThe Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 does not validate user input used in a path, which coul... |
| CVE-2023-6203 | HIGH | 7.5 | 0.8% | Dec 18, 2023 | The Events Calendar WordPress plugin before 6.2.8.1 discloses the content of password protected posts to unauthenticated... |
| CVE-2023-6077 | MEDIUM | 6.5 | 0.7% | Dec 18, 2023 | The Slider WordPress plugin before 3.5.12 does not ensure that posts to be accessed via an AJAX action are slides and ca... |
| CVE-2023-6065 | MEDIUM | 5.3 | 18.7% | Dec 18, 2023 | The Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 doesn't restrict access to detailed scan logs, which all... |
| CVE-2023-5949 | HIGH | 7.5 | 0.8% | Dec 18, 2023 | The SmartCrawl WordPress plugin before 3.8.3 does not prevent unauthorised users from accessing password-protected posts... |
| CVE-2023-5886 | HIGH | 8.8 | 0.5% | Dec 18, 2023 | The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 ... |
| CVE-2023-5882 | HIGH | 8.8 | 0.5% | Dec 18, 2023 | The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 ... |
| CVE-2023-5348 | MEDIUM | 6.1 | 0.5% | Dec 18, 2023 | The Product Catalog Mode For WooCommerce WordPress plugin before 5.0.3 does not properly authorize settings updates or e... |
| CVE-2023-5005 | MEDIUM | 4.8 | 0.4% | Dec 18, 2023 | The Autocomplete Location field Contact Form 7 WordPress plugin before 3.0, autocomplete-location-field-contact-form-7-p... |
| CVE-2023-4724 | HIGH | 7.2 | 1.2% | Dec 18, 2023 | The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 ... |
| CVE-2023-4311 | HIGH | 8.8 | 1.0% | Dec 18, 2023 | The Vrm 360 3D Model Viewer WordPress plugin through 1.2.1 is vulnerable to arbitrary file upload due to insufficient ch... |
| CVE-2023-47741 | MEDIUM | 5.3 | 0.3% | Dec 18, 2023 | IBM i 7.3, 7.4, 7.5, IBM i Db2 Mirror for i 7.4 and 7.5 web browser clients may leave clear-text passwords in browser m... |
| CVE-2023-51385 | MEDIUM | 6.5 | 19.8% | Dec 18, 2023 | In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and... |
| CVE-2023-51384 | MEDIUM | 5.5 | 0.4% | Dec 18, 2023 | In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constr... |
| CVE-2023-6691 | HIGH | 7.8 | 0.4% | Dec 18, 2023 | Cambium ePMP Force 300-25 version 4.7.0.1 is vulnerable to a code injection vulnerability that could allow an attacker ... |
| CVE-2023-6920 | — | — | — | Dec 18, 2023 | Rejected reason: This flaw was found to be a duplicate of CVE-2023-6927. Please see https://access.redhat.com/security/c... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now