2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-48766HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in SVGator SVGator – Add Animated SVG Easily.This issue affects SVGator ...
CVE-2023-48762HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements F...
CVE-2023-46617HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in AdFoxly AdFoxly – Ad Manager, AdSense Ads & Ads.Txt.This issue affect...
CVE-2023-48795MEDIUM5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remot...
CVE-2023-48755HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Michael Winkler teachPress.This issue affects teachPress: from n/a th...
CVE-2023-47806HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Saint Systems Disable User Login.This issue affects Disable User Logi...
CVE-2023-47789HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Canada Post Shipping Method.This issue affects Canada Pos...
CVE-2023-47787HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Bookings.This issue affects WooCommerce Booki...
CVE-2023-33214HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & A...
CVE-2023-6817HIGH7.8A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local pr...
CVE-2023-6778MEDIUM5.4Cross-site Scripting (XSS) - Stored in GitHub repository allegroai/clearml-server prior to 1.13.0.
CVE-2023-49853HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. PayTR Taksit Tablosu – W...
CVE-2023-49844HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Kevin Ohashi WPPerformanceTester.This issue affects WPPerformanceTest...
CVE-2023-49843HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in QuanticEdge First Order Discount Woocommerce.This issue affects First...
CVE-2023-49840HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Palscode Multi Currency For WooCommerce.This issue affects Multi Curr...
CVE-2023-46177HIGH7.5IBM MQ Appliance 9.3 LTS and 9.3 CD could allow a remote attacker to traverse directories on the system. An attacker co...
CVE-2023-6228LOW3.3An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may ...
CVE-2023-5384LOW2.7A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credenti...
CVE-2023-5236MEDIUM6.5A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated at...
CVE-2023-5115MEDIUM6.3An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a mal...
CVE-2023-5056MEDIUM4.1A flaw was found in the Skupper operator, which may permit a certain configuration to create a service account that woul...
CVE-2023-4320HIGH7.5An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attack...
CVE-2023-47038HIGH7.8A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled...
CVE-2023-3629MEDIUM6.5A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permission...
CVE-2023-3628MEDIUM6.5A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. ...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now