2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-50784HIGH7.5A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remote attacker...
CVE-2023-6559CRITICAL9.8The MW WP Form plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 5.0.3...
CVE-2023-6853CRITICAL9.8A vulnerability classified as critical was found in kalcaddle KodExplorer up to 4.51.03. Affected by this vulnerability ...
CVE-2023-6852CRITICAL9.8A vulnerability classified as critical has been found in kalcaddle KodExplorer up to 4.51.03. Affected is an unknown fun...
CVE-2023-6851CRITICAL9.8A vulnerability was found in kalcaddle KodExplorer up to 4.51.03. It has been rated as critical. This issue affects the ...
CVE-2023-6890MEDIUM5.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17.
CVE-2023-6889MEDIUM5.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17.
CVE-2023-6850CRITICAL9.8A vulnerability was found in kalcaddle KodExplorer up to 4.51.03. It has been declared as critical. This vulnerability a...
CVE-2023-6849CRITICAL9.8A vulnerability was found in kalcaddle kodbox up to 1.48. It has been rated as critical. Affected by this issue is the f...
CVE-2023-6848CRITICAL9.8A vulnerability was found in kalcaddle kodbox up to 1.48. It has been declared as critical. Affected by this vulnerabili...
CVE-2023-39340HIGH7.5A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific reque...
CVE-2023-31813——Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-2804. Reason: This record is a duplicate of CVE-2023-2...
CVE-2023-28022MEDIUM6.5HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive in...
CVE-2023-27317MEDIUM4.6ONTAP 9 versions 9.12.1P8, 9.13.1P4, and 9.13.1P5 are susceptible to a vulnerability which will cause all SAS-attached ...
CVE-2023-50728HIGH7.5octokit/webhooks is a GitHub webhook events toolset for Node.js. Starting in 9.26.0 and prior to 9.26.3, 10.9.2, 11.1.2,...
CVE-2023-50469CRITICAL9.8Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 v2.2.2.6 was discovered to contain a buffer overflow via the ApCliEnc...
CVE-2023-50266MEDIUM5.3Bazarr manages and downloads subtitles. In version 1.2.4, the proxy method in bazarr/bazarr/app/ui.py does not validate ...
CVE-2023-50265HIGH7.5Bazarr manages and downloads subtitles. Prior to 1.3.1, the /api/swaggerui/static endpoint in bazarr/app/ui.py does not ...
CVE-2023-50264HIGH7.5Bazarr manages and downloads subtitles. Prior to 1.3.1, Bazarr contains an arbitrary file read in /system/backup/downloa...
CVE-2023-4020CRITICAL9.1An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon...
CVE-2023-50723HIGH8.8XWiki Platform is a generic wiki platform. Starting in 2.3 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, anyone...
CVE-2023-50722HIGH8.8XWiki Platform is a generic wiki platform. Starting in 2.3 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, there ...
CVE-2023-50721HIGH8.8XWiki Platform is a generic wiki platform. Starting in 4.5-rc-1 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, t...
CVE-2023-50720MEDIUM5.3XWiki Platform is a generic wiki platform. Prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in X...
CVE-2023-50719HIGH7.5XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now