2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50918 | CRITICAL | 9.8 | 0.8% | Dec 15, 2023 | app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs. |
| CVE-2023-50917 | CRITICAL | 9.8 | 38.3% | Dec 15, 2023 | MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: ... |
| CVE-2023-50089 | CRITICAL | 9.8 | 4.0% | Dec 15, 2023 | A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication,... |
| CVE-2023-6680 | HIGH | 8.1 | 0.4% | Dec 15, 2023 | An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior... |
| CVE-2023-6051 | MEDIUM | 6.5 | 0.6% | Dec 15, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 befor... |
| CVE-2023-5512 | MEDIUM | 5.7 | 0.5% | Dec 15, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from ... |
| CVE-2023-5310 | MEDIUM | 6.5 | 0.3% | Dec 15, 2023 | A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v... |
| CVE-2023-5061 | MEDIUM | 4.3 | 0.4% | Dec 15, 2023 | An issue has been discovered in GitLab affecting all versions starting from 9.3 before 16.4.4, all versions starting fro... |
| CVE-2023-49829 | MEDIUM | 4.8 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS ... |
| CVE-2023-49823 | MEDIUM | 5.4 | 0.5% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldThemes Bold Pa... |
| CVE-2023-49767 | MEDIUM | 4.8 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Biteship Biteship:... |
| CVE-2023-49749 | HIGH | 8.8 | 0.3% | Dec 15, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in SureTriggers SureTriggers – Connect All Your Plugins, Apps, Tools & A... |
| CVE-2023-49747 | MEDIUM | 5.4 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebFactory Ltd Gue... |
| CVE-2023-49744 | HIGH | 8.8 | 0.2% | Dec 15, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Gift Up Gift Up Gift Cards for WordPress and WooCommerce.This issue a... |
| CVE-2023-49197 | HIGH | 8.8 | 0.3% | Dec 15, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Apasionados, Apasionados del Marketing, NetConsulting DoFollow Case b... |
| CVE-2023-49191 | MEDIUM | 4.8 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Supsystic GDPR Coo... |
| CVE-2023-49190 | MEDIUM | 4.8 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chandra Shekhar Sa... |
| CVE-2023-49189 | MEDIUM | 4.8 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Getsocial, S.A. So... |
| CVE-2023-49159 | HIGH | 7.5 | 0.4% | Dec 15, 2023 | Server-Side Request Forgery (SSRF) vulnerability in Elegant Digital Solutions CommentLuv.This issue affects CommentLuv: ... |
| CVE-2023-3904 | HIGH | 7.5 | 0.7% | Dec 15, 2023 | An issue has been discovered in GitLab EE affecting all versions starting before 16.4.4, all versions starting from 16.5... |
| CVE-2023-3511 | LOW | 3.5 | 0.4% | Dec 15, 2023 | An issue has been discovered in GitLab EE affecting all versions starting from 8.17 before 16.4.4, all versions starting... |
| CVE-2023-49188 | MEDIUM | 4.8 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZealousWeb Track G... |
| CVE-2023-49187 | MEDIUM | 6.1 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spoonthemes Adifie... |
| CVE-2023-49185 | MEDIUM | 6.1 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofinder Doofinde... |
| CVE-2023-49184 | MEDIUM | 5.4 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Parall... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now