2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-25038 | HIGH | 8.8 | 0.3% | May 26, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in 984.Ru For the visually impaired plugin <= 0.58 versions. |
| CVE-2023-24008 | HIGH | 8.8 | 0.3% | May 26, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in yonifre Maspik – Spam Blacklist plugin <= 0.7.8 versions. |
| CVE-2023-22693 | HIGH | 8.8 | 0.3% | May 26, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in conlabzgmbh WP Google Tag Manager plugin <= 1.1 versions. |
| CVE-2023-25976 | HIGH | 8.8 | 0.3% | May 26, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin plugin <... |
| CVE-2023-25971 | HIGH | 8.8 | 0.3% | May 26, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in FixBD Educare plugin <= 1.4.1 versions. |
| CVE-2023-24007 | HIGH | 8.8 | 0.3% | May 26, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in TheOnlineHero - Tom Skroza Admin Block Country plugin <= 7.1.4 versio... |
| CVE-2023-23714 | HIGH | 8.8 | 0.3% | May 26, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash plugin <= 3.6.4.1 versions. |
| CVE-2023-28382 | HIGH | 8.1 | 0.9% | May 26, 2023 | Directory traversal vulnerability in ESS REC Agent Server Edition series allows an authenticated attacker to view or alt... |
| CVE-2023-32067 | HIGH | 7.5 | 1.6% | May 25, 2023 | c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a quer... |
| CVE-2023-2900 | HIGH | 7.5 | 0.7% | May 25, 2023 | A vulnerability was found in NFine Rapid Development Platform 20230511. It has been classified as problematic. Affected ... |
| CVE-2023-33263 | HIGH | 7.5 | 0.9% | May 25, 2023 | In WFTPD 3.25, usernames and password hashes are stored in an openly viewable wftpd.ini configuration file within the WF... |
| CVE-2023-0950 | HIGH | 7.8 | 0.3% | May 25, 2023 | Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice all... |
| CVE-2023-26216 | HIGH | 7.2 | 0.8% | May 25, 2023 | The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an exploitable vulnerability that allows an att... |
| CVE-2023-33355 | HIGH | 7.5 | 0.6% | May 25, 2023 | IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the disclosure of sensitiv... |
| CVE-2023-2798 | HIGH | 7.5 | 0.9% | May 25, 2023 | Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS). If HtmlUnit is r... |
| CVE-2023-2480 | HIGH | 7.8 | 0.2% | May 25, 2023 | Missing access permissions checks in M-Files Client before 23.5.12598.0 (excluding 23.2 SR2 and newer) allows elevation ... |
| CVE-2023-2888 | HIGH | 8.8 | 0.7% | May 25, 2023 | A vulnerability, which was classified as problematic, was found in PHPOK 6.4.100. This affects an unknown part of the fi... |
| CVE-2023-30484 | HIGH | 8.8 | 0.3% | May 25, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in uPress Enable Accessibility plugin <= 1.4 versions. |
| CVE-2023-27529 | HIGH | 7.8 | 0.2% | May 25, 2023 | Wacom Tablet Driver installer prior to 6.4.2-1 (for macOS) contains an improper link resolution before file access vulne... |
| CVE-2023-2885 | HIGH | 8.1 | 0.3% | May 25, 2023 | Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot a... |
| CVE-2023-2883 | HIGH | 8.8 | 0.7% | May 25, 2023 | Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authenticati... |
| CVE-2023-31861 | HIGH | 7.5 | 1.1% | May 25, 2023 | ZLMediaKit 4.0 is vulnerable to Directory Traversal. |
| CVE-2023-31594 | HIGH | 7.5 | 0.8% | May 25, 2023 | IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an exposed HTTP channel using VLC network. |
| CVE-2023-2500 | HIGH | 8.8 | 0.9% | May 25, 2023 | The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to PHP Object Injection in versi... |
| CVE-2023-33248 | HIGH | 7.6 | 0.7% | May 24, 2023 | Amazon Alexa software version 8960323972 on Echo Dot 2nd generation and 3rd generation devices potentially allows attack... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now