2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-25447 | HIGH | 8.8 | 0.3% | May 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Inkthemescom ColorWay theme <= 4.2.3 versions. |
| CVE-2023-31454 | HIGH | 7.5 | 1.2% | May 22, 2023 | Incorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This iss... |
| CVE-2023-31453 | HIGH | 7.5 | 1.2% | May 22, 2023 | Incorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This iss... |
| CVE-2023-31206 | HIGH | 7.5 | 1.2% | May 22, 2023 | Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache... |
| CVE-2023-31058 | HIGH | 7.5 | 1.2% | May 22, 2023 | Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache In... |
| CVE-2023-2832 | HIGH | 7.2 | 0.9% | May 22, 2023 | SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0. |
| CVE-2023-28709 | HIGH | 7.5 | 51.5% | May 22, 2023 | The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 a... |
| CVE-2023-25537 | HIGH | 7.8 | 0.2% | May 22, 2023 | Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Ou... |
| CVE-2023-23797 | HIGH | 8.8 | 0.3% | May 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in SecondLineThemes Auto YouTube Importer plugin <= 1.0.3 versions. |
| CVE-2023-23813 | HIGH | 8.8 | 0.3% | May 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Calendar plugin <= 3.4.3 versions. |
| CVE-2023-23712 | HIGH | 8.8 | 0.3% | May 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in User Meta Manager plugin <= 3.4.9 versions. |
| CVE-2023-23680 | HIGH | 8.8 | 0.3% | May 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Bob Goetz WP-TopBar plugin <= 5.36 versions. |
| CVE-2023-22714 | HIGH | 8.8 | 0.3% | May 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Coming Soon by Supsystic plugin <= 1.7.10 versions. |
| CVE-2023-22709 | HIGH | 8.8 | 0.3% | May 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Atif N SRS Simple Hits Counter plugin <= 1.1.0 versions. |
| CVE-2023-22692 | HIGH | 8.8 | 0.3% | May 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Jeroen Peters Name Directory plugin <= 1.27.1 versions. |
| CVE-2023-22688 | HIGH | 8.8 | 0.3% | May 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Abdul Ibad WP Tabs Slides plugin <= 2.0.3 versions. |
| CVE-2023-33235 | HIGH | 8.8 | 1.5% | May 22, 2023 | MXsecurity version 1.0 is vulnearble to command injection vulnerability. This vulnerability has been reported in the SSH... |
| CVE-2023-33297 | HIGH | 7.5 | 1.4% | May 22, 2023 | Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service (e.g., CPU consumpt... |
| CVE-2023-33252 | HIGH | 7.5 | 0.6% | May 21, 2023 | iden3 snarkjs through 0.6.11 allows double spending because there is no validation that the publicSignals length is less... |
| CVE-2023-32589 | HIGH | 8.8 | 0.3% | May 20, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in PingOnline Dyslexiefont Free plugin <= 1.0.0 versions. |
| CVE-2023-24414 | HIGH | 8.8 | 0.3% | May 20, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin <=... |
| CVE-2023-23890 | HIGH | 8.8 | 0.3% | May 20, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in LJ Apps WP Airbnb Review Slider plugin <= 3.2 versions. |
| CVE-2023-22689 | HIGH | 8.8 | 0.3% | May 20, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Lucian Apostol Auto Affiliate Links plugin <= 6.3 versions. |
| CVE-2023-33244 | HIGH | 8.2 | 0.5% | May 20, 2023 | Obsidian before 1.2.2 allows calls to unintended APIs (for microphone access, camera access, and desktop notification) v... |
| CVE-2023-32700 | HIGH | 7.8 | 0.8% | May 20, 2023 | LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted s... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now