2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-49956 | HIGH | 7.5 | 0.7% | Dec 7, 2023 | An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP (Open Charge Point Protocol) for electric vehicles. A... |
| CVE-2023-49955 | HIGH | 7.5 | 0.7% | Dec 7, 2023 | An issue was discovered in Dalmann OCPP.Core before 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. I... |
| CVE-2023-47548 | MEDIUM | 6.1 | 0.4% | Dec 7, 2023 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SoftLab Integrate Google Drive – Browse, Upload, Do... |
| CVE-2023-45762 | MEDIUM | 6.1 | 0.4% | Dec 7, 2023 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Michael Uno (miunosoft) Responsive Column Widgets.T... |
| CVE-2023-48325 | MEDIUM | 6.1 | 0.4% | Dec 7, 2023 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps Landing Page Builder – Lead Page – Optin ... |
| CVE-2023-47779 | MEDIUM | 6.1 | 0.4% | Dec 7, 2023 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks. Integration for Constant Contact and Con... |
| CVE-2023-35909 | MEDIUM | 5.3 | 0.6% | Dec 7, 2023 | Uncontrolled Resource Consumption vulnerability in Saturday Drive Ninja Forms Contact Form – The Drag and Drop Form Buil... |
| CVE-2023-35039 | CRITICAL | 9.8 | 0.9% | Dec 7, 2023 | Improper Restriction of Excessive Authentication Attempts vulnerability in Be Devious Web Development Password Reset wit... |
| CVE-2023-49746 | MEDIUM | 4.3 | 0.3% | Dec 7, 2023 | Server-Side Request Forgery (SSRF) vulnerability in Softaculous Team SpeedyCache – Cache, Optimization, Performance.This... |
| CVE-2023-46641 | MEDIUM | 5.4 | 0.3% | Dec 7, 2023 | Server-Side Request Forgery (SSRF) vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Me... |
| CVE-2023-41804 | MEDIUM | 5.4 | 0.3% | Dec 7, 2023 | Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver B... |
| CVE-2023-50164 | CRITICAL | 9.8 | 80.8% | Dec 7, 2023 | An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to up... |
| CVE-2023-48861 | HIGH | 7.8 | 0.3% | Dec 7, 2023 | DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitra... |
| CVE-2023-48860 | CRITICAL | 9.8 | 1.4% | Dec 7, 2023 | TOTOLINK N300RT version 3.2.4-B20180730.0906 has a post-authentication RCE due to incorrect access control, allows attac... |
| CVE-2023-49225 | MEDIUM | 6.1 | 0.4% | Dec 7, 2023 | A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If t... |
| CVE-2023-48841 | HIGH | 8.8 | 1.2% | Dec 7, 2023 | Appointment Scheduler 3.0 is vulnerable to CSV Injection via a Language > Labels > Export action. |
| CVE-2023-48840 | HIGH | 7.5 | 1.1% | Dec 7, 2023 | A lack of rate limiting in pjActionAjaxSend in Appointment Scheduler 3.0 allows attackers to cause resource exhaustion. |
| CVE-2023-48839 | MEDIUM | 5.4 | 0.4% | Dec 7, 2023 | Appointment Scheduler 3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_ap... |
| CVE-2023-48838 | MEDIUM | 5.4 | 0.5% | Dec 7, 2023 | Appointment Scheduler 3.0 is vulnerable to Multiple HTML Injection issues via the SMS API Key or Default Country Code. |
| CVE-2023-48837 | MEDIUM | 5.4 | 0.5% | Dec 7, 2023 | Car Rental Script 3.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code. |
| CVE-2023-48836 | MEDIUM | 5.4 | 0.5% | Dec 7, 2023 | Car Rental Script 3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_ke... |
| CVE-2023-48835 | HIGH | 8.8 | 1.2% | Dec 7, 2023 | Car Rental Script v3.0 is vulnerable to CSV Injection via a Language > Labels > Export action. |
| CVE-2023-48834 | HIGH | 7.5 | 1.1% | Dec 7, 2023 | A lack of rate limiting in pjActionAjaxSend in Car Rental v3.0 allows attackers to cause resource exhaustion. |
| CVE-2023-48833 | HIGH | 7.5 | 1.1% | Dec 7, 2023 | A lack of rate limiting in pjActionAJaxSend in Time Slots Booking Calendar 4.0 allows attackers to cause resource exhaus... |
| CVE-2023-48831 | HIGH | 7.5 | 1.2% | Dec 7, 2023 | A lack of rate limiting in pjActionAJaxSend in Availability Booking Calendar 5.0 allows attackers to cause resource exha... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now