2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-1425 | HIGH | 7.2 | 0.9% | Apr 10, 2023 | The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg WordPress plugin before 2.7.9.... |
| CVE-2023-1406 | HIGH | 8.8 | 1.5% | Apr 10, 2023 | The JetEngine WordPress plugin before 3.1.3.1 includes uploaded files without adequately ensuring that they are not exec... |
| CVE-2023-26860 | HIGH | 8.8 | 1.1% | Apr 10, 2023 | SQL injection vulnerability found in PrestaShop Igbudget v.1.0.3 and before allow a remote attacker to gain privileges v... |
| CVE-2023-26774 | HIGH | 7.5 | 1.4% | Apr 10, 2023 | An issue found in Sales Tracker Management System v.1.0 allows a remote attacker to access sensitive information via sal... |
| CVE-2023-27730 | HIGH | 7.5 | 0.7% | Apr 9, 2023 | Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_lvlhsh_find at src/njs_lvlhsh.... |
| CVE-2023-27729 | HIGH | 7.5 | 0.7% | Apr 9, 2023 | Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return at src/njs_vmcode.c. |
| CVE-2023-27728 | HIGH | 7.5 | 0.7% | Apr 9, 2023 | Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_dump_is_recursive at src/njs_v... |
| CVE-2023-27727 | HIGH | 7.5 | 0.7% | Apr 9, 2023 | Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_function_frame at src/njs_func... |
| CVE-2023-1960 | HIGH | 8.8 | 0.7% | Apr 8, 2023 | A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue ... |
| CVE-2023-1959 | HIGH | 8.8 | 0.7% | Apr 8, 2023 | A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This v... |
| CVE-2023-1957 | HIGH | 8.8 | 0.7% | Apr 8, 2023 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0... |
| CVE-2023-1956 | HIGH | 8.8 | 1.1% | Apr 8, 2023 | A vulnerability classified as critical was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by thi... |
| CVE-2023-1954 | HIGH | 8.8 | 0.7% | Apr 8, 2023 | A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been rated as critical. This is... |
| CVE-2023-1953 | HIGH | 8.8 | 0.7% | Apr 8, 2023 | A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been declared as critical. This... |
| CVE-2023-27180 | HIGH | 7.5 | 1.1% | Apr 7, 2023 | GDidees CMS v3.9.1 was discovered to contain a source code disclosure vulnerability by the backup feature which is acces... |
| CVE-2023-28710 | HIGH | 7.5 | 2.2% | Apr 7, 2023 | Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Spark Provider.This issue affects A... |
| CVE-2023-28707 | HIGH | 7.5 | 2.1% | Apr 7, 2023 | Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.This issue affects A... |
| CVE-2023-27876 | HIGH | 7.1 | 0.9% | Apr 7, 2023 | IBM TRIRIGA 4.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attack... |
| CVE-2023-28051 | HIGH | 7.8 | 0.2% | Apr 7, 2023 | Dell Power Manager, versions 3.10 and prior, contains an Improper Access Control vulnerability. A low-privileged attack... |
| CVE-2023-26820 | HIGH | 7.5 | 0.8% | Apr 7, 2023 | siteproxy v1.0 was discovered to contain a path traversal vulnerability via the component index.js. |
| CVE-2023-26817 | HIGH | 8.8 | 1.5% | Apr 7, 2023 | codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution (RCE) vulnerability via the c... |
| CVE-2023-20655 | HIGH | 7.8 | 0.1% | Apr 6, 2023 | In mmsdk, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local code exe... |
| CVE-2023-29008 | HIGH | 8.8 | 0.4% | Apr 6, 2023 | The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a `+server.js` ... |
| CVE-2023-24537 | HIGH | 7.5 | 1.4% | Apr 6, 2023 | Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can c... |
| CVE-2023-24536 | HIGH | 7.5 | 1.5% | Apr 6, 2023 | Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large num... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now