2023 CVE Vulnerabilities
31,397 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-47809 | MEDIUM | 5.4 | 0.4% | Nov 22, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Accord... |
| CVE-2023-49146 | MEDIUM | 6.1 | 0.4% | Nov 22, 2023 | DOMSanitizer (aka dom-sanitizer) before 1.0.7 allows XSS via an SVG document because of mishandling of comments and gree... |
| CVE-2023-49102 | HIGH | 8.8 | 1.5% | Nov 22, 2023 | NZBGet 21.1 allows authenticated remote code execution because the unarchive programs (7za and unrar) preserve executabl... |
| CVE-2023-48706 | MEDIUM | 4.7 | 0.4% | Nov 22, 2023 | Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a `:s` com... |
| CVE-2023-47808 | MEDIUM | 5.4 | 0.4% | Nov 22, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Christina Uechi Ad... |
| CVE-2023-47786 | MEDIUM | 5.4 | 0.4% | Nov 22, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LayerSlider plugin... |
| CVE-2023-47773 | MEDIUM | 6.1 | 0.4% | Nov 22, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YAS Global Team Pe... |
| CVE-2023-47768 | MEDIUM | 6.1 | 0.4% | Nov 22, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Russell Jamieson F... |
| CVE-2023-47767 | MEDIUM | 6.1 | 0.4% | Nov 22, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fla-shop.Com Inter... |
| CVE-2023-47766 | MEDIUM | 6.1 | 0.4% | Nov 22, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Timo Reith Post St... |
| CVE-2023-6265 | HIGH | 8.1 | 1.8% | Nov 22, 2023 | ** UNSUPPORTED WHEN ASSIGNED ** Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to directory traversal via the ma... |
| CVE-2023-47825 | HIGH | 8.8 | 0.3% | Nov 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in TienCOP WP EXtra plugin <= 6.4 versions. |
| CVE-2023-47824 | HIGH | 8.8 | 0.3% | Nov 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in wpWax Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, a... |
| CVE-2023-47759 | MEDIUM | 4.8 | 0.4% | Nov 22, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Premio Chaty chaty... |
| CVE-2023-30496 | MEDIUM | 6.1 | 0.4% | Nov 22, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MagePeople Team Wp... |
| CVE-2023-6264 | MEDIUM | 5.3 | 0.5% | Nov 22, 2023 | Information leak in Content-Security-Policy header in Devolutions Server 2023.3.7.0 allows an unauthenticated attacker t... |
| CVE-2023-47819 | HIGH | 8.8 | 0.3% | Nov 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Dang Ngoc Binh Easy Call Now by ThikShare plugin <= 1.1.0 versions. |
| CVE-2023-47792 | HIGH | 8.8 | 0.3% | Nov 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Infinite Uploads Big File Uploads – Increase Maximum File Upload Size... |
| CVE-2023-47791 | HIGH | 8.8 | 0.3% | Nov 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Leadster plugin <= 1.1.2 versions. |
| CVE-2023-47785 | HIGH | 8.8 | 0.3% | Nov 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in LayerSlider plugin <= 7.7.9 versions. |
| CVE-2023-47781 | HIGH | 8.8 | 0.3% | Nov 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Thrive Themes Thrive Theme Builder < 3.24.2 versions. |
| CVE-2023-47775 | HIGH | 8.8 | 0.3% | Nov 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team Comments — wpDiscuz plugin <= 7.6.11 versions. |
| CVE-2023-39925 | HIGH | 8.8 | 0.3% | Nov 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in PeepSo Download Community by PeepSo plugin <= 6.1.6.0 versions. |
| CVE-2023-25682 | MEDIUM | 5.5 | 0.2% | Nov 22, 2023 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 stores potentially sens... |
| CVE-2023-6263 | HIGH | 8.1 | 0.5% | Nov 22, 2023 | An issue was discovered by IPVM team in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS ser... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now