2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6157 | HIGH | 8.8 | 0.9% | Nov 22, 2023 | Improper neutralization of livestatus command delimiters in ajax_search in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p... |
| CVE-2023-6156 | HIGH | 8.8 | 0.9% | Nov 22, 2023 | Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk <= 2.0.0p39, < 2.1.0p37... |
| CVE-2023-47316 | MEDIUM | 5.4 | 0.4% | Nov 22, 2023 | Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control. The Web panel allows users to gain access to po... |
| CVE-2023-47315 | HIGH | 8.8 | 0.8% | Nov 22, 2023 | Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret. The secret is ha... |
| CVE-2023-47314 | MEDIUM | 5.4 | 0.4% | Nov 22, 2023 | Headwind MDM Web panel 5.22.1 is vulnerable to cross-site scripting (XSS). The file upload function allows APK and arbit... |
| CVE-2023-47313 | MEDIUM | 5.4 | 0.8% | Nov 22, 2023 | Headwind MDM Web panel 5.22.1 is vulnerable to Directory Traversal. The application uses an API call to move the uploade... |
| CVE-2023-47312 | MEDIUM | 6.5 | 0.4% | Nov 22, 2023 | Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to Login Credential Leakage via Audit Entrie... |
| CVE-2023-45377 | CRITICAL | 9.8 | 0.7% | Nov 22, 2023 | In the module "Chronopost Official" (chronopost) for PrestaShop, a guest can perform SQL injection. The script PHP `canc... |
| CVE-2023-43082 | MEDIUM | 5.9 | 0.3% | Nov 22, 2023 | Dell Unity prior to 5.3 contains a 'man in the middle' vulnerability in the vmadapter component. If a customer has a ce... |
| CVE-2023-20241 | MEDIUM | 5.5 | 0.2% | Nov 22, 2023 | Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an aut... |
| CVE-2023-20240 | MEDIUM | 5.5 | 0.2% | Nov 22, 2023 | Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an aut... |
| CVE-2023-20084 | MEDIUM | 4.4 | 0.2% | Nov 22, 2023 | A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attack... |
| CVE-2023-6164 | MEDIUM | 4.8 | 0.4% | Nov 22, 2023 | The MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for WordPress is vulnerable to CSS In... |
| CVE-2023-6160 | MEDIUM | 6.7 | 0.8% | Nov 22, 2023 | The LifterLMS – WordPress LMS Plugin for eLearning plugin for WordPress is vulnerable to Directory Traversal in versions... |
| CVE-2023-6009 | HIGH | 8.8 | 0.9% | Nov 22, 2023 | The UserPro plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.4 due to in... |
| CVE-2023-6008 | MEDIUM | 4.3 | 0.2% | Nov 22, 2023 | The UserPro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.1.1. Th... |
| CVE-2023-6007 | MEDIUM | 6.5 | 0.3% | Nov 22, 2023 | The UserPro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to... |
| CVE-2023-5822 | CRITICAL | 9.8 | 1.8% | Nov 22, 2023 | The Drag and Drop Multiple File Upload - Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due... |
| CVE-2023-5815 | CRITICAL | 9.8 | 4.3% | Nov 22, 2023 | The News & Blog Designer Pack – WordPress Blog Plugin — (Blog Post Grid, Blog Post Slider, Blog Post Carousel, Blog Post... |
| CVE-2023-5742 | MEDIUM | 5.4 | 0.4% | Nov 22, 2023 | The EasyRotator for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'easyro... |
| CVE-2023-5715 | MEDIUM | 4.8 | 0.5% | Nov 22, 2023 | The Website Optimization – Plerdy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tra... |
| CVE-2023-5708 | MEDIUM | 5.4 | 0.4% | Nov 22, 2023 | The WP Post Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'column' shortcod... |
| CVE-2023-5706 | MEDIUM | 5.4 | 0.5% | Nov 22, 2023 | The VK Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vk-blocks/ancestor-pag... |
| CVE-2023-5704 | MEDIUM | 5.4 | 0.4% | Nov 22, 2023 | The CPO Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all ... |
| CVE-2023-5667 | MEDIUM | 5.4 | 0.5% | Nov 22, 2023 | The Tab Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all ve... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now