2023 CVE Vulnerabilities

31,248 CVEs published in 2023.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2023-1965MEDIUM6.5An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting...
CVE-2023-1836MEDIUM5.4A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 15.9.6, all v...
CVE-2023-1265MEDIUM4.5An issue has been discovered in GitLab affecting all versions starting from 11.9 before 15.9.6, all versions starting fr...
CVE-2023-1204MEDIUM4.3An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions star...
CVE-2023-0485MEDIUM6.5An issue has been discovered in GitLab affecting all versions starting from 13.11 before 15.8.5, all versions starting f...
CVE-2023-0155MEDIUM5.4An issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1. Open redirects was p...
CVE-2023-30300MEDIUM5.5An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop.
CVE-2023-24744MEDIUM6.1Cross Site Scripting (XSS) vulnerability in Rediker Software AdminPlus 6.1.91.00 allows remote attackers to run arbitrar...
CVE-2023-25827MEDIUM6.1 Due to insufficient validation of parameters reflected in error messages by the legacy HTTP query API and the logging e...
CVE-2023-26017MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BlueGlass Jobs for WordPress plugin <= 2.5.10.2 versio...
CVE-2023-23881MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GreenTreeLabs Circles Gallery plugin <= 1.0.10 version...
CVE-2023-23875MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Himanshu Bing Site Verification plugin using Meta Tag ...
CVE-2023-23830MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team ProfilePress plugin <= 4.5.4 ...
CVE-2023-29240MEDIUM5.4An authenticated attacker granted a Viewer or Auditor role on a BIG-IQ can upload arbitrary files using an undisclosed i...
CVE-2023-28406MEDIUM4.3A directory traversal vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which may allow an...
CVE-2023-27378MEDIUM6.1 Multiple reflected cross-site scripting (XSS) vulnerabilities exist in undisclosed pages of the BIG-IP Configuration ut...
CVE-2023-24594MEDIUM5.3 When an SSL profile is configured on a Virtual Server, undisclosed traffic can cause an increase in CPU or SSL accelera...
CVE-2023-24461MEDIUM5.9 An improper certificate validation vulnerability exists in the BIG-IP Edge Client for Windows and macOS and may allow a...
CVE-2023-23809MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Moris Dov Stock market charts from finviz plugin <= 1....
CVE-2023-23808MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sergey Panasenko Sponsors Carousel plugin <= 4.02 vers...
CVE-2023-23785MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DgCult Exquisite PayPal Donation plugin <= v2.0.0 vers...
CVE-2023-22372MEDIUM5.9 In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client fo...
CVE-2023-25979MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Video Gallery by Total-Soft Video Gallery plugin <= 1....
CVE-2023-23876MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TMS-Plugins wpDataTables plugin <= 2.1.49 versio...
CVE-2023-23874MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Metaphor Creations Ditty plugin <= 3.0.32 versio...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now