2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2023-1265MEDIUM4.5An issue has been discovered in GitLab affecting all versions starting from 11.9 before 15.9.6, all versions starting fr...
CVE-2023-1204MEDIUM4.3An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions star...
CVE-2023-0485MEDIUM6.5An issue has been discovered in GitLab affecting all versions starting from 13.11 before 15.8.5, all versions starting f...
CVE-2023-0155MEDIUM5.4An issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1. Open redirects was p...
CVE-2023-30300MEDIUM5.5An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop.
CVE-2023-24744MEDIUM6.1Cross Site Scripting (XSS) vulnerability in Rediker Software AdminPlus 6.1.91.00 allows remote attackers to run arbitrar...
CVE-2023-25827MEDIUM6.1 Due to insufficient validation of parameters reflected in error messages by the legacy HTTP query API and the logging e...
CVE-2023-26017MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BlueGlass Jobs for WordPress plugin <= 2.5.10.2 versio...
CVE-2023-23881MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GreenTreeLabs Circles Gallery plugin <= 1.0.10 version...
CVE-2023-23875MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Himanshu Bing Site Verification plugin using Meta Tag ...
CVE-2023-23830MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team ProfilePress plugin <= 4.5.4 ...
CVE-2023-29240MEDIUM5.4An authenticated attacker granted a Viewer or Auditor role on a BIG-IQ can upload arbitrary files using an undisclosed i...
CVE-2023-28406MEDIUM4.3A directory traversal vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which may allow an...
CVE-2023-27378MEDIUM6.1 Multiple reflected cross-site scripting (XSS) vulnerabilities exist in undisclosed pages of the BIG-IP Configuration ut...
CVE-2023-24594MEDIUM5.3 When an SSL profile is configured on a Virtual Server, undisclosed traffic can cause an increase in CPU or SSL accelera...
CVE-2023-24461MEDIUM5.9 An improper certificate validation vulnerability exists in the BIG-IP Edge Client for Windows and macOS and may allow a...
CVE-2023-23809MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Moris Dov Stock market charts from finviz plugin <= 1....
CVE-2023-23808MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sergey Panasenko Sponsors Carousel plugin <= 4.02 vers...
CVE-2023-23785MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DgCult Exquisite PayPal Donation plugin <= v2.0.0 vers...
CVE-2023-22372MEDIUM5.9 In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client fo...
CVE-2023-25979MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Video Gallery by Total-Soft Video Gallery plugin <= 1....
CVE-2023-23876MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TMS-Plugins wpDataTables plugin <= 2.1.49 versio...
CVE-2023-23874MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Metaphor Creations Ditty plugin <= 3.0.32 versio...
CVE-2023-22683MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themis Solutions, Inc. Clio Grow plugin <= 1.0.0 versi...
CVE-2023-23820MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team ProfilePress plugin...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now