2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-47672 | HIGH | 8.8 | 0.3% | Nov 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Swashata WP Category Post List Widget.This issue affects WP Category ... |
| CVE-2023-47671 | HIGH | 8.8 | 0.3% | Nov 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Gopi Ramasamy Vertical scroll recent.This issue affects Vertical scro... |
| CVE-2023-47670 | HIGH | 8.8 | 0.3% | Nov 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Jongmyoung Kim Korea SNS.This issue affects Korea SNS: from n/a throu... |
| CVE-2023-47667 | HIGH | 8.8 | 0.3% | Nov 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Mammothology WP Full Stripe Free.This issue affects WP Full Stripe Fr... |
| CVE-2023-47666 | HIGH | 8.8 | 0.3% | Nov 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Code Snippets Pro Code Snippets.This issue affects Code Snippets: fro... |
| CVE-2023-47664 | HIGH | 8.8 | 0.4% | Nov 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in edward_plainview Plainview Protect Passwords.This issue affects Plain... |
| CVE-2023-48736 | MEDIUM | 6.5 | 0.6% | Nov 18, 2023 | In International Color Consortium DemoIccMAX 3e7948b, CIccCLUT::Interp2d in IccTagLut.cpp in libSampleICC.a has an out-o... |
| CVE-2023-40363 | MEDIUM | 6.5 | 0.6% | Nov 18, 2023 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to change installation files due to incorrect f... |
| CVE-2023-38361 | HIGH | 7.5 | 0.4% | Nov 18, 2023 | IBM CICS TX Advanced 10.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt hig... |
| CVE-2023-40817 | MEDIUM | 6.1 | 0.5% | Nov 18, 2023 | OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field. |
| CVE-2023-40816 | MEDIUM | 6.1 | 0.5% | Nov 18, 2023 | OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field. |
| CVE-2023-40815 | MEDIUM | 6.1 | 0.5% | Nov 18, 2023 | OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field. |
| CVE-2023-40814 | MEDIUM | 6.1 | 0.5% | Nov 18, 2023 | OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field. |
| CVE-2023-40813 | MEDIUM | 6.1 | 0.5% | Nov 18, 2023 | OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation. |
| CVE-2023-40812 | MEDIUM | 6.1 | 0.5% | Nov 18, 2023 | OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field. |
| CVE-2023-40810 | MEDIUM | 6.1 | 0.5% | Nov 18, 2023 | OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field. |
| CVE-2023-40809 | MEDIUM | 6.1 | 0.5% | Nov 18, 2023 | OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number. |
| CVE-2023-6187 | HIGH | 8.8 | 51.5% | Nov 18, 2023 | The Paid Memberships Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type vali... |
| CVE-2023-4214 | CRITICAL | 9.8 | 0.9% | Nov 18, 2023 | The AppPresser plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 4.2.5... |
| CVE-2023-48017 | HIGH | 8.8 | 0.4% | Nov 18, 2023 | Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF in Permission Managemen... |
| CVE-2023-48028 | CRITICAL | 9.8 | 1.1% | Nov 18, 2023 | kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an at... |
| CVE-2023-46402 | HIGH | 7.5 | 0.9% | Nov 18, 2023 | git-urls 1.0.0 allows ReDOS (Regular Expression Denial of Service) in urls.go. |
| CVE-2023-44796 | MEDIUM | 5.4 | 0.7% | Nov 18, 2023 | Cross Site Scripting (XSS) vulnerability in LimeSurvey before version 6.2.9-230925 allows a remote attacker to escalate ... |
| CVE-2023-43177 | CRITICAL | 9.8 | 81.8% | Nov 18, 2023 | CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes... |
| CVE-2023-48294 | MEDIUM | 4.3 | 0.7% | Nov 17, 2023 | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of netwo... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now