2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-28696 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Harish Chouhan, Themeist I Recommend This allows Cross Site Request F... |
| CVE-2023-28694 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Wbcom Designs Wbcom Designs – BuddyPress Activity Social Share plugin... |
| CVE-2023-28618 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Marios Alexandrou Enhanced Plugin Admin plugin <= 1.16 versions. |
| CVE-2023-28498 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in MotoPress Hotel Booking Lite plugin <= 4.6.0 versions. |
| CVE-2023-28497 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Slideshow Gallery LITE plugin <= 1.7.6 versions. |
| CVE-2023-28495 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in MyThemeShop WP Shortcode by MyThemeShop plugin <= 1.4.16 versions. |
| CVE-2023-47037 | MEDIUM | 4.3 | 1.5% | Nov 12, 2023 | We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then. Apache Airflow, versions b... |
| CVE-2023-42781 | MEDIUM | 6.5 | 1.7% | Nov 12, 2023 | Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has access to read specifi... |
| CVE-2023-6084 | CRITICAL | 9.8 | 0.9% | Nov 12, 2023 | A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknow... |
| CVE-2023-47390 | HIGH | 7.5 | 0.7% | Nov 11, 2023 | Headscale through 0.22.3 writes bearer tokens to info-level logs. |
| CVE-2023-43057 | MEDIUM | 5.4 | 0.4% | Nov 11, 2023 | IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri... |
| CVE-2023-5959 | MEDIUM | 4.3 | 0.9% | Nov 11, 2023 | A vulnerability, which was classified as problematic, was found in Byzoro Smart S85F Management Platform V31R02B10-01. A... |
| CVE-2023-46850 | CRITICAL | 9.8 | 2.0% | Nov 11, 2023 | Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execut... |
| CVE-2023-46849 | HIGH | 7.5 | 1.1% | Nov 11, 2023 | Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger... |
| CVE-2023-4804 | CRITICAL | 9.8 | 0.8% | Nov 10, 2023 | An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed. |
| CVE-2023-47122 | MEDIUM | 5.3 | 0.4% | Nov 10, 2023 | Gitsign is software for keyless Git signing using Sigstore. In versions of gitsign starting with 0.6.0 and prior to 0.8.... |
| CVE-2023-36027 | MEDIUM | 6.3 | 1.1% | Nov 10, 2023 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2023-47129 | CRITICAL | 9.8 | 1.1% | Nov 10, 2023 | Statmic is a core Laravel content management system Composer package. Prior to versions 3.4.13 and 4.33.0, on front-end ... |
| CVE-2023-47108 | HIGH | 7.5 | 1.6% | Nov 10, 2023 | OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and pr... |
| CVE-2023-47128 | CRITICAL | 9.1 | 0.8% | Nov 10, 2023 | Piccolo is an object-relational mapping and query builder which supports asyncio. Prior to version 1.1.1, the handling o... |
| CVE-2023-46735 | MEDIUM | 6.1 | 0.6% | Nov 10, 2023 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in version 6.... |
| CVE-2023-46734 | MEDIUM | 6.1 | 0.7% | Nov 10, 2023 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in versions 2... |
| CVE-2023-46733 | MEDIUM | 6.5 | 0.7% | Nov 10, 2023 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in versions 5... |
| CVE-2023-4949 | MEDIUM | 6.7 | 0.2% | Nov 10, 2023 | An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition... |
| CVE-2023-47611 | HIGH | 7.8 | 0.2% | Nov 10, 2023 | A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit C... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now