2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6053 | CRITICAL | 9.8 | 1.0% | Nov 9, 2023 | A vulnerability, which was classified as critical, has been found in Tongda OA 2017 up to 11.9. Affected by this issue i... |
| CVE-2023-47238 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WebberZone Top 10 – WordPress Popular posts by WebberZone plugin <= 3... |
| CVE-2023-47237 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Martin Gibson Auto Publish for Google My Business plugin <= 3.7 versi... |
| CVE-2023-34371 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Didier Sampaolo SpamReferrerBlock plugin <= 2.22 versions. |
| CVE-2023-34182 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Peter Shaw LH Password Changer plugin <= 1.55 versions. |
| CVE-2023-34181 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WP-Cirrus plugin <= 0.6.11 versions. |
| CVE-2023-34178 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Groundhogg Inc. Groundhogg plugin <= 2.7.11 versions. |
| CVE-2023-46614 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Mat Bao Corp WP Helper Premium plugin <= 4.5.1 versions. |
| CVE-2023-34386 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WPClever WPC Smart Wishlist for WooCommerce plugin <= 4.7.1 versions. |
| CVE-2023-34002 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WP Inventory Manager plugin <= 2.1.0.13 versions. |
| CVE-2023-31087 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions. |
| CVE-2023-25975 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Frédéric Sheedy Etsy Shop plugin <= 3.0.3 versions. |
| CVE-2023-47610 | CRITICAL | 9.8 | 1.7% | Nov 9, 2023 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow ... |
| CVE-2023-45885 | MEDIUM | 5.4 | 0.4% | Nov 9, 2023 | Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary ... |
| CVE-2023-45884 | MEDIUM | 6.5 | 0.3% | Nov 9, 2023 | Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view se... |
| CVE-2023-45284 | MEDIUM | 5.3 | 0.9% | Nov 9, 2023 | On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed ... |
| CVE-2023-45283 | HIGH | 7.5 | 2.8% | Nov 9, 2023 | The filepath package does not recognize paths with a \??\ prefix as special. On Windows, a path beginning with \??\ is a... |
| CVE-2023-47110 | MEDIUM | 5.3 | 0.4% | Nov 9, 2023 | blockreassurance adds an information block aimed at offering helpful information to reassure customers that their store ... |
| CVE-2023-46894 | HIGH | 7.5 | 0.5% | Nov 9, 2023 | An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm. |
| CVE-2023-46743 | MEDIUM | 4.3 | 0.5% | Nov 9, 2023 | application-collabora is an integration of Collabora Online in XWiki. As part of the application use cases, depending on... |
| CVE-2023-36688 | MEDIUM | 4.8 | 0.4% | Nov 9, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Michael Mann Simple Site Verify plugin <= 1.0.7 versio... |
| CVE-2023-25994 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Alex Benfica Publish to Schedule plugin <= 4.4.2 versions. |
| CVE-2023-6039 | MEDIUM | 5.5 | 0.3% | Nov 9, 2023 | A use-after-free flaw was found in lan78xx_disconnect in drivers/net/usb/lan78xx.c in the network sub-component, net/usb... |
| CVE-2023-47373 | MEDIUM | 6.5 | 0.4% | Nov 9, 2023 | The leakage of channel access token in DRAGON FAMILY Line 13.6.1 allows remote attackers to send malicious notifications... |
| CVE-2023-47372 | MEDIUM | 6.5 | 0.4% | Nov 9, 2023 | The leakage of channel access token in UPDATESALON C-LOUNGE Line 13.6.1 allows remote attackers to send malicious notifi... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now