2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-26221 | LOW | 3.9 | 0.2% | Nov 8, 2023 | The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marke... |
| CVE-2023-47231 | MEDIUM | 5.4 | 0.4% | Nov 8, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Bainternet ShortCodes UI plugin <= 1.9.8 version... |
| CVE-2023-47229 | MEDIUM | 5.4 | 0.4% | Nov 8, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vyas Dipen Top 25 Social Icons plugin <= 3.1 ver... |
| CVE-2023-47228 | MEDIUM | 4.8 | 0.4% | Nov 8, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Muneeb Layer Slider plugin <= 1.1.9.7 versions. |
| CVE-2023-47227 | MEDIUM | 4.8 | 0.4% | Nov 8, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Web-Settler Social Feed | All social media in one plac... |
| CVE-2023-47226 | MEDIUM | 4.8 | 0.4% | Nov 8, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Post Sliders & Post Grids plug... |
| CVE-2023-47223 | MEDIUM | 4.8 | 0.4% | Nov 8, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Map Plugins Basic Interactive World Map plugin <= 2... |
| CVE-2023-47190 | MEDIUM | 5.4 | 0.4% | Nov 8, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Apollo13Themes Apollo13 Framework Extensions plu... |
| CVE-2023-47181 | MEDIUM | 4.8 | 0.4% | Nov 8, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Martin Gibson IdeaPush plugin <= 8.52 versions. |
| CVE-2023-3282 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linu... |
| CVE-2023-5913 | CRITICAL | 9.8 | 0.6% | Nov 8, 2023 | Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited ... |
| CVE-2023-5760 | HIGH | 7 | 0.2% | Nov 8, 2023 | A time-of-check to time-of-use (TOCTOU) bug in handling of IOCTL (input/output control) requests. This TOCTOU bug leads ... |
| CVE-2023-47379 | MEDIUM | 5.4 | 0.5% | Nov 8, 2023 | Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload func... |
| CVE-2023-46643 | MEDIUM | 6.1 | 0.4% | Nov 8, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GARY JEZORSKI CloudNet360 plugin <= 3.2.0 versions. |
| CVE-2023-46642 | MEDIUM | 4.8 | 0.4% | Nov 8, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in sahumedia SAHU TikTok Pixel for E-Commerce plugin <= 1... |
| CVE-2023-5759 | HIGH | 7.5 | 0.9% | Nov 8, 2023 | In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the buffer was identified.... |
| CVE-2023-5136 | MEDIUM | 5.5 | 0.3% | Nov 8, 2023 | An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An atta... |
| CVE-2023-47397 | CRITICAL | 9.8 | 1.0% | Nov 8, 2023 | WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php. |
| CVE-2023-47107 | HIGH | 8.8 | 0.6% | Nov 8, 2023 | PILOS is an open source front-end for BigBlueButton servers with a built-in load balancer. The password reset component ... |
| CVE-2023-46640 | MEDIUM | 5.4 | 0.4% | Nov 8, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in D. Relton Medialist plugin <= 1.3.9 versions. |
| CVE-2023-46627 | MEDIUM | 6.1 | 0.4% | Nov 8, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ashish Ajani WordPress Simple HTML Sitemap plugin <= 2.1 v... |
| CVE-2023-46626 | MEDIUM | 6.1 | 0.4% | Nov 8, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FLOWFACT WP Connector plugin <= 2.1.7 versions. |
| CVE-2023-46621 | MEDIUM | 6.1 | 0.4% | Nov 8, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Enej Bajgoric / Gagan Sandhu / CTLT DEV User Avatar plugin... |
| CVE-2023-46613 | MEDIUM | 5.4 | 0.4% | Nov 8, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Jens Kuerschner Add to Calendar Button plugin <=... |
| CVE-2023-45849 | CRITICAL | 9.8 | 1.1% | Nov 8, 2023 | An arbitrary code execution which results in privilege escalation was discovered in Helix Core versions prior to 2023.2.... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now