2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2023-28755MEDIUM5.3A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invali...
CVE-2023-1761MEDIUM5.4Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVE-2023-1760MEDIUM4.8Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVE-2023-1759MEDIUM4.8Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVE-2023-1755MEDIUM5.4Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVE-2023-1754MEDIUM4.7Improper Neutralization of Input During Web Page Generation in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVE-2023-1746MEDIUM5.4A vulnerability, which was classified as problematic, was found in Dreamer CMS up to 3.5.0. Affected is an unknown funct...
CVE-2023-1743MEDIUM6.1A vulnerability classified as problematic has been found in SourceCodester Grade Point Average GPA Calculator 1.0. This ...
CVE-2023-27538MEDIUM5.5An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH co...
CVE-2023-27537MEDIUM5.9A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was...
CVE-2023-27536MEDIUM5.9An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously ...
CVE-2023-27535MEDIUM5.9An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in w...
CVE-2023-26692MEDIUM6.1ZCBS Zijper Collectie Beheer Systeem (ZCBS), Zijper Publication Management System (ZPBS), and Zijper Image Bank Manageme...
CVE-2023-28647MEDIUM6.8Nextcloud iOS is an ios application used to interface with the nextcloud home cloud ecosystem. In versions prior to 4.7....
CVE-2023-28733MEDIUM6.1AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, explo...
CVE-2023-25040MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vova Anokhin WordPress Shortcodes Plugin — Short...
CVE-2023-24399MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in OceanWP Ocean Extra plugin <= 2.1.2 versions.
CVE-2023-23681MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Labib Ahmed Image Hover Effects For WPBakery Pag...
CVE-2023-23677MEDIUM6.1Reflected Cross-Site Scripting (XSS) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.5 versions.
CVE-2023-23675MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Catchsquare WP Smart Preloader plugin <= 1.15 versions...
CVE-2023-23670MEDIUM5.4Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Team Heateor Fancy Comments WordPress plugin <= 1.2.10 ...
CVE-2023-1013MEDIUM6.1Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Virames Vira-Investing al...
CVE-2023-26118MEDIUM5.3Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service (ReDoS) via the <input...
CVE-2023-26117MEDIUM5.3Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the $resou...
CVE-2023-26116MEDIUM5.3Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angul...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now