2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-5982MEDIUM5.4The UpdraftPlus: WordPress Backup & Migration Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in...
CVE-2023-46790——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2023-46789CRITICAL9.8Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'filename' ...
CVE-2023-46788CRITICAL9.8Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parame...
CVE-2023-46787CRITICAL9.8Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' ...
CVE-2023-46786——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2023-46785CRITICAL9.8Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parame...
CVE-2023-46680——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2023-46679CRITICAL9.8Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txt_uname_email' pa...
CVE-2023-46678——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2023-46677CRITICAL9.8Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txt_uname' paramete...
CVE-2023-46676——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2023-5819MEDIUM4.8The Amazonify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to...
CVE-2023-5818MEDIUM4.3The Amazonify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.8...
CVE-2023-4956MEDIUM4.3A flaw was found in Quay. Clickjacking is when an attacker uses multiple transparent or opaque layers to trick a user in...
CVE-2023-4154MEDIUM6.5A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directo...
CVE-2023-46243HIGH8.8XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver...
CVE-2023-37835——Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-45396. Reason: This record is a duplicate of CVE-2023-...
CVE-2023-5998HIGH7.5Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV.
CVE-2023-5309CRITICAL9.8Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for...
CVE-2023-46253HIGH7.2Squidex is an open source headless CMS and content management hub. Affected versions are subject to an arbitrary file wr...
CVE-2023-46252MEDIUM6.1Squidex is an open source headless CMS and content management hub. Affected versions are missing origin verification in ...
CVE-2023-46244HIGH8.8XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver...
CVE-2023-46242HIGH8.8XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver...
CVE-2023-46744MEDIUM5.4Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting (X...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now