2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-47004 | HIGH | 8.8 | 1.0% | Nov 6, 2023 | Buffer Overflow vulnerability in Redis RedisGraph v.2.x through v.2.12.8 and fixed in v.2.12.9 allows an attacker to exe... |
| CVE-2023-45556 | MEDIUM | 5.4 | 0.5% | Nov 6, 2023 | Cross Site Scripting vulnerability in Mybb Mybb Forums v.1.8.33 allows a local attacker to execute arbitrary code via th... |
| CVE-2023-5771 | MEDIUM | 6.1 | 0.3% | Nov 6, 2023 | Proofpoint Enterprise Protection contains a stored XSS vulnerability in the AdminUI. An unauthenticated attacker can sen... |
| CVE-2023-5605 | MEDIUM | 4.8 | 0.4% | Nov 6, 2023 | The URL Shortify WordPress plugin before 1.7.9.1 does not sanitise and escape some of its settings, which could allow hi... |
| CVE-2023-5601 | CRITICAL | 9.8 | 0.9% | Nov 6, 2023 | The WooCommerce Ninja Forms Product Add-ons WordPress plugin before 1.7.1 does not validate the file to be uploaded, all... |
| CVE-2023-5530 | MEDIUM | 4.8 | 0.6% | Nov 6, 2023 | The Ninja Forms Contact Form WordPress plugin before 3.6.34 does not sanitize and escape its label fields, which could a... |
| CVE-2023-5454 | HIGH | 7.5 | 0.6% | Nov 6, 2023 | The Templately WordPress plugin before 2.2.6 does not properly authorize the `saved-templates/delete` REST API call, all... |
| CVE-2023-5355 | HIGH | 8.1 | 0.7% | Nov 6, 2023 | The Awesome Support WordPress plugin before 6.1.5 does not sanitize file paths when deleting temporary attachment files,... |
| CVE-2023-5354 | MEDIUM | 6.1 | 0.4% | Nov 6, 2023 | The Awesome Support WordPress plugin before 6.1.5 does not sanitise and escape a parameter before outputting it back in ... |
| CVE-2023-5352 | MEDIUM | 4.3 | 0.4% | Nov 6, 2023 | The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing us... |
| CVE-2023-5228 | MEDIUM | 4.8 | 0.6% | Nov 6, 2023 | The User Registration WordPress plugin before 3.0.4.2 does not sanitize and escape some of its settings, which could all... |
| CVE-2023-5181 | MEDIUM | 4.8 | 0.4% | Nov 6, 2023 | The WP Discord Invite WordPress plugin before 2.5.2 does not sanitise and escape some of its settings, which could allow... |
| CVE-2023-5082 | HIGH | 7.2 | 0.7% | Nov 6, 2023 | The History Log by click5 WordPress plugin before 1.0.13 does not properly sanitise and escape a parameter before using ... |
| CVE-2023-4930 | MEDIUM | 6.5 | 0.4% | Nov 6, 2023 | The Front End PM WordPress plugin before 11.4.3 does not block listing the contents of the directories where it stores a... |
| CVE-2023-4858 | MEDIUM | 4.8 | 0.4% | Nov 6, 2023 | The Simple Table Manager WordPress plugin through 1.5.6 does not sanitise and escape some of its settings, which could a... |
| CVE-2023-4810 | MEDIUM | 4.8 | 0.4% | Nov 6, 2023 | The Responsive Pricing Table WordPress plugin before 5.1.8 does not sanitise and escape some of its settings, which coul... |
| CVE-2023-5777 | CRITICAL | 9.8 | 0.5% | Nov 6, 2023 | Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the cra... |
| CVE-2023-5719 | CRITICAL | 9.8 | 0.5% | Nov 6, 2023 | The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for us... |
| CVE-2023-46732 | MEDIUM | 6.1 | 2.2% | Nov 6, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulner... |
| CVE-2023-46731 | CRITICAL | 9.8 | 88.5% | Nov 6, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki doesn't p... |
| CVE-2023-46254 | MEDIUM | 4.3 | 0.4% | Nov 6, 2023 | capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework. A bug in the RoleBinding reflector used... |
| CVE-2023-39345 | HIGH | 7.5 | 0.5% | Nov 6, 2023 | strapi is an open-source headless CMS. Versions prior to 4.13.1 did not properly restrict write access to fielded marked... |
| CVE-2023-4700 | MEDIUM | 6.5 | 0.4% | Nov 6, 2023 | An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 1... |
| CVE-2023-46728 | HIGH | 7.5 | 6.0% | Nov 6, 2023 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid ... |
| CVE-2023-46251 | MEDIUM | 6.1 | 0.5% | Nov 6, 2023 | MyBB is a free and open source forum software. Custom MyCode (BBCode) for the visual editor (_SCEditor_) doesn't escape... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now