2023 CVE Vulnerabilities

31,267 CVEs published in 2023.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2023-23707MEDIUM5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Unrestricted Upload of File with D...
CVE-2023-20112MEDIUM6.5A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial ...
CVE-2023-20100MEDIUM6.8A vulnerability in the access point (AP) joining process of the Control and Provisioning of Wireless Access Points (CAPW...
CVE-2023-20097MEDIUM6.7A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary co...
CVE-2023-20082MEDIUM6.8A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local att...
CVE-2023-20081MEDIUM5.9A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firep...
CVE-2023-20067MEDIUM6.5A vulnerability in the HTTP-based client profiling feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) ...
CVE-2023-20066MEDIUM6.5A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform a direct...
CVE-2023-20059MEDIUM6.5A vulnerability in the implementation of the Cisco Network Plug-and-Play (PnP) agent of Cisco DNA Center could allow an ...
CVE-2023-20056MEDIUM5.5A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker t...
CVE-2023-28772MEDIUM6.7An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow.
CVE-2023-23728MEDIUM5.4Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Flipclock plugin <= 1.7.4 versions.
CVE-2023-23722MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP eBay Product Feeds plugin <= 3.3.1 ver...
CVE-2023-22702MEDIUM5.4Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Appl...
CVE-2023-23864MEDIUM5.4Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Michael Aronoff Very Simple Google Maps plugin <= 2.8.4...
CVE-2023-23650MEDIUM5.4Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in MainWP MainWP Code Snippets Extension plugin <= 4...
CVE-2023-22716MEDIUM4.8Auth. (admin+) Cross-Site Scripting vulnerability in OOPSpam OOPSpam Anti-Spam plugin <= 1.1.35 versions.
CVE-2023-22715MEDIUM4.8Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Lester 'GaMerZ' Chan WP-CommentNavi plugin <= 1.12.1 versions...
CVE-2023-22712MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TemplatesNext TemplatesNext ToolKit plugin <= 3....
CVE-2023-28422MEDIUM4.8Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plug...
CVE-2023-22704MEDIUM6.1Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin <= 8.1.8 versions.
CVE-2023-1593MEDIUM6.1A vulnerability, which was classified as problematic, has been found in SourceCodester Automatic Question Paper Generato...
CVE-2023-1410MEDIUM4.8Grafana is an open-source platform for monitoring and observability.  Grafana had a stored XSS vulnerability in the Gra...
CVE-2023-1051MEDIUM6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in As Koc Energy Web ...
CVE-2023-27249MEDIUM5.5swfdump v0.9.2 was discovered to contain a heap buffer overflow in the function swf_GetPlaceObject at swfobject.c.

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now