2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-20112 | MEDIUM | 6.5 | 0.3% | Mar 23, 2023 | A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial ... |
| CVE-2023-20100 | MEDIUM | 6.8 | 0.8% | Mar 23, 2023 | A vulnerability in the access point (AP) joining process of the Control and Provisioning of Wireless Access Points (CAPW... |
| CVE-2023-20097 | MEDIUM | 6.7 | 0.2% | Mar 23, 2023 | A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary co... |
| CVE-2023-20082 | MEDIUM | 6.8 | 0.4% | Mar 23, 2023 | A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local att... |
| CVE-2023-20081 | MEDIUM | 5.9 | 0.7% | Mar 23, 2023 | A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firep... |
| CVE-2023-20067 | MEDIUM | 6.5 | 0.3% | Mar 23, 2023 | A vulnerability in the HTTP-based client profiling feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) ... |
| CVE-2023-20066 | MEDIUM | 6.5 | 1.7% | Mar 23, 2023 | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform a direct... |
| CVE-2023-20059 | MEDIUM | 6.5 | 0.4% | Mar 23, 2023 | A vulnerability in the implementation of the Cisco Network Plug-and-Play (PnP) agent of Cisco DNA Center could allow an ... |
| CVE-2023-20056 | MEDIUM | 5.5 | 0.3% | Mar 23, 2023 | A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker t... |
| CVE-2023-28772 | MEDIUM | 6.7 | 0.7% | Mar 23, 2023 | An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow. |
| CVE-2023-23728 | MEDIUM | 5.4 | 0.4% | Mar 23, 2023 | Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Flipclock plugin <= 1.7.4 versions. |
| CVE-2023-23722 | MEDIUM | 4.8 | 0.4% | Mar 23, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP eBay Product Feeds plugin <= 3.3.1 ver... |
| CVE-2023-22702 | MEDIUM | 5.4 | 0.4% | Mar 23, 2023 | Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Appl... |
| CVE-2023-23864 | MEDIUM | 5.4 | 0.4% | Mar 23, 2023 | Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Michael Aronoff Very Simple Google Maps plugin <= 2.8.4... |
| CVE-2023-23650 | MEDIUM | 5.4 | 0.4% | Mar 23, 2023 | Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in MainWP MainWP Code Snippets Extension plugin <= 4... |
| CVE-2023-22716 | MEDIUM | 4.8 | 0.4% | Mar 23, 2023 | Auth. (admin+) Cross-Site Scripting vulnerability in OOPSpam OOPSpam Anti-Spam plugin <= 1.1.35 versions. |
| CVE-2023-22715 | MEDIUM | 4.8 | 0.4% | Mar 23, 2023 | Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Lester 'GaMerZ' Chan WP-CommentNavi plugin <= 1.12.1 versions... |
| CVE-2023-22712 | MEDIUM | 5.4 | 0.4% | Mar 23, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TemplatesNext TemplatesNext ToolKit plugin <= 3.... |
| CVE-2023-28422 | MEDIUM | 4.8 | 0.4% | Mar 23, 2023 | Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plug... |
| CVE-2023-22704 | MEDIUM | 6.1 | 0.4% | Mar 23, 2023 | Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin <= 8.1.8 versions. |
| CVE-2023-1593 | MEDIUM | 6.1 | 0.4% | Mar 23, 2023 | A vulnerability, which was classified as problematic, has been found in SourceCodester Automatic Question Paper Generato... |
| CVE-2023-1410 | MEDIUM | 4.8 | 1.0% | Mar 23, 2023 | Grafana is an open-source platform for monitoring and observability. Grafana had a stored XSS vulnerability in the Gra... |
| CVE-2023-1051 | MEDIUM | 6.1 | 0.4% | Mar 23, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in As Koc Energy Web ... |
| CVE-2023-27249 | MEDIUM | 5.5 | 0.4% | Mar 23, 2023 | swfdump v0.9.2 was discovered to contain a heap buffer overflow in the function swf_GetPlaceObject at swfobject.c. |
| CVE-2023-28470 | MEDIUM | 5.3 | 0.6% | Mar 23, 2023 | In Couchbase Server 5 through 7 before 7.1.4, the nsstats endpoint is accessible without authentication. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now