2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-21294 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to loc... |
| CVE-2023-21293 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In PackageManagerNative, there is a possible way to determine whether an app is installed, without query permissions, du... |
| CVE-2023-4964 | MEDIUM | 6.1 | 0.3% | Oct 30, 2023 | Potential open redirect vulnerability in opentext Service Management Automation X (SMAX) versions 2020.05, 2020.08, 202... |
| CVE-2023-44323 | MEDIUM | 5.5 | 1.4% | Oct 30, 2023 | Adobe Acrobat for Edge version 118.0.2088.46 (and earlier) is affected by a Use After Free vulnerability. An unauthentic... |
| CVE-2023-5843 | CRITICAL | 9.8 | 2.2% | Oct 30, 2023 | The Ads by datafeedr.com plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 1... |
| CVE-2023-5666 | MEDIUM | 5.4 | 0.5% | Oct 30, 2023 | The Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcpaccordion' shortcod... |
| CVE-2023-5583 | HIGH | 8.8 | 1.0% | Oct 30, 2023 | The WP Simple Galleries plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.3... |
| CVE-2023-5566 | MEDIUM | 5.4 | 0.6% | Oct 30, 2023 | The Simple Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to... |
| CVE-2023-5565 | MEDIUM | 5.4 | 0.4% | Oct 30, 2023 | The Shortcode Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'shortmenu' shortcode in versio... |
| CVE-2023-5362 | MEDIUM | 5.4 | 0.5% | Oct 30, 2023 | The Carousel, Recent Post Slider and Banner Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via... |
| CVE-2023-5335 | MEDIUM | 5.4 | 0.5% | Oct 30, 2023 | The Buzzsprout Podcasting plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'buzzsprout' shortcode i... |
| CVE-2023-5315 | HIGH | 8.8 | 0.6% | Oct 30, 2023 | The Google Maps made Simple plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions u... |
| CVE-2023-5252 | MEDIUM | 5.4 | 0.4% | Oct 30, 2023 | The FareHarbor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and i... |
| CVE-2023-5251 | MEDIUM | 5.4 | 0.5% | Oct 30, 2023 | The Grid Plus plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing ... |
| CVE-2023-5250 | HIGH | 8.8 | 1.1% | Oct 30, 2023 | The Grid Plus plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.3.3 via a s... |
| CVE-2023-5199 | HIGH | 8.8 | 1.4% | Oct 30, 2023 | The PHP to Page plugin for WordPress is vulnerable Local File Inclusion to Remote Code Execution in versions up to, and ... |
| CVE-2023-5164 | MEDIUM | 5.4 | 0.4% | Oct 30, 2023 | The Bellows Accordion Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions ... |
| CVE-2023-5049 | MEDIUM | 5.4 | 0.5% | Oct 30, 2023 | The Giveaways and Contests by RafflePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'raf... |
| CVE-2023-44078 | — | — | — | Oct 30, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-41605 | — | — | — | Oct 30, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-40943 | — | — | — | Oct 30, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-5833 | HIGH | 8.8 | 0.6% | Oct 30, 2023 | Improper Access Control in GitHub repository mintplex-labs/anything-llm prior to 0.1.0. |
| CVE-2023-5832 | CRITICAL | 9.1 | 0.7% | Oct 30, 2023 | Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0. |
| CVE-2023-5844 | HIGH | 7.2 | 0.6% | Oct 30, 2023 | Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0. |
| CVE-2023-42431 | MEDIUM | 5.4 | 0.3% | Oct 30, 2023 | Cross-site Scripting (XSS) vulnerability in BlueSpiceAvatars extension of BlueSpice allows logged in user to inject arbi... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now