2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-46518 | CRITICAL | 9.8 | 1.8% | Oct 25, 2023 | Mercury A15 V1.0 20230818_1.0.3 was discovered to contain a command execution vulnerability via the component cloudDevic... |
| CVE-2023-46396 | MEDIUM | 5.4 | 0.4% | Oct 25, 2023 | Audimex 15.0.0 is vulnerable to Cross Site Scripting (XSS) in /audimex/cgi-bin/wal.fcgi via company parameter search fil... |
| CVE-2023-46373 | CRITICAL | 9.8 | 0.9% | Oct 25, 2023 | TP-Link TL-WDR7660 2.0.30 has a stack overflow vulnerability via the function deviceInfoJsonToBincauses. |
| CVE-2023-46371 | CRITICAL | 9.8 | 1.1% | Oct 25, 2023 | TP-Link device TL-WDR7660 2.0.30 and TL-WR886N 2.0.12 has a stack overflow vulnerability via the function upgradeInfoJso... |
| CVE-2023-46370 | CRITICAL | 9.8 | 18.1% | Oct 25, 2023 | Tenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools... |
| CVE-2023-46369 | CRITICAL | 9.8 | 0.9% | Oct 25, 2023 | Tenda W18E V16.01.0.8(1576) contains a stack overflow vulnerability via the portMirrorMirroredPorts parameter in the for... |
| CVE-2023-46358 | CRITICAL | 9.8 | 0.7% | Oct 25, 2023 | In the module "Referral and Affiliation Program" (referralbyphone) version 3.5.1 and before from Snegurka for PrestaShop... |
| CVE-2023-46347 | CRITICAL | 9.8 | 49.6% | Oct 25, 2023 | In the module "Step by Step products Pack" (ndk_steppingpack) version 1.5.6 and before from NDK Design for PrestaShop, a... |
| CVE-2023-46346 | HIGH | 7.5 | 0.8% | Oct 25, 2023 | In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 4.1.1 from MyPrestaModul... |
| CVE-2023-46316 | MEDIUM | 5.5 | 0.4% | Oct 25, 2023 | In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines. |
| CVE-2023-46204 | HIGH | 8.8 | 0.3% | Oct 25, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Muller Digital Inc. Duplicate Theme plugin <= 0.1.6 versions. |
| CVE-2023-46202 | HIGH | 8.8 | 0.3% | Oct 25, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Jeff Sherk Auto Login New User After Registration plugin <= 1.9.6 ver... |
| CVE-2023-46198 | HIGH | 8.8 | 0.3% | Oct 25, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Scientech It Solution Appointment Calendar plugin <= 2.9.6 versions. |
| CVE-2023-46193 | HIGH | 8.8 | 0.3% | Oct 25, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Internet Marketing Ninjas Internal Link Building plugin <= 1.2.3 vers... |
| CVE-2023-46191 | HIGH | 8.8 | 0.3% | Oct 25, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Niels van Renselaar Open Graph Metabox plugin <= 1.4.4 versions. |
| CVE-2023-46190 | HIGH | 8.8 | 0.3% | Oct 25, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Novo-media Novo-Map : your WP posts on custom google maps plugin <= 1... |
| CVE-2023-46189 | HIGH | 8.8 | 0.3% | Oct 25, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Simple Calendar – Google Calendar Plugin <= 3.2.5 versions. |
| CVE-2023-46158 | CRITICAL | 9.8 | 0.5% | Oct 25, 2023 | IBM WebSphere Application Server Liberty 23.0.0.9 through 23.0.0.10 could provide weaker than expected security due to i... |
| CVE-2023-46152 | HIGH | 8.8 | 0.3% | Oct 25, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professiona... |
| CVE-2023-46151 | HIGH | 8.8 | 0.3% | Oct 25, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in AWESOME TOGI Product Category Tree plugin <= 2.5 versions. |
| CVE-2023-46150 | HIGH | 8.8 | 0.3% | Oct 25, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WP Military WP Radio plugin <= 3.1.9 versions. |
| CVE-2023-46136 | HIGH | 7.5 | 1.1% | Oct 25, 2023 | Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x br... |
| CVE-2023-46135 | HIGH | 7.5 | 0.8% | Oct 25, 2023 | rs-stellar-strkey is a Rust lib for encode/decode of Stellar Strkeys. A panic vulnerability occurs when a specially craf... |
| CVE-2023-46128 | MEDIUM | 6.5 | 0.5% | Oct 25, 2023 | Nautobot is a Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL ... |
| CVE-2023-46126 | MEDIUM | 5.4 | 0.6% | Oct 25, 2023 | Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime en... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now