2023 CVE Vulnerabilities
31,244 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-5601 | CRITICAL | 9.8 | 0.9% | Nov 6, 2023 | The WooCommerce Ninja Forms Product Add-ons WordPress plugin before 1.7.1 does not validate the file to be uploaded, all... |
| CVE-2023-5777 | CRITICAL | 9.8 | 0.5% | Nov 6, 2023 | Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the cra... |
| CVE-2023-5719 | CRITICAL | 9.8 | 0.5% | Nov 6, 2023 | The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for us... |
| CVE-2023-46731 | CRITICAL | 9.8 | 88.5% | Nov 6, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki doesn't p... |
| CVE-2023-45827 | CRITICAL | 9.8 | 1.2% | Nov 6, 2023 | Dot diver is a lightweight, powerful, and dependency-free TypeScript utility library that provides types and functions t... |
| CVE-2023-45830 | CRITICAL | 9.8 | 0.5% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Online ADA Accessi... |
| CVE-2023-45657 | CRITICAL | 9.8 | 1.3% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSIMYTH Nexter al... |
| CVE-2023-45074 | CRITICAL | 9.8 | 0.5% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Page Visit Counter... |
| CVE-2023-45069 | CRITICAL | 9.8 | 0.6% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Video Gallery by T... |
| CVE-2023-45055 | CRITICAL | 9.8 | 0.5% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in InspireUI MStore A... |
| CVE-2023-45046 | CRITICAL | 9.8 | 0.6% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pressference Press... |
| CVE-2023-45001 | CRITICAL | 9.8 | 0.6% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Castos Seriously S... |
| CVE-2023-41685 | CRITICAL | 9.8 | 0.5% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ilGhera Woocommerc... |
| CVE-2023-40609 | CRITICAL | 9.8 | 0.6% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aiyaz, maheshpatel... |
| CVE-2023-40207 | CRITICAL | 9.8 | 0.5% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RedNao Donations M... |
| CVE-2023-38382 | CRITICAL | 9.8 | 0.6% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daniel Söderström ... |
| CVE-2023-35911 | CRITICAL | 9.8 | 0.6% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Creative Solutions... |
| CVE-2023-33924 | CRITICAL | 9.8 | 0.7% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Felix Welberg SIS ... |
| CVE-2023-28748 | CRITICAL | 9.8 | 0.6% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in biztechc Copy or M... |
| CVE-2023-27605 | CRITICAL | 9.8 | 0.7% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sajjad Hossain WP ... |
| CVE-2023-4699 | CRITICAL | 9.1 | 0.7% | Nov 6, 2023 | Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU module... |
| CVE-2023-47253 | CRITICAL | 9.8 | 14.4% | Nov 6, 2023 | Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/reques... |
| CVE-2023-38406 | CRITICAL | 9.8 | 0.9% | Nov 6, 2023 | bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow." |
| CVE-2023-46981 | CRITICAL | 9.8 | 1.1% | Nov 5, 2023 | SQL injection vulnerability in Novel-Plus v.4.2.0 allows a remote attacker to execute arbitrary code via a crafted scrip... |
| CVE-2023-40922 | CRITICAL | 9.8 | 0.5% | Nov 4, 2023 | kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocs_id_cart parameter at KerawenDe... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now