2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-45650HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Fla-shop.Com HTML5 Maps plugin <= 1.7.1.4 versions.
CVE-2023-45638HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in euPago Eupago Gateway For Woocommerce plugin <= 3.1.9 versions.
CVE-2023-45629HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails plugin <= ...
CVE-2023-45606HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Lasso Simple URLs plugin <= 120 versions.
CVE-2023-45605HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Christopher Finke Feed Statistics plugin <= 4.1 versions.
CVE-2023-45274HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in SendPulse SendPulse Free Web Push plugin <= 1.3.1 versions.
CVE-2023-45273HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Matt McKenny Stout Google Calendar plugin <= 1.2.3 versions.
CVE-2023-43668CRITICAL9.8Authorization Bypass Through User-Controlled Key vulnerability in Apache InLong.This issue affects Apache InLong: from 1...
CVE-2023-43667HIGH7.5Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apac...
CVE-2023-43666MEDIUM6.5Insufficient Verification of Data Authenticity vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4...
CVE-2023-3392HIGH7.2The Read More & Accordion WordPress plugin before 3.2.7 unserializes user input provided via the settings, which could a...
CVE-2023-38059MEDIUM5.3The loading of external images is not blocked, even if configured, if the attacker uses protocol-relative URL in the pay...
CVE-2023-45158CRITICAL9.8An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifyS...
CVE-2023-45580CRITICAL9.8Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and be...
CVE-2023-45579CRITICAL9.8Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and be...
CVE-2023-45578CRITICAL9.8Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and be...
CVE-2023-45577CRITICAL9.8Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and bef...
CVE-2023-45576CRITICAL9.8Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and be...
CVE-2023-21415HIGH8.1Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to pa...
CVE-2023-21414MEDIUM6.8NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection fo...
CVE-2023-21413HIGH7.2GoSecure on behalf of Genetec Inc. has found a flaw that allows for a remote code execution during the installation of A...
CVE-2023-45575CRITICAL9.8Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and bef...
CVE-2023-45574CRITICAL9.8Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and be...
CVE-2023-45573CRITICAL9.8Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and be...
CVE-2023-45572CRITICAL9.8Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and be...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now