2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-43696CRITICAL9.8 Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary file...
CVE-2023-5333MEDIUM6.5Mattermost fails to deduplicate input IDs allowing a simple user to cause the application to consume excessive resources...
CVE-2023-5331MEDIUM5.3Mattermost fails to properly check the creator of an attached file when adding the file to a draft post, potentially exp...
CVE-2023-5330HIGH7.5Mattermost fails to enforce a limit for the size of the cache entry for OpenGraph data allowing an attacker to send a s...
CVE-2023-45613CRITICAL9.1In JetBrains Ktor before 2.3.5 server certificates were not verified
CVE-2023-45612CRITICAL9.8In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE
CVE-2023-44993HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud AI ChatBot plugin <= 4.7.8 versions.
CVE-2023-44473HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Michael Tran Table of Contents Plus plugin <= 2302 versions.
CVE-2023-44240HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Peter Butler Timthumb Vulnerability Scanner plugin <= 1.54 versions.
CVE-2023-44246HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Matias s Shockingly Simple Favicon plugin <= 1.8.2 versions.
CVE-2023-44238HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Joakim Ling Remove slug from custom post type plugin <= 1.0.3 version...
CVE-2023-44237HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Moriyan Jay WP Site Protector plugin <= 2.0 versions.
CVE-2023-44236HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Devnath verma WP Captcha plugin <= 2.0.0 versions.
CVE-2023-44260HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Mikk Mihkel Nurges, Rebing OÜ Woocommerce ESTO plugin <= 2.23.1 versi...
CVE-2023-44232HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Huseyin Berberoglu WP Hide Pages plugin <= 1.0 versions.
CVE-2023-44231HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in NickDuncan Contact Form plugin <= 2.0.10 versions.
CVE-2023-3589HIGH7.5A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic ...
CVE-2023-39854MEDIUM6.5The web interface of ATX Ucrypt through 3.5 allows authenticated users (or attackers using default credentials for the a...
CVE-2023-45374MEDIUM5.3An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, ...
CVE-2023-45373MEDIUM6.1An issue was discovered in the ProofreadPage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5...
CVE-2023-45372MEDIUM5.3An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and...
CVE-2023-45371HIGH7.5An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and...
CVE-2023-45370MEDIUM5.3An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, ...
CVE-2023-45369MEDIUM4.3An issue was discovered in the PageTriage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, a...
CVE-2023-45367MEDIUM6.5An issue was discovered in the CheckUser extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, an...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now