2023 CVE Vulnerabilities
31,244 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-4617 | CRITICAL | 10 | 0.6% | Dec 19, 2024 | Incorrect authorization vulnerability in HTTP POST method in Govee Home application on Android and iOS allows remote att... |
| CVE-2023-34990 | CRITICAL | 9.8 | 24.9% | Dec 18, 2024 | A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to ex... |
| CVE-2023-29476 | CRITICAL | 9.1 | 0.4% | Dec 14, 2024 | In Menlo On-Premise Appliance before 2.88, web policy may not be consistently applied properly to intentionally malforme... |
| CVE-2023-41875 | CRITICAL | 9.8 | 0.6% | Dec 13, 2024 | Missing Authorization vulnerability in wpdirectorykit.com WP Directory Kit allows Exploiting Incorrectly Configured Acce... |
| CVE-2023-40005 | CRITICAL | 9.8 | 0.6% | Dec 13, 2024 | Missing Authorization vulnerability in Syed Balkhi Easy Digital Downloads easy-digital-downloads allows Exploiting Incor... |
| CVE-2023-40003 | CRITICAL | 9.8 | 0.5% | Dec 13, 2024 | Missing Authorization vulnerability in weDevs WP Project Manager wedevs-project-manager allows Exploiting Incorrectly Co... |
| CVE-2023-39997 | CRITICAL | 9.8 | 0.5% | Dec 13, 2024 | Missing Authorization vulnerability in supsystic.com Popup by Supsystic allows Exploiting Incorrectly Configured Access ... |
| CVE-2023-37967 | CRITICAL | 9.8 | 0.6% | Dec 13, 2024 | Missing Authorization vulnerability in Designinvento DirectoryPress allows Exploiting Incorrectly Configured Access Cont... |
| CVE-2023-36681 | CRITICAL | 9.8 | 0.7% | Dec 13, 2024 | Missing Authorization vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List allows Exploiting... |
| CVE-2023-22697 | CRITICAL | 9.8 | 0.6% | Dec 13, 2024 | Missing Authorization vulnerability in Survey Maker team Survey Maker allows Exploiting Incorrectly Configured Access Co... |
| CVE-2023-51353 | CRITICAL | 9.8 | 0.6% | Dec 9, 2024 | Missing Authorization vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Exploiting Incorrectly Con... |
| CVE-2023-50903 | CRITICAL | 9.8 | 0.6% | Dec 9, 2024 | Missing Authorization vulnerability in Roxnor Metform metform allows Exploiting Incorrectly Configured Access Control Se... |
| CVE-2023-47826 | CRITICAL | 9.8 | 0.5% | Dec 9, 2024 | Missing Authorization vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Exploiting Incorrectly C... |
| CVE-2023-47805 | CRITICAL | 9.8 | 0.5% | Dec 9, 2024 | Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2023-32117 | CRITICAL | 9.8 | 6.3% | Dec 9, 2024 | Missing Authorization vulnerability in SoftLab Integrate Google Drive allows Exploiting Incorrectly Configured Access Co... |
| CVE-2023-23834 | CRITICAL | 9.8 | 0.6% | Dec 9, 2024 | Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2023-22701 | CRITICAL | 9.8 | 1.0% | Dec 9, 2024 | Missing Authorization vulnerability in Shopfiles Ltd Ebook Store allows Exploiting Incorrectly Configured Access Control... |
| CVE-2023-50913 | CRITICAL | 9.1 | 0.4% | Dec 5, 2024 | Oxide control plane software before 5 allows SSRF. |
| CVE-2023-48010 | CRITICAL | 9.8 | 0.4% | Dec 5, 2024 | STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface. Code running as... |
| CVE-2023-7299 | CRITICAL | 9.8 | 0.6% | Nov 23, 2024 | A vulnerability was found in DataGear up to 4.60. It has been declared as critical. This vulnerability affects unknown c... |
| CVE-2023-51639 | CRITICAL | 9.8 | 2.4% | Nov 22, 2024 | Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability. This vulnerability allows remote ... |
| CVE-2023-51638 | CRITICAL | 9.8 | 1.3% | Nov 22, 2024 | Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass... |
| CVE-2023-24467 | CRITICAL | 9.8 | 1.1% | Nov 22, 2024 | Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000. |
| CVE-2023-24466 | CRITICAL | 9.8 | 0.5% | Nov 22, 2024 | Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200... |
| CVE-2023-43091 | CRITICAL | 9.8 | 0.8% | Nov 17, 2024 | A flaw was found in GNOME Maps, which is vulnerable to a code injection attack via its service.json configuration file. ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now