2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-28072 | HIGH | 7.8 | 0.3% | Sep 4, 2023 | Dell Alienware Command Center, versions prior to 5.5.51.0, contain a deserialization of untrusted data vulnerability. A... |
| CVE-2023-4755 | MEDIUM | 5.5 | 0.3% | Sep 4, 2023 | Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV. |
| CVE-2023-4752 | HIGH | 7.8 | 0.6% | Sep 4, 2023 | Use After Free in GitHub repository vim/vim prior to 9.0.1858. |
| CVE-2023-4750 | HIGH | 7.8 | 0.5% | Sep 4, 2023 | Use After Free in GitHub repository vim/vim prior to 9.0.1857. |
| CVE-2023-4733 | HIGH | 7.8 | 0.5% | Sep 4, 2023 | Use After Free in GitHub repository vim/vim prior to 9.0.1840. |
| CVE-2023-3222 | HIGH | 7.5 | 0.5% | Sep 4, 2023 | Vulnerability in the password recovery mechanism of Password Recovery plugin for Roundcube, in its 1.2 version, which co... |
| CVE-2023-3221 | MEDIUM | 5.3 | 0.5% | Sep 4, 2023 | User enumeration vulnerability in Password Recovery plugin 1.2 version for Roundcube, which could allow a remote attacke... |
| CVE-2023-4587 | MEDIUM | 5.5 | 0.2% | Sep 4, 2023 | An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local ... |
| CVE-2023-4298 | MEDIUM | 4.8 | 0.4% | Sep 4, 2023 | The 123.chat WordPress plugin before 1.3.1 does not sanitise and escape some of its settings, which could allow high pri... |
| CVE-2023-4284 | MEDIUM | 6.1 | 0.7% | Sep 4, 2023 | The Post Timeline WordPress plugin before 2.2.6 does not sanitise and escape an invalid nonce before outputting it back ... |
| CVE-2023-4279 | HIGH | 7.5 | 0.9% | Sep 4, 2023 | This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from potentially untrusted headers, a... |
| CVE-2023-4269 | MEDIUM | 4.3 | 0.4% | Sep 4, 2023 | The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs, allowin... |
| CVE-2023-4254 | MEDIUM | 4.8 | 0.4% | Sep 4, 2023 | The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high p... |
| CVE-2023-4253 | MEDIUM | 4.8 | 0.4% | Sep 4, 2023 | The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high p... |
| CVE-2023-4216 | LOW | 2.7 | 0.5% | Sep 4, 2023 | The Orders Tracking for WooCommerce WordPress plugin before 1.2.6 doesn't validate the file_url parameter when importing... |
| CVE-2023-4151 | MEDIUM | 6.1 | 0.6% | Sep 4, 2023 | The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back... |
| CVE-2023-4059 | MEDIUM | 4.3 | 0.2% | Sep 4, 2023 | The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allow... |
| CVE-2023-4019 | HIGH | 8.8 | 0.7% | Sep 4, 2023 | The Media from FTP WordPress plugin before 11.17 does not properly limit who can use the plugin, which may allow users w... |
| CVE-2023-40214 | MEDIUM | 6.1 | 0.3% | Sep 4, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Vathemes Business Pro theme <= 1.10.4 versions. |
| CVE-2023-40205 | MEDIUM | 6.1 | 0.3% | Sep 4, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Pixelgrade PixTypes plugin <= 1.4.15 versions. |
| CVE-2023-40197 | MEDIUM | 5.4 | 0.3% | Sep 4, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Devaldi Ltd flowpaper plugin <= 1.9.9 versions. |
| CVE-2023-40196 | MEDIUM | 6.1 | 0.3% | Sep 4, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin <... |
| CVE-2023-3814 | MEDIUM | 4.9 | 0.5% | Sep 4, 2023 | The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installatio... |
| CVE-2023-3499 | MEDIUM | 4.8 | 0.4% | Sep 4, 2023 | The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.16 does not sanitise and escape some ... |
| CVE-2023-32578 | MEDIUM | 5.4 | 0.4% | Sep 4, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Twinpictures Column-Matic plugin <= 1.3.3 versio... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now