2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-40838 | CRITICAL | 9.8 | 1.1% | Aug 30, 2023 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_3A1D0' contains a command execution vulnerability. |
| CVE-2023-40837 | CRITICAL | 9.8 | 0.8% | Aug 30, 2023 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADD50' contains a command execution vulnerability. In t... |
| CVE-2023-40598 | HIGH | 8.8 | 0.6% | Aug 30, 2023 | In Splunk Enterprise versions below 8.2.12, 9.0.6, and 9.1.1, an attacker can create an external lookup that calls a leg... |
| CVE-2023-40597 | HIGH | 8.8 | 0.2% | Aug 30, 2023 | In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to... |
| CVE-2023-40596 | HIGH | 8.8 | 0.2% | Aug 30, 2023 | In Splunk Enterprise versions earlier than 8.2.12, 9.0.6, and 9.1.1, a dynamic link library (DLL) that ships with Splunk... |
| CVE-2023-40595 | HIGH | 8.8 | 0.8% | Aug 30, 2023 | In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can execute a specially crafted query tha... |
| CVE-2023-40594 | HIGH | 7.5 | 0.4% | Aug 30, 2023 | In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can use the `printf` SPL function to perf... |
| CVE-2023-40593 | HIGH | 7.5 | 0.5% | Aug 30, 2023 | In Splunk Enterprise versions lower than 9.0.6 and 8.2.12, a malicious actor can send a malformed security assertion mar... |
| CVE-2023-40592 | MEDIUM | 6.1 | 0.5% | Aug 30, 2023 | In Splunk Enterprise versions below 9.1.1, 9.0.6, and 8.2.12, an attacker can craft a special web request that can resul... |
| CVE-2023-20266 | HIGH | 7.2 | 0.4% | Aug 30, 2023 | A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communica... |
| CVE-2023-35094 | MEDIUM | 5.4 | 0.4% | Aug 30, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Julien Berthelot / MPEmbed WP Matterport Shortco... |
| CVE-2023-35092 | MEDIUM | 4.8 | 0.4% | Aug 30, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Abhay Yadav Breadcrumb simple plugin <= 1.3 versions. |
| CVE-2023-34372 | MEDIUM | 4.8 | 0.4% | Aug 30, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Didier Sampaolo SpamReferrerBlock plugin <= 2.22 versi... |
| CVE-2023-32294 | MEDIUM | 4.8 | 0.4% | Aug 30, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Radical Web Design GDPR Cookie Consent Notice Box plug... |
| CVE-2023-28692 | MEDIUM | 4.8 | 0.4% | Aug 30, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.3 versions. |
| CVE-2023-28415 | MEDIUM | 4.8 | 0.4% | Aug 30, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in XootiX Side Cart Woocommerce (Ajax) plugin <= 2.2 vers... |
| CVE-2023-27621 | MEDIUM | 4.8 | 0.4% | Aug 30, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MrDemonWolf Livestream Notice plugin <= 1.2.0 versions... |
| CVE-2023-25471 | MEDIUM | 6.1 | 0.4% | Aug 30, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Webcodin WCP OpenWeather plugin <= 2.5.0 versions. |
| CVE-2023-25466 | MEDIUM | 6.1 | 0.4% | Aug 30, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin <= 1.4.14.... |
| CVE-2023-25453 | MEDIUM | 6.1 | 0.5% | Aug 30, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ian Sadovy WordPress Tables plugin <= 1.3.9 versions. |
| CVE-2023-24401 | MEDIUM | 4.8 | 0.4% | Aug 30, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Davidsword Mobile Call Now & Map Buttons plugin <= 1.5... |
| CVE-2023-24397 | MEDIUM | 4.8 | 0.4% | Aug 30, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Reservation.Studio Reservation.Studio widget plugin <=... |
| CVE-2023-4209 | MEDIUM | 4.3 | 0.2% | Aug 30, 2023 | The POEditor WordPress plugin before 0.9.8 does not have CSRF checks in various places, which could allow attackers to m... |
| CVE-2023-4150 | MEDIUM | 4.3 | 0.2% | Aug 30, 2023 | The User Activity Tracking and Log WordPress plugin before 4.0.9 does not have proper CSRF checks when managing its lice... |
| CVE-2023-4109 | MEDIUM | 4.8 | 0.4% | Aug 30, 2023 | The Ninja Forms WordPress Ninja Forms Contact Form WordPress plugin before 3.6.26 was affected by a HTML Injection secur... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now