2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-25997 | MEDIUM | 6.5 | 0.3% | Jun 6, 2025 | Missing Authorization vulnerability in SolaPlugins Sola Support Ticket allows Exploiting Incorrectly Configured Access C... |
| CVE-2023-25995 | HIGH | 7.5 | 0.5% | Jun 6, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2023-2921 | HIGH | 8.8 | 0.4% | Jun 6, 2025 | The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL st... |
| CVE-2023-26226 | CRITICAL | 9.8 | 0.3% | May 30, 2025 | A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682 |
| CVE-2023-41591 | CRITICAL | 9.8 | 0.3% | May 29, 2025 | An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute... |
| CVE-2023-51756 | — | — | — | May 28, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused |
| CVE-2023-51753 | — | — | — | May 28, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused |
| CVE-2023-50338 | — | — | — | May 28, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused |
| CVE-2023-49904 | — | — | — | May 28, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused |
| CVE-2023-49604 | — | — | — | May 28, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused |
| CVE-2023-49139 | — | — | — | May 28, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused |
| CVE-2023-49137 | — | — | — | May 28, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused |
| CVE-2023-48726 | — | — | — | May 28, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused |
| CVE-2023-41839 | — | — | — | May 28, 2025 | Rejected reason: Not used |
| CVE-2023-34873 | HIGH | 8.7 | 0.4% | May 23, 2025 | On MOBOTIX P3 cameras before MX-V4.7.2.18 and Mx6 cameras before MX-V5.2.0.61, the tcpdump feature does not properly val... |
| CVE-2023-53154 | MEDIUM | 5.5 | 0.2% | May 23, 2025 | parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_Pars... |
| CVE-2023-47466 | HIGH | 7.1 | 0.3% | May 22, 2025 | TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in whi... |
| CVE-2023-33861 | MEDIUM | 6.5 | 0.2% | May 20, 2025 | IBM Security ReaQta EDR 3.12 could allow an attacker to spoof a trusted entity by interfering with the communication pat... |
| CVE-2023-7297 | LOW | 3.5 | 0.2% | May 15, 2025 | The TwitterPosts WordPress plugin through 1.0.2 does not have CSRF check in place when updating its settings, which coul... |
| CVE-2023-7239 | HIGH | 7.5 | 0.5% | May 15, 2025 | The WP Dashboard Notes WordPress plugin before 1.0.11 does not validate that the user has access to the post_id paramete... |
| CVE-2023-7231 | HIGH | 7.3 | 0.4% | May 15, 2025 | The illi Link Party! WordPress plugin through 1.0 lacks proper access controls, allowing unauthenticated visitors to del... |
| CVE-2023-7230 | MEDIUM | 6.1 | 0.3% | May 15, 2025 | The illi Link Party! WordPress plugin through 1.0 does not sanitize and escape some parameters, which could allow users ... |
| CVE-2023-7229 | MEDIUM | 5.5 | 0.2% | May 15, 2025 | The illi Link Party! WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which co... |
| CVE-2023-7228 | MEDIUM | 6.1 | 0.3% | May 15, 2025 | The illi Link Party! WordPress plugin through 1.0 does not sanitise and escape some parameters, which could allow unauth... |
| CVE-2023-7197 | HIGH | 7.1 | 0.1% | May 15, 2025 | The Marketing Twitter Bot WordPress plugin through 1.11 does not have CSRF check in some places, and is missing sanitisa... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now