2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-28958 | HIGH | 7.8 | 0.5% | Jul 10, 2023 | IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 is potentially vulnerable to CSV Injection. A remote attacker cou... |
| CVE-2023-28955 | MEDIUM | 6.5 | 0.8% | Jul 10, 2023 | IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 could allow an authenticated user send a specially crafted reques... |
| CVE-2023-28953 | MEDIUM | 4.3 | 0.6% | Jul 10, 2023 | IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the se... |
| CVE-2023-27869 | HIGH | 8.8 | 1.4% | Jul 10, 2023 | IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker... |
| CVE-2023-27868 | HIGH | 8.8 | 1.4% | Jul 10, 2023 | IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker... |
| CVE-2023-27867 | HIGH | 8.8 | 1.4% | Jul 10, 2023 | IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker... |
| CVE-2023-27558 | HIGH | 7.8 | 0.2% | Jul 10, 2023 | IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed ser... |
| CVE-2023-27540 | HIGH | 7.5 | 1.0% | Jul 10, 2023 | IBM Watson CP4D Data Stores 4.6.0 does not properly allocate resources without limits or throttling which could allow a ... |
| CVE-2023-25478 | HIGH | 8.8 | 0.3% | Jul 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Jason Rouet Weather Station plugin <= 3.8.12 versions. |
| CVE-2023-24405 | HIGH | 8.8 | 0.3% | Jul 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on plugin <= 1.9.... |
| CVE-2023-24395 | HIGH | 8.8 | 0.3% | Jul 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Scott Paterson Contact Form 7 Redirect & Thank You Page plugin <= 1.0... |
| CVE-2023-23993 | HIGH | 8.8 | 0.3% | Jul 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in LionScripts.Com LionScripts: IP Blocker Lite plugin <= 11.1.1 version... |
| CVE-2023-23897 | HIGH | 8.8 | 1.7% | Jul 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Ozette Plugins Simple Mobile URL Redirect plugin <= 1.7.2 versions. |
| CVE-2023-23869 | HIGH | 8.8 | 0.3% | Jul 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Amit Agarwal Google XML Sitemap for Mobile plugin <= 1.6.1 versions. |
| CVE-2023-23804 | HIGH | 8.8 | 0.3% | Jul 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Feed plugin <= 1.2.7 versions. |
| CVE-2023-23787 | HIGH | 8.8 | 0.3% | Jul 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce Redirect Manager plugin <= 1.0.9 versions. |
| CVE-2023-23487 | MEDIUM | 4.3 | 0.6% | Jul 10, 2023 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to insufficient audit logg... |
| CVE-2023-22695 | HIGH | 8.8 | 0.3% | Jul 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Hiroaki Miyashita Custom Field Template plugin <= 2.5.8 versions. |
| CVE-2023-22694 | HIGH | 8.8 | 0.3% | Jul 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Arian Khosravi, Norik Davtian BigContact Contact Page plugin <= 1.5.8... |
| CVE-2023-22673 | HIGH | 8.8 | 0.3% | Jul 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in MageNet Website Monetization by MageNet plugin <= 1.0.29.1 versions. |
| CVE-2023-1902 | HIGH | 8 | 0.5% | Jul 10, 2023 | The bluetooth HCI host layer logic not clearing a global reference to a state pointer after handling connection events m... |
| CVE-2023-1901 | HIGH | 8 | 0.5% | Jul 10, 2023 | The bluetooth HCI host layer logic not clearing a global reference to a semaphore after synchronously sending HCI comman... |
| CVE-2023-1780 | MEDIUM | 6.1 | 1.0% | Jul 10, 2023 | The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before output... |
| CVE-2023-1597 | HIGH | 8.8 | 0.5% | Jul 10, 2023 | The tagDiv Cloud Library WordPress plugin before 2.7 does not have authorisation and CSRF in an AJAX action accessible t... |
| CVE-2023-1208 | HIGH | 7.2 | 1.3% | Jul 10, 2023 | This HTTP Headers WordPress plugin before 1.18.11 allows arbitrary data to be written to arbitrary files, leading to a R... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now