2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-40052 | HIGH | 7.5 | 0.6% | Jan 18, 2024 | This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12... |
| CVE-2023-6184 | HIGH | 7.2 | 46.6% | Jan 18, 2024 | Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting |
| CVE-2023-6549 | HIGH | 7.5 | 57.6% | Jan 17, 2024 | Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Un... |
| CVE-2023-6548 | HIGH | 8.8 | 3.2% | Jan 17, 2024 | Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with... |
| CVE-2023-23896 | HIGH | 8.8 | 0.5% | Jan 17, 2024 | Missing Authorization vulnerability in MyThemeShop URL Shortener by MyThemeShop.This issue affects URL Shortener by MyTh... |
| CVE-2023-20258 | HIGH | 7.2 | 0.7% | Jan 17, 2024 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote... |
| CVE-2023-5041 | HIGH | 8.8 | 0.9% | Jan 17, 2024 | The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoin... |
| CVE-2023-52285 | HIGH | 7.5 | 0.6% | Jan 17, 2024 | ExamSys 9150244 allows SQL Injection via the /Support/action/Pages.php s_score2 parameter. |
| CVE-2023-51743 | HIGH | 7.5 | 0.6% | Jan 17, 2024 | This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied in... |
| CVE-2023-51742 | HIGH | 7.5 | 0.6% | Jan 17, 2024 | This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied in... |
| CVE-2023-51741 | HIGH | 7.5 | 0.4% | Jan 17, 2024 | This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials ... |
| CVE-2023-51740 | HIGH | 7.5 | 0.4% | Jan 17, 2024 | This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials ... |
| CVE-2023-21901 | HIGH | 7.4 | 0.3% | Jan 16, 2024 | Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Servic... |
| CVE-2023-6336 | HIGH | 7.8 | 0.2% | Jan 16, 2024 | Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows Us... |
| CVE-2023-6335 | HIGH | 7.8 | 0.2% | Jan 16, 2024 | Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows ... |
| CVE-2023-6334 | HIGH | 7.8 | 0.1% | Jan 16, 2024 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Window... |
| CVE-2023-22514 | HIGH | 7.8 | 0.4% | Jan 16, 2024 | This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and ... |
| CVE-2023-22512 | HIGH | 7.5 | 13.7% | Jan 16, 2024 | This High severity DoS (Denial of Service) vulnerability was introduced in version 5.6.0 of Confluence Data Center and S... |
| CVE-2023-6373 | HIGH | 8.8 | 0.4% | Jan 16, 2024 | The ArtPlacer Widget WordPress plugin before 2.20.7 does not sanitize and escape the "id" parameter before submitting th... |
| CVE-2023-5922 | HIGH | 7.5 | 0.7% | Jan 16, 2024 | The Royal Elementor Addons and Templates WordPress plugin before 1.3.81 does not ensure that users accessing posts via a... |
| CVE-2023-4797 | HIGH | 7.2 | 1.0% | Jan 16, 2024 | The Newsletters WordPress plugin before 4.9.3 does not properly escape user-controlled parameters when they are appended... |
| CVE-2023-4703 | HIGH | 7.5 | 0.6% | Jan 16, 2024 | The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly validate parameters when updating us... |
| CVE-2023-4536 | HIGH | 8.8 | 0.8% | Jan 16, 2024 | The My Account Page Editor WordPress plugin before 1.3.2 does not validate the profile picture to be uploaded, allowing ... |
| CVE-2023-45237 | HIGH | 7.5 | 1.0% | Jan 16, 2024 | EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited... |
| CVE-2023-45236 | HIGH | 7.5 | 1.0% | Jan 16, 2024 | EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now