2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-42552 | LOW | 3.3 | 0.2% | Nov 7, 2023 | Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 i... |
| CVE-2023-42542 | LOW | 3.3 | 0.2% | Nov 7, 2023 | Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID ... |
| CVE-2023-4535 | LOW | 3.8 | 0.5% | Nov 6, 2023 | An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key enc... |
| CVE-2023-5920 | LOW | 3.3 | 0.2% | Nov 2, 2023 | Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for ot... |
| CVE-2023-37833 | LOW | 2.7 | 0.4% | Oct 31, 2023 | Improper access control in Elenos ETG150 FM transmitter v3.12 allows attackers to make arbitrary configuration edits tha... |
| CVE-2023-43295 | LOW | 3.5 | 0.2% | Oct 31, 2023 | Cross Site Request Forgery vulnerability in Click Studios (SA) Pty Ltd Passwordstate v.Build 9785 and before allows a lo... |
| CVE-2023-5862 | LOW | 3.3 | 0.3% | Oct 31, 2023 | Missing Authorization in GitHub repository hamza417/inure prior to Build95. |
| CVE-2023-5349 | LOW | 3.3 | 0.7% | Oct 30, 2023 | A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial ... |
| CVE-2023-21349 | LOW | 3.3 | 0.1% | Oct 30, 2023 | In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to ... |
| CVE-2023-21348 | LOW | 3.3 | 0.1% | Oct 30, 2023 | In Window Manager, there is a possible way to determine whether an app is installed, without query permissions, due to s... |
| CVE-2023-21346 | LOW | 3.3 | 0.1% | Oct 30, 2023 | In the Device Idle Controller, there is a possible way to determine whether an app is installed, without query permissio... |
| CVE-2023-21345 | LOW | 3.3 | 0.1% | Oct 30, 2023 | In Game Manager Service, there is a possible way to determine whether an app is installed, without query permissions, du... |
| CVE-2023-40138 | LOW | 3.3 | 0.1% | Oct 27, 2023 | In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lea... |
| CVE-2023-40137 | LOW | 3.3 | 0.1% | Oct 27, 2023 | In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused depu... |
| CVE-2023-40136 | LOW | 3.3 | 0.1% | Oct 27, 2023 | In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This ... |
| CVE-2023-40135 | LOW | 3.3 | 0.1% | Oct 27, 2023 | In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deputy... |
| CVE-2023-40134 | LOW | 3.3 | 0.1% | Oct 27, 2023 | In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This cou... |
| CVE-2023-40127 | LOW | 3.3 | 0.2% | Oct 27, 2023 | In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local ... |
| CVE-2023-42857 | LOW | 3.3 | 0.3% | Oct 25, 2023 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma ... |
| CVE-2023-40405 | LOW | 3.3 | 0.3% | Oct 25, 2023 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma ... |
| CVE-2023-5752 | LOW | 3.3 | 0.5% | Oct 25, 2023 | When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Me... |
| CVE-2023-41960 | LOW | 3.3 | 0.2% | Oct 25, 2023 | The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely... |
| CVE-2023-45809 | LOW | 2.7 | 0.5% | Oct 19, 2023 | Wagtail is an open source content management system built on Django. A user with a limited-permission editor account for... |
| CVE-2023-45145 | LOW | 3.6 | 0.4% | Oct 18, 2023 | Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusti... |
| CVE-2023-38546 | LOW | 3.7 | 6.2% | Oct 18, 2023 | This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of c... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now