2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-33108 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued. |
| CVE-2023-33094 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption while running VK synchronization with KASAN enabled. |
| CVE-2023-33085 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption in wearables while processing data from AON. |
| CVE-2023-33062 | HIGH | 7.5 | 0.3% | Jan 2, 2024 | Transient DOS in WLAN Firmware while parsing a BTM request. |
| CVE-2023-33040 | HIGH | 7.5 | 0.3% | Jan 2, 2024 | Transient DOS in Data Modem during DTLS handshake. |
| CVE-2023-33038 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption while receiving a message in Bus Socket Transport Server. |
| CVE-2023-33033 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption in Audio during playback with speaker protection. |
| CVE-2023-33032 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption in TZ Secure OS while requesting a memory allocation from TA region. |
| CVE-2023-33030 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption in HLOS while running playready use-case. |
| CVE-2023-28583 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 ad... |
| CVE-2023-26157 | HIGH | 7.5 | 0.5% | Jan 2, 2024 | Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds re... |
| CVE-2023-32890 | HIGH | 7.5 | 0.8% | Jan 2, 2024 | In modem EMM, there is a possible system crash due to improper input validation. This could lead to remote denial of ser... |
| CVE-2023-32889 | HIGH | 7.5 | 0.4% | Jan 2, 2024 | In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote d... |
| CVE-2023-32888 | HIGH | 7.5 | 0.9% | Jan 2, 2024 | In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote d... |
| CVE-2023-32887 | HIGH | 7.5 | 0.9% | Jan 2, 2024 | In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of ... |
| CVE-2023-32886 | HIGH | 7.5 | 0.8% | Jan 2, 2024 | In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote de... |
| CVE-2023-50096 | HIGH | 7.5 | 0.6% | Jan 1, 2024 | STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read... |
| CVE-2023-50094 | HIGH | 8.8 | 13.5% | Jan 1, 2024 | reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacha... |
| CVE-2023-6421 | HIGH | 7.5 | 2.4% | Jan 1, 2024 | The Download Manager WordPress plugin before 3.2.83 does not protect file download's passwords, leaking it upon receivin... |
| CVE-2023-6271 | HIGH | 7.5 | 0.7% | Jan 1, 2024 | The Backup Migration WordPress plugin before 1.3.6 stores in-progress backups information in easy to find, publicly-acce... |
| CVE-2023-6113 | HIGH | 7.5 | 0.8% | Jan 1, 2024 | The WP STAGING WordPress Backup Plugin before 3.1.3 and WP STAGING Pro WordPress Backup Plugin before 5.1.3 do not preve... |
| CVE-2023-6064 | HIGH | 7.5 | 0.7% | Jan 1, 2024 | The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files containin... |
| CVE-2023-52133 | HIGH | 8.8 | 0.5% | Dec 31, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WhileTrue Most And... |
| CVE-2023-52132 | HIGH | 7.2 | 0.5% | Dec 31, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jewel Theme WP Adm... |
| CVE-2023-52131 | HIGH | 7.2 | 0.5% | Dec 31, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Zinc Page Gener... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now