2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-31339 | MEDIUM | 5.8 | 0.2% | Aug 13, 2024 | Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged ... |
| CVE-2023-31310 | MEDIUM | 5 | 0.1% | Aug 13, 2024 | Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a malformed ... |
| CVE-2023-31307 | MEDIUM | 4.4 | 0.2% | Aug 13, 2024 | Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-o... |
| CVE-2023-31305 | LOW | 1.9 | 0.1% | Aug 13, 2024 | Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker ... |
| CVE-2023-31304 | LOW | 2.3 | 0.2% | Aug 13, 2024 | Improper input validation in SMU may allow an attacker with privileges and a compromised physical function (PF) to ... |
| CVE-2023-20591 | CRITICAL | 10 | 0.3% | Aug 13, 2024 | Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, all... |
| CVE-2023-20584 | MEDIUM | 6 | 0.2% | Aug 13, 2024 | IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an att... |
| CVE-2023-20578 | MEDIUM | 6.4 | 0.1% | Aug 13, 2024 | A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or U... |
| CVE-2023-20518 | LOW | 1.9 | 0.1% | Aug 13, 2024 | Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIO... |
| CVE-2023-20513 | LOW | 3.3 | 0.1% | Aug 13, 2024 | An insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize a malicious VF (virtua... |
| CVE-2023-20512 | LOW | 1.9 | 0.1% | Aug 13, 2024 | A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in in... |
| CVE-2023-20510 | MEDIUM | 6 | 0.1% | Aug 13, 2024 | An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to ... |
| CVE-2023-20509 | MEDIUM | 5.2 | 0.1% | Aug 13, 2024 | An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DR... |
| CVE-2023-26211 | CRITICAL | 9 | 0.7% | Aug 13, 2024 | An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSOAR 7.3.0 thro... |
| CVE-2023-7066 | HIGH | 7.8 | 0.2% | Aug 12, 2024 | The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially ... |
| CVE-2023-48171 | HIGH | 8.8 | 0.6% | Aug 12, 2024 | An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions c... |
| CVE-2023-41884 | MEDIUM | 6.5 | 0.5% | Aug 12, 2024 | ZoneMinder is a free, open source Closed-circuit television software application. In WWW/AJAX/watch.php, Line: 51 takes ... |
| CVE-2023-7249 | CRITICAL | 9.8 | 0.6% | Aug 12, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Direct... |
| CVE-2023-50810 | MEDIUM | 6 | 0.8% | Aug 12, 2024 | In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot compon... |
| CVE-2023-50809 | HIGH | 7.8 | 0.4% | Aug 12, 2024 | In certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt_7615.ko wireless driver does not properly ... |
| CVE-2023-38018 | MEDIUM | 5.4 | 0.4% | Aug 12, 2024 | IBM Aspera Shares 1.10.0 PL2 does not invalidate session after a password change which could allow an authenticated user... |
| CVE-2023-31315 | HIGH | 7.5 | 0.6% | Aug 12, 2024 | Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM c... |
| CVE-2023-40261 | MEDIUM | 6.8 | 0.4% | Aug 8, 2024 | Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02 fails... |
| CVE-2023-33206 | MEDIUM | 6.8 | 0.3% | Aug 8, 2024 | Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR16, 4.0.0 SR06, 4.1.0 SR04, 4.2.0 SR03, and 4.3.0 SR01 fails... |
| CVE-2023-28865 | MEDIUM | 6.6 | 0.3% | Aug 8, 2024 | Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR15, 4.0.0 SR05, 4.1.0 SR03, and 4.2.0 SR02 fails to validate... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now