2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6610 | HIGH | 7.1 | 0.4% | Dec 8, 2023 | An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This i... |
| CVE-2023-6606 | HIGH | 7.1 | 0.5% | Dec 8, 2023 | An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue ... |
| CVE-2023-48421 | HIGH | 7.8 | 0.1% | Dec 8, 2023 | In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/platform/pixel/pixel_gpu_slc.c... |
| CVE-2023-48416 | HIGH | 7.5 | 0.5% | Dec 8, 2023 | In multiple locations, there is a possible null dereference due to a missing null check. This could lead to remote denia... |
| CVE-2023-48410 | HIGH | 7.5 | 0.4% | Dec 8, 2023 | In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to r... |
| CVE-2023-48409 | HIGH | 7.8 | 0.1% | Dec 8, 2023 | In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/mali_kbase_core_linux.c, there... |
| CVE-2023-48407 | HIGH | 7.8 | 0.1% | Dec 8, 2023 | there is a possible DCK won't be deleted after factory reset due to a logic error in the code. This could lead to local ... |
| CVE-2023-48404 | HIGH | 7.5 | 0.4% | Dec 8, 2023 | In ProtocolMiscCarrierConfigSimInfoIndAdapter of protocolmiscadapter.cpp, there is a possible out of bounds read due to ... |
| CVE-2023-48403 | HIGH | 7.5 | 0.4% | Dec 8, 2023 | In sms_DecodeCodedTpMsg of sms_PduCodec.c, there is a possible out of bounds read due to a heap buffer overflow. This co... |
| CVE-2023-48402 | HIGH | 7.8 | 0.1% | Dec 8, 2023 | In ppcfw_enable of ppcfw.c, there is a possible EoP due to a missing permission check. This could lead to local escalati... |
| CVE-2023-48398 | HIGH | 7.5 | 0.3% | Dec 8, 2023 | In ProtocolNetAcBarringInfo::ProtocolNetAcBarringInfo() of protocolnetadapter.cpp, there is a possible out of bounds rea... |
| CVE-2023-47565 | HIGH | 8.8 | 73.3% | Dec 8, 2023 | An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. ... |
| CVE-2023-32975 | HIGH | 7.2 | 0.9% | Dec 8, 2023 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver... |
| CVE-2023-32968 | HIGH | 7.2 | 0.8% | Dec 8, 2023 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver... |
| CVE-2023-6611 | HIGH | 7.5 | 0.6% | Dec 8, 2023 | A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unk... |
| CVE-2023-6608 | HIGH | 7.5 | 0.6% | Dec 8, 2023 | A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknow... |
| CVE-2023-6245 | HIGH | 7.5 | 1.2% | Dec 8, 2023 | The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For exa... |
| CVE-2023-6607 | HIGH | 7.5 | 0.7% | Dec 8, 2023 | A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability ... |
| CVE-2023-46157 | HIGH | 8.8 | 2.3% | Dec 8, 2023 | File-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows the lowest privilege user to achieve OS command injection by c... |
| CVE-2023-32460 | HIGH | 7.8 | 0.2% | Dec 8, 2023 | Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker... |
| CVE-2023-26158 | HIGH | 8.2 | 0.8% | Dec 8, 2023 | All versions of the package mockjs are vulnerable to Prototype Pollution via the Util.extend function due to missing che... |
| CVE-2023-48122 | HIGH | 7.5 | 0.8% | Dec 8, 2023 | An issue in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTT... |
| CVE-2023-43305 | HIGH | 8.2 | 0.6% | Dec 8, 2023 | An issue in studio kent mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of... |
| CVE-2023-43744 | HIGH | 7.2 | 2.0% | Dec 8, 2023 | An OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware version... |
| CVE-2023-43743 | HIGH | 8.8 | 0.7% | Dec 8, 2023 | A SQL injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now