2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-40071 | HIGH | 7.8 | 0.2% | May 16, 2024 | Improper access control in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user t... |
| CVE-2023-40070 | HIGH | 8.8 | 0.2% | May 16, 2024 | Improper access control in some Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to... |
| CVE-2023-39929 | MEDIUM | 6.7 | 0.2% | May 16, 2024 | Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated ... |
| CVE-2023-39433 | MEDIUM | 4.4 | 0.2% | May 16, 2024 | Improper access control for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to poten... |
| CVE-2023-38654 | HIGH | 8.2 | 0.3% | May 16, 2024 | Improper input validation for some some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.20 may allo... |
| CVE-2023-38581 | HIGH | 8.8 | 0.2% | May 16, 2024 | Buffer overflow in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentiall... |
| CVE-2023-38420 | LOW | 3.8 | 0.2% | May 16, 2024 | Improper conditions check in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to po... |
| CVE-2023-38417 | MEDIUM | 4.3 | 0.4% | May 16, 2024 | Improper input validation for some Intel(R) PROSet/Wireless WiFi software before version 23.20 may allow an unauthentica... |
| CVE-2023-35192 | HIGH | 7.8 | 0.2% | May 16, 2024 | Uncontrolled search path in some Intel(R) GPA Framework software before version 2023.3 may allow an authenticated user t... |
| CVE-2023-28402 | HIGH | 7.2 | 0.2% | May 16, 2024 | Improper input validation in some Intel(R) BIOS Guard firmware may allow a privileged user to potentially enable escalat... |
| CVE-2023-28383 | MEDIUM | 6.1 | 0.2% | May 16, 2024 | Improper conditions check in some Intel(R) BIOS PPAM firmware may allow a privileged user to potentially enable escalati... |
| CVE-2023-27504 | HIGH | 7.2 | 0.2% | May 16, 2024 | Improper conditions check in some Intel(R) BIOS Guard firmware may allow a privileged user to potentially enable escalat... |
| CVE-2023-24460 | HIGH | 7.8 | 0.2% | May 16, 2024 | Incorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated ... |
| CVE-2023-22662 | MEDIUM | 5.8 | 0.2% | May 16, 2024 | Improper input validation of EpsdSrMgmtConfig in UEFI firmware for some Intel(R) Server Board S2600BP products may allow... |
| CVE-2023-22656 | LOW | 3.9 | 0.3% | May 16, 2024 | Out-of-bounds read in Intel(R) Media SDK and some Intel(R) oneVPL software before version 23.3.5 may allow an authentica... |
| CVE-2023-47717 | MEDIUM | 4.4 | 0.2% | May 16, 2024 | IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial of ... |
| CVE-2023-48643 | CRITICAL | 9.8 | 1.1% | May 16, 2024 | Shrubbery tac_plus 2.x, 3.x. and 4.x through F4.0.4.28 allows unauthenticated Remote Command Execution. The product allo... |
| CVE-2023-46842 | MEDIUM | 6.5 | 8.5% | May 16, 2024 | Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in particular means that the... |
| CVE-2023-40297 | HIGH | 7.5 | 1.0% | May 15, 2024 | Stakater Forecastle 1.0.139 and before allows %5C../ directory traversal in the website component. |
| CVE-2023-7258 | MEDIUM | 6.5 | 0.2% | May 15, 2024 | A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead t... |
| CVE-2023-5938 | HIGH | 8.9 | 0.7% | May 15, 2024 | Multiple functions use archives without properly validating the filenames therein, rendering the application vulnerable ... |
| CVE-2023-5937 | MEDIUM | 5.2 | 0.1% | May 15, 2024 | On Windows systems, the Arc configuration files resulted to be world-readable. This can lead to information disclosur... |
| CVE-2023-5936 | HIGH | 7.8 | 0.1% | May 15, 2024 | On Unix systems (Linux, MacOS), Arc uses a temporary file with unsafe privileges. By tampering with such file, a mali... |
| CVE-2023-5935 | HIGH | 7.4 | 0.2% | May 15, 2024 | When configuring Arc (e.g. during the first setup), a local web interface is provided to ease the configuration process.... |
| CVE-2023-6324 | HIGH | 8.8 | 0.7% | May 15, 2024 | ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now