2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-27321 | HIGH | 7.5 | 1.1% | May 7, 2024 | OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability... |
| CVE-2023-40694 | MEDIUM | 5.5 | 0.2% | May 7, 2024 | IBM Watson CP4D Data Stores 4.0.0 through 4.8.4 stores potentially sensitive information in log files that could be read... |
| CVE-2023-42757 | MEDIUM | 4.2 | 0.3% | May 7, 2024 | Process Explorer before 17.04 allows attackers to make it functionally unavailable (a denial of service for analysis) by... |
| CVE-2023-46012 | CRITICAL | 9.8 | 1.6% | May 7, 2024 | Buffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to execute arbitrary code via an HTTP... |
| CVE-2023-7240 | MEDIUM | 5.8 | 0.4% | May 7, 2024 | An improper authorization level has been detected in the login panel. It may lead to unauthenticated Server Side Reques... |
| CVE-2023-31234 | MEDIUM | 6.3 | 0.3% | May 7, 2024 | Missing Authorization vulnerability in Tilda Publishing.This issue affects Tilda Publishing: from n/a through 0.3.23. |
| CVE-2023-6810 | MEDIUM | 4.3 | 0.4% | May 7, 2024 | The ClickCease Click Fraud Protection plugin for WordPress is vulnerable to unauthorized access of data due to an improp... |
| CVE-2023-33548 | MEDIUM | 6.8 | 0.5% | May 6, 2024 | Cross Site Scripting (XSS) vulnerability in ASUS RT-AC51U with firmware versions up to and including 3.0.0.4.380.8591 al... |
| CVE-2023-43531 | HIGH | 7.8 | 0.1% | May 6, 2024 | Memory corruption while verifying the serialized header when the key pairs are generated. |
| CVE-2023-43530 | HIGH | 7.8 | 0.1% | May 6, 2024 | Memory corruption in HLOS while checking for the storage type. |
| CVE-2023-43529 | HIGH | 7.5 | 0.3% | May 6, 2024 | Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received. |
| CVE-2023-43528 | MEDIUM | 5.5 | 0.1% | May 6, 2024 | Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is... |
| CVE-2023-43527 | MEDIUM | 5.5 | 0.1% | May 6, 2024 | Information disclosure while parsing dts header atom in Video. |
| CVE-2023-43526 | HIGH | 7.8 | 0.1% | May 6, 2024 | Memory corruption while querying module parameters from Listen Sound model client in kernel from user space. |
| CVE-2023-43525 | HIGH | 7.8 | 0.1% | May 6, 2024 | Memory corruption while copying the sound model data from user to kernel buffer during sound model register. |
| CVE-2023-43524 | HIGH | 7.8 | 0.1% | May 6, 2024 | Memory corruption when the bandpass filter order received from AHAL is not within the expected range. |
| CVE-2023-43521 | HIGH | 7.8 | 0.1% | May 6, 2024 | Memory corruption when multiple listeners are being registered with the same file descriptor. |
| CVE-2023-33119 | HIGH | 7 | 0.1% | May 6, 2024 | Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache. |
| CVE-2023-49676 | MEDIUM | 5.5 | 0.2% | May 6, 2024 | An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after ... |
| CVE-2023-49675 | HIGH | 7.8 | 0.2% | May 6, 2024 | An unauthenticated local attacker may trick a user to open corrupted project files to execute arbitrary code or crash th... |
| CVE-2023-6854 | MEDIUM | 6.4 | 0.3% | May 6, 2024 | The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom postmeta output... |
| CVE-2023-32873 | MEDIUM | 6.7 | 0.1% | May 6, 2024 | In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio... |
| CVE-2023-32871 | MEDIUM | 5.3 | 0.1% | May 6, 2024 | In DA, there is a possible permission bypass due to an incorrect status check. This could lead to local escalation of pr... |
| CVE-2023-52729 | HIGH | 7.5 | 0.5% | May 4, 2024 | TCPServer.cpp in SimpleNetwork through 29bc615 has an off-by-one error that causes a buffer overflow when trying to add ... |
| CVE-2023-27283 | MEDIUM | 5.3 | 0.5% | May 4, 2024 | IBM Aspera Orchestrator 4.0.1 could allow a remote attacker to enumerate usernames due to observable response discrepanc... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now