2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-52349 | MEDIUM | 4.4 | 0.1% | Apr 8, 2024 | In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o... |
| CVE-2023-52348 | MEDIUM | 4.4 | 0.1% | Apr 8, 2024 | In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o... |
| CVE-2023-52347 | MEDIUM | 5.5 | 0.1% | Apr 8, 2024 | In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o... |
| CVE-2023-52346 | MEDIUM | 4.4 | 0.1% | Apr 8, 2024 | In modem driver, there is a possible system crash due to improper input validation. This could lead to local information... |
| CVE-2023-52345 | MEDIUM | 6 | 0.1% | Apr 8, 2024 | In modem driver, there is a possible system crash due to improper input validation. This could lead to local information... |
| CVE-2023-52344 | MEDIUM | 5.3 | 0.4% | Apr 8, 2024 | In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote ... |
| CVE-2023-52343 | MEDIUM | 5.5 | 0.3% | Apr 8, 2024 | In SecurityCommand message after as security has been actived., there is a possible improper input validation. This coul... |
| CVE-2023-52342 | HIGH | 7.5 | 0.3% | Apr 8, 2024 | In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote ... |
| CVE-2023-52341 | HIGH | 7.5 | 0.3% | Apr 8, 2024 | In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check.... |
| CVE-2023-52717 | MEDIUM | 5.3 | 0.3% | Apr 7, 2024 | Permission verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability w... |
| CVE-2023-52716 | HIGH | 7.5 | 0.4% | Apr 7, 2024 | Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module. Impact: Successful ex... |
| CVE-2023-52715 | HIGH | 7.5 | 0.4% | Apr 7, 2024 | The SystemUI module has a vulnerability in permission management. Impact: Successful exploitation of this vulnerability ... |
| CVE-2023-52714 | HIGH | 7.5 | 0.3% | Apr 7, 2024 | Vulnerability of defects introduced in the design process in the hwnff module. Impact: Successful exploitation of this v... |
| CVE-2023-52713 | HIGH | 7.7 | 0.1% | Apr 7, 2024 | Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vu... |
| CVE-2023-52382 | — | — | — | Apr 7, 2024 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-6877 | MEDIUM | 5.4 | 0.4% | Apr 7, 2024 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is... |
| CVE-2023-5912 | MEDIUM | 6.7 | 0.2% | Apr 5, 2024 | A potential memory leakage vulnerability was reported in some Lenovo Notebook products that may allow a local attacker ... |
| CVE-2023-4605 | MEDIUM | 6.5 | 0.5% | Apr 5, 2024 | A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoin... |
| CVE-2023-25494 | MEDIUM | 6.7 | 0.2% | Apr 5, 2024 | A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could a... |
| CVE-2023-25493 | MEDIUM | 6.7 | 0.2% | Apr 5, 2024 | A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart Edge, Smart Office, and Th... |
| CVE-2023-31028 | LOW | 2.8 | 0.2% | Apr 5, 2024 | NVIDIA nvJPEG2000 Library for Windows and Linux contains a vulnerability where improper input validation might enable a... |
| CVE-2023-48426 | CRITICAL | 10 | 0.2% | Apr 5, 2024 | u-boot bug that allows for u-boot shell and interrupt over UART |
| CVE-2023-49965 | MEDIUM | 6.8 | 0.3% | Apr 5, 2024 | SpaceX Starlink Wi-Fi router Gen 2 before 2023.48.0 allows XSS via the ssid and password parameters on the Setup Page. |
| CVE-2023-5692 | MEDIUM | 5.3 | 0.7% | Apr 5, 2024 | WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirect... |
| CVE-2023-6523 | HIGH | 8.8 | 0.6% | Apr 5, 2024 | Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS allows Authentication Abuse. ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now