2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-25699 | CRITICAL | 9.8 | 1.3% | Apr 3, 2024 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in VideoWhisper... |
| CVE-2023-35764 | MEDIUM | 5.3 | 0.3% | Apr 3, 2024 | Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated atta... |
| CVE-2023-34423 | MEDIUM | 6.1 | 0.4% | Apr 3, 2024 | Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an... |
| CVE-2023-50313 | MEDIUM | 6.5 | 0.2% | Apr 2, 2024 | IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for outbound TLS connections ca... |
| CVE-2023-6951 | MEDIUM | 6.6 | 0.3% | Apr 2, 2024 | A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remot... |
| CVE-2023-6950 | LOW | 3 | 0.2% | Apr 2, 2024 | An Improper Input Validation vulnerability affecting the FTP service running on the DJI Mavic Mini 3 Pro could allow an ... |
| CVE-2023-6949 | MEDIUM | 5.2 | 0.2% | Apr 2, 2024 | A Missing Authentication for Critical Function issue affecting the HTTP service running on the DJI Mavic Mini 3 Pro on t... |
| CVE-2023-6948 | LOW | 3 | 0.2% | Apr 2, 2024 | A Buffer Copy without Checking Size of Input issue affecting the v2_sdk_service running on a set of DJI drone devices on... |
| CVE-2023-51456 | MEDIUM | 6.8 | 0.2% | Apr 2, 2024 | A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 c... |
| CVE-2023-51455 | MEDIUM | 6.8 | 0.2% | Apr 2, 2024 | A Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI drone devices on the por... |
| CVE-2023-51454 | MEDIUM | 6.8 | 0.2% | Apr 2, 2024 | A Out-of-bounds Write issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could a... |
| CVE-2023-51453 | LOW | 3 | 0.2% | Apr 2, 2024 | A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 c... |
| CVE-2023-51452 | LOW | 3 | 0.2% | Apr 2, 2024 | A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 c... |
| CVE-2023-52636 | MEDIUM | 5.5 | 0.2% | Apr 2, 2024 | In the Linux kernel, the following vulnerability has been resolved: libceph: just wait for more data to be available on... |
| CVE-2023-52635 | MEDIUM | 5.5 | 0.2% | Apr 2, 2024 | In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Synchronize devfreq_monitor_[start/st... |
| CVE-2023-52634 | MEDIUM | 5.5 | 0.2% | Apr 2, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix disable_otg_wa logic [Why] Wh... |
| CVE-2023-52633 | MEDIUM | 5 | 0.2% | Apr 2, 2024 | In the Linux kernel, the following vulnerability has been resolved: um: time-travel: fix time corruption In 'basic' ti... |
| CVE-2023-52632 | MEDIUM | 5.5 | 0.2% | Apr 2, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix lock dependency warning with srcu ... |
| CVE-2023-52631 | MEDIUM | 5.5 | 0.2% | Apr 2, 2024 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix an NULL dereference bug The issue he... |
| CVE-2023-52630 | — | — | — | Apr 2, 2024 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-51573 | CRITICAL | 9.8 | 45.7% | Apr 1, 2024 | Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability. This... |
| CVE-2023-51572 | CRITICAL | 9.8 | 38.4% | Apr 1, 2024 | Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability. This vulnerabilit... |
| CVE-2023-51571 | HIGH | 7.5 | 0.7% | Apr 1, 2024 | Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability. This vulnerability a... |
| CVE-2023-51570 | CRITICAL | 9.8 | 1.0% | Apr 1, 2024 | Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability ... |
| CVE-2023-48906 | MEDIUM | 4.3 | 0.3% | Apr 1, 2024 | Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now