2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-43515 | HIGH | 7.8 | 0.1% | Apr 1, 2024 | Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled. |
| CVE-2023-33115 | HIGH | 7.8 | 0.1% | Apr 1, 2024 | Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
| CVE-2023-33111 | MEDIUM | 5.5 | 0.1% | Apr 1, 2024 | Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to A... |
| CVE-2023-33101 | HIGH | 7.5 | 0.3% | Apr 1, 2024 | Transient DOS while processing DL NAS TRANSPORT message with payload length 0. |
| CVE-2023-33100 | HIGH | 7.5 | 0.3% | Apr 1, 2024 | Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification. |
| CVE-2023-33099 | HIGH | 7.5 | 0.3% | Apr 1, 2024 | Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR. |
| CVE-2023-33023 | HIGH | 7.8 | 0.1% | Apr 1, 2024 | Memory corruption while processing finish_sign command to pass a rsp buffer. |
| CVE-2023-28547 | HIGH | 7.8 | 0.1% | Apr 1, 2024 | Memory corruption in SPS Application while requesting for public key in sorter TA. |
| CVE-2023-6154 | HIGH | 7.8 | 0.2% | Apr 1, 2024 | A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bit... |
| CVE-2023-51803 | CRITICAL | 9.8 | 0.7% | Apr 1, 2024 | LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the "<?php ?>" subst... |
| CVE-2023-50959 | MEDIUM | 6.5 | 0.5% | Mar 31, 2024 | IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2,19.0.1, 19.0.2, 19.0.3,20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0... |
| CVE-2023-50311 | LOW | 3.1 | 0.3% | Mar 31, 2024 | IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 could disclose sensitive path information to an attacker tha... |
| CVE-2023-46808 | CRITICAL | 9.9 | 2.0% | Mar 31, 2024 | An file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes to... |
| CVE-2023-41724 | HIGH | 8.8 | 12.8% | Mar 31, 2024 | A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitr... |
| CVE-2023-49234 | MEDIUM | 6.3 | 0.2% | Mar 29, 2024 | An XML external entity (XXE) vulnerability was found in Stilog Visual Planning 8. It allows an authenticated attacker to... |
| CVE-2023-49232 | CRITICAL | 9.8 | 1.5% | Mar 29, 2024 | An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to b... |
| CVE-2023-49231 | CRITICAL | 9.8 | 42.9% | Mar 29, 2024 | An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to r... |
| CVE-2023-6191 | CRITICAL | 9.8 | 0.6% | Mar 29, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Egehan Security We... |
| CVE-2023-6047 | MEDIUM | 6.1 | 0.3% | Mar 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Algoritim E-commer... |
| CVE-2023-52629 | HIGH | 8.4 | 0.2% | Mar 29, 2024 | In the Linux kernel, the following vulnerability has been resolved: sh: push-switch: Reorder cleanup operations to avoi... |
| CVE-2023-50969 | CRITICAL | 9.8 | 0.9% | Mar 28, 2024 | Thales Imperva SecureSphere WAF 14.7.0.40 allows remote attackers to bypass WAF rules via a crafted POST request, a diff... |
| CVE-2023-33528 | MEDIUM | 6.1 | 0.3% | Mar 28, 2024 | halo v1.6.0 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2023-25341 | MEDIUM | 6.5 | 0.4% | Mar 28, 2024 | A Directory Traversal vulnerability in ladle dev server 2.5.1 and earlier allows an attacker on the same network to read... |
| CVE-2023-42974 | HIGH | 7 | 0.1% | Mar 28, 2024 | A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura... |
| CVE-2023-42962 | HIGH | 7.5 | 0.8% | Mar 28, 2024 | This issue was addressed with improved checks This issue is fixed in iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now