2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-5520HIGH7.7Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.
CVE-2023-44111HIGH7.5Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability m...
CVE-2023-44104HIGH7.5Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may aff...
CVE-2023-44103HIGH7.5Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect servic...
CVE-2023-44101HIGH7.5The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of th...
CVE-2023-44100HIGH7.5Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may aff...
CVE-2023-44097HIGH7.5Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerabil...
CVE-2023-44095HIGH7.5Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause ...
CVE-2023-26370HIGH7.8Adobe Photoshop versions 23.5.5 (and earlier) and 24.7 (and earlier) are affected by an Access of Uninitialized Pointer ...
CVE-2023-44109HIGH7.5Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiali...
CVE-2023-44096HIGH7.5 Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability ...
CVE-2023-44093HIGH7.5Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vu...
CVE-2023-42138HIGH7.8Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. ...
CVE-2023-4990HIGH7.5Directory traversal vulnerability in MCL-Net versions prior to 4.6 Update Package (P01) may allow attackers to read arbi...
CVE-2023-44997HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Nitin Rathod WP Forms Puzzle Captcha plugin <= 4.1 versions.
CVE-2023-37536HIGH8.8An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP...
CVE-2023-26320HIGH8.1Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Route...
CVE-2023-26319HIGH7.2Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Route...
CVE-2023-26318HIGH7.2Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Over...
CVE-2023-5511HIGH8.8Cross-Site Request Forgery (CSRF) in GitHub repository snipe/snipe-it prior to v.6.2.3.
CVE-2023-36127HIGH7.5User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where ...
CVE-2023-45312HIGH8.8In the mtproto_proxy (aka MTProto proxy) component through 0.7.2 for Erlang, a low-privileged remote attacker can access...
CVE-2023-31096HIGH7.8An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka AGRSM64.sys). There ...
CVE-2023-5497HIGH8.8A vulnerability classified as critical has been found in Tongda OA 2017 11.10. Affected is an unknown function of the fi...
CVE-2023-41774HIGH8.1Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now