2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-52455 | HIGH | 7.8 | 0.2% | Feb 23, 2024 | In the Linux kernel, the following vulnerability has been resolved: iommu: Don't reserve 0-length IOVA region When the... |
| CVE-2023-52454 | MEDIUM | 5.5 | 0.2% | Feb 23, 2024 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix a kernel panic when host sends an in... |
| CVE-2023-52453 | MEDIUM | 5.5 | 0.2% | Feb 23, 2024 | In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: Update migration data pointer co... |
| CVE-2023-24416 | MEDIUM | 6.5 | 0.8% | Feb 23, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Arne Franken All In One ... |
| CVE-2023-4826 | MEDIUM | 6.1 | 0.4% | Feb 23, 2024 | The SocialDriver WordPress theme before version 2024 has a prototype pollution vulnerability that could allow an attacke... |
| CVE-2023-37540 | LOW | 3.9 | 0.2% | Feb 23, 2024 | Sametime Connect desktop chat client includes, but does not use or require, the use of an Eclipse feature called Secure ... |
| CVE-2023-52452 | HIGH | 7.8 | 0.2% | Feb 22, 2024 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix accesses to uninit stack slots Privileged... |
| CVE-2023-52451 | HIGH | 7.8 | 0.2% | Feb 22, 2024 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/memhp: Fix access beyond end of drm... |
| CVE-2023-52450 | MEDIUM | 5.5 | 0.3% | Feb 22, 2024 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix NULL pointer dereference... |
| CVE-2023-52449 | MEDIUM | 5.5 | 0.2% | Feb 22, 2024 | In the Linux kernel, the following vulnerability has been resolved: mtd: Fix gluebi NULL pointer dereference caused by ... |
| CVE-2023-52448 | MEDIUM | 5.5 | 0.2% | Feb 22, 2024 | In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix kernel NULL pointer dereference in gfs2_r... |
| CVE-2023-52447 | MEDIUM | 6.7 | 0.2% | Feb 22, 2024 | In the Linux kernel, the following vulnerability has been resolved: bpf: Defer the free of inner map when necessary Wh... |
| CVE-2023-52446 | HIGH | 7.8 | 0.2% | Feb 22, 2024 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a race condition between btf_put() and map... |
| CVE-2023-52445 | HIGH | 7.8 | 0.2% | Feb 22, 2024 | In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix use after free on context disco... |
| CVE-2023-52444 | HIGH | 7.8 | 0.2% | Feb 22, 2024 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid dirent corruption As Al reporte... |
| CVE-2023-52443 | MEDIUM | 5.5 | 0.2% | Feb 22, 2024 | In the Linux kernel, the following vulnerability has been resolved: apparmor: avoid crash when parsed profile name is e... |
| CVE-2023-52161 | HIGH | 7.5 | 1.1% | Feb 22, 2024 | The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows atta... |
| CVE-2023-52160 | MEDIUM | 6.5 | 1.2% | Feb 22, 2024 | The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_sup... |
| CVE-2023-51653 | CRITICAL | 9.8 | 2.1% | Feb 22, 2024 | Hertzbeat is a real-time monitoring system. In the implementation of `JmxCollectImpl.java`, `JMXConnectorFactory.connect... |
| CVE-2023-51389 | CRITICAL | 9.8 | 1.3% | Feb 22, 2024 | Hertzbeat is a real-time monitoring system. At the interface of `/define/yml`, SnakeYAML is used as a parser to parse ym... |
| CVE-2023-51388 | CRITICAL | 9.8 | 1.3% | Feb 22, 2024 | Hertzbeat is a real-time monitoring system. In `CalculateAlarm.java`, `AviatorEvaluator` is used to directly execute the... |
| CVE-2023-51450 | HIGH | 8.1 | 1.5% | Feb 22, 2024 | baserCMS is a website development framework. Prior to version 5.0.9, there is an OS Command Injection vulnerability in t... |
| CVE-2023-44379 | MEDIUM | 6.1 | 0.5% | Feb 22, 2024 | baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in th... |
| CVE-2023-3966 | HIGH | 7.5 | 1.0% | Feb 22, 2024 | A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a... |
| CVE-2023-29181 | HIGH | 8.8 | 0.7% | Feb 22, 2024 | A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 throug... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now