2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-21165 | HIGH | 7.8 | 0.1% | Feb 16, 2024 | In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This c... |
| CVE-2023-45860 | MEDIUM | 6.5 | 0.5% | Feb 16, 2024 | In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. T... |
| CVE-2023-51931 | HIGH | 7.5 | 0.6% | Feb 16, 2024 | An issue in alanclarke URLite v.3.1.0 allows an attacker to cause a denial of service (DoS) via a crafted payload to the... |
| CVE-2023-49508 | MEDIUM | 6.5 | 1.0% | Feb 16, 2024 | Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticat... |
| CVE-2023-6451 | HIGH | 7.5 | 0.5% | Feb 16, 2024 | Publicly known cryptographic machine key in AlayaCare's Procura Portal before 9.0.1.2 allows attackers to forge their ow... |
| CVE-2023-40122 | LOW | 3.3 | 0.3% | Feb 16, 2024 | In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy. ... |
| CVE-2023-40093 | MEDIUM | 5.5 | 0.1% | Feb 16, 2024 | In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in ... |
| CVE-2023-40124 | MEDIUM | 5.5 | 0.1% | Feb 15, 2024 | In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local informatio... |
| CVE-2023-40115 | HIGH | 7.8 | 0.2% | Feb 15, 2024 | In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local... |
| CVE-2023-40114 | HIGH | 7.8 | 0.1% | Feb 15, 2024 | In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could ... |
| CVE-2023-40113 | MEDIUM | 5.5 | 0.1% | Feb 15, 2024 | In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission ch... |
| CVE-2023-40112 | MEDIUM | 5.5 | 0.1% | Feb 15, 2024 | In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to loc... |
| CVE-2023-40111 | HIGH | 7.8 | 0.1% | Feb 15, 2024 | In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of syst... |
| CVE-2023-40110 | HIGH | 7.8 | 0.1% | Feb 15, 2024 | In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This coul... |
| CVE-2023-40109 | HIGH | 7.8 | 0.2% | Feb 15, 2024 | In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions ... |
| CVE-2023-40107 | HIGH | 7.8 | 0.1% | Feb 15, 2024 | In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local ... |
| CVE-2023-40106 | HIGH | 7.8 | 0.1% | Feb 15, 2024 | In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background due... |
| CVE-2023-40105 | MEDIUM | 5.5 | 0.1% | Feb 15, 2024 | In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing pe... |
| CVE-2023-40104 | HIGH | 7.5 | 0.3% | Feb 15, 2024 | In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This... |
| CVE-2023-40100 | HIGH | 7.8 | 0.1% | Feb 15, 2024 | In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could... |
| CVE-2023-6123 | MEDIUM | 6.1 | 0.5% | Feb 15, 2024 | Improper Neutralization vulnerability affects OpenText ALM Octane version 16.2.100 and above. The vulnerability could re... |
| CVE-2023-40057 | CRITICAL | 9 | 4.2% | Feb 15, 2024 | The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited,... |
| CVE-2023-6937 | MEDIUM | 5.3 | 0.5% | Feb 15, 2024 | wolfSSL prior to 5.6.6 did not check that messages in one (D)TLS record do not span key boundaries. As a result, it was ... |
| CVE-2023-7081 | CRITICAL | 9.8 | 0.5% | Feb 15, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSTAHSİL Online P... |
| CVE-2023-6255 | HIGH | 7.5 | 0.4% | Feb 15, 2024 | Use of Hard-coded Credentials vulnerability in Utarit Information Technologies SoliPay Mobile App allows Read Sensitive ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now