2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-37013 | HIGH | 7.3 | 0.5% | Jan 22, 2025 | Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a sufficiently large ASN.1 packet... |
| CVE-2023-36998 | HIGH | 8.9 | 0.4% | Jan 22, 2025 | The NextEPC MME <= 1.0.1 (fixed in commit a8492c9c5bc0a66c6999cb5a263545b32a4109df) contains a stack-based buffer overfl... |
| CVE-2023-40132 | HIGH | 7.8 | 0.1% | Jan 21, 2025 | In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permiss... |
| CVE-2023-37032 | HIGH | 7.5 | 0.7% | Jan 21, 2025 | A Stack-based buffer overflow in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 084... |
| CVE-2023-37029 | HIGH | 7.5 | 0.6% | Jan 21, 2025 | Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) are susceptible to an assertion-... |
| CVE-2023-37024 | HIGH | 7.5 | 0.7% | Jan 21, 2025 | A reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8... |
| CVE-2023-50733 | HIGH | 8.6 | 0.4% | Jan 21, 2025 | A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Web Services feature of newer Lexmark devi... |
| CVE-2023-50739 | HIGH | 8.8 | 0.6% | Jan 18, 2025 | A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices. ... |
| CVE-2023-37937 | HIGH | 7.8 | 0.5% | Jan 14, 2025 | An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch ve... |
| CVE-2023-37931 | HIGH | 8.8 | 0.8% | Jan 14, 2025 | An improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-88] in FortiV... |
| CVE-2023-42244 | HIGH | 8.8 | 0.4% | Jan 13, 2025 | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQ... |
| CVE-2023-42232 | HIGH | 7.5 | 0.9% | Jan 13, 2025 | Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function... |
| CVE-2023-42231 | HIGH | 8.1 | 0.3% | Jan 13, 2025 | Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can d... |
| CVE-2023-42228 | HIGH | 8.8 | 0.4% | Jan 13, 2025 | Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can e... |
| CVE-2023-42227 | HIGH | 7.5 | 0.7% | Jan 13, 2025 | Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function. |
| CVE-2023-42226 | HIGH | 7.5 | 0.7% | Jan 13, 2025 | Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment functio... |
| CVE-2023-42225 | HIGH | 7.5 | 0.7% | Jan 13, 2025 | Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Attachment/DownloadTempF... |
| CVE-2023-24012 | HIGH | 8.2 | 0.3% | Jan 9, 2025 | An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and ... |
| CVE-2023-24011 | HIGH | 8.2 | 0.3% | Jan 9, 2025 | An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and ... |
| CVE-2023-24010 | HIGH | 8.2 | 0.3% | Jan 9, 2025 | An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and ... |
| CVE-2023-1907 | HIGH | 7.5 | 0.4% | Jan 9, 2025 | A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be... |
| CVE-2023-35685 | HIGH | 7.8 | 0.1% | Jan 8, 2025 | In DevmemIntMapPages of devicemem_server.c, there is a possible physical page uaf due to a logic error in the code. This... |
| CVE-2023-52955 | HIGH | 7.5 | 0.2% | Jan 8, 2025 | Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulner... |
| CVE-2023-52954 | HIGH | 7.5 | 0.1% | Jan 8, 2025 | Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability... |
| CVE-2023-6605 | HIGH | 7.2 | 0.3% | Jan 6, 2025 | A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now