2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-33076 | HIGH | 7.8 | 0.1% | Feb 6, 2024 | Memory corruption in Core when updating rollback version for TA and OTA feature is enabled. |
| CVE-2023-33072 | HIGH | 7.8 | 0.1% | Feb 6, 2024 | Memory corruption in Core while processing control functions. |
| CVE-2023-33069 | HIGH | 7.8 | 0.1% | Feb 6, 2024 | Memory corruption in Audio while processing the calibration data returned from ACDB loader. |
| CVE-2023-33068 | HIGH | 7.8 | 0.1% | Feb 6, 2024 | Memory corruption in Audio while processing IIR config data from AFE calibration block. |
| CVE-2023-33067 | HIGH | 7.8 | 0.1% | Feb 6, 2024 | Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points... |
| CVE-2023-33065 | HIGH | 7.1 | 0.1% | Feb 6, 2024 | Information disclosure in Audio while accessing AVCS services from ADSP payload. |
| CVE-2023-33064 | MEDIUM | 5.5 | 0.1% | Feb 6, 2024 | Transient DOS in Audio when invoking callback function of ASM driver. |
| CVE-2023-33060 | MEDIUM | 5.5 | 0.1% | Feb 6, 2024 | Transient DOS in Core when DDR memory check is called while DDR is not initialized. |
| CVE-2023-33058 | CRITICAL | 9.1 | 0.4% | Feb 6, 2024 | Information disclosure in Modem while processing SIB5. |
| CVE-2023-33057 | HIGH | 7.5 | 0.3% | Feb 6, 2024 | Transient DOS in Multi-Mode Call Processor while processing UE policy container. |
| CVE-2023-33049 | HIGH | 7.5 | 0.3% | Feb 6, 2024 | Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage. |
| CVE-2023-33046 | HIGH | 7 | 0.1% | Feb 6, 2024 | Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation. |
| CVE-2023-6234 | CRITICAL | 9.8 | 1.4% | Feb 6, 2024 | Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) which... |
| CVE-2023-6233 | CRITICAL | 9.8 | 1.4% | Feb 6, 2024 | Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow ... |
| CVE-2023-6232 | CRITICAL | 9.8 | 1.5% | Feb 6, 2024 | Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction... |
| CVE-2023-6231 | CRITICAL | 9.8 | 1.4% | Feb 6, 2024 | Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(*) which may allow an a... |
| CVE-2023-6230 | CRITICAL | 9.8 | 1.5% | Feb 6, 2024 | Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction... |
| CVE-2023-6229 | CRITICAL | 9.8 | 1.4% | Feb 6, 2024 | Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(*) which may a... |
| CVE-2023-47889 | HIGH | 7.8 | 0.3% | Feb 6, 2024 | The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broa... |
| CVE-2023-47353 | HIGH | 8.8 | 0.3% | Feb 6, 2024 | An issue in the com.oneed.dvr.service.DownloadFirmwareService component of IMOU GO v1.0.11 allows attackers to force the... |
| CVE-2023-47022 | MEDIUM | 6.5 | 0.3% | Feb 6, 2024 | Insecure Direct Object Reference in NCR Terminal Handler v.1.5.1 allows an unprivileged user to edit the audit logs for ... |
| CVE-2023-46360 | HIGH | 8.8 | 2.8% | Feb 6, 2024 | Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier is vulnerable to Execution with Unnecessary Privileges. |
| CVE-2023-46359 | CRITICAL | 9.8 | 80.9% | Feb 6, 2024 | An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthen... |
| CVE-2023-47354 | HIGH | 7.8 | 0.3% | Feb 6, 2024 | An issue in the PowerOffWidgetReceiver function of Super Reboot (Root) Recovery v1.0.3 allows attackers to arbitrarily r... |
| CVE-2023-7029 | MEDIUM | 5.4 | 0.4% | Feb 5, 2024 | The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin'... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now