2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-4276 | HIGH | 8.8 | 0.3% | Aug 10, 2023 | The Absolute Privacy plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, ... |
| CVE-2023-30702 | HIGH | 7.8 | 0.2% | Aug 10, 2023 | Stack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13... |
| CVE-2023-30697 | HIGH | 7.8 | 0.2% | Aug 10, 2023 | An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker ... |
| CVE-2023-30696 | HIGH | 7.8 | 0.2% | Aug 10, 2023 | An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to caus... |
| CVE-2023-30695 | HIGH | 7.8 | 0.2% | Aug 10, 2023 | Out-of-bounds Write vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update -... |
| CVE-2023-30694 | HIGH | 7.8 | 0.2% | Aug 10, 2023 | Out-of-bounds Write in IpcTxPcscTransmitApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to exec... |
| CVE-2023-30693 | HIGH | 7.8 | 0.2% | Aug 10, 2023 | Out-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Release 1 allows local a... |
| CVE-2023-30691 | HIGH | 7.8 | 0.2% | Aug 10, 2023 | Parcel mismatch in AuthenticationConfig prior to SMR Aug-2023 Release 1 allows local attacker to privilege escalation. |
| CVE-2023-30689 | HIGH | 7.8 | 0.2% | Aug 10, 2023 | Out-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023 Release 1 allows local at... |
| CVE-2023-30688 | HIGH | 7.8 | 0.2% | Aug 10, 2023 | Out-of-bounds Write in MakeUiccAuthForOem of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute... |
| CVE-2023-30687 | HIGH | 7.8 | 0.2% | Aug 10, 2023 | Out-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitra... |
| CVE-2023-30686 | HIGH | 7.8 | 0.2% | Aug 10, 2023 | Out-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitra... |
| CVE-2023-30681 | HIGH | 7.8 | 0.2% | Aug 10, 2023 | An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1... |
| CVE-2023-30680 | HIGH | 7.8 | 0.2% | Aug 10, 2023 | Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code execution with privi... |
| CVE-2023-30679 | HIGH | 7.8 | 0.1% | Aug 10, 2023 | Improper access control in HDCP trustlet prior to SMR Aug-2023 Release 1 allows local attackers to execute arbitrary cod... |
| CVE-2023-36673 | HIGH | 7.3 | 0.6% | Aug 9, 2023 | An issue was discovered in Avira Phantom VPN through 2.23.1 for macOS. The VPN client insecurely configures the operatin... |
| CVE-2023-33242 | HIGH | 8.1 | 1.1% | Aug 9, 2023 | Crypto wallets implementing the Lindell17 TSS protocol might allow an attacker to extract the full ECDSA private key by ... |
| CVE-2023-38348 | HIGH | 8.8 | 0.3% | Aug 9, 2023 | A CSRF issue was discovered in LWsystems Benno MailArchiv 2.10.1. |
| CVE-2023-33469 | HIGH | 7.8 | 0.3% | Aug 9, 2023 | In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2)... |
| CVE-2023-23347 | HIGH | 7.1 | 0.1% | Aug 9, 2023 | HCL DRYiCE iAutomate is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise... |
| CVE-2023-39005 | HIGH | 7.5 | 0.6% | Aug 9, 2023 | Insecure permissions exist for configd.socket in OPNsense Community Edition before 23.7 and Business Edition before 23.4... |
| CVE-2023-39003 | HIGH | 7.5 | 0.7% | Aug 9, 2023 | OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 was discovered to contain insecure permissions... |
| CVE-2023-38997 | HIGH | 7.2 | 1.1% | Aug 9, 2023 | A directory traversal vulnerability in the Captive Portal templates of OPNsense Community Edition before 23.7 and Busine... |
| CVE-2023-23346 | HIGH | 7.1 | 0.1% | Aug 9, 2023 | HCL DRYiCE MyCloud is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise t... |
| CVE-2023-40012 | HIGH | 7.5 | 0.2% | Aug 9, 2023 | uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Versions of uthen... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now