2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-31323HIGH8.4Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Gl...
CVE-2023-31313HIGH7.2An unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a privileged attacker to sen...
CVE-2023-31324HIGH7.8A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify ...
CVE-2023-20548HIGH7.8A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt...
CVE-2023-20514HIGH8.7Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary...
CVE-2023-38010HIGH7.5IBM Cloud Pak System displays sensitive information in user messages that could aid in further attacks against the syste...
CVE-2023-7335HIGH8.7EduSoho versions prior to 22.4.7 contain an arbitrary file read vulnerability in the classroom-course-statistics export ...
CVE-2023-54340HIGH8.8WorkOrder CMS 0.1.0 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login by mani...
CVE-2023-54338HIGH8.5Tftpd32 SE 4.60 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbit...
CVE-2023-54336HIGH8.5Mediconta 3.7.27 contains an unquoted service path vulnerability in the servermedicontservice that allows local users to...
CVE-2023-54333HIGH8.8Social-Share-Buttons 2.2.3 contains a critical SQL injection vulnerability in the project_id parameter that allows attac...
CVE-2023-54331HIGH8.5Outline 1.6.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitra...
CVE-2023-53984HIGH8.5Clevo HotKey Clipboard 2.1.0.6 contains an unquoted service path vulnerability in the HKClipSvc service that allows loca...
CVE-2023-36331HIGH8.2Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to arbitrarily access other users' ...
CVE-2023-49186HIGH7.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in KlbTheme Ma...
CVE-2023-7332HIGH7.1PocketMine-MP versions prior to 4.18.1 contain an improper input validation vulnerability in inventory transaction handl...
CVE-2023-54163HIGH7.5NLB mKlik Macedonia 3.3.12 contains a SQL injection vulnerability in international transfer parameters that allows attac...
CVE-2023-54326HIGH7.8In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Free IRQs before removing ...
CVE-2023-54325HIGH7.1In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix out-of-bounds read When preparin...
CVE-2023-54318HIGH8.8In the Linux kernel, the following vulnerability has been resolved: net/smc: use smc_lgr_list.lock to protect smc_lgr_l...
CVE-2023-54317HIGH7.8In the Linux kernel, the following vulnerability has been resolved: dm flakey: don't corrupt the zero page When we nee...
CVE-2023-54310HIGH7.8In the Linux kernel, the following vulnerability has been resolved: scsi: message: mptlan: Fix use after free bug in mp...
CVE-2023-54308HIGH7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: Create card with device-managed snd_d...
CVE-2023-54306HIGH7.5In the Linux kernel, the following vulnerability has been resolved: net: tls: avoid hanging tasks on the tx_lock syzbo...
CVE-2023-54303HIGH7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_perf_event_output T...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now