2023 CVE Vulnerabilities
31,244 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-20518 | LOW | 1.9 | 0.1% | Aug 13, 2024 | Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIO... |
| CVE-2023-20513 | LOW | 3.3 | 0.1% | Aug 13, 2024 | An insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize a malicious VF (virtua... |
| CVE-2023-20512 | LOW | 1.9 | 0.1% | Aug 13, 2024 | A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in in... |
| CVE-2023-42957 | LOW | 3.3 | 0.2% | Jul 29, 2024 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonom... |
| CVE-2023-42949 | LOW | 3.3 | 0.2% | Jul 29, 2024 | This issue was addressed with improved data protection. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, wa... |
| CVE-2023-42948 | LOW | 3.3 | 0.2% | Jul 29, 2024 | This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14. A Wi-Fi password may... |
| CVE-2023-42925 | LOW | 3.3 | 0.2% | Jul 29, 2024 | The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 17 and iPadOS 17,... |
| CVE-2023-42010 | LOW | 3.7 | 0.3% | Jul 17, 2024 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 could disclose sensitiv... |
| CVE-2023-41093 | LOW | 3.1 | 0.2% | Jul 12, 2024 | Use After Free vulnerability in Silicon Labs Bluetooth SDK on 32 bit, ARM may allow an attacker with precise timing capa... |
| CVE-2023-35022 | LOW | 3.3 | 0.2% | Jun 30, 2024 | IBM InfoSphere Information Server 11.7 could allow a local user to update projects that they do not have the authorizati... |
| CVE-2023-49559 | LOW | 3.7 | 0.5% | Jun 12, 2024 | An issue in vektah gqlparser open-source-library v.2.5.10 allows a remote attacker to cause a denial of service via a cr... |
| CVE-2023-52147 | LOW | 3.7 | 0.3% | Jun 4, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in All In One WP Security & Firewall Team All I... |
| CVE-2023-49822 | LOW | 3.7 | 0.3% | Jun 4, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Vongries Ultimate Dashboard allows Acc... |
| CVE-2023-49748 | LOW | 3.7 | 0.3% | Jun 4, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPServeur, NicolasKulka, wpformation WPS Hid... |
| CVE-2023-49741 | LOW | 3.7 | 0.3% | Jun 4, 2024 | Authentication Bypass by Spoofing vulnerability in wpdevart Coming soon and Maintenance mode allows Accessing Functional... |
| CVE-2023-48335 | LOW | 3.7 | 0.3% | Jun 4, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Webcraftic Hide login page allows Accessing ... |
| CVE-2023-47818 | LOW | 3.7 | 0.3% | Jun 4, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in LWS LWS Hide Login allows Accessing Function... |
| CVE-2023-47769 | LOW | 3.7 | 0.3% | Jun 4, 2024 | Authentication Bypass by Spoofing vulnerability in WP Maintenance allows Accessing Functionality Not Properly Constraine... |
| CVE-2023-27437 | LOW | 3.7 | 0.3% | Jun 3, 2024 | Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf allows Functionality Misuse.This issue affe... |
| CVE-2023-52839 | LOW | 3.3 | 0.2% | May 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: drivers: perf: Do not broadcast to other cpus when ... |
| CVE-2023-52746 | LOW | 2.5 | 0.2% | May 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: xfrm/compat: prevent potential spectre v1 gadget in... |
| CVE-2023-48727 | LOW | 3.3 | 0.2% | May 16, 2024 | NULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to poten... |
| CVE-2023-47282 | LOW | 3.9 | 0.2% | May 16, 2024 | Out-of-bounds write in Intel(R) Media SDK all versions and some Intel(R) oneVPL software before version 23.3.5 may allow... |
| CVE-2023-45733 | LOW | 2.8 | 0.2% | May 16, 2024 | Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enabl... |
| CVE-2023-43745 | LOW | 2.8 | 0.2% | May 16, 2024 | Improper input validation in some Intel(R) CBI software before version 1.1.0 may allow an authenticated user to potentia... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now