2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-41779MEDIUM5.5There is an illegal memory access vulnerability of ZTE's ZXCLOUD iRAI product.When the vulnerability is exploited by an ...
CVE-2023-41776HIGH7.8There is a local privilege escalation vulnerability of ZTE's ZXCLOUD iRAI.Attackers with regular user privileges can cre...
CVE-2023-49558MEDIUM5.5An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_mmac_params functio...
CVE-2023-49557MEDIUM5.5An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the yasm_section_bcs_first fun...
CVE-2023-49556MEDIUM5.5Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expr_...
CVE-2023-49555MEDIUM5.5An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_smacro function in ...
CVE-2023-49554MEDIUM5.5Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do_dir...
CVE-2023-49553HIGH7.5An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_destroy function in the...
CVE-2023-49552HIGH7.5An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_s...
CVE-2023-49551HIGH7.5An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_parse function ...
CVE-2023-49550HIGH7.5An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 component.
CVE-2023-49549HIGH7.5An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_getretvalpos function i...
CVE-2023-48418HIGH7.8In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a     possible way to access adb before SUW completi...
CVE-2023-6339CRITICAL9.8Google Nest WiFi Pro root code-execution & user-data compromise
CVE-2023-50020HIGH7.5An issue was discovered in open5gs v2.6.6. SIGPIPE can be used to crash AMF.
CVE-2023-50019MEDIUM5.9An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF ...
CVE-2023-4164MEDIUM5.5There is a possible information disclosure due to a missing permission check. This could lead to local information discl...
CVE-2023-47458CRITICAL9.8An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions c...
CVE-2023-45893HIGH7.5An indirect Object Reference (IDOR) in the Order and Invoice pages in Floorsight Customer Portal Q3 2023 allows an unaut...
CVE-2023-45892HIGH7.5An issue discovered in the Order and Invoice pages in Floorsight Insights Q3 2023 allows an unauthenticated remote attac...
CVE-2023-45561MEDIUM5.3An issue in A-WORLD OIRASE BEER_waiting Line v.13.6.1 allows attackers to send crafted notifications via leakage of the ...
CVE-2023-6752——Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-6747. Reason: This candidate is a r...
CVE-2023-51652MEDIUM6.1OWASP AntiSamy .NET is a library for performing cleansing of HTML coming from untrusted sources. Prior to version 1.2.0,...
CVE-2023-50711CRITICAL9.8vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starti...
CVE-2023-49794HIGH7.8KernelSU is a Kernel-based root solution for Android devices. In versions 0.7.1 and prior, the logic of get apk path in ...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now