2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-7192 | MEDIUM | 4.4 | 0.3% | Jan 2, 2024 | A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kerne... |
| CVE-2023-48419 | CRITICAL | 9.8 | 0.2% | Jan 2, 2024 | An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege |
| CVE-2023-4280 | CRITICAL | 9.8 | 0.4% | Jan 2, 2024 | An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker ... |
| CVE-2023-48721 | — | — | — | Jan 2, 2024 | Rejected reason: Not used |
| CVE-2023-6436 | CRITICAL | 9.8 | 0.5% | Jan 2, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ekol Informatics W... |
| CVE-2023-6693 | MEDIUM | 5.3 | 0.3% | Jan 2, 2024 | A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virt... |
| CVE-2023-50333 | MEDIUM | 4.3 | 0.3% | Jan 2, 2024 | Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing fre... |
| CVE-2023-48732 | MEDIUM | 4.3 | 0.5% | Jan 2, 2024 | Mattermost fails to scope the WebSocket response around notified users to a each user separately resulting in the WebSoc... |
| CVE-2023-47858 | MEDIUM | 4.3 | 0.4% | Jan 2, 2024 | Mattermost fails to properly verify the permissions needed for viewing archived public channels, allowing a member of o... |
| CVE-2023-49142 | LOW | 3.3 | 0.2% | Jan 2, 2024 | in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released ... |
| CVE-2023-49135 | MEDIUM | 5.5 | 0.2% | Jan 2, 2024 | in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released... |
| CVE-2023-48360 | MEDIUM | 5.5 | 0.2% | Jan 2, 2024 | in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released... |
| CVE-2023-47857 | MEDIUM | 5.5 | 0.2% | Jan 2, 2024 | in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released... |
| CVE-2023-47216 | MEDIUM | 5.5 | 0.1% | Jan 2, 2024 | in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through occupy all resources |
| CVE-2023-47039 | HIGH | 7.8 | 0.4% | Jan 2, 2024 | A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environme... |
| CVE-2023-43514 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP. |
| CVE-2023-43512 | HIGH | 7.5 | 0.3% | Jan 2, 2024 | Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services ... |
| CVE-2023-43511 | HIGH | 7.5 | 0.3% | Jan 2, 2024 | Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE... |
| CVE-2023-33120 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption in Audio when memory map command is executed consecutively in ADSP. |
| CVE-2023-33118 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound ses... |
| CVE-2023-33117 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVC... |
| CVE-2023-33116 | HIGH | 7.5 | 0.3% | Jan 2, 2024 | Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver. |
| CVE-2023-33114 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitt... |
| CVE-2023-33113 | HIGH | 7.8 | 0.1% | Jan 2, 2024 | Memory corruption when resource manager sends the host kernel a reply message with multiple fragments. |
| CVE-2023-33112 | HIGH | 7.5 | 0.3% | Jan 2, 2024 | Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now