2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-30652HIGH7.8Out of bounds read and write in callrunTspCmdNoRead of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local...
CVE-2023-30651HIGH7.8Out of bounds read and write in callgetTspsysfs of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local att...
CVE-2023-30650HIGH7.8Out of bounds read and write in callrunTspCmd of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attac...
CVE-2023-30649HIGH7.8Heap out of bound write vulnerability in RmtUimNeedApdu of RILD prior to SMR Jul-2023 Release 1 allows attackers to exec...
CVE-2023-30647HIGH7.8Heap out of bound write vulnerability in IpcRxUsimPhoneBookCapa of RILD prior to SMR Jul-2023 Release 1 allows attackers...
CVE-2023-30646HIGH7.8Heap out of bound write vulnerability in BroadcastSmsConfig of RILD prior to SMR Jul-2023 Release 1 allows attackers to ...
CVE-2023-30645HIGH7.8Heap out of bound write vulnerability in IpcRxIncomingCBMsg of RILD prior to SMR Jul-2023 Release 1 allows attackers to ...
CVE-2023-30644HIGH7.8Stack out of bound write vulnerability in CdmaSmsParser of RILD prior to SMR Jul-2023 Release 1 allows attackers to exec...
CVE-2023-30643HIGH7.1Missing authentication vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to ...
CVE-2023-24256HIGH7.8An issue in the com.nextev.datastatistic component of NIO EC6 Aspen before v3.3.0 allows attackers to escalate privilege...
CVE-2023-36827HIGH7.5Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime ...
CVE-2023-36822HIGH8.1Uptime Kuma, a self-hosted monitoring tool, has a path traversal vulnerability in versions prior to 1.22.1. Uptime Kuma ...
CVE-2023-36821HIGH8.8Uptime Kuma, a self-hosted monitoring tool, allows an authenticated attacker to install a maliciously crafted plugin in ...
CVE-2023-36813HIGH8.8Kanboard is project management software that focuses on the Kanban methodology. In versions prior to 1.2.31authenticated...
CVE-2023-36458HIGH8.81Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticat...
CVE-2023-36457HIGH8.81Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticat...
CVE-2023-35940HIGH7.5GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.8, an incor...
CVE-2023-35939HIGH8.1GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.8, an incor...
CVE-2023-36624HIGH7.8Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via th...
CVE-2023-36623HIGH7.8The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded secrets and the MAC addre...
CVE-2023-36622HIGH7.2The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated admin...
CVE-2023-34457HIGH7.5MechanicalSoup is a Python library for automating interaction with websites. Starting in version 0.2.0 and prior to vers...
CVE-2023-35001HIGH7.8Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP...
CVE-2023-34473HIGH8.8 AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful ...
CVE-2023-34471HIGH8.1 AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-b...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now