2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-21189 | HIGH | 7.3 | 0.1% | Jun 28, 2023 | In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in th... |
| CVE-2023-21187 | HIGH | 7.8 | 0.1% | Jun 28, 2023 | In onCreate of UsbAccessoryUriActivity.java, there is a possible way to escape the Setup Wizard due to a logic error in ... |
| CVE-2023-21186 | HIGH | 7.5 | 0.5% | Jun 28, 2023 | In LogResponse of Dns.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remo... |
| CVE-2023-21185 | HIGH | 7.8 | 0.1% | Jun 28, 2023 | In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalati... |
| CVE-2023-21184 | HIGH | 7.8 | 0.1% | Jun 28, 2023 | In getCurrentPrivilegedPackagesForAllUsers of CarrierPrivilegesTracker.java, there is a possible permission bypass due t... |
| CVE-2023-21183 | HIGH | 7.8 | 0.1% | Jun 28, 2023 | In ForegroundUtils of ForegroundUtils.java, there is a possible way to read NFC tag data while the app is still in the b... |
| CVE-2023-21180 | HIGH | 7.5 | 0.4% | Jun 28, 2023 | In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap buffer overflow. This could lea... |
| CVE-2023-21179 | HIGH | 7.8 | 0.1% | Jun 28, 2023 | In parseSecurityParamsFromXml of XmlUtil.java, there is a possible bypass of user specified wifi encryption protocol due... |
| CVE-2023-21175 | HIGH | 7.8 | 0.1% | Jun 28, 2023 | In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due t... |
| CVE-2023-21174 | HIGH | 7.8 | 0.1% | Jun 28, 2023 | In isPageSearchEnabled of BillingCycleSettings.java, there is a possible way for the guest user to change data limits du... |
| CVE-2023-21172 | HIGH | 7.8 | 0.1% | Jun 28, 2023 | In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin u... |
| CVE-2023-21149 | HIGH | 7.8 | 0.1% | Jun 28, 2023 | In registerGsmaServiceIntentReceiver of ShannonRcsService.java, there is a possible way to activate/deactivate RCS servi... |
| CVE-2023-21147 | HIGH | 7.8 | 0.1% | Jun 28, 2023 | In lwis_i2c_device_disable of lwis_device_i2c.c, there is a possible UAF due to a logic error in the code. This could le... |
| CVE-2023-2625 | HIGH | 8 | 0.4% | Jun 28, 2023 | A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as... |
| CVE-2023-34937 | HIGH | 7.5 | 0.7% | Jun 28, 2023 | A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS... |
| CVE-2023-34936 | HIGH | 7.5 | 0.7% | Jun 28, 2023 | A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service ... |
| CVE-2023-34935 | HIGH | 7.5 | 0.7% | Jun 28, 2023 | A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service ... |
| CVE-2023-34934 | HIGH | 7.5 | 0.7% | Jun 28, 2023 | A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Servi... |
| CVE-2023-34933 | HIGH | 7.5 | 0.7% | Jun 28, 2023 | A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service... |
| CVE-2023-26615 | HIGH | 7.5 | 0.7% | Jun 28, 2023 | D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleAction... |
| CVE-2023-20192 | HIGH | 7.7 | 0.7% | Jun 28, 2023 | Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow ... |
| CVE-2023-20178 | HIGH | 7.8 | 5.4% | Jun 28, 2023 | A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco S... |
| CVE-2023-20108 | HIGH | 7.5 | 0.9% | Jun 28, 2023 | A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service ... |
| CVE-2023-20006 | HIGH | 7.5 | 0.9% | Jun 28, 2023 | A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Soft... |
| CVE-2023-36467 | HIGH | 8.8 | 1.0% | Jun 28, 2023 | AWS data.all is an open source development framework to help users build a data marketplace on Amazon Web Services. data... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now