2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-24243HIGH7.5CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).
CVE-2023-34795HIGH7.8xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioread_sheetlist_close() f...
CVE-2023-34154HIGH8.2Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will...
CVE-2023-32028HIGH7.8Microsoft SQL OLE DB Remote Code Execution Vulnerability
CVE-2023-32027HIGH7.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2023-32026HIGH7.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2023-32025HIGH7.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2023-29356HIGH7.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2023-29349HIGH7.8Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
CVE-2023-23841HIGH7.5SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File Share or File request....
CVE-2023-24032HIGH7.8In Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user access to a Zimbra server instan...
CVE-2023-33243HIGH8.1RedTeam Pentesting discovered that the web interface of STARFACE as well as its REST API allows authentication using the...
CVE-2023-29321HIGH7.8Adobe Animate versions 22.0.9 (and earlier) and 23.0.1 (and earlier) are affected by a Use After Free vulnerability that...
CVE-2023-29297HIGH7.2Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Imprope...
CVE-2023-28809HIGH7.5Some access control products are vulnerable to a session hijacking attack because the product does not update the sessio...
CVE-2023-22248HIGH7.5Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorr...
CVE-2023-21618HIGH7.8Adobe Substance 3D Designer version 12.4.1 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability...
CVE-2023-21144HIGH7.5In doInBackground of NotificationContentInflater.java, there is a possible temporary denial or service due to long runni...
CVE-2023-21139HIGH7.8In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. Th...
CVE-2023-21138HIGH7.8In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input valid...
CVE-2023-21135HIGH7.8In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to imp...
CVE-2023-21131HIGH7.8In checkKeyIntentParceledCorrectly() of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch mitig...
CVE-2023-21129HIGH7.8In getFullScreenIntentDecision of NotificationInterruptStateProviderImpl.java, there is a possible activity launch while...
CVE-2023-21128HIGH7.8In various functions of AppStandbyController.java, there is a possible way to break manageability scenarios due to a log...
CVE-2023-21127HIGH8.8In readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now