2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-21126 | HIGH | 7.8 | 0.1% | Jun 15, 2023 | In bindOutputSwitcherAndBroadcastButton of MediaControlPanel.java, there is a possible launch arbitrary activity under S... |
| CVE-2023-21124 | HIGH | 7.8 | 0.1% | Jun 15, 2023 | In run of multiple files, there is a possible escalation of privilege due to unsafe deserialization. This could lead to ... |
| CVE-2023-21123 | HIGH | 7.8 | 0.1% | Jun 15, 2023 | In multiple functions of multiple files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction f... |
| CVE-2023-21122 | HIGH | 7.8 | 0.1% | Jun 15, 2023 | In various functions of various files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for... |
| CVE-2023-21121 | HIGH | 7.8 | 0.1% | Jun 15, 2023 | In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connect... |
| CVE-2023-21120 | HIGH | 7.8 | 0.1% | Jun 15, 2023 | In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. This could lead to ... |
| CVE-2023-21115 | HIGH | 8.8 | 0.1% | Jun 15, 2023 | In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used c... |
| CVE-2023-21108 | HIGH | 8.8 | 0.2% | Jun 15, 2023 | In sdpu_build_uuid_seq of sdp_discovery.cc, there is a possible out of bounds write due to a use after free. This could ... |
| CVE-2023-21101 | HIGH | 7 | 0.1% | Jun 15, 2023 | In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to... |
| CVE-2023-34455 | HIGH | 7.5 | 1.8% | Jun 15, 2023 | snappy-java is a fast compressor/decompressor for Java. Due to use of an unchecked chunk length, an unrecoverable fatal ... |
| CVE-2023-34454 | HIGH | 7.5 | 1.5% | Jun 15, 2023 | snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur ... |
| CVE-2023-34453 | HIGH | 7.5 | 1.7% | Jun 15, 2023 | snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur ... |
| CVE-2023-27634 | HIGH | 8.8 | 0.3% | Jun 15, 2023 | Cross-Site Request Forgery (CSRF) vulnerability allows arbitrary file upload in Shingo Intrepidity plugin <= 1.5.1 versi... |
| CVE-2023-25055 | HIGH | 8.8 | 0.3% | Jun 15, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Amit Agarwal Google XML Sitemap for Videos plugin <= 2.6.1 versions. |
| CVE-2023-3276 | HIGH | 7.5 | 0.7% | Jun 15, 2023 | A vulnerability, which was classified as problematic, has been found in Dromara HuTool up to 5.8.19. Affected by this is... |
| CVE-2023-3274 | HIGH | 8.8 | 0.9% | Jun 15, 2023 | A vulnerability classified as critical has been found in code-projects Supplier Management System 1.0. Affected is an un... |
| CVE-2023-25450 | HIGH | 8.8 | 0.3% | Jun 15, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform plugin <= 2.... |
| CVE-2023-23802 | HIGH | 8.8 | 0.3% | Jun 15, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Easy GA4 ( Google Analytics 4 ) plugin <= 1.0.6 versions... |
| CVE-2023-25449 | HIGH | 8.8 | 0.3% | Jun 15, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Oliver Seidel, Bastian Germann cformsII plugin <= 15.0.4 versions. |
| CVE-2023-28175 | HIGH | 7.7 | 0.5% | Jun 15, 2023 | Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access ... |
| CVE-2023-2847 | HIGH | 7.8 | 0.1% | Jun 15, 2023 | During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with th... |
| CVE-2023-35030 | HIGH | 8.8 | 0.4% | Jun 15, 2023 | Cross-site request forgery (CSRF) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 thro... |
| CVE-2023-2270 | HIGH | 7.8 | 0.3% | Jun 15, 2023 | The Netskope client service running with NT\SYSTEM privileges accepts network connections from localhost to start variou... |
| CVE-2023-25683 | HIGH | 7.5 | 0.6% | Jun 15, 2023 | IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.0... |
| CVE-2023-34448 | HIGH | 7.2 | 4.5% | Jun 14, 2023 | Grav is a flat-file content management system. Prior to version 1.7.42, the patch for CVE-2022-2073, a server-side templ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now