2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-48412 | MEDIUM | 5.5 | 0.1% | Dec 8, 2023 | In private_handle_t of mali_gralloc_buffer.h, there is a possible information leak due to a logic error in the code. Th... |
| CVE-2023-48411 | MEDIUM | 5.5 | 0.1% | Dec 8, 2023 | In SignalStrengthAdapter::FillGsmSignalStrength() of protocolmiscadapter.cpp, there is a possible out of bounds read due... |
| CVE-2023-48410 | HIGH | 7.5 | 0.4% | Dec 8, 2023 | In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to r... |
| CVE-2023-48409 | HIGH | 7.8 | 0.1% | Dec 8, 2023 | In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/mali_kbase_core_linux.c, there... |
| CVE-2023-48408 | MEDIUM | 5.5 | 0.1% | Dec 8, 2023 | In ProtocolNetSimFileInfoAdapter() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bo... |
| CVE-2023-48407 | HIGH | 7.8 | 0.1% | Dec 8, 2023 | there is a possible DCK won't be deleted after factory reset due to a logic error in the code. This could lead to local ... |
| CVE-2023-48406 | MEDIUM | 6.7 | 0.1% | Dec 8, 2023 | there is a possible permanent DoS or way for the modem to boot unverified firmware due to a logic error in the code. Thi... |
| CVE-2023-48405 | MEDIUM | 6.7 | 0.1% | Dec 8, 2023 | there is a possible way for the secure world to write to NS memory due to a logic error in the code. This could lead to ... |
| CVE-2023-48404 | HIGH | 7.5 | 0.4% | Dec 8, 2023 | In ProtocolMiscCarrierConfigSimInfoIndAdapter of protocolmiscadapter.cpp, there is a possible out of bounds read due to ... |
| CVE-2023-48403 | HIGH | 7.5 | 0.4% | Dec 8, 2023 | In sms_DecodeCodedTpMsg of sms_PduCodec.c, there is a possible out of bounds read due to a heap buffer overflow. This co... |
| CVE-2023-48402 | HIGH | 7.8 | 0.1% | Dec 8, 2023 | In ppcfw_enable of ppcfw.c, there is a possible EoP due to a missing permission check. This could lead to local escalati... |
| CVE-2023-48401 | MEDIUM | 5.5 | 0.1% | Dec 8, 2023 | In GetSizeOfEenlRecords of protocoladapter.cpp, there is a possible out of bounds read due to an incorrect bounds check.... |
| CVE-2023-48399 | MEDIUM | 5.5 | 0.1% | Dec 8, 2023 | In ProtocolMiscATCommandAdapter::Init() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a miss... |
| CVE-2023-48398 | HIGH | 7.5 | 0.3% | Dec 8, 2023 | In ProtocolNetAcBarringInfo::ProtocolNetAcBarringInfo() of protocolnetadapter.cpp, there is a possible out of bounds rea... |
| CVE-2023-48397 | MEDIUM | 4.9 | 0.4% | Dec 8, 2023 | In Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lea... |
| CVE-2023-47565 | HIGH | 8.8 | 73.3% | Dec 8, 2023 | An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. ... |
| CVE-2023-32975 | HIGH | 7.2 | 0.9% | Dec 8, 2023 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver... |
| CVE-2023-32968 | HIGH | 7.2 | 0.8% | Dec 8, 2023 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver... |
| CVE-2023-23372 | MEDIUM | 6.1 | 0.5% | Dec 8, 2023 | A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploi... |
| CVE-2023-6611 | HIGH | 7.5 | 0.6% | Dec 8, 2023 | A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unk... |
| CVE-2023-6609 | MEDIUM | 6.1 | 0.4% | Dec 8, 2023 | A vulnerability was found in osCommerce 4. It has been classified as problematic. This affects an unknown part of the fi... |
| CVE-2023-6608 | HIGH | 7.5 | 0.6% | Dec 8, 2023 | A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknow... |
| CVE-2023-6245 | HIGH | 7.5 | 1.2% | Dec 8, 2023 | The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For exa... |
| CVE-2023-6146 | MEDIUM | 5.4 | 0.4% | Dec 8, 2023 | A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in th... |
| CVE-2023-49487 | MEDIUM | 5.4 | 0.4% | Dec 8, 2023 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the navigation management depar... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now