2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-26941 | MEDIUM | 6.5 | 0.2% | Dec 5, 2023 | Weak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a cloned tag via physical p... |
| CVE-2023-5944 | HIGH | 7.8 | 0.4% | Dec 4, 2023 | Delta Electronics DOPSoft is vulnerable to a stack-based buffer overflow, which may allow for arbitrary code execution ... |
| CVE-2023-49293 | MEDIUM | 6.1 | 1.0% | Dec 4, 2023 | Vite is a website frontend framework. When Vite's HTML transformation is invoked manually via `server.transformIndexHtml... |
| CVE-2023-49288 | HIGH | 7.5 | 4.8% | Dec 4, 2023 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a ... |
| CVE-2023-49286 | HIGH | 7.5 | 10.4% | Dec 4, 2023 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return... |
| CVE-2023-49285 | HIGH | 7.5 | 88.8% | Dec 4, 2023 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulner... |
| CVE-2023-49280 | MEDIUM | 6.5 | 0.9% | Dec 4, 2023 | XWiki Change Request is an XWiki application allowing to request changes on a wiki without publishing directly the chang... |
| CVE-2023-45781 | MEDIUM | 5.5 | 0.1% | Dec 4, 2023 | In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to ... |
| CVE-2023-45779 | HIGH | 7.8 | 0.3% | Dec 4, 2023 | In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used... |
| CVE-2023-45777 | HIGH | 7.8 | 0.3% | Dec 4, 2023 | In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities... |
| CVE-2023-45776 | HIGH | 7.8 | 0.1% | Dec 4, 2023 | In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This c... |
| CVE-2023-45775 | HIGH | 7.8 | 0.1% | Dec 4, 2023 | In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This c... |
| CVE-2023-45774 | HIGH | 7.8 | 0.1% | Dec 4, 2023 | In fixUpIncomingShortcutInfo of ShortcutService.java, there is a possible way to view another user's image due to a conf... |
| CVE-2023-45773 | HIGH | 7.8 | 0.1% | Dec 4, 2023 | In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a missing bounds check. This cou... |
| CVE-2023-40465 | MEDIUM | 5.5 | 0.2% | Dec 4, 2023 | Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be... |
| CVE-2023-40464 | MEDIUM | 6.8 | 0.3% | Dec 4, 2023 | Several versions of ALEOS, including ALEOS 4.16.0, use a hardcoded SSL certificate and private key. An atta... |
| CVE-2023-40463 | HIGH | 7.2 | 0.6% | Dec 4, 2023 | When configured in debugging mode by an authenticated user with administrative privileges, ALEOS 4.16 and e... |
| CVE-2023-40462 | HIGH | 7.5 | 0.9% | Dec 4, 2023 | The ACEManager component of ALEOS 4.16 and earlier does not perform input sanitization during authentication, which c... |
| CVE-2023-40461 | MEDIUM | 4.8 | 0.5% | Dec 4, 2023 | The ACEManager component of ALEOS 4.16 and earlier allows an authenticated user with Administrator privileg... |
| CVE-2023-40460 | MEDIUM | 5.4 | 0.5% | Dec 4, 2023 | The ACEManager component of ALEOS 4.16 and earlier does not validate uploaded file names and types, which c... |
| CVE-2023-40459 | HIGH | 7.5 | 2.3% | Dec 4, 2023 | The ACEManager component of ALEOS 4.16 and earlier does not adequately perform input sanitization during authen... |
| CVE-2023-40103 | HIGH | 7.8 | 0.2% | Dec 4, 2023 | In multiple locations, there is a possible way to corrupt memory due to a double free. This could lead to local escalati... |
| CVE-2023-40098 | MEDIUM | 5.5 | 0.1% | Dec 4, 2023 | In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user... |
| CVE-2023-40097 | HIGH | 7.8 | 0.1% | Dec 4, 2023 | In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation... |
| CVE-2023-40096 | HIGH | 7.8 | 0.2% | Dec 4, 2023 | In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the backgroun... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now