2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-48315 | CRITICAL | 9.8 | 3.9% | Dec 5, 2023 | Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. ... |
| CVE-2023-49291 | CRITICAL | 9.8 | 1.4% | Dec 5, 2023 | tj-actions/branch-names is a Github action to retrieve branch or tag names with support for all events. The `tj-actions/... |
| CVE-2023-40082 | CRITICAL | 9.8 | 0.6% | Dec 4, 2023 | In modify_for_next_stage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto. T... |
| CVE-2023-40078 | CRITICAL | 9.8 | 0.5% | Dec 4, 2023 | In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to... |
| CVE-2023-35690 | CRITICAL | 9.8 | 0.4% | Dec 4, 2023 | In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This cou... |
| CVE-2023-24052 | CRITICAL | 9.8 | 0.7% | Dec 4, 2023 | An issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via the chang... |
| CVE-2023-24051 | CRITICAL | 9.8 | 0.7% | Dec 4, 2023 | A client side rate limit issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated pri... |
| CVE-2023-24049 | CRITICAL | 9.8 | 0.7% | Dec 4, 2023 | An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges on the dev... |
| CVE-2023-21403 | CRITICAL | 9.8 | 0.4% | Dec 4, 2023 | In RGXDestroyZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This co... |
| CVE-2023-21402 | CRITICAL | 9.8 | 0.4% | Dec 4, 2023 | In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read due to improper input validation. This could l... |
| CVE-2023-21401 | CRITICAL | 9.8 | 0.4% | Dec 4, 2023 | In DevmemIntChangeSparse of devicemem_server.c, there is a possible out of bounds write due to an integer overflow. This... |
| CVE-2023-21263 | CRITICAL | 9.8 | 0.4% | Dec 4, 2023 | In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception. This could lea... |
| CVE-2023-21228 | CRITICAL | 9.8 | 0.4% | Dec 4, 2023 | In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds ... |
| CVE-2023-21218 | CRITICAL | 9.8 | 0.4% | Dec 4, 2023 | In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds ... |
| CVE-2023-21217 | CRITICAL | 9.8 | 0.4% | Dec 4, 2023 | In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to loc... |
| CVE-2023-21216 | CRITICAL | 9.8 | 0.4% | Dec 4, 2023 | In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution due to a use after fre... |
| CVE-2023-21215 | CRITICAL | 9.8 | 0.4% | Dec 4, 2023 | In DevmemIntAcquireRemoteCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition... |
| CVE-2023-21166 | CRITICAL | 9.8 | 0.4% | Dec 4, 2023 | In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lea... |
| CVE-2023-21164 | CRITICAL | 9.8 | 0.4% | Dec 4, 2023 | In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This cou... |
| CVE-2023-21163 | CRITICAL | 9.8 | 0.4% | Dec 4, 2023 | In PMR_ReadBytes of pmr.c, there is a possible arbitrary code execution due to a use after free. This could lead to loca... |
| CVE-2023-21162 | CRITICAL | 9.8 | 0.4% | Dec 4, 2023 | In RGXUnbackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could l... |
| CVE-2023-5952 | CRITICAL | 9.8 | 1.3% | Dec 4, 2023 | The Welcart e-Commerce WordPress plugin before 2.9.5 unserializes user input from cookies, which could allow unautehtnia... |
| CVE-2023-48967 | CRITICAL | 9.8 | 0.9% | Dec 4, 2023 | Ssolon <= 2.6.0 and <=2.5.12 is vulnerable to Deserialization of Untrusted Data. |
| CVE-2023-48910 | CRITICAL | 9.8 | 1.0% | Dec 4, 2023 | Microcks up to 1.17.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /jobs and /artifa... |
| CVE-2023-48800 | CRITICAL | 9.8 | 1.6% | Dec 4, 2023 | In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_417338 function obtains fields from the front-en... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now