2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-21439 | HIGH | 7.8 | 0.2% | Feb 9, 2023 | Improper input validation vulnerability in UwbDataTxStatusEvent prior to SMR Feb-2023 Release 1 allows attackers to laun... |
| CVE-2023-21433 | HIGH | 7.8 | 3.7% | Feb 9, 2023 | Improper access control vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to install applic... |
| CVE-2023-21432 | HIGH | 7.8 | 0.2% | Feb 9, 2023 | Improper access control vulnerabilities in Smart Things prior to 1.7.93 allows to attacker to invite others without auth... |
| CVE-2023-21430 | HIGH | 7.8 | 0.2% | Feb 9, 2023 | An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior to ... |
| CVE-2023-21421 | HIGH | 7.8 | 0.2% | Feb 9, 2023 | Improper Handling of Insufficient Permissions or Privileges vulnerability in KnoxCustomManagerService prior to SMR Jan-2... |
| CVE-2023-21420 | HIGH | 7.8 | 0.2% | Feb 9, 2023 | Use of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023 Release 1 allows arbitrary c... |
| CVE-2023-21419 | HIGH | 7.5 | 0.2% | Feb 9, 2023 | An improper implementation logic in Secure Folder prior to SMR Jan-2023 Release 1 allows the Secure Folder container rem... |
| CVE-2023-22953 | HIGH | 8.8 | 1.4% | Feb 9, 2023 | In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user. |
| CVE-2023-0760 | HIGH | 7.8 | 0.4% | Feb 9, 2023 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV. |
| CVE-2023-0759 | HIGH | 8.8 | 0.3% | Feb 9, 2023 | Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8. |
| CVE-2023-25168 | HIGH | 8.2 | 1.0% | Feb 9, 2023 | Wings is Pterodactyl's server control plane. This vulnerability can be used to delete files and directories recursively ... |
| CVE-2023-0251 | HIGH | 7.8 | 0.3% | Feb 8, 2023 | Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a buffer overflow through improper restriction... |
| CVE-2023-0250 | HIGH | 7.8 | 2.2% | Feb 8, 2023 | Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a stack-based buffer overflow, which could all... |
| CVE-2023-0249 | HIGH | 7.8 | 0.3% | Feb 8, 2023 | Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to out-of-bounds write, which may allow an attack... |
| CVE-2023-25164 | HIGH | 7.5 | 0.7% | Feb 8, 2023 | Tinacms is a Git-backed headless content management system with support for visual editing. Sites being built with @tina... |
| CVE-2023-25151 | HIGH | 7.5 | 1.0% | Feb 8, 2023 | opentelemetry-go-contrib is a collection of extensions for OpenTelemetry-Go. The v0.38.0 release of `go.opentelemetry.io... |
| CVE-2023-0401 | HIGH | 7.5 | 1.8% | Feb 8, 2023 | A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In cas... |
| CVE-2023-0286 | HIGH | 7.4 | 62.0% | Feb 8, 2023 | There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresse... |
| CVE-2023-0217 | HIGH | 7.5 | 1.8% | Feb 8, 2023 | An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by... |
| CVE-2023-0216 | HIGH | 7.5 | 1.8% | Feb 8, 2023 | An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the ... |
| CVE-2023-0215 | HIGH | 7.5 | 4.5% | Feb 8, 2023 | The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used ... |
| CVE-2023-25396 | HIGH | 7.8 | 0.2% | Feb 8, 2023 | Privilege escalation in the MSI repair functionality in Caphyon Advanced Installer 20.0 and below allows attackers to ac... |
| CVE-2023-25152 | HIGH | 8.8 | 0.7% | Feb 8, 2023 | Wings is Pterodactyl's server control plane. Affected versions are subject to a vulnerability which can be used to creat... |
| CVE-2023-0690 | HIGH | 7.1 | 0.4% | Feb 8, 2023 | HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management... |
| CVE-2023-0002 | HIGH | 7.8 | 0.3% | Feb 8, 2023 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now