2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-42530 | HIGH | 7.5 | 0.4% | Nov 7, 2023 | Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi an... |
| CVE-2023-42529 | HIGH | 7.8 | 0.2% | Nov 7, 2023 | Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitra... |
| CVE-2023-42528 | HIGH | 7.8 | 0.2% | Nov 7, 2023 | Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local... |
| CVE-2023-42527 | MEDIUM | 5.5 | 0.2% | Nov 7, 2023 | Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local a... |
| CVE-2023-42284 | CRITICAL | 9.8 | 1.2% | Nov 7, 2023 | Blind SQL injection in api_version parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the databas... |
| CVE-2023-42283 | CRITICAL | 9.8 | 1.3% | Nov 7, 2023 | Blind SQL injection in api_id parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via... |
| CVE-2023-30739 | HIGH | 7.8 | 0.2% | Nov 7, 2023 | Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to exe... |
| CVE-2023-41723 | MEDIUM | 4.3 | 12.3% | Nov 7, 2023 | A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note: ... |
| CVE-2023-38549 | MEDIUM | 5.4 | 19.1% | Nov 7, 2023 | A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acqui... |
| CVE-2023-38548 | MEDIUM | 4.3 | 11.8% | Nov 7, 2023 | A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acqui... |
| CVE-2023-38547 | CRITICAL | 9.8 | 18.9% | Nov 7, 2023 | A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ON... |
| CVE-2023-47102 | MEDIUM | 5.3 | 0.6% | Nov 7, 2023 | UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a usernam... |
| CVE-2023-33074 | HIGH | 7.8 | 0.1% | Nov 7, 2023 | Memory corruption in Audio when SSR event is triggered after music playback is stopped. |
| CVE-2023-33061 | HIGH | 7.5 | 0.4% | Nov 7, 2023 | Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame. |
| CVE-2023-33059 | HIGH | 7.8 | 0.1% | Nov 7, 2023 | Memory corruption in Audio while processing the VOC packet data from ADSP. |
| CVE-2023-33056 | HIGH | 7.5 | 0.4% | Nov 7, 2023 | Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE. |
| CVE-2023-33055 | HIGH | 7.8 | 0.1% | Nov 7, 2023 | Memory Corruption in Audio while invoking callback function in driver from ADSP. |
| CVE-2023-33048 | HIGH | 7.5 | 0.4% | Nov 7, 2023 | Transient DOS in WLAN Firmware while parsing t2lm buffers. |
| CVE-2023-33047 | HIGH | 7.5 | 0.4% | Nov 7, 2023 | Transient DOS in WLAN Firmware while parsing no-inherit IES. |
| CVE-2023-33045 | CRITICAL | 9.8 | 0.5% | Nov 7, 2023 | Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. |
| CVE-2023-33031 | HIGH | 7.8 | 0.1% | Nov 7, 2023 | Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer. |
| CVE-2023-28574 | HIGH | 7.8 | 0.1% | Nov 7, 2023 | Memory corruption in core services when Diag handler receives a command to configure event listeners. |
| CVE-2023-28572 | HIGH | 8.8 | 0.4% | Nov 7, 2023 | Memory corruption in WLAN HOST while processing the WLAN scan descriptor list. |
| CVE-2023-28570 | HIGH | 7.8 | 0.1% | Nov 7, 2023 | Memory corruption while processing audio effects. |
| CVE-2023-28569 | MEDIUM | 5.5 | 0.1% | Nov 7, 2023 | Information disclosure in WLAN HAL while handling command through WMI interfaces. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now