2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-40135 | LOW | 3.3 | 0.1% | Oct 27, 2023 | In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deputy... |
| CVE-2023-40134 | LOW | 3.3 | 0.1% | Oct 27, 2023 | In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This cou... |
| CVE-2023-40133 | MEDIUM | 5.5 | 0.2% | Oct 27, 2023 | In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused depu... |
| CVE-2023-40131 | HIGH | 7 | 0.1% | Oct 27, 2023 | In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local es... |
| CVE-2023-40130 | HIGH | 7.8 | 0.1% | Oct 27, 2023 | In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. Th... |
| CVE-2023-40129 | HIGH | 8.8 | 0.2% | Oct 27, 2023 | In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could... |
| CVE-2023-40128 | HIGH | 7.8 | 0.1% | Oct 27, 2023 | In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could l... |
| CVE-2023-40127 | LOW | 3.3 | 0.2% | Oct 27, 2023 | In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local ... |
| CVE-2023-40125 | HIGH | 7.8 | 0.1% | Oct 27, 2023 | In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. Th... |
| CVE-2023-40123 | MEDIUM | 5.5 | 0.1% | Oct 27, 2023 | In updateActionViews of PipMenuView.java, there is a possible bypass of a multi user security boundary due to a confused... |
| CVE-2023-40121 | MEDIUM | 5.5 | 0.2% | Oct 27, 2023 | In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. This c... |
| CVE-2023-40120 | HIGH | 7.8 | 0.1% | Oct 27, 2023 | In multiple locations, there is a possible way to bypass user notification of foreground services due to improper input ... |
| CVE-2023-40117 | HIGH | 7.8 | 0.1% | Oct 27, 2023 | In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. This... |
| CVE-2023-40116 | HIGH | 7.8 | 0.1% | Oct 27, 2023 | In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions du... |
| CVE-2023-35794 | HIGH | 8.8 | 0.9% | Oct 27, 2023 | An issue was discovered in Cassia Access Controller 2.1.1.2303271039. The Web SSH terminal endpoint (spawned console) ca... |
| CVE-2023-32738 | MEDIUM | 4.8 | 0.3% | Oct 27, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alkaweb Eonet Manual User Approve plugin <= 2.1.3 vers... |
| CVE-2023-5829 | HIGH | 8.8 | 0.8% | Oct 27, 2023 | A vulnerability was found in code-projects Admission Management System 1.0. It has been rated as critical. Affected by t... |
| CVE-2023-5828 | CRITICAL | 9.8 | 0.7% | Oct 27, 2023 | A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation M... |
| CVE-2023-46853 | CRITICAL | 9.8 | 0.8% | Oct 27, 2023 | In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used inste... |
| CVE-2023-46852 | HIGH | 7.5 | 0.8% | Oct 27, 2023 | In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many ... |
| CVE-2023-46407 | MEDIUM | 5.5 | 0.3% | Oct 27, 2023 | FFmpeg prior to commit bf814 was discovered to contain an out of bounds read via the dist->alphabet_size variable in the... |
| CVE-2023-29009 | MEDIUM | 6.1 | 0.5% | Oct 27, 2023 | baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in ... |
| CVE-2023-4967 | HIGH | 7.5 | 0.9% | Oct 27, 2023 | Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CV... |
| CVE-2023-46290 | HIGH | 8.1 | 2.7% | Oct 27, 2023 | Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS use... |
| CVE-2023-46289 | HIGH | 7.5 | 0.9% | Oct 27, 2023 | Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow th... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now