2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-49501HIGH8Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the c...
CVE-2023-50260HIGH8.8Wazuh is a free and open source platform used for threat prevention, detection, and response. A wrong validation in the ...
CVE-2023-37400HIGH7.8IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to escalate their privileges due to insecure credential s...
CVE-2023-3758HIGH7.1A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This m...
CVE-2023-47843HIGH7.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Zachary Segal CataBlog.T...
CVE-2023-4235HIGH8.1A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_delive...
CVE-2023-4234HIGH8.1A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_submit...
CVE-2023-4233HIGH8.1A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the sms_decode_ad...
CVE-2023-4232HIGH8.1A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_status...
CVE-2023-5404HIGH8.1Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution o...
CVE-2023-5403HIGH8.1Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution ...
CVE-2023-5401HIGH8.1Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability ...
CVE-2023-5400HIGH8.1Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability w...
CVE-2023-5397HIGH8.1Server receiving a malformed message to create a new connection could lead to an attacker performing remote code executi...
CVE-2023-5396HIGH7.4Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in poss...
CVE-2023-5395HIGH8.1Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting in...
CVE-2023-46060HIGH7.5A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the p...
CVE-2023-45744HIGH8.8A data integrity vulnerability exists in the web interface /cgi-bin/upload_config.cgi functionality of Peplink Smart Rea...
CVE-2023-45209HIGH7.5An information disclosure vulnerability exists in the web interface /cgi-bin/download_config.cgi functionality of Peplin...
CVE-2023-43491HIGH7.5An information disclosure vulnerability exists in the web interface /cgi-bin/debug_dump.cgi functionality of Peplink Sma...
CVE-2023-39367HIGH7.2An OS command injection vulnerability exists in the web interface mac2name functionality of Peplink Smart Reader v1.2.0 ...
CVE-2023-51500HIGH7.7Missing Authorization vulnerability in Undsgn Uncode Core.This issue affects Uncode Core: from n/a through 2.8.8.
CVE-2023-51418HIGH7.7Missing Authorization vulnerability in Joris van Montfort JVM rich text icons.This issue affects JVM rich text icons: fr...
CVE-2023-52642HIGH7.8In the Linux kernel, the following vulnerability has been resolved: media: rc: bpf attach/detach requires write permiss...
CVE-2023-44227HIGH7.5Missing Authorization vulnerability in Mitchell Bennis Simple File List.This issue affects Simple File List: from n/a th...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now