2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-52545 | HIGH | 7.5 | 0.4% | Apr 8, 2024 | Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will a... |
| CVE-2023-52541 | HIGH | 7.5 | 0.4% | Apr 8, 2024 | Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may a... |
| CVE-2023-52540 | HIGH | 7.5 | 0.4% | Apr 8, 2024 | Vulnerability of improper authentication in the Iaware module. Impact: Successful exploitation of this vulnerability wil... |
| CVE-2023-52539 | HIGH | 7.5 | 0.3% | Apr 8, 2024 | Permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may ... |
| CVE-2023-52537 | HIGH | 7.5 | 0.4% | Apr 8, 2024 | Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this v... |
| CVE-2023-52388 | HIGH | 7.5 | 0.4% | Apr 8, 2024 | Permission control vulnerability in the clock module. Impact: Successful exploitation of this vulnerability will affect ... |
| CVE-2023-52359 | HIGH | 7.5 | 0.4% | Apr 8, 2024 | Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module. Impact: Successful explo... |
| CVE-2023-52351 | HIGH | 7.8 | 0.1% | Apr 8, 2024 | In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o... |
| CVE-2023-52342 | HIGH | 7.5 | 0.3% | Apr 8, 2024 | In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote ... |
| CVE-2023-52341 | HIGH | 7.5 | 0.3% | Apr 8, 2024 | In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check.... |
| CVE-2023-52716 | HIGH | 7.5 | 0.4% | Apr 7, 2024 | Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module. Impact: Successful ex... |
| CVE-2023-52715 | HIGH | 7.5 | 0.4% | Apr 7, 2024 | The SystemUI module has a vulnerability in permission management. Impact: Successful exploitation of this vulnerability ... |
| CVE-2023-52714 | HIGH | 7.5 | 0.3% | Apr 7, 2024 | Vulnerability of defects introduced in the design process in the hwnff module. Impact: Successful exploitation of this v... |
| CVE-2023-52713 | HIGH | 7.7 | 0.1% | Apr 7, 2024 | Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vu... |
| CVE-2023-6523 | HIGH | 8.8 | 0.6% | Apr 5, 2024 | Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS allows Authentication Abuse. ... |
| CVE-2023-6522 | HIGH | 7.2 | 0.3% | Apr 5, 2024 | Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. Thi... |
| CVE-2023-52235 | HIGH | 8.8 | 0.5% | Apr 5, 2024 | SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07dd2798-ff15-4722-a9ee-de28928aed34 allow ... |
| CVE-2023-45288 | HIGH | 7.5 | 92.0% | Apr 4, 2024 | An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONT... |
| CVE-2023-38709 | HIGH | 7.3 | 3.9% | Apr 4, 2024 | Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP r... |
| CVE-2023-52043 | HIGH | 8.1 | 0.3% | Apr 3, 2024 | An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System (Hardware Rev B1) truncates Wirel... |
| CVE-2023-52640 | HIGH | 7.1 | 0.2% | Apr 3, 2024 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix oob in ntfs_listxattr The length of ... |
| CVE-2023-52637 | HIGH | 7.8 | 0.2% | Apr 3, 2024 | In the Linux kernel, the following vulnerability has been resolved: can: j1939: Fix UAF in j1939_sk_match_filter during... |
| CVE-2023-51571 | HIGH | 7.5 | 0.7% | Apr 1, 2024 | Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability. This vulnerability a... |
| CVE-2023-43515 | HIGH | 7.8 | 0.1% | Apr 1, 2024 | Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled. |
| CVE-2023-33115 | HIGH | 7.8 | 0.1% | Apr 1, 2024 | Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now