2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-53045 | MEDIUM | 5.5 | 0.1% | May 2, 2025 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_audio: don't let userspace block dri... |
| CVE-2023-53044 | MEDIUM | 5.5 | 0.2% | May 2, 2025 | In the Linux kernel, the following vulnerability has been resolved: dm stats: check for and propagate alloc_percpu fail... |
| CVE-2023-53043 | MEDIUM | 5.5 | 0.2% | May 2, 2025 | In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: sc7280: Mark PCIe controller as c... |
| CVE-2023-53042 | MEDIUM | 5.5 | 0.2% | May 2, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not set DRR on pipe Commit [WH... |
| CVE-2023-53041 | MEDIUM | 5.5 | 0.2% | May 2, 2025 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Perform lockless command completion ... |
| CVE-2023-53040 | MEDIUM | 5.5 | 0.2% | May 2, 2025 | In the Linux kernel, the following vulnerability has been resolved: ca8210: fix mac_len negative array access This pat... |
| CVE-2023-53039 | HIGH | 7.8 | 0.2% | May 2, 2025 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-fr... |
| CVE-2023-53038 | MEDIUM | 5.5 | 0.2% | May 2, 2025 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params... |
| CVE-2023-53037 | HIGH | 7.8 | 0.2% | May 2, 2025 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Bad drive in topology results kernel ... |
| CVE-2023-53036 | MEDIUM | 5.5 | 0.2% | May 2, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix call trace warning and hang when re... |
| CVE-2023-53035 | HIGH | 7.1 | 0.2% | May 2, 2025 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_cop... |
| CVE-2023-46669 | HIGH | 7.1 | 0.2% | May 1, 2025 | Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead t... |
| CVE-2023-4533 | — | — | — | Apr 30, 2025 | Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed. It was assigned as a d... |
| CVE-2023-45721 | MEDIUM | 5.3 | 0.3% | Apr 30, 2025 | Insufficient default configuration in HCL Leap allows anonymous access to directory information. |
| CVE-2023-37535 | MEDIUM | 6.1 | 0.2% | Apr 30, 2025 | Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters. |
| CVE-2023-37517 | HIGH | 7.5 | 0.2% | Apr 30, 2025 | Missing "no cache" headers in HCL Leap permits sensitive data to be cached. |
| CVE-2023-4377 | — | — | — | Apr 29, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-42404 | CRITICAL | 9.8 | 0.3% | Apr 28, 2025 | OneVision Workspace before WS23.1 SR1 (build w31.040) allows arbitrary Java EL execution. |
| CVE-2023-35817 | CRITICAL | 9.8 | 0.3% | Apr 28, 2025 | DevExpress before 23.1.3 allows AsyncDownloader SSRF. |
| CVE-2023-35816 | MEDIUM | 5.3 | 0.4% | Apr 28, 2025 | DevExpress before 23.1.3 allows arbitrary TypeConverter conversion. |
| CVE-2023-35815 | CRITICAL | 9.8 | 0.4% | Apr 28, 2025 | DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data. |
| CVE-2023-35814 | CRITICAL | 9.8 | 0.4% | Apr 28, 2025 | DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms. |
| CVE-2023-37516 | LOW | 3.2 | 0.1% | Apr 24, 2025 | Missing "no cache" headers in HCL Leap permits user directory information to be cached. |
| CVE-2023-45720 | MEDIUM | 5.3 | 0.3% | Apr 24, 2025 | Insufficient default configuration in HCL Leap allows anonymous access to directory information. |
| CVE-2023-37534 | MEDIUM | 6.1 | 0.2% | Apr 24, 2025 | Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now