2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-3358 | MEDIUM | 5.5 | 0.2% | Jun 28, 2023 | A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a ... |
| CVE-2023-3357 | MEDIUM | 5.5 | 0.2% | Jun 28, 2023 | A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local use... |
| CVE-2023-36474 | MEDIUM | 6.1 | 0.4% | Jun 28, 2023 | Interactsh is an open-source tool for detecting out-of-band interactions. Domains configured with interactsh server prio... |
| CVE-2023-34736 | HIGH | 7.2 | 0.7% | Jun 28, 2023 | Guantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload. |
| CVE-2023-34647 | MEDIUM | 6.1 | 0.3% | Jun 28, 2023 | PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2023-3439 | MEDIUM | 4.7 | 0.3% | Jun 28, 2023 | A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant... |
| CVE-2023-3390 | HIGH | 7.8 | 0.9% | Jun 28, 2023 | A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mi... |
| CVE-2023-3355 | MEDIUM | 5.5 | 0.3% | Jun 28, 2023 | A NULL pointer dereference flaw was found in the Linux kernel's drivers/gpu/drm/msm/msm_gem_submit.c code in the submit_... |
| CVE-2023-3243 | CRITICAL | 9.8 | 0.5% | Jun 28, 2023 | ** UNSUPPORTED WHEN ASSIGNED ** [An attacker can capture an authenticating hash and utilize it to create new sessions. ... |
| CVE-2023-3138 | HIGH | 7.5 | 1.7% | Jun 28, 2023 | A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not ch... |
| CVE-2023-34652 | MEDIUM | 6.1 | 0.4% | Jun 28, 2023 | PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS) via Add New Course. |
| CVE-2023-34651 | MEDIUM | 6.1 | 0.4% | Jun 28, 2023 | PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2023-34650 | MEDIUM | 6.1 | 0.4% | Jun 28, 2023 | PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2023-32224 | CRITICAL | 9.8 | 1.2% | Jun 28, 2023 | D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts |
| CVE-2023-32223 | HIGH | 8.8 | 1.6% | Jun 28, 2023 | D-Link DSL-224 firmware version 3.0.10 allows post authentication command execution via an unspecified method. |
| CVE-2023-32222 | CRITICAL | 9.8 | 1.5% | Jun 28, 2023 | D-Link DSL-G256DG version vBZ_1.00.27 web management interface allows authentication bypass via an unspecified method. |
| CVE-2023-2232 | MEDIUM | 6.5 | 1.3% | Jun 28, 2023 | An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulner... |
| CVE-2023-21518 | HIGH | 7.8 | 0.2% | Jun 28, 2023 | Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications... |
| CVE-2023-21517 | CRITICAL | 9.8 | 1.6% | Jun 28, 2023 | Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execu... |
| CVE-2023-21513 | MEDIUM | 6.8 | 0.4% | Jun 28, 2023 | Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to mani... |
| CVE-2023-21512 | LOW | 3.3 | 0.2% | Jun 28, 2023 | Improper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1 allows local attackers to re... |
| CVE-2023-3389 | HIGH | 7.8 | 0.7% | Jun 28, 2023 | A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escala... |
| CVE-2023-3090 | HIGH | 7.8 | 0.5% | Jun 28, 2023 | A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local pri... |
| CVE-2023-34761 | MEDIUM | 6.5 | 0.5% | Jun 28, 2023 | An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message Cup, Hello Cup 1.3.1 for... |
| CVE-2023-33592 | CRITICAL | 9.8 | 1.9% | Jun 28, 2023 | Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lf... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now