# Vulnerabilities published in 2023


- [CVE-2023-54345](https://insights.sbomify.com/CVE-2023-54345/): Frappe Framework ERPNext 13.4.0 Remote Code Execution (high 8.7)
- [CVE-2023-54344](https://insights.sbomify.com/CVE-2023-54344/): Eclipse Equinox OSGi 3.7.2 Remote Code Execution via Console (critical 9.3)
- [CVE-2023-54343](https://insights.sbomify.com/CVE-2023-54343/): QWE DL 2.0.1 Persistent XSS Vulnerability via Path Parameter (medium 5.1)
- [CVE-2023-54342](https://insights.sbomify.com/CVE-2023-54342/): Eclipse Equinox OSGi 3.8-3.18 Console Remote Code Execution (critical 9.3)
- [CVE-2023-54341](https://insights.sbomify.com/CVE-2023-54341/): Webgrind 1.1 - Reflected Cross-Site Scripting (XSS) via file Parameter (medium 5.1)
- [CVE-2023-54340](https://insights.sbomify.com/CVE-2023-54340/): WorkOrder CMS 0.1.0 - SQL Injection (high 8.8)
- [CVE-2023-5434](https://insights.sbomify.com/CVE-2023-5434/): Superb slideshow gallery <= 13.1 - Authenticated (Subscriber+) SQL Injection via Shortcode (high 8.8)
- [CVE-2023-54339](https://insights.sbomify.com/CVE-2023-54339/): Webgrind 1.1 - Remote Command Execution (RCE) via dataFile Parameter (critical 9.3)
- [CVE-2023-54338](https://insights.sbomify.com/CVE-2023-54338/): Tftpd32_SE 4.60 - 'Tftpd32_svc' Unquoted Service Path (high 8.5)
- [CVE-2023-54337](https://insights.sbomify.com/CVE-2023-54337/): Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC) (medium 5.1)
- [CVE-2023-54336](https://insights.sbomify.com/CVE-2023-54336/): Mediconta 3.7.27 - 'servermedicontservice' Unquoted Service Path (high 8.5)
- [CVE-2023-54335](https://insights.sbomify.com/CVE-2023-54335/): eXtplorer<= 2.1.14 - Authentication Bypass & Remote Code Execution (RCE) (critical 9.3)
- [CVE-2023-54334](https://insights.sbomify.com/CVE-2023-54334/): Explorer32++ 1.3.5.531 - Buffer overflow (high 7.0)
- [CVE-2023-54333](https://insights.sbomify.com/CVE-2023-54333/): Social-Share-Buttons 2.2.3 - SQL Injection via project_id Parameter (high 8.8)
- [CVE-2023-54332](https://insights.sbomify.com/CVE-2023-54332/): Jetpack 11.4 - Cross Site Scripting (XSS) (medium 5.1)
- [CVE-2023-54331](https://insights.sbomify.com/CVE-2023-54331/): Outline 1.6.0 - Unquoted Service Path (high 8.5)
- [CVE-2023-54330](https://insights.sbomify.com/CVE-2023-54330/): Inbit Messenger 4.9.0 - Unauthenticated Remote SEH Overflow (critical 9.3)
- [CVE-2023-5433](https://insights.sbomify.com/CVE-2023-5433/): Message ticker <= 9.2 - Authenticated (Subscriber+) SQL Injection via Shortcode (high 8.8)
- [CVE-2023-54329](https://insights.sbomify.com/CVE-2023-54329/): Inbit Messenger 4.9.0 - Unauthenticated Remote Command Execution (RCE) (critical 9.3)
- [CVE-2023-54328](https://insights.sbomify.com/CVE-2023-54328/): AimOne Video Converter 2.04 Build 103 Buffer Overflow in Registration Form (medium 5.1)
- [CVE-2023-54327](https://insights.sbomify.com/CVE-2023-54327/): Tinycontrol LAN Controller 1.58a Authentication Bypass via Admin Password Change (critical 9.3)
- [CVE-2023-54326](https://insights.sbomify.com/CVE-2023-54326/): misc: pci_endpoint_test: Free IRQs before removing the device (high 7.8)
- [CVE-2023-54325](https://insights.sbomify.com/CVE-2023-54325/): crypto: qat - fix out-of-bounds read (high 7.1)
- [CVE-2023-54324](https://insights.sbomify.com/CVE-2023-54324/): dm: fix a race condition in retrieve_deps (not scored)
- [CVE-2023-54323](https://insights.sbomify.com/CVE-2023-54323/): cxl/pmem: Fix nvdimm registration races (not scored)
- [CVE-2023-54322](https://insights.sbomify.com/CVE-2023-54322/): arm64: set __exception_irq_entry with __irq_entry as a default (not scored)
- [CVE-2023-54321](https://insights.sbomify.com/CVE-2023-54321/): driver core: fix potential null-ptr-deref in device_add() (medium 5.5)
- [CVE-2023-54320](https://insights.sbomify.com/CVE-2023-54320/): platform/x86/amd: pmc: Fix memory leak in amd_pmc_stb_debugfs_open_v2() (not scored)
- [CVE-2023-5432](https://insights.sbomify.com/CVE-2023-5432/): Jquery news ticker <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-54319](https://insights.sbomify.com/CVE-2023-54319/): pinctrl: at91-pio4: check return value of devm_kasprintf() (not scored)
- [CVE-2023-54318](https://insights.sbomify.com/CVE-2023-54318/): net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add (high 8.8)
- [CVE-2023-54317](https://insights.sbomify.com/CVE-2023-54317/): dm flakey: don't corrupt the zero page (high 7.8)
- [CVE-2023-54316](https://insights.sbomify.com/CVE-2023-54316/): refscale: Fix uninitalized use of wait_queue_head_t (not scored)
- [CVE-2023-54315](https://insights.sbomify.com/CVE-2023-54315/): powerpc/powernv/sriov: perform null check on iov before dereferencing iov (not scored)
- [CVE-2023-54314](https://insights.sbomify.com/CVE-2023-54314/): media: af9005: Fix null-ptr-deref in af9005_i2c_xfer (not scored)
- [CVE-2023-54313](https://insights.sbomify.com/CVE-2023-54313/): ovl: fix null pointer dereference in ovl_get_acl_rcu() (not scored)
- [CVE-2023-54312](https://insights.sbomify.com/CVE-2023-54312/): samples/bpf: Fix buffer overflow in tcp_basertt (not scored)
- [CVE-2023-54311](https://insights.sbomify.com/CVE-2023-54311/): ext4: fix deadlock when converting an inline directory in nojournal mode (not scored)
- [CVE-2023-54310](https://insights.sbomify.com/CVE-2023-54310/): scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition (high 7.8)
- [CVE-2023-5431](https://insights.sbomify.com/CVE-2023-5431/): Left right image slideshow gallery <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (high 8.8)
- [CVE-2023-54309](https://insights.sbomify.com/CVE-2023-54309/): tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (not scored)
- [CVE-2023-54308](https://insights.sbomify.com/CVE-2023-54308/): ALSA: ymfpci: Create card with device-managed snd_devm_card_new() (high 7.8)
- [CVE-2023-54307](https://insights.sbomify.com/CVE-2023-54307/): ptp_qoriq: fix memory leak in probe() (not scored)
- [CVE-2023-54306](https://insights.sbomify.com/CVE-2023-54306/): net: tls: avoid hanging tasks on the tx_lock (high 7.5)
- [CVE-2023-54305](https://insights.sbomify.com/CVE-2023-54305/): ext4: refuse to create ea block when umounted (not scored)
- [CVE-2023-54304](https://insights.sbomify.com/CVE-2023-54304/): firmware: meson_sm: fix to avoid potential NULL pointer dereference (not scored)
- [CVE-2023-54303](https://insights.sbomify.com/CVE-2023-54303/): bpf: Disable preemption in bpf_perf_event_output (high 7.8)
- [CVE-2023-54302](https://insights.sbomify.com/CVE-2023-54302/): RDMA/irdma: Fix data race on CQP completion stats (not scored)
- [CVE-2023-54301](https://insights.sbomify.com/CVE-2023-54301/): serial: 8250_bcm7271: fix leak in `brcmuart_probe` (not scored)
- [CVE-2023-54300](https://insights.sbomify.com/CVE-2023-54300/): wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (not scored)
- [CVE-2023-5430](https://insights.sbomify.com/CVE-2023-5430/): Jquery news ticker <= 3.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (high 8.8)
- [CVE-2023-54299](https://insights.sbomify.com/CVE-2023-54299/): usb: typec: bus: verify partner exists in typec_altmode_attention (not scored)
- [CVE-2023-54298](https://insights.sbomify.com/CVE-2023-54298/): thermal: intel: quark_dts: fix error pointer dereference (not scored)
- [CVE-2023-54297](https://insights.sbomify.com/CVE-2023-54297/): btrfs: zoned: fix memory leak after finding block group with super blocks (not scored)
- [CVE-2023-54296](https://insights.sbomify.com/CVE-2023-54296/): KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (not scored)
- [CVE-2023-54295](https://insights.sbomify.com/CVE-2023-54295/): mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type (not scored)
- [CVE-2023-54294](https://insights.sbomify.com/CVE-2023-54294/): md/raid10: fix memleak of md thread (not scored)
- [CVE-2023-54293](https://insights.sbomify.com/CVE-2023-54293/): bcache: fixup btree_cache_wait list damage (not scored)
- [CVE-2023-54292](https://insights.sbomify.com/CVE-2023-54292/): RDMA/irdma: Fix data race on CQP request done (critical 9.8)
- [CVE-2023-54291](https://insights.sbomify.com/CVE-2023-54291/): vduse: fix NULL pointer dereference (not scored)
- [CVE-2023-5429](https://insights.sbomify.com/CVE-2023-5429/): Information Reel <= 10.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (high 8.8)
- [CVE-2023-54289](https://insights.sbomify.com/CVE-2023-54289/): scsi: qedf: Fix NULL dereference in error handling (not scored)
- [CVE-2023-54288](https://insights.sbomify.com/CVE-2023-54288/): wifi: mac80211: fortify the spinlock against deadlock by interrupt (not scored)
- [CVE-2023-54287](https://insights.sbomify.com/CVE-2023-54287/): tty: serial: imx: disable Ageing Timer interrupt request irq (not scored)
- [CVE-2023-54286](https://insights.sbomify.com/CVE-2023-54286/): wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (high 7.6)
- [CVE-2023-54285](https://insights.sbomify.com/CVE-2023-54285/): iomap: Fix possible overflow condition in iomap_write_delalloc_scan (high 7.1)
- [CVE-2023-54284](https://insights.sbomify.com/CVE-2023-54284/): media: av7110: prevent underflow in write_ts_to_decoder() (high 7.1)
- [CVE-2023-54283](https://insights.sbomify.com/CVE-2023-54283/): bpf: Address KCSAN report on bpf_lru_list (not scored)
- [CVE-2023-54282](https://insights.sbomify.com/CVE-2023-54282/): media: tuners: qt1010: replace BUG_ON with a regular error (not scored)
- [CVE-2023-54281](https://insights.sbomify.com/CVE-2023-54281/): btrfs: release path before inode lookup during the ino lookup ioctl (not scored)
- [CVE-2023-54280](https://insights.sbomify.com/CVE-2023-54280/): cifs: fix potential race when tree connecting ipc (critical 9.8)
- [CVE-2023-5428](https://insights.sbomify.com/CVE-2023-5428/): Image vertical reel scroll slideshow <= 9.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (high 8.8)
- [CVE-2023-54279](https://insights.sbomify.com/CVE-2023-54279/): MIPS: fw: Allow firmware to pass a empty env (not scored)
- [CVE-2023-54278](https://insights.sbomify.com/CVE-2023-54278/): s390/vmem: split pages when debug pagealloc is enabled (not scored)
- [CVE-2023-54277](https://insights.sbomify.com/CVE-2023-54277/): fbdev: udlfb: Fix endpoint check (not scored)
- [CVE-2023-54276](https://insights.sbomify.com/CVE-2023-54276/): nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net (not scored)
- [CVE-2023-54275](https://insights.sbomify.com/CVE-2023-54275/): wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup (not scored)
- [CVE-2023-54274](https://insights.sbomify.com/CVE-2023-54274/): RDMA/srpt: Add a check for valid 'mad_agent' pointer (not scored)
- [CVE-2023-54273](https://insights.sbomify.com/CVE-2023-54273/): xfrm: Fix leak of dev tracker (not scored)
- [CVE-2023-54272](https://insights.sbomify.com/CVE-2023-54272/): fs/ntfs3: Fix a possible null-pointer dereference in ni_clear() (not scored)
- [CVE-2023-54271](https://insights.sbomify.com/CVE-2023-54271/): blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init (not scored)
- [CVE-2023-54270](https://insights.sbomify.com/CVE-2023-54270/): media: usb: siano: Fix use after free bugs caused by do_submit_urb (not scored)
- [CVE-2023-5427](https://insights.sbomify.com/CVE-2023-5427/): Mali GPU Kernel Driver allows improper GPU processing operations (high 7.8)
- [CVE-2023-54269](https://insights.sbomify.com/CVE-2023-54269/): SUNRPC: double free xprt_ctxt while still in use (critical 9.8)
- [CVE-2023-54268](https://insights.sbomify.com/CVE-2023-54268/): debugobjects: Don't wake up kswapd from fill_pool() (not scored)
- [CVE-2023-54267](https://insights.sbomify.com/CVE-2023-54267/): powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT (not scored)
- [CVE-2023-54266](https://insights.sbomify.com/CVE-2023-54266/): media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (not scored)
- [CVE-2023-54265](https://insights.sbomify.com/CVE-2023-54265/): ipv6: Fix an uninit variable access bug in __ip6_make_skb() (not scored)
- [CVE-2023-54264](https://insights.sbomify.com/CVE-2023-54264/): fs/sysv: Null check to prevent null-ptr-deref bug (not scored)
- [CVE-2023-54263](https://insights.sbomify.com/CVE-2023-54263/): drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP (not scored)
- [CVE-2023-54262](https://insights.sbomify.com/CVE-2023-54262/): net/mlx5e: Don't clone flow post action attributes second time (high 8.8)
- [CVE-2023-54261](https://insights.sbomify.com/CVE-2023-54261/): drm/amdkfd: Add missing gfx11 MQD manager callbacks (not scored)
- [CVE-2023-54260](https://insights.sbomify.com/CVE-2023-54260/): cifs: Fix lost destroy smbd connection when MR allocate failed (not scored)
- [CVE-2023-5426](https://insights.sbomify.com/CVE-2023-5426/): Post Meta Data Manager <=1.2.0 - Missing Authorization to User, Term, and Post Meta Deletion (high 7.5)
- [CVE-2023-54259](https://insights.sbomify.com/CVE-2023-54259/): soundwire: bus: Fix unbalanced pm_runtime_put() causing usage count underflow (not scored)
- [CVE-2023-54258](https://insights.sbomify.com/CVE-2023-54258/): cifs: fix potential oops in cifs_oplock_break (critical 9.8)
- [CVE-2023-54257](https://insights.sbomify.com/CVE-2023-54257/): net: macb: fix a memory corruption in extended buffer descriptor mode (critical 9.8)
- [CVE-2023-54255](https://insights.sbomify.com/CVE-2023-54255/): sh: dma: Fix DMA channel offset calculation (not scored)
- [CVE-2023-54254](https://insights.sbomify.com/CVE-2023-54254/): drm/ttm: Don't leak a resource on eviction error (high 7.8)
- [CVE-2023-54253](https://insights.sbomify.com/CVE-2023-54253/): btrfs: set page extent mapped after read_folio in relocate_one_page (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/141/