Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 146 of 430.
- CVE-2023-53880 Lucee 5.4.2.17 Authenticated Reflected Cross-Site Scripting via Admin Interfaces
- CVE-2023-5388 Weak cryptography in Firefox
- CVE-2023-53879 NVClient 5.0 Stack Buffer Overflow Vulnerability via User Configuration
- CVE-2023-53878 Member Login Script 3.3 Client-Side Request Desynchronization Vulnerability
- CVE-2023-53877 Bus Reservation System 1.1 Multiple SQL Injection via pickup_id Parameter
- CVE-2023-53876 Academy LMS 6.1 Arbitrary File Upload Vulnerability via Profile Settings
- CVE-2023-53875 GOM Player 2.3.90.5360 Remote Code Execution via Insecure IE Component
- CVE-2023-53874 GOM Player 2.3.90.5360 Buffer Overflow via Equalizer Preset Name
- CVE-2023-53873 SyncBreeze 15.2.24 Denial of Service via Login Endpoint Overflow
- CVE-2023-53872 Wp2Fac 1.0 OS Command Injection via send.php Endpoint
- CVE-2023-53871 Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logic
- CVE-2023-53870 Jorani 1.0.3 Cross-Site Scripting Vulnerability via Language Parameter
- CVE-2023-5387 Funnelforms Free <= 3.4 - Missing Authorization to Enable/Disable Dark Mode
- CVE-2023-53869 WEBIGniter 28.7.23 Unrestricted File Upload Remote Code Execution
- CVE-2023-53868 Coppermine Gallery 1.6.25 Remote Code Execution via Plugin Upload
- CVE-2023-53867 ceph: fix potential use-after-free bug when trimming caps
- CVE-2023-53866 ASoC: soc-compress: Reposition and add pcm_mutex
- CVE-2023-53865 btrfs: fix warning when putting transaction with qgroups enabled after abort
- CVE-2023-53864 drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable()
- CVE-2023-53863 netlink: do not hard code device address lenth in fdb dumps
- CVE-2023-53862 hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
- CVE-2023-53861 ext4: correct grp validation in ext4_mb_good_group
- CVE-2023-53860 dm: don't attempt to queue IO under RCU protection
- CVE-2023-5386 Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Deletion
- CVE-2023-53859 s390/idle: mark arch_cpu_idle() noinstr
- CVE-2023-53858 tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error
- CVE-2023-53857 bpf: bpf_sk_storage: Fix invalid wait context lockdep report
- CVE-2023-53856 of: overlay: Call of_changeset_init() early
- CVE-2023-53855 net: dsa: ocelot: call dsa_tag_8021q_unregister() under rtnl_lock() on driver remove
- CVE-2023-53854 ASoC: mediatek: mt8186: Fix use-after-free in driver remove path
- CVE-2023-53853 netlink: annotate accesses to nlk->cb_running
- CVE-2023-53852 nvme-core: fix memory leak in dhchap_secret_store
- CVE-2023-53851 drm/msm/dp: Drop aux devices together with DP controller
- CVE-2023-53850 iavf: use internal state to free traffic IRQs
- CVE-2023-5385 Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Duplication
- CVE-2023-53849 drm/msm: fix workqueue leak on bind errors
- CVE-2023-53848 md/raid5-cache: fix a deadlock in r5l_exit_log()
- CVE-2023-53847 usb-storage: alauda: Fix uninit-value in alauda_check_media()
- CVE-2023-53846 f2fs: fix to do sanity check on direct node in truncate_dnode()
- CVE-2023-53845 nilfs2: fix infinite loop in nilfs_mdt_get_block()
- CVE-2023-53844 drm/ttm: Don't leak a resource on swapout move error
- CVE-2023-53843 net: openvswitch: reject negative ifindex
- CVE-2023-53842 ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove
- CVE-2023-53841 devlink: report devlink_port_type_warn source device
- CVE-2023-53840 usb: early: xhci-dbc: Fix a potential out-of-bound memory access
- CVE-2023-5384 Infinispan: credentials returned from configuration as clear text
- CVE-2023-53839 dccp: fix data-race around dp->dccps_mss_cache
- CVE-2023-53838 f2fs: synchronize atomic write aborts
- CVE-2023-53837 drm/msm: fix NULL-deref on snapshot tear down
- CVE-2023-53836 bpf, sockmap: Fix skb refcnt race after locking changes
- CVE-2023-53834 iio: adc: ina2xx: avoid NULL pointer dereference on OF device match
- CVE-2023-53833 drm/i915: Fix NULL ptr deref by checking new_crtc_state
- CVE-2023-53832 md/raid10: fix null-ptr-deref in raid10_sync_request
- CVE-2023-53831 net: read sk->sk_family once in sk_mc_loop()
- CVE-2023-53830 platform/x86: think-lmi: Fix memory leak when showing current settings
- CVE-2023-5383 Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Duplication
- CVE-2023-53829 f2fs: flush inode if atomic file is aborted
- CVE-2023-53828 Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor()
- CVE-2023-53827 Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}
- CVE-2023-53826 ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- CVE-2023-53825 kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
- CVE-2023-53824 netlink: annotate lockless accesses to nlk->max_recvmsg_len
- CVE-2023-53823 block/rq_qos: protect rq_qos apis with a new lock
- CVE-2023-53822 wifi: ath11k: Ignore frags from uninitialized peer in dp.
- CVE-2023-53821 ip6_vti: fix slab-use-after-free in decode_session6
- CVE-2023-53820 loop: loop_set_status_from_info() check before assignment
- CVE-2023-5382 Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Deletion
- CVE-2023-53819 amdgpu: validate offset_in_bo of drm_amdgpu_gem_va
- CVE-2023-53818 ARM: zynq: Fix refcount leak in zynq_early_slcr_init
- CVE-2023-53817 crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
- CVE-2023-53816 drm/amdkfd: fix potential kgd_mem UAFs
- CVE-2023-53815 posix-timers: Prevent RT livelock in itimer_delete()
- CVE-2023-53814 PCI: Fix dropping valid root bus resources with .end = zero
- CVE-2023-53813 ext4: fix rbtree traversal bug in ext4_mb_use_preallocated
- CVE-2023-53812 media: mediatek: vcodec: fix decoder disable pm crash
- CVE-2023-53811 RDMA/irdma: Cap MSIX used to online CPUs + 1
- CVE-2023-53810 blk-mq: release crypto keyslot before reporting I/O complete
- CVE-2023-5381 Elementor Addon Elements <= 1.12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2023-53809 l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()
- CVE-2023-53808 wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
- CVE-2023-53807 clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider()
- CVE-2023-53806 drm/amd/display: populate subvp cmd info only for the top pipe
- CVE-2023-53804 nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
- CVE-2023-53803 scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
- CVE-2023-53802 wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function
- CVE-2023-53801 iommu/sprd: Release dma buffer to avoid memory leak
- CVE-2023-53800 ubi: Fix use-after-free when volume resizing failed
- CVE-2023-5380 Xorg-x11-server: use-after-free bug in destroywindow
- CVE-2023-53799 crypto: api - Use work queue in crypto_destroy_instance
- CVE-2023-53798 ethtool: Fix uninitialized number of lanes
- CVE-2023-53797 HID: wacom: Use ktime_t rather than int when dealing with timestamps
- CVE-2023-53796 f2fs: fix information leak in f2fs_move_inline_dirents()
- CVE-2023-53795 iommufd: IOMMUFD_DESTROY should not increase the refcount
- CVE-2023-53794 cifs: fix session state check in reconnect to avoid use-after-free issue
- CVE-2023-53793 perf tool x86: Fix perf_env memory leak
- CVE-2023-53792 nvme-core: fix memory leak in dhchap_ctrl_secret
- CVE-2023-53791 md: fix warning for holder mismatch from export_rdev()
- CVE-2023-53790 bpf: Zeroing allocated object from slab in bpf memory allocator
- CVE-2023-5379 Undertow: ajp request closes connection exceeding maxrequestsize
- CVE-2023-53789 iommu/amd: Improve page fault error reporting