# Vulnerabilities published in 2023


- [CVE-2023-53880](https://insights.sbomify.com/CVE-2023-53880/): Lucee 5.4.2.17 Authenticated Reflected Cross-Site Scripting via Admin Interfaces (medium 4.8)
- [CVE-2023-5388](https://insights.sbomify.com/CVE-2023-5388/): Weak cryptography in Firefox (medium 6.5)
- [CVE-2023-53879](https://insights.sbomify.com/CVE-2023-53879/): NVClient 5.0 Stack Buffer Overflow Vulnerability via User Configuration (medium 6.7)
- [CVE-2023-53878](https://insights.sbomify.com/CVE-2023-53878/): Member Login Script 3.3 Client-Side Request Desynchronization Vulnerability (medium 6.9)
- [CVE-2023-53877](https://insights.sbomify.com/CVE-2023-53877/): Bus Reservation System 1.1 Multiple SQL Injection via pickup_id Parameter (critical 9.3)
- [CVE-2023-53876](https://insights.sbomify.com/CVE-2023-53876/): Academy LMS 6.1 Arbitrary File Upload Vulnerability via Profile Settings (medium 5.1)
- [CVE-2023-53875](https://insights.sbomify.com/CVE-2023-53875/): GOM Player 2.3.90.5360 Remote Code Execution via Insecure IE Component (high 7.5)
- [CVE-2023-53874](https://insights.sbomify.com/CVE-2023-53874/): GOM Player 2.3.90.5360 Buffer Overflow via Equalizer Preset Name (medium 6.7)
- [CVE-2023-53873](https://insights.sbomify.com/CVE-2023-53873/): SyncBreeze 15.2.24 Denial of Service via Login Endpoint Overflow (high 8.7)
- [CVE-2023-53872](https://insights.sbomify.com/CVE-2023-53872/): Wp2Fac 1.0 OS Command Injection via send.php Endpoint (critical 9.3)
- [CVE-2023-53871](https://insights.sbomify.com/CVE-2023-53871/): Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logic (medium 6.9)
- [CVE-2023-53870](https://insights.sbomify.com/CVE-2023-53870/): Jorani 1.0.3 Cross-Site Scripting Vulnerability via Language Parameter (medium 5.1)
- [CVE-2023-5387](https://insights.sbomify.com/CVE-2023-5387/): Funnelforms Free <= 3.4 - Missing Authorization to Enable/Disable Dark Mode (medium 4.3)
- [CVE-2023-53869](https://insights.sbomify.com/CVE-2023-53869/): WEBIGniter 28.7.23 Unrestricted File Upload Remote Code Execution (high 8.7)
- [CVE-2023-53868](https://insights.sbomify.com/CVE-2023-53868/): Coppermine Gallery 1.6.25 Remote Code Execution via Plugin Upload (high 8.7)
- [CVE-2023-53867](https://insights.sbomify.com/CVE-2023-53867/): ceph: fix potential use-after-free bug when trimming caps (critical 9.8)
- [CVE-2023-53866](https://insights.sbomify.com/CVE-2023-53866/): ASoC: soc-compress: Reposition and add pcm_mutex (high 7.8)
- [CVE-2023-53865](https://insights.sbomify.com/CVE-2023-53865/): btrfs: fix warning when putting transaction with qgroups enabled after abort (not scored)
- [CVE-2023-53864](https://insights.sbomify.com/CVE-2023-53864/): drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (not scored)
- [CVE-2023-53863](https://insights.sbomify.com/CVE-2023-53863/): netlink: do not hard code device address lenth in fdb dumps (not scored)
- [CVE-2023-53862](https://insights.sbomify.com/CVE-2023-53862/): hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (high 7.8)
- [CVE-2023-53861](https://insights.sbomify.com/CVE-2023-53861/): ext4: correct grp validation in ext4_mb_good_group (not scored)
- [CVE-2023-53860](https://insights.sbomify.com/CVE-2023-53860/): dm: don't attempt to queue IO under RCU protection (high 7.8)
- [CVE-2023-5386](https://insights.sbomify.com/CVE-2023-5386/): Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Deletion (medium 6.5)
- [CVE-2023-53859](https://insights.sbomify.com/CVE-2023-53859/): s390/idle: mark arch_cpu_idle() noinstr (not scored)
- [CVE-2023-53858](https://insights.sbomify.com/CVE-2023-53858/): tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (not scored)
- [CVE-2023-53857](https://insights.sbomify.com/CVE-2023-53857/): bpf: bpf_sk_storage: Fix invalid wait context lockdep report (not scored)
- [CVE-2023-53856](https://insights.sbomify.com/CVE-2023-53856/): of: overlay: Call of_changeset_init() early (not scored)
- [CVE-2023-53855](https://insights.sbomify.com/CVE-2023-53855/): net: dsa: ocelot: call dsa_tag_8021q_unregister() under rtnl_lock() on driver remove (not scored)
- [CVE-2023-53854](https://insights.sbomify.com/CVE-2023-53854/): ASoC: mediatek: mt8186: Fix use-after-free in driver remove path (not scored)
- [CVE-2023-53853](https://insights.sbomify.com/CVE-2023-53853/): netlink: annotate accesses to nlk->cb_running (not scored)
- [CVE-2023-53852](https://insights.sbomify.com/CVE-2023-53852/): nvme-core: fix memory leak in dhchap_secret_store (not scored)
- [CVE-2023-53851](https://insights.sbomify.com/CVE-2023-53851/): drm/msm/dp: Drop aux devices together with DP controller (high 8.4)
- [CVE-2023-53850](https://insights.sbomify.com/CVE-2023-53850/): iavf: use internal state to free traffic IRQs (not scored)
- [CVE-2023-5385](https://insights.sbomify.com/CVE-2023-5385/): Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Duplication (medium 4.3)
- [CVE-2023-53849](https://insights.sbomify.com/CVE-2023-53849/): drm/msm: fix workqueue leak on bind errors (not scored)
- [CVE-2023-53848](https://insights.sbomify.com/CVE-2023-53848/): md/raid5-cache: fix a deadlock in r5l_exit_log() (not scored)
- [CVE-2023-53847](https://insights.sbomify.com/CVE-2023-53847/): usb-storage: alauda: Fix uninit-value in alauda_check_media() (not scored)
- [CVE-2023-53846](https://insights.sbomify.com/CVE-2023-53846/): f2fs: fix to do sanity check on direct node in truncate_dnode() (high 7.8)
- [CVE-2023-53845](https://insights.sbomify.com/CVE-2023-53845/): nilfs2: fix infinite loop in nilfs_mdt_get_block() (not scored)
- [CVE-2023-53844](https://insights.sbomify.com/CVE-2023-53844/): drm/ttm: Don't leak a resource on swapout move error (high 7.8)
- [CVE-2023-53843](https://insights.sbomify.com/CVE-2023-53843/): net: openvswitch: reject negative ifindex (not scored)
- [CVE-2023-53842](https://insights.sbomify.com/CVE-2023-53842/): ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove (not scored)
- [CVE-2023-53841](https://insights.sbomify.com/CVE-2023-53841/): devlink: report devlink_port_type_warn source device (not scored)
- [CVE-2023-53840](https://insights.sbomify.com/CVE-2023-53840/): usb: early: xhci-dbc: Fix a potential out-of-bound memory access (not scored)
- [CVE-2023-5384](https://insights.sbomify.com/CVE-2023-5384/): Infinispan: credentials returned from configuration as clear text (high 7.2)
- [CVE-2023-53839](https://insights.sbomify.com/CVE-2023-53839/): dccp: fix data-race around dp->dccps_mss_cache (not scored)
- [CVE-2023-53838](https://insights.sbomify.com/CVE-2023-53838/): f2fs: synchronize atomic write aborts (high 7.8)
- [CVE-2023-53837](https://insights.sbomify.com/CVE-2023-53837/): drm/msm: fix NULL-deref on snapshot tear down (not scored)
- [CVE-2023-53836](https://insights.sbomify.com/CVE-2023-53836/): bpf, sockmap: Fix skb refcnt race after locking changes (high 7.8)
- [CVE-2023-53834](https://insights.sbomify.com/CVE-2023-53834/): iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (not scored)
- [CVE-2023-53833](https://insights.sbomify.com/CVE-2023-53833/): drm/i915: Fix NULL ptr deref by checking new_crtc_state (not scored)
- [CVE-2023-53832](https://insights.sbomify.com/CVE-2023-53832/): md/raid10: fix null-ptr-deref in raid10_sync_request (not scored)
- [CVE-2023-53831](https://insights.sbomify.com/CVE-2023-53831/): net: read sk->sk_family once in sk_mc_loop() (not scored)
- [CVE-2023-53830](https://insights.sbomify.com/CVE-2023-53830/): platform/x86: think-lmi: Fix memory leak when showing current settings (not scored)
- [CVE-2023-5383](https://insights.sbomify.com/CVE-2023-5383/): Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Duplication (medium 4.3)
- [CVE-2023-53829](https://insights.sbomify.com/CVE-2023-53829/): f2fs: flush inode if atomic file is aborted (high 7.8)
- [CVE-2023-53828](https://insights.sbomify.com/CVE-2023-53828/): Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (high 7.8)
- [CVE-2023-53827](https://insights.sbomify.com/CVE-2023-53827/): Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (high 8.8)
- [CVE-2023-53826](https://insights.sbomify.com/CVE-2023-53826/): ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() (not scored)
- [CVE-2023-53825](https://insights.sbomify.com/CVE-2023-53825/): kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). (not scored)
- [CVE-2023-53824](https://insights.sbomify.com/CVE-2023-53824/): netlink: annotate lockless accesses to nlk->max_recvmsg_len (high 7.8)
- [CVE-2023-53823](https://insights.sbomify.com/CVE-2023-53823/): block/rq_qos: protect rq_qos apis with a new lock (high 7.8)
- [CVE-2023-53822](https://insights.sbomify.com/CVE-2023-53822/): wifi: ath11k: Ignore frags from uninitialized peer in dp. (high 8.8)
- [CVE-2023-53821](https://insights.sbomify.com/CVE-2023-53821/): ip6_vti: fix slab-use-after-free in decode_session6 (not scored)
- [CVE-2023-53820](https://insights.sbomify.com/CVE-2023-53820/): loop: loop_set_status_from_info() check before assignment (not scored)
- [CVE-2023-5382](https://insights.sbomify.com/CVE-2023-5382/): Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Deletion (medium 6.5)
- [CVE-2023-53819](https://insights.sbomify.com/CVE-2023-53819/): amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (high 7.8)
- [CVE-2023-53818](https://insights.sbomify.com/CVE-2023-53818/): ARM: zynq: Fix refcount leak in zynq_early_slcr_init (not scored)
- [CVE-2023-53817](https://insights.sbomify.com/CVE-2023-53817/): crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (high 7.5)
- [CVE-2023-53816](https://insights.sbomify.com/CVE-2023-53816/): drm/amdkfd: fix potential kgd_mem UAFs (high 7.8)
- [CVE-2023-53815](https://insights.sbomify.com/CVE-2023-53815/): posix-timers: Prevent RT livelock in itimer_delete() (not scored)
- [CVE-2023-53814](https://insights.sbomify.com/CVE-2023-53814/): PCI: Fix dropping valid root bus resources with .end = zero (not scored)
- [CVE-2023-53813](https://insights.sbomify.com/CVE-2023-53813/): ext4: fix rbtree traversal bug in ext4_mb_use_preallocated (not scored)
- [CVE-2023-53812](https://insights.sbomify.com/CVE-2023-53812/): media: mediatek: vcodec: fix decoder disable pm crash (not scored)
- [CVE-2023-53811](https://insights.sbomify.com/CVE-2023-53811/): RDMA/irdma: Cap MSIX used to online CPUs + 1 (not scored)
- [CVE-2023-53810](https://insights.sbomify.com/CVE-2023-53810/): blk-mq: release crypto keyslot before reporting I/O complete (high 7.8)
- [CVE-2023-5381](https://insights.sbomify.com/CVE-2023-5381/): Elementor Addon Elements <= 1.12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting (medium 4.4)
- [CVE-2023-53809](https://insights.sbomify.com/CVE-2023-53809/): l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register() (not scored)
- [CVE-2023-53808](https://insights.sbomify.com/CVE-2023-53808/): wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (not scored)
- [CVE-2023-53807](https://insights.sbomify.com/CVE-2023-53807/): clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider() (not scored)
- [CVE-2023-53806](https://insights.sbomify.com/CVE-2023-53806/): drm/amd/display: populate subvp cmd info only for the top pipe (high 7.8)
- [CVE-2023-53804](https://insights.sbomify.com/CVE-2023-53804/): nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (high 7.8)
- [CVE-2023-53803](https://insights.sbomify.com/CVE-2023-53803/): scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (high 8.1)
- [CVE-2023-53802](https://insights.sbomify.com/CVE-2023-53802/): wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (not scored)
- [CVE-2023-53801](https://insights.sbomify.com/CVE-2023-53801/): iommu/sprd: Release dma buffer to avoid memory leak (not scored)
- [CVE-2023-53800](https://insights.sbomify.com/CVE-2023-53800/): ubi: Fix use-after-free when volume resizing failed (high 7.8)
- [CVE-2023-5380](https://insights.sbomify.com/CVE-2023-5380/): Xorg-x11-server: use-after-free bug in destroywindow (medium 4.7)
- [CVE-2023-53799](https://insights.sbomify.com/CVE-2023-53799/): crypto: api - Use work queue in crypto_destroy_instance (not scored)
- [CVE-2023-53798](https://insights.sbomify.com/CVE-2023-53798/): ethtool: Fix uninitialized number of lanes (not scored)
- [CVE-2023-53797](https://insights.sbomify.com/CVE-2023-53797/): HID: wacom: Use ktime_t rather than int when dealing with timestamps (high 7.1)
- [CVE-2023-53796](https://insights.sbomify.com/CVE-2023-53796/): f2fs: fix information leak in f2fs_move_inline_dirents() (not scored)
- [CVE-2023-53795](https://insights.sbomify.com/CVE-2023-53795/): iommufd: IOMMUFD_DESTROY should not increase the refcount (high 7.8)
- [CVE-2023-53794](https://insights.sbomify.com/CVE-2023-53794/): cifs: fix session state check in reconnect to avoid use-after-free issue (critical 9.8)
- [CVE-2023-53793](https://insights.sbomify.com/CVE-2023-53793/): perf tool x86: Fix perf_env memory leak (not scored)
- [CVE-2023-53792](https://insights.sbomify.com/CVE-2023-53792/): nvme-core: fix memory leak in dhchap_ctrl_secret (not scored)
- [CVE-2023-53791](https://insights.sbomify.com/CVE-2023-53791/): md: fix warning for holder mismatch from export_rdev() (not scored)
- [CVE-2023-53790](https://insights.sbomify.com/CVE-2023-53790/): bpf: Zeroing allocated object from slab in bpf memory allocator (high 7.8)
- [CVE-2023-5379](https://insights.sbomify.com/CVE-2023-5379/): Undertow: ajp request closes connection exceeding maxrequestsize (high 7.5)
- [CVE-2023-53789](https://insights.sbomify.com/CVE-2023-53789/): iommu/amd: Improve page fault error reporting (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/146/