Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 149 of 430.
- CVE-2023-53601 bonding: do not assume skb mac_header is set
- CVE-2023-53600 tunnels: fix kasan splat when generating ipv4 pmtu error
- CVE-2023-5360 Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload
- CVE-2023-53599 crypto: af_alg - Fix missing initialisation affecting gcm-aes-s390
- CVE-2023-53598 bus: mhi: host: Range check CHDBOFF and ERDBOFF
- CVE-2023-53597 cifs: fix mid leak during reconnection after timeout threshold
- CVE-2023-53596 drivers: base: Free devm resources when unregistering a device
- CVE-2023-53595 octeontx2-pf: mcs: Fix NULL pointer dereferences
- CVE-2023-53594 driver core: fix resource leak in device_add()
- CVE-2023-53593 cifs: Release folio lock on fscache read hit.
- CVE-2023-53592 gpio: sifive: Fix refcount leak in sifive_gpio_probe
- CVE-2023-53591 net/mlx5e: Fix deadlock in tc route query code
- CVE-2023-53590 sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop
- CVE-2023-5359 W3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in Plaintext
- CVE-2023-53589 wifi: iwlwifi: mvm: don't trust firmware n_channels
- CVE-2023-53588 wifi: mac80211: check for station first in client probe
- CVE-2023-53587 ring-buffer: Sync IRQ works before buffer destruction
- CVE-2023-53586 scsi: target: Fix multiple LUN_RESET handling
- CVE-2023-53585 bpf: reject unhashed sockets in bpf_sk_assign
- CVE-2023-53584 ubifs: ubifs_releasepage: Remove ubifs_assert(0) to valid this process
- CVE-2023-53583 perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start()
- CVE-2023-53582 wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds
- CVE-2023-53581 net/mlx5e: Check for NOT_READY flag state after locking
- CVE-2023-53580 USB: Gadget: core: Help prevent panic during UVC unconfigure
- CVE-2023-5358 Missing authorization in Devolutions Server
- CVE-2023-53579 gpio: mvebu: fix irq domain leak
- CVE-2023-53578 net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
- CVE-2023-53577 bpf, cpumap: Make sure kthread is running before map update returns
- CVE-2023-53576 null_blk: Always check queue mode setting from configfs
- CVE-2023-53575 wifi: iwlwifi: mvm: fix potential array out of bounds access
- CVE-2023-53574 wifi: rtw88: delete timer and free skb queue when unloading
- CVE-2023-53573 clk: rs9: Fix suspend/resume
- CVE-2023-53572 clk: imx: scu: use _safe list iterator to avoid a use after free
- CVE-2023-53571 drm/i915: Make intel_get_crtc_new_encoder() less oopsy
- CVE-2023-53570 wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()
- CVE-2023-5357 Instagram for WordPress <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-53569 ext2: Check block size validity during mount
- CVE-2023-53568 s390/zcrypt: don't leak memory if dev_set_name() fails
- CVE-2023-53567 spi: qup: Don't skip cleanup in remove's error path
- CVE-2023-53566 netfilter: nft_set_rbtree: fix null deref on element insertion
- CVE-2023-53565 wifi: brcmfmac: Check for probe() id argument being NULL
- CVE-2023-53564 ocfs2: fix defrag path triggering jbd2 ASSERT
- CVE-2023-53563 cpufreq: amd-pstate-ut: Fix kernel panic when loading the driver
- CVE-2023-53562 drm/msm: fix vram leak on bind errors
- CVE-2023-53561 net: wwan: iosm: fix NULL pointer dereference when removing device
- CVE-2023-53560 tracing/histograms: Add histograms to hist_vars if they have referenced variables
- CVE-2023-5356 Incorrect Authorization in GitLab
- CVE-2023-53559 ip_vti: fix potential slab-use-after-free in decode_session6
- CVE-2023-53558 rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic()
- CVE-2023-53557 fprobe: Release rethook after the ftrace_ops is unregistered
- CVE-2023-53556 iavf: Fix use-after-free in free_netdev
- CVE-2023-53555 mm/damon/core: initialize damo_filter->list from damos_new_filter()
- CVE-2023-53554 staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
- CVE-2023-53553 HID: hyperv: avoid struct memcpy overrun warning
- CVE-2023-53552 drm/i915: mark requests for GuC virtual engines to avoid use-after-free
- CVE-2023-53551 usb: gadget: u_serial: Add null pointer check in gserial_resume
- CVE-2023-53550 cpufreq: amd-pstate: fix global sysfs attribute type
- CVE-2023-5355 Awesome Support < 6.1.5 - Submitter+ Arbitrary File Deletion
- CVE-2023-53549 netfilter: ipset: Rework long task execution when adding/deleting entries
- CVE-2023-53548 net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
- CVE-2023-53547 drm/amdgpu: Fix sdma v4 sw fini error
- CVE-2023-53546 net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
- CVE-2023-53545 drm/amdgpu: unmap and remove csa_va properly
- CVE-2023-53544 cpufreq: davinci: Fix clk use after free
- CVE-2023-53543 vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check
- CVE-2023-53542 ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy
- CVE-2023-53541 mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
- CVE-2023-53540 wifi: cfg80211: reject auth/assoc to AP with our address
- CVE-2023-5354 Awesome Support < 6.1.5 - Reflected Cross-Site Scripting
- CVE-2023-53539 RDMA/rxe: Fix incomplete state save in rxe_requester
- CVE-2023-53538 btrfs: insert tree mod log move in push_node_left
- CVE-2023-53537 f2fs: fix to avoid use-after-free for cached IPU bio
- CVE-2023-53536 blk-crypto: make blk_crypto_evict_key() more robust
- CVE-2023-53535 net: bcmgenet: Add a check for oversized packets
- CVE-2023-53534 drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc
- CVE-2023-53533 Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
- CVE-2023-53532 wifi: ath11k: fix deinitialization of firmware resources
- CVE-2023-53531 null_blk: fix poll request timeout handling
- CVE-2023-53530 scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id()
- CVE-2023-5353 Improper Access Control in salesagility/suitecrm
- CVE-2023-53529 wifi: rtw88: Fix memory leak in rtw88_usb
- CVE-2023-53528 RDMA/rxe: Fix unsafe drain work queue code
- CVE-2023-53527 thunderbolt: Fix memory leak in tb_handle_dp_bandwidth_request()
- CVE-2023-53526 jbd2: check 'jh->b_transaction' before removing it from checkpoint
- CVE-2023-53525 RDMA/cma: Allow UD qp_type to join multicast only
- CVE-2023-53524 wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf
- CVE-2023-53523 can: gs_usb: fix time stamp counter initialization
- CVE-2023-53522 cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex
- CVE-2023-53521 scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
- CVE-2023-53520 Bluetooth: Fix hci_suspend_sync crash
- CVE-2023-5352 Awesome Support < 6.1.5 - Insufficient permission check in wpas_edit_reply
- CVE-2023-53519 media: v4l2-mem2mem: add lock to protect parameter num_rdy
- CVE-2023-53518 PM / devfreq: Fix leak in devfreq_dev_release()
- CVE-2023-53517 tipc: do not update mtu if msg_max is too small in mtu negotiation
- CVE-2023-53516 macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF
- CVE-2023-53515 virtio-mmio: don't break lifecycle of vm_dev
- CVE-2023-53514 gpu: host1x: Fix memory leak of device names
- CVE-2023-53513 nbd: fix incomplete validation of ioctl arg
- CVE-2023-53512 scsi: mpt3sas: Fix a memory leak
- CVE-2023-53511 io_uring: fix fget leak when fs don't support nowait buffered read