Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 151 of 430.
- CVE-2023-53418 USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup()
- CVE-2023-53417 USB: sl811: fix memory leak with using debugfs_lookup()
- CVE-2023-53416 USB: isp1362: fix memory leak with using debugfs_lookup()
- CVE-2023-53415 USB: dwc3: fix memory leak with using debugfs_lookup()
- CVE-2023-53414 scsi: snic: Fix memory leak with using debugfs_lookup()
- CVE-2023-53413 USB: isp116x: fix memory leak with using debugfs_lookup()
- CVE-2023-53412 USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup()
- CVE-2023-53411 PM: EM: fix memory leak with using debugfs_lookup()
- CVE-2023-53410 USB: ULPI: fix memory leak with using debugfs_lookup()
- CVE-2023-5341 Imagemagick: heap use-after-free in coders/bmp.c
- CVE-2023-53409 drivers: base: component: fix memory leak with using debugfs_lookup()
- CVE-2023-53408 trace/blktrace: fix memory leak with using debugfs_lookup()
- CVE-2023-53407 USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup()
- CVE-2023-53406 USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup()
- CVE-2023-53405 USB: gadget: gr_udc: fix memory leak with using debugfs_lookup()
- CVE-2023-53404 USB: fotg210: fix memory leak with using debugfs_lookup()
- CVE-2023-53403 time/debug: Fix memory leak with using debugfs_lookup()
- CVE-2023-53402 kernel/printk/index.c: fix memory leak with using debugfs_lookup()
- CVE-2023-53401 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
- CVE-2023-53400 ALSA: hda: Fix Oops by 9.1 surround channel names
- CVE-2023-5340 Five Star Restaurant Menu and Food Ordering < 2.4.11 - Unauthenticated PHP Object Injection
- CVE-2023-53399 ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- CVE-2023-53398 mlx5: fix possible ptp queue fifo use-after-free
- CVE-2023-53397 modpost: fix off by one in is_executable_section()
- CVE-2023-53396 ubifs: Fix memory leak in do_rename
- CVE-2023-53395 ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
- CVE-2023-53394 net/mlx5e: xsk: Fix crash on regular rq reactivation
- CVE-2023-53393 RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device
- CVE-2023-53392 HID: intel-ish-hid: Fix kernel panic during warm reset
- CVE-2023-53391 shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs
- CVE-2023-53390 drivers: base: dd: fix memory leak with using debugfs_lookup()
- CVE-2023-5339 Mattermost Desktop logs all keystrokes during initial run after fresh installation
- CVE-2023-53389 drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached
- CVE-2023-53388 drm/mediatek: Clean dangling pointer on bind error path
- CVE-2023-53387 scsi: ufs: core: Fix device management cmd timeout flow
- CVE-2023-53386 Bluetooth: Fix potential use-after-free when clear keys
- CVE-2023-53385 media: mdp3: Fix resource leaks in of_find_device_by_node
- CVE-2023-53384 wifi: mwifiex: avoid possible NULL skb pointer dereference
- CVE-2023-53383 irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4
- CVE-2023-53382 net/smc: Reset connection when trying to use SMCRv2 fails.
- CVE-2023-53381 NFSD: fix leaked reference count of nfsd4_ssc_umount_item
- CVE-2023-53380 md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- CVE-2023-5338 Theme Blvd Shortcodes <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-53379 usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
- CVE-2023-53378 drm/i915/dpt: Treat the DPT BO as a framebuffer
- CVE-2023-53377 cifs: prevent use-after-free by freeing the cfile later
- CVE-2023-53376 scsi: mpi3mr: Use number of bits to manage bitmap sizes
- CVE-2023-53375 tracing: Free error logs of tracing instances
- CVE-2023-53374 Bluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early
- CVE-2023-53373 crypto: seqiv - Handle EBUSY correctly
- CVE-2023-53372 sctp: fix a potential overflow in sctp_ifwdtsn_skip
- CVE-2023-53371 net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create
- CVE-2023-53370 drm/amdgpu: fix memory leak in mes self test
- CVE-2023-5337 Contact form Form For All <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-53369 net: dcb: choose correct policy to parse DCB_ATTR_BCN
- CVE-2023-53368 tracing: Fix race issue between cpu buffer write and swap
- CVE-2023-53367 accel/habanalabs: fix mem leak in capture user mappings
- CVE-2023-53366 block: be a bit more careful in checking for NULL bdev while polling
- CVE-2023-53365 ip6mr: Fix skb_under_panic in ip6mr_cache_report()
- CVE-2023-53364 regulator: da9063: better fix null deref with partial DT
- CVE-2023-53363 PCI: Fix use-after-free in pci_bus_release_domain_nr()
- CVE-2023-53362 bus: fsl-mc: don't assume child devices are all fsl-mc devices
- CVE-2023-53361 LoongArch: mm: Add p?d_leaf() definitions
- CVE-2023-53360 NFSv4.2: Rework scratch handling for READ_PLUS (again)
- CVE-2023-5336 iPanorama 360 – WordPress Virtual Tour Builder <= 1.8.0 - Authenticated (Contributor+) SQL Injection via Shortcode
- CVE-2023-53359 USB: fix memory leak with using debugfs_lookup()
- CVE-2023-53358 ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- CVE-2023-53357 md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- CVE-2023-53356 usb: gadget: u_serial: Add null pointer check in gserial_suspend
- CVE-2023-53355 staging: pi433: fix memory leak with using debugfs_lookup()
- CVE-2023-53354 skbuff: skb_segment, Call zero copy functions before using skbuff frags
- CVE-2023-53353 accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release()
- CVE-2023-53352 drm/ttm: check null pointer before accessing when swapping
- CVE-2023-53351 drm/sched: Check scheduler work queue before calling timeout handling
- CVE-2023-53350 accel/qaic: Fix slicing memory leak
- CVE-2023-5335 Buzzsprout Podcasting <= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-53349 media: ov2740: Fix memleak in ov2740_init_controls()
- CVE-2023-53348 btrfs: fix deadlock when aborting transaction during relocation with scrub
- CVE-2023-53347 net/mlx5: Handle pairing of E-switch via uplink un/load APIs
- CVE-2023-53346 kernel/fail_function: fix memory leak with using debugfs_lookup()
- CVE-2023-53345 rxrpc: Fix potential data race in rxrpc_wait_to_be_connected()
- CVE-2023-53344 can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
- CVE-2023-53343 icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
- CVE-2023-53342 net: marvell: prestera: fix handling IPv4 routes with nhid
- CVE-2023-53341 of/fdt: run soc memory setup when early_init_dt_scan_memory fails
- CVE-2023-53340 net/mlx5: Collect command failures data only for known commands
- CVE-2023-5334 WP Responsive header image slider <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-53339 btrfs: fix BUG_ON condition in btrfs_cancel_balance
- CVE-2023-53338 lwt: Fix return values of BPF xmit ops
- CVE-2023-53337 nilfs2: do not write dirty data after degenerating to read-only
- CVE-2023-53336 media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings
- CVE-2023-53335 RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()
- CVE-2023-53334 USB: chipidea: fix memory leak with using debugfs_lookup()
- CVE-2023-53333 netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- CVE-2023-53332 genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()
- CVE-2023-53331 pstore/ram: Check start of empty przs during init
- CVE-2023-53330 caif: fix memory leak in cfctrl_linkup_request()
- CVE-2023-5333 Denial of Service via multiple identical User IDs in /api/v4/users/ids
- CVE-2023-53329 workqueue: fix data race with the pwq->stats[] increment
- CVE-2023-53328 fs/ntfs3: Enhance sanity check while generating attr_list