Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 154 of 430.
- CVE-2023-5314 WP EXtra <= 6.2 - Missing Authorization to Arbitrary Email Sending
- CVE-2023-53139 nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
- CVE-2023-53138 net: caif: Fix use-after-free in cfusbl_device_notify()
- CVE-2023-53136 af_unix: fix struct pid leaks in OOB support
- CVE-2023-53135 riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode
- CVE-2023-53134 bnxt_en: Avoid order-5 memory allocation for TPA data
- CVE-2023-53133 bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- CVE-2023-53132 scsi: mpi3mr: Fix mpi3mr_hba_port memory leak in mpi3mr_remove()
- CVE-2023-53131 SUNRPC: Fix a server shutdown leak
- CVE-2023-5313 phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique action
- CVE-2023-53128 scsi: mpi3mr: Fix throttle_groups memory leak
- CVE-2023-53127 scsi: mpi3mr: Fix expander node leak in mpi3mr_remove()
- CVE-2023-53126 scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove()
- CVE-2023-53125 net: usb: smsc75xx: Limit packet length to skb->len
- CVE-2023-53124 scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- CVE-2023-53123 PCI: s390: Fix use-after-free of PCI resources with per-function hotplug
- CVE-2023-53121 tcp: tcp_make_synack() can be called from process context
- CVE-2023-53120 scsi: mpi3mr: Fix config page DMA memory leak
- CVE-2023-53119 nfc: pn533: initialize struct pn533_out_arg properly
- CVE-2023-53118 scsi: core: Fix a procfs host directory removal regression
- CVE-2023-53117 fs: prevent out-of-bounds array speculation when closing a file descriptor
- CVE-2023-53116 nvmet: avoid potential UAF in nvmet_req_complete()
- CVE-2023-53115 scsi: mpi3mr: Fix memory leaks in mpi3mr_init_ioc()
- CVE-2023-53114 i40e: Fix kernel crash during reboot when adapter is in recovery mode
- CVE-2023-53113 wifi: nl80211: fix NULL-ptr deref in offchan check
- CVE-2023-53112 drm/i915/sseu: fix max_subslices array-index-out-of-bounds access
- CVE-2023-53111 loop: Fix use-after-free issues
- CVE-2023-53110 net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()
- CVE-2023-5311 WP EXtra <= 6.2 - Missing Authorization to .htaccess File Modification
- CVE-2023-53109 net: tunnels: annotate lockless accesses to dev->needed_headroom
- CVE-2023-53108 net/iucv: Fix size of interrupt data
- CVE-2023-53107 veth: Fix use after free in XDP_REDIRECT
- CVE-2023-53106 nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- CVE-2023-53105 net/mlx5e: Fix cleanup null-ptr deref on encap lock
- CVE-2023-53103 bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- CVE-2023-53102 ice: xsk: disable txq irq before flushing hw
- CVE-2023-53101 ext4: zero i_disksize when initializing the bootloader inode
- CVE-2023-53100 ext4: fix WARNING in ext4_update_inline_data
- CVE-2023-5310 Z-Wave Denial of Service caused by Stream of Packets
- CVE-2023-53099 firmware: xilinx: don't make a sleepable memory allocation from an atomic context
- CVE-2023-53098 media: rc: gpio-ir-recv: add remove function
- CVE-2023-53097 powerpc/iommu: fix memory leak with using debugfs_lookup()
- CVE-2023-53096 interconnect: fix mem leak when freeing nodes
- CVE-2023-53095 drm/ttm: Fix a NULL pointer dereference
- CVE-2023-53094 tty: serial: fsl_lpuart: fix race on RX DMA shutdown
- CVE-2023-53093 tracing: Do not let histogram values have some modifiers
- CVE-2023-53092 interconnect: exynos: fix node leak in probe PM QoS error path
- CVE-2023-53091 ext4: update s_journal_inum if it changes after journal replay
- CVE-2023-53090 drm/amdkfd: Fix an illegal memory access
- CVE-2023-5309 Broken Session Management in Puppet Enterprise
- CVE-2023-53089 ext4: fix task hung in ext4_xattr_delete_inode
- CVE-2023-53088 mptcp: fix UaF in listener shutdown
- CVE-2023-53087 drm/i915/active: Fix misuse of non-idle barriers as fence trackers
- CVE-2023-53086 wifi: mt76: connac: do not check WED status for non-mmio devices
- CVE-2023-53085 drm/edid: fix info leak when failing to get panel id
- CVE-2023-53084 drm/shmem-helper: Remove another errant put in error path
- CVE-2023-53083 nfsd: don't replace page in rq_pages if it's a continuation of last page
- CVE-2023-53082 vp_vdpa: fix the crash in hot unplug with vp_vdpa
- CVE-2023-53081 ocfs2: fix data corruption after failed write
- CVE-2023-53080 xsk: Add missing overflow check in xdp_umem_reg
- CVE-2023-5308 Podcast Subscribe Buttons <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-53079 net/mlx5: Fix steering rules cleanup
- CVE-2023-53078 scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate()
- CVE-2023-53077 drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes
- CVE-2023-53075 ftrace: Fix invalid address access in lookup_rec() when index is 0
- CVE-2023-53074 drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini
- CVE-2023-53073 perf/x86/amd/core: Always clear status for idx
- CVE-2023-53072 mptcp: use the workqueue to destroy unaccepted sockets
- CVE-2023-53071 wifi: mt76: do not run mt76_unregister_device() on unregistered hw
- CVE-2023-53070 ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent
- CVE-2023-5307 Photos and Files Contest Gallery – Contact Form < 21.2.8.1 - Unauthenticated Stored XSS via HTTP Headers
- CVE-2023-53069 octeontx2-vf: Add missing free for alloc_percpu
- CVE-2023-53068 net: usb: lan78xx: Limit packet length to skb->len
- CVE-2023-53067 LoongArch: Only call get_timer_irq() once in constant_clockevent_init()
- CVE-2023-53066 qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info
- CVE-2023-53065 perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- CVE-2023-53064 iavf: fix hang on reboot with ice
- CVE-2023-53062 net: usb: smsc95xx: Limit packet length to skb->len
- CVE-2023-53061 ksmbd: fix possible refcount leak in smb2_open()
- CVE-2023-53060 igb: revert rtnl_lock() that causes deadlock
- CVE-2023-53059 platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl
- CVE-2023-53058 net/mlx5: E-Switch, Fix an Oops in error handling code
- CVE-2023-53057 Bluetooth: HCI: Fix global-out-of-bounds
- CVE-2023-53056 scsi: qla2xxx: Synchronize the IOCB count to be in order
- CVE-2023-53055 fscrypt: destroy keyring after security_sb_delete()
- CVE-2023-53054 usb: dwc2: fix a devres leak in hw_enable upon suspend resume
- CVE-2023-53053 erspan: do not use skb_mac_header() in ndo_start_xmit()
- CVE-2023-53052 cifs: fix use-after-free bug in refresh_cache_worker()
- CVE-2023-53051 dm crypt: add cond_resched() to dmcrypt_write()
- CVE-2023-53050 thunderbolt: Fix memory leak in margining
- CVE-2023-5305 Online Banquet Booking System Contact Us Page mail.php cross site scripting
- CVE-2023-53049 usb: ucsi: Fix NULL pointer deref in ucsi_connector_change()
- CVE-2023-53048 usb: typec: tcpm: fix warning when handle discover_identity message
- CVE-2023-53047 tee: amdtee: fix race condition in amdtee_open_session
- CVE-2023-53046 Bluetooth: Fix race condition in hci_cmd_sync_clear
- CVE-2023-53045 usb: gadget: u_audio: don't let userspace block driver unbind
- CVE-2023-53044 dm stats: check for and propagate alloc_percpu failure
- CVE-2023-53043 arm64: dts: qcom: sc7280: Mark PCIe controller as cache coherent
- CVE-2023-53042 drm/amd/display: Do not set DRR on pipe Commit
- CVE-2023-53041 scsi: qla2xxx: Perform lockless command completion in abort path