# Vulnerabilities published in 2023


- [CVE-2023-5314](https://insights.sbomify.com/CVE-2023-5314/): WP EXtra <= 6.2 - Missing Authorization to Arbitrary Email Sending (medium 4.3)
- [CVE-2023-53139](https://insights.sbomify.com/CVE-2023-53139/): nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (medium 5.5)
- [CVE-2023-53138](https://insights.sbomify.com/CVE-2023-53138/): net: caif: Fix use-after-free in cfusbl_device_notify() (high 7.8)
- [CVE-2023-53136](https://insights.sbomify.com/CVE-2023-53136/): af_unix: fix struct pid leaks in OOB support (high 7.1)
- [CVE-2023-53135](https://insights.sbomify.com/CVE-2023-53135/): riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode (high 7.1)
- [CVE-2023-53134](https://insights.sbomify.com/CVE-2023-53134/): bnxt_en: Avoid order-5 memory allocation for TPA data (medium 5.5)
- [CVE-2023-53133](https://insights.sbomify.com/CVE-2023-53133/): bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() (medium 5.5)
- [CVE-2023-53132](https://insights.sbomify.com/CVE-2023-53132/): scsi: mpi3mr: Fix mpi3mr_hba_port memory leak in mpi3mr_remove() (medium 5.5)
- [CVE-2023-53131](https://insights.sbomify.com/CVE-2023-53131/): SUNRPC: Fix a server shutdown leak (medium 5.5)
- [CVE-2023-5313](https://insights.sbomify.com/CVE-2023-5313/): phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique action (medium 5.3)
- [CVE-2023-53128](https://insights.sbomify.com/CVE-2023-53128/): scsi: mpi3mr: Fix throttle_groups memory leak (medium 5.5)
- [CVE-2023-53127](https://insights.sbomify.com/CVE-2023-53127/): scsi: mpi3mr: Fix expander node leak in mpi3mr_remove() (medium 5.5)
- [CVE-2023-53126](https://insights.sbomify.com/CVE-2023-53126/): scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove() (medium 5.5)
- [CVE-2023-53125](https://insights.sbomify.com/CVE-2023-53125/): net: usb: smsc75xx: Limit packet length to skb->len (medium 5.5)
- [CVE-2023-53124](https://insights.sbomify.com/CVE-2023-53124/): scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (medium 5.5)
- [CVE-2023-53123](https://insights.sbomify.com/CVE-2023-53123/): PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (high 7.8)
- [CVE-2023-53121](https://insights.sbomify.com/CVE-2023-53121/): tcp: tcp_make_synack() can be called from process context (medium 5.5)
- [CVE-2023-53120](https://insights.sbomify.com/CVE-2023-53120/): scsi: mpi3mr: Fix config page DMA memory leak (medium 5.5)
- [CVE-2023-53119](https://insights.sbomify.com/CVE-2023-53119/): nfc: pn533: initialize struct pn533_out_arg properly (medium 5.5)
- [CVE-2023-53118](https://insights.sbomify.com/CVE-2023-53118/): scsi: core: Fix a procfs host directory removal regression (medium 5.5)
- [CVE-2023-53117](https://insights.sbomify.com/CVE-2023-53117/): fs: prevent out-of-bounds array speculation when closing a file descriptor (high 7.1)
- [CVE-2023-53116](https://insights.sbomify.com/CVE-2023-53116/): nvmet: avoid potential UAF in nvmet_req_complete() (critical 9.8)
- [CVE-2023-53115](https://insights.sbomify.com/CVE-2023-53115/): scsi: mpi3mr: Fix memory leaks in mpi3mr_init_ioc() (medium 5.5)
- [CVE-2023-53114](https://insights.sbomify.com/CVE-2023-53114/): i40e: Fix kernel crash during reboot when adapter is in recovery mode (medium 5.5)
- [CVE-2023-53113](https://insights.sbomify.com/CVE-2023-53113/): wifi: nl80211: fix NULL-ptr deref in offchan check (medium 5.5)
- [CVE-2023-53112](https://insights.sbomify.com/CVE-2023-53112/): drm/i915/sseu: fix max_subslices array-index-out-of-bounds access (high 7.1)
- [CVE-2023-53111](https://insights.sbomify.com/CVE-2023-53111/): loop: Fix use-after-free issues (high 7.8)
- [CVE-2023-53110](https://insights.sbomify.com/CVE-2023-53110/): net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler() (high 7.5)
- [CVE-2023-5311](https://insights.sbomify.com/CVE-2023-5311/): WP EXtra <= 6.2 - Missing Authorization to .htaccess File Modification (high 8.8)
- [CVE-2023-53109](https://insights.sbomify.com/CVE-2023-53109/): net: tunnels: annotate lockless accesses to dev->needed_headroom (medium 5.5)
- [CVE-2023-53108](https://insights.sbomify.com/CVE-2023-53108/): net/iucv: Fix size of interrupt data (medium 5.5)
- [CVE-2023-53107](https://insights.sbomify.com/CVE-2023-53107/): veth: Fix use after free in XDP_REDIRECT (high 7.8)
- [CVE-2023-53106](https://insights.sbomify.com/CVE-2023-53106/): nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (high 7.8)
- [CVE-2023-53105](https://insights.sbomify.com/CVE-2023-53105/): net/mlx5e: Fix cleanup null-ptr deref on encap lock (medium 5.5)
- [CVE-2023-53103](https://insights.sbomify.com/CVE-2023-53103/): bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails (medium 5.5)
- [CVE-2023-53102](https://insights.sbomify.com/CVE-2023-53102/): ice: xsk: disable txq irq before flushing hw (high 7.8)
- [CVE-2023-53101](https://insights.sbomify.com/CVE-2023-53101/): ext4: zero i_disksize when initializing the bootloader inode (medium 5.5)
- [CVE-2023-53100](https://insights.sbomify.com/CVE-2023-53100/): ext4: fix WARNING in ext4_update_inline_data (high 7.8)
- [CVE-2023-5310](https://insights.sbomify.com/CVE-2023-5310/): Z-Wave Denial of Service caused by Stream of Packets (medium 5.7)
- [CVE-2023-53099](https://insights.sbomify.com/CVE-2023-53099/): firmware: xilinx: don't make a sleepable memory allocation from an atomic context (medium 5.5)
- [CVE-2023-53098](https://insights.sbomify.com/CVE-2023-53098/): media: rc: gpio-ir-recv: add remove function (medium 5.5)
- [CVE-2023-53097](https://insights.sbomify.com/CVE-2023-53097/): powerpc/iommu: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53096](https://insights.sbomify.com/CVE-2023-53096/): interconnect: fix mem leak when freeing nodes (medium 5.5)
- [CVE-2023-53095](https://insights.sbomify.com/CVE-2023-53095/): drm/ttm: Fix a NULL pointer dereference (medium 5.5)
- [CVE-2023-53094](https://insights.sbomify.com/CVE-2023-53094/): tty: serial: fsl_lpuart: fix race on RX DMA shutdown (high 7.8)
- [CVE-2023-53093](https://insights.sbomify.com/CVE-2023-53093/): tracing: Do not let histogram values have some modifiers (medium 5.5)
- [CVE-2023-53092](https://insights.sbomify.com/CVE-2023-53092/): interconnect: exynos: fix node leak in probe PM QoS error path (medium 5.5)
- [CVE-2023-53091](https://insights.sbomify.com/CVE-2023-53091/): ext4: update s_journal_inum if it changes after journal replay (medium 5.5)
- [CVE-2023-53090](https://insights.sbomify.com/CVE-2023-53090/): drm/amdkfd: Fix an illegal memory access (high 7.8)
- [CVE-2023-5309](https://insights.sbomify.com/CVE-2023-5309/): Broken Session Management in Puppet Enterprise (medium 6.8)
- [CVE-2023-53089](https://insights.sbomify.com/CVE-2023-53089/): ext4: fix task hung in ext4_xattr_delete_inode (medium 5.5)
- [CVE-2023-53088](https://insights.sbomify.com/CVE-2023-53088/): mptcp: fix UaF in listener shutdown (high 7.8)
- [CVE-2023-53087](https://insights.sbomify.com/CVE-2023-53087/): drm/i915/active: Fix misuse of non-idle barriers as fence trackers (high 7.8)
- [CVE-2023-53086](https://insights.sbomify.com/CVE-2023-53086/): wifi: mt76: connac: do not check WED status for non-mmio devices (high 8.8)
- [CVE-2023-53085](https://insights.sbomify.com/CVE-2023-53085/): drm/edid: fix info leak when failing to get panel id (high 7.1)
- [CVE-2023-53084](https://insights.sbomify.com/CVE-2023-53084/): drm/shmem-helper: Remove another errant put in error path (high 7.8)
- [CVE-2023-53083](https://insights.sbomify.com/CVE-2023-53083/): nfsd: don't replace page in rq_pages if it's a continuation of last page (critical 9.8)
- [CVE-2023-53082](https://insights.sbomify.com/CVE-2023-53082/): vp_vdpa: fix the crash in hot unplug with vp_vdpa (high 7.8)
- [CVE-2023-53081](https://insights.sbomify.com/CVE-2023-53081/): ocfs2: fix data corruption after failed write (high 7.8)
- [CVE-2023-53080](https://insights.sbomify.com/CVE-2023-53080/): xsk: Add missing overflow check in xdp_umem_reg (high 7.8)
- [CVE-2023-5308](https://insights.sbomify.com/CVE-2023-5308/): Podcast Subscribe Buttons <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-53079](https://insights.sbomify.com/CVE-2023-53079/): net/mlx5: Fix steering rules cleanup (medium 5.5)
- [CVE-2023-53078](https://insights.sbomify.com/CVE-2023-53078/): scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (medium 5.5)
- [CVE-2023-53077](https://insights.sbomify.com/CVE-2023-53077/): drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (high 7.8)
- [CVE-2023-53075](https://insights.sbomify.com/CVE-2023-53075/): ftrace: Fix invalid address access in lookup_rec() when index is 0 (high 7.8)
- [CVE-2023-53074](https://insights.sbomify.com/CVE-2023-53074/): drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini (medium 5.5)
- [CVE-2023-53073](https://insights.sbomify.com/CVE-2023-53073/): perf/x86/amd/core: Always clear status for idx (medium 5.5)
- [CVE-2023-53072](https://insights.sbomify.com/CVE-2023-53072/): mptcp: use the workqueue to destroy unaccepted sockets (high 7.8)
- [CVE-2023-53071](https://insights.sbomify.com/CVE-2023-53071/): wifi: mt76: do not run mt76_unregister_device() on unregistered hw (medium 5.5)
- [CVE-2023-53070](https://insights.sbomify.com/CVE-2023-53070/): ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent (medium 5.5)
- [CVE-2023-5307](https://insights.sbomify.com/CVE-2023-5307/): Photos and Files Contest Gallery – Contact Form < 21.2.8.1 - Unauthenticated Stored XSS via HTTP Headers (medium 6.1)
- [CVE-2023-53069](https://insights.sbomify.com/CVE-2023-53069/): octeontx2-vf: Add missing free for alloc_percpu (medium 5.5)
- [CVE-2023-53068](https://insights.sbomify.com/CVE-2023-53068/): net: usb: lan78xx: Limit packet length to skb->len (medium 5.5)
- [CVE-2023-53067](https://insights.sbomify.com/CVE-2023-53067/): LoongArch: Only call get_timer_irq() once in constant_clockevent_init() (medium 5.5)
- [CVE-2023-53066](https://insights.sbomify.com/CVE-2023-53066/): qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (medium 5.5)
- [CVE-2023-53065](https://insights.sbomify.com/CVE-2023-53065/): perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (high 7.8)
- [CVE-2023-53064](https://insights.sbomify.com/CVE-2023-53064/): iavf: fix hang on reboot with ice (medium 5.5)
- [CVE-2023-53062](https://insights.sbomify.com/CVE-2023-53062/): net: usb: smsc95xx: Limit packet length to skb->len (medium 5.5)
- [CVE-2023-53061](https://insights.sbomify.com/CVE-2023-53061/): ksmbd: fix possible refcount leak in smb2_open() (medium 5.5)
- [CVE-2023-53060](https://insights.sbomify.com/CVE-2023-53060/): igb: revert rtnl_lock() that causes deadlock (medium 5.5)
- [CVE-2023-53059](https://insights.sbomify.com/CVE-2023-53059/): platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (high 7.1)
- [CVE-2023-53058](https://insights.sbomify.com/CVE-2023-53058/): net/mlx5: E-Switch, Fix an Oops in error handling code (medium 5.5)
- [CVE-2023-53057](https://insights.sbomify.com/CVE-2023-53057/): Bluetooth: HCI: Fix global-out-of-bounds (high 7.8)
- [CVE-2023-53056](https://insights.sbomify.com/CVE-2023-53056/): scsi: qla2xxx: Synchronize the IOCB count to be in order (medium 5.5)
- [CVE-2023-53055](https://insights.sbomify.com/CVE-2023-53055/): fscrypt: destroy keyring after security_sb_delete() (medium 5.5)
- [CVE-2023-53054](https://insights.sbomify.com/CVE-2023-53054/): usb: dwc2: fix a devres leak in hw_enable upon suspend resume (medium 5.5)
- [CVE-2023-53053](https://insights.sbomify.com/CVE-2023-53053/): erspan: do not use skb_mac_header() in ndo_start_xmit() (high 7.8)
- [CVE-2023-53052](https://insights.sbomify.com/CVE-2023-53052/): cifs: fix use-after-free bug in refresh_cache_worker() (high 7.8)
- [CVE-2023-53051](https://insights.sbomify.com/CVE-2023-53051/): dm crypt: add cond_resched() to dmcrypt_write() (medium 5.5)
- [CVE-2023-53050](https://insights.sbomify.com/CVE-2023-53050/): thunderbolt: Fix memory leak in margining (medium 5.5)
- [CVE-2023-5305](https://insights.sbomify.com/CVE-2023-5305/): Online Banquet Booking System Contact Us Page mail.php cross site scripting (low 3.5)
- [CVE-2023-53049](https://insights.sbomify.com/CVE-2023-53049/): usb: ucsi: Fix NULL pointer deref in ucsi_connector_change() (medium 5.5)
- [CVE-2023-53048](https://insights.sbomify.com/CVE-2023-53048/): usb: typec: tcpm: fix warning when handle discover_identity message (medium 5.5)
- [CVE-2023-53047](https://insights.sbomify.com/CVE-2023-53047/): tee: amdtee: fix race condition in amdtee_open_session (high 7.8)
- [CVE-2023-53046](https://insights.sbomify.com/CVE-2023-53046/): Bluetooth: Fix race condition in hci_cmd_sync_clear (high 7.8)
- [CVE-2023-53045](https://insights.sbomify.com/CVE-2023-53045/): usb: gadget: u_audio: don't let userspace block driver unbind (medium 5.5)
- [CVE-2023-53044](https://insights.sbomify.com/CVE-2023-53044/): dm stats: check for and propagate alloc_percpu failure (medium 5.5)
- [CVE-2023-53043](https://insights.sbomify.com/CVE-2023-53043/): arm64: dts: qcom: sc7280: Mark PCIe controller as cache coherent (high 7.8)
- [CVE-2023-53042](https://insights.sbomify.com/CVE-2023-53042/): drm/amd/display: Do not set DRR on pipe Commit (medium 5.5)
- [CVE-2023-53041](https://insights.sbomify.com/CVE-2023-53041/): scsi: qla2xxx: Perform lockless command completion in abort path (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/154/