Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 155 of 430.
- CVE-2023-53040 ca8210: fix mac_len negative array access
- CVE-2023-5304 Online Banquet Booking System Service Booking book-services.php cross site scripting
- CVE-2023-53039 HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- CVE-2023-53038 scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read()
- CVE-2023-53037 scsi: mpi3mr: Bad drive in topology results kernel crash
- CVE-2023-53036 drm/amdgpu: Fix call trace warning and hang when removing amdgpu device
- CVE-2023-53035 nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy()
- CVE-2023-53034 ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- CVE-2023-53033 netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- CVE-2023-53032 netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
- CVE-2023-53031 powerpc/imc-pmu: Fix use of mutex in IRQs disabled section
- CVE-2023-53030 octeontx2-pf: Avoid use of GFP_KERNEL in atomic context
- CVE-2023-5303 Online Banquet Booking System Account Detail view-booking-detail.php cross site scripting
- CVE-2023-53029 octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt
- CVE-2023-53028 Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"
- CVE-2023-53026 RDMA/core: Fix ib block iterator counter overflow
- CVE-2023-53024 bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation
- CVE-2023-53023 net: nfc: Fix use-after-free in local_cleanup()
- CVE-2023-53022 net: enetc: avoid deadlock in enetc_tx_onestep_tstamp()
- CVE-2023-53021 net/sched: sch_taprio: fix possible use-after-free
- CVE-2023-53020 l2tp: close all race conditions in l2tp_tunnel_register()
- CVE-2023-5302 SourceCodester Best Courier Management System Manage Account Page cross site scripting
- CVE-2023-53019 net: mdio: validate parameter addr in mdiobus_get_phy()
- CVE-2023-53018 Bluetooth: hci_conn: Fix memory leaks
- CVE-2023-53017 Bluetooth: hci_sync: fix memory leak in hci_update_adv_data()
- CVE-2023-53016 Bluetooth: Fix possible deadlock in rfcomm_sk_state_change
- CVE-2023-53015 HID: betop: check shape of output reports
- CVE-2023-53014 dmaengine: tegra: Fix memory leak in terminate_all()
- CVE-2023-53013 ptdma: pt_core_execute_cmd() should use spinlock
- CVE-2023-53012 thermal: core: call put_device() only after device_register() fails
- CVE-2023-53011 net: stmmac: enable all safety features by default
- CVE-2023-53010 bnxt: Do not read past the end of test names
- CVE-2023-5301 DedeCMS album_add.php AddMyAddon os command injection
- CVE-2023-53009 drm/amdkfd: Add sync after creating vram bo
- CVE-2023-53008 cifs: fix potential memory leaks in session setup
- CVE-2023-53007 tracing: Make sure trace_printk() can output as soon as it can be used
- CVE-2023-53006 cifs: Fix oops due to uncleared server->smbd_conn in reconnect
- CVE-2023-53005 trace_events_hist: add check for return value of 'create_hist_field'
- CVE-2023-53004 ovl: fix tmpfile leak
- CVE-2023-53003 EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
- CVE-2023-53002 drm/i915: Fix a memory leak with reused mmap_offset
- CVE-2023-53000 netlink: prevent potential spectre v1 gadgets
- CVE-2023-5300 TTSPlanning sql injection
- CVE-2023-52999 net: fix UaF in netns ops registration error path
- CVE-2023-52998 net: fec: Use page_pool_put_full_page when freeing rx buffers
- CVE-2023-52997 ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
- CVE-2023-52996 ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
- CVE-2023-52995 riscv/kprobe: Fix instruction simulation of JALR
- CVE-2023-52994 acpi: Fix suspend with Xen PV
- CVE-2023-52993 x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
- CVE-2023-52992 bpf: Skip task with pid=1 in send_signal_common()
- CVE-2023-52991 net: fix NULL pointer in skb_segment_list
- CVE-2023-5299 Fuji Electric Tellus Lite V-Simulator Improper Access Control
- CVE-2023-52989 firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
- CVE-2023-52988 ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
- CVE-2023-52987 ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write()
- CVE-2023-52986 bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- CVE-2023-52985 arm64: dts: imx8mm-verdin: Do not power down eth-phy
- CVE-2023-52984 net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices
- CVE-2023-52983 block, bfq: fix uaf for bfqq in bic_set_bfqq()
- CVE-2023-52982 fscache: Use wait_on_bit() to wait for the freeing of relinquished volume
- CVE-2023-52981 drm/i915: Fix request ref counting during error capture & debugfs dump
- CVE-2023-52980 block: ublk: extending queue_size to fix overflow
- CVE-2023-5298 Tongda OA 2017 delete.php sql injection
- CVE-2023-52978 riscv: kprobe: Fixup kernel panic when probing an illegal position
- CVE-2023-52977 net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
- CVE-2023-52976 efi: fix potential NULL deref in efi_mem_reserve_persistent
- CVE-2023-52975 scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- CVE-2023-52974 scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- CVE-2023-52973 vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- CVE-2023-52972 Security feature bypass in YutuFZ-5651S1
- CVE-2023-52971 Denial of service in MariaDB
- CVE-2023-52970 Denial of service in MariaDB
- CVE-2023-5297 Xinhu RockOA start backup
- CVE-2023-52969 Denial of service in MariaDB
- CVE-2023-52968 Denial of service in MariaDB
- CVE-2023-5296 Xinhu RockOA Password password recovery
- CVE-2023-52955 Auth bypass in EMUI
- CVE-2023-52954 Missing authorization in EMUI
- CVE-2023-52953 Path traversal in EMUI
- CVE-2023-52952 Security feature bypass in HiMed Cockpit 12 pro
- CVE-2023-52951 Information disclosure in Synology Note Station Client
- CVE-2023-52950 Information disclosure in Synology Active Backup for Business Agent
- CVE-2023-5295 Comments by Startbit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-52949 Missing authorization in Synology Active Backup for Business Agent
- CVE-2023-52948 Information disclosure in Synology Active Backup for Business Agent
- CVE-2023-52947 Missing authorization in Synology Active Backup for Business Agent
- CVE-2023-52946 Memory corruption in Synology Drive Client
- CVE-2023-52945 Other in BeeDrive for desktop
- CVE-2023-52944 Missing authorization in Surveillance Station
- CVE-2023-52943 Missing authorization in Surveillance Station
- CVE-2023-52942 cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask()
- CVE-2023-52941 can: isotp: split tx timer into transmission and timeout
- CVE-2023-52940 mm: multi-gen LRU: fix crash during cgroup migration
- CVE-2023-5294 ECshop order.php sql injection
- CVE-2023-52939 mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- CVE-2023-52938 usb: typec: ucsi: Don't attempt to resume the ports before they exist
- CVE-2023-52937 HV: hv_balloon: fix memory leak with using debugfs_lookup()
- CVE-2023-52936 kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup()
- CVE-2023-52935 mm/khugepaged: fix ->anon_vma race