# Vulnerabilities published in 2023


- [CVE-2023-53040](https://insights.sbomify.com/CVE-2023-53040/): ca8210: fix mac_len negative array access (medium 5.5)
- [CVE-2023-5304](https://insights.sbomify.com/CVE-2023-5304/): Online Banquet Booking System Service Booking book-services.php cross site scripting (low 3.5)
- [CVE-2023-53039](https://insights.sbomify.com/CVE-2023-53039/): HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (high 7.8)
- [CVE-2023-53038](https://insights.sbomify.com/CVE-2023-53038/): scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (medium 5.5)
- [CVE-2023-53037](https://insights.sbomify.com/CVE-2023-53037/): scsi: mpi3mr: Bad drive in topology results kernel crash (high 7.8)
- [CVE-2023-53036](https://insights.sbomify.com/CVE-2023-53036/): drm/amdgpu: Fix call trace warning and hang when removing amdgpu device (medium 5.5)
- [CVE-2023-53035](https://insights.sbomify.com/CVE-2023-53035/): nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (high 7.1)
- [CVE-2023-53034](https://insights.sbomify.com/CVE-2023-53034/): ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (high 7.1)
- [CVE-2023-53033](https://insights.sbomify.com/CVE-2023-53033/): netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (high 7.8)
- [CVE-2023-53032](https://insights.sbomify.com/CVE-2023-53032/): netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (medium 5.5)
- [CVE-2023-53031](https://insights.sbomify.com/CVE-2023-53031/): powerpc/imc-pmu: Fix use of mutex in IRQs disabled section (medium 5.5)
- [CVE-2023-53030](https://insights.sbomify.com/CVE-2023-53030/): octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (medium 5.5)
- [CVE-2023-5303](https://insights.sbomify.com/CVE-2023-5303/): Online Banquet Booking System Account Detail view-booking-detail.php cross site scripting (low 3.5)
- [CVE-2023-53029](https://insights.sbomify.com/CVE-2023-53029/): octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (medium 5.5)
- [CVE-2023-53028](https://insights.sbomify.com/CVE-2023-53028/): Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" (high 7.8)
- [CVE-2023-53026](https://insights.sbomify.com/CVE-2023-53026/): RDMA/core: Fix ib block iterator counter overflow (high 7.8)
- [CVE-2023-53024](https://insights.sbomify.com/CVE-2023-53024/): bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation (high 7.1)
- [CVE-2023-53023](https://insights.sbomify.com/CVE-2023-53023/): net: nfc: Fix use-after-free in local_cleanup() (high 7.8)
- [CVE-2023-53022](https://insights.sbomify.com/CVE-2023-53022/): net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() (medium 5.5)
- [CVE-2023-53021](https://insights.sbomify.com/CVE-2023-53021/): net/sched: sch_taprio: fix possible use-after-free (high 7.8)
- [CVE-2023-53020](https://insights.sbomify.com/CVE-2023-53020/): l2tp: close all race conditions in l2tp_tunnel_register() (medium 4.7)
- [CVE-2023-5302](https://insights.sbomify.com/CVE-2023-5302/): SourceCodester Best Courier Management System Manage Account Page cross site scripting (low 3.5)
- [CVE-2023-53019](https://insights.sbomify.com/CVE-2023-53019/): net: mdio: validate parameter addr in mdiobus_get_phy() (high 7.8)
- [CVE-2023-53018](https://insights.sbomify.com/CVE-2023-53018/): Bluetooth: hci_conn: Fix memory leaks (medium 5.5)
- [CVE-2023-53017](https://insights.sbomify.com/CVE-2023-53017/): Bluetooth: hci_sync: fix memory leak in hci_update_adv_data() (medium 5.5)
- [CVE-2023-53016](https://insights.sbomify.com/CVE-2023-53016/): Bluetooth: Fix possible deadlock in rfcomm_sk_state_change (medium 5.5)
- [CVE-2023-53015](https://insights.sbomify.com/CVE-2023-53015/): HID: betop: check shape of output reports (medium 5.5)
- [CVE-2023-53014](https://insights.sbomify.com/CVE-2023-53014/): dmaengine: tegra: Fix memory leak in terminate_all() (medium 5.5)
- [CVE-2023-53013](https://insights.sbomify.com/CVE-2023-53013/): ptdma: pt_core_execute_cmd() should use spinlock (medium 5.5)
- [CVE-2023-53012](https://insights.sbomify.com/CVE-2023-53012/): thermal: core: call put_device() only after device_register() fails (medium 5.5)
- [CVE-2023-53011](https://insights.sbomify.com/CVE-2023-53011/): net: stmmac: enable all safety features by default (medium 5.5)
- [CVE-2023-53010](https://insights.sbomify.com/CVE-2023-53010/): bnxt: Do not read past the end of test names (medium 5.5)
- [CVE-2023-5301](https://insights.sbomify.com/CVE-2023-5301/): DedeCMS album_add.php AddMyAddon os command injection (medium 4.7)
- [CVE-2023-53009](https://insights.sbomify.com/CVE-2023-53009/): drm/amdkfd: Add sync after creating vram bo (high 7.8)
- [CVE-2023-53008](https://insights.sbomify.com/CVE-2023-53008/): cifs: fix potential memory leaks in session setup (medium 5.5)
- [CVE-2023-53007](https://insights.sbomify.com/CVE-2023-53007/): tracing: Make sure trace_printk() can output as soon as it can be used (medium 5.5)
- [CVE-2023-53006](https://insights.sbomify.com/CVE-2023-53006/): cifs: Fix oops due to uncleared server->smbd_conn in reconnect (critical 9.8)
- [CVE-2023-53005](https://insights.sbomify.com/CVE-2023-53005/): trace_events_hist: add check for return value of 'create_hist_field' (medium 5.5)
- [CVE-2023-53004](https://insights.sbomify.com/CVE-2023-53004/): ovl: fix tmpfile leak (medium 5.5)
- [CVE-2023-53003](https://insights.sbomify.com/CVE-2023-53003/): EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info (high 7.8)
- [CVE-2023-53002](https://insights.sbomify.com/CVE-2023-53002/): drm/i915: Fix a memory leak with reused mmap_offset (medium 5.5)
- [CVE-2023-53000](https://insights.sbomify.com/CVE-2023-53000/): netlink: prevent potential spectre v1 gadgets (high 7.8)
- [CVE-2023-5300](https://insights.sbomify.com/CVE-2023-5300/): TTSPlanning sql injection (medium 6.3)
- [CVE-2023-52999](https://insights.sbomify.com/CVE-2023-52999/): net: fix UaF in netns ops registration error path (high 7.8)
- [CVE-2023-52998](https://insights.sbomify.com/CVE-2023-52998/): net: fec: Use page_pool_put_full_page when freeing rx buffers (medium 5.5)
- [CVE-2023-52997](https://insights.sbomify.com/CVE-2023-52997/): ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() (medium 5.5)
- [CVE-2023-52996](https://insights.sbomify.com/CVE-2023-52996/): ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (medium 5.5)
- [CVE-2023-52995](https://insights.sbomify.com/CVE-2023-52995/): riscv/kprobe: Fix instruction simulation of JALR (medium 5.5)
- [CVE-2023-52994](https://insights.sbomify.com/CVE-2023-52994/): acpi: Fix suspend with Xen PV (medium 5.5)
- [CVE-2023-52993](https://insights.sbomify.com/CVE-2023-52993/): x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (medium 5.5)
- [CVE-2023-52992](https://insights.sbomify.com/CVE-2023-52992/): bpf: Skip task with pid=1 in send_signal_common() (medium 5.5)
- [CVE-2023-52991](https://insights.sbomify.com/CVE-2023-52991/): net: fix NULL pointer in skb_segment_list (high 7.5)
- [CVE-2023-5299](https://insights.sbomify.com/CVE-2023-5299/): Fuji Electric Tellus Lite V-Simulator Improper Access Control (high 7.3)
- [CVE-2023-52989](https://insights.sbomify.com/CVE-2023-52989/): firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (medium 5.5)
- [CVE-2023-52988](https://insights.sbomify.com/CVE-2023-52988/): ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (high 7.8)
- [CVE-2023-52987](https://insights.sbomify.com/CVE-2023-52987/): ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write() (high 7.8)
- [CVE-2023-52986](https://insights.sbomify.com/CVE-2023-52986/): bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener (medium 5.5)
- [CVE-2023-52985](https://insights.sbomify.com/CVE-2023-52985/): arm64: dts: imx8mm-verdin: Do not power down eth-phy (medium 5.5)
- [CVE-2023-52984](https://insights.sbomify.com/CVE-2023-52984/): net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices (medium 5.5)
- [CVE-2023-52983](https://insights.sbomify.com/CVE-2023-52983/): block, bfq: fix uaf for bfqq in bic_set_bfqq() (high 7.8)
- [CVE-2023-52982](https://insights.sbomify.com/CVE-2023-52982/): fscache: Use wait_on_bit() to wait for the freeing of relinquished volume (medium 5.5)
- [CVE-2023-52981](https://insights.sbomify.com/CVE-2023-52981/): drm/i915: Fix request ref counting during error capture & debugfs dump (high 7.8)
- [CVE-2023-52980](https://insights.sbomify.com/CVE-2023-52980/): block: ublk: extending queue_size to fix overflow (high 7.8)
- [CVE-2023-5298](https://insights.sbomify.com/CVE-2023-5298/): Tongda OA 2017 delete.php sql injection (medium 5.5)
- [CVE-2023-52978](https://insights.sbomify.com/CVE-2023-52978/): riscv: kprobe: Fixup kernel panic when probing an illegal position (medium 5.5)
- [CVE-2023-52977](https://insights.sbomify.com/CVE-2023-52977/): net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (medium 5.5)
- [CVE-2023-52976](https://insights.sbomify.com/CVE-2023-52976/): efi: fix potential NULL deref in efi_mem_reserve_persistent (medium 5.5)
- [CVE-2023-52975](https://insights.sbomify.com/CVE-2023-52975/): scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (high 7.8)
- [CVE-2023-52974](https://insights.sbomify.com/CVE-2023-52974/): scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (high 7.8)
- [CVE-2023-52973](https://insights.sbomify.com/CVE-2023-52973/): vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (high 7.8)
- [CVE-2023-52972](https://insights.sbomify.com/CVE-2023-52972/): Security feature bypass in YutuFZ-5651S1 (medium 5.5)
- [CVE-2023-52971](https://insights.sbomify.com/CVE-2023-52971/): Denial of service in MariaDB (medium 4.9)
- [CVE-2023-52970](https://insights.sbomify.com/CVE-2023-52970/): Denial of service in MariaDB (medium 4.9)
- [CVE-2023-5297](https://insights.sbomify.com/CVE-2023-5297/): Xinhu RockOA start backup (low 3.7)
- [CVE-2023-52969](https://insights.sbomify.com/CVE-2023-52969/): Denial of service in MariaDB (medium 4.9)
- [CVE-2023-52968](https://insights.sbomify.com/CVE-2023-52968/): Denial of service in MariaDB (medium 4.9)
- [CVE-2023-5296](https://insights.sbomify.com/CVE-2023-5296/): Xinhu RockOA Password password recovery (medium 4.3)
- [CVE-2023-52955](https://insights.sbomify.com/CVE-2023-52955/): Auth bypass in EMUI (medium 6.5)
- [CVE-2023-52954](https://insights.sbomify.com/CVE-2023-52954/): Missing authorization in EMUI (medium 4.4)
- [CVE-2023-52953](https://insights.sbomify.com/CVE-2023-52953/): Path traversal in EMUI (medium 6.2)
- [CVE-2023-52952](https://insights.sbomify.com/CVE-2023-52952/): Security feature bypass in HiMed Cockpit 12 pro (critical 9.3)
- [CVE-2023-52951](https://insights.sbomify.com/CVE-2023-52951/): Information disclosure in Synology Note Station Client (medium 5.9)
- [CVE-2023-52950](https://insights.sbomify.com/CVE-2023-52950/): Information disclosure in Synology Active Backup for Business Agent (medium 5.3)
- [CVE-2023-5295](https://insights.sbomify.com/CVE-2023-5295/): Comments by Startbit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-52949](https://insights.sbomify.com/CVE-2023-52949/): Missing authorization in Synology Active Backup for Business Agent (medium 5.5)
- [CVE-2023-52948](https://insights.sbomify.com/CVE-2023-52948/): Information disclosure in Synology Active Backup for Business Agent (medium 5.0)
- [CVE-2023-52947](https://insights.sbomify.com/CVE-2023-52947/): Missing authorization in Synology Active Backup for Business Agent (medium 4.0)
- [CVE-2023-52946](https://insights.sbomify.com/CVE-2023-52946/): Memory corruption in Synology Drive Client (high 8.2)
- [CVE-2023-52945](https://insights.sbomify.com/CVE-2023-52945/): Other in BeeDrive for desktop (high 7.8)
- [CVE-2023-52944](https://insights.sbomify.com/CVE-2023-52944/): Missing authorization in Surveillance Station (medium 4.3)
- [CVE-2023-52943](https://insights.sbomify.com/CVE-2023-52943/): Missing authorization in Surveillance Station (medium 4.3)
- [CVE-2023-52942](https://insights.sbomify.com/CVE-2023-52942/): cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask() (medium 5.5)
- [CVE-2023-52941](https://insights.sbomify.com/CVE-2023-52941/): can: isotp: split tx timer into transmission and timeout (medium 5.5)
- [CVE-2023-52940](https://insights.sbomify.com/CVE-2023-52940/): mm: multi-gen LRU: fix crash during cgroup migration (medium 5.5)
- [CVE-2023-5294](https://insights.sbomify.com/CVE-2023-5294/): ECshop order.php sql injection (medium 4.7)
- [CVE-2023-52939](https://insights.sbomify.com/CVE-2023-52939/): mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (medium 5.5)
- [CVE-2023-52938](https://insights.sbomify.com/CVE-2023-52938/): usb: typec: ucsi: Don't attempt to resume the ports before they exist (medium 5.5)
- [CVE-2023-52937](https://insights.sbomify.com/CVE-2023-52937/): HV: hv_balloon: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-52936](https://insights.sbomify.com/CVE-2023-52936/): kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-52935](https://insights.sbomify.com/CVE-2023-52935/): mm/khugepaged: fix ->anon_vma race (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/155/