Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 158 of 430.
- CVE-2023-52741 cifs: Fix use-after-free in rdata->read_into_pages()
- CVE-2023-52740 powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch
- CVE-2023-5274 Denial of service in GX Works2
- CVE-2023-52739 Fix page corruption caused by racy check in __free_pages
- CVE-2023-52738 drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini
- CVE-2023-52737 btrfs: lock the inode in shared mode before starting fiemap
- CVE-2023-52736 ALSA: hda: Do not unset preset when cleaning up codec
- CVE-2023-52735 bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- CVE-2023-52732 ceph: blocklist the kclient when receiving corrupted snap trace
- CVE-2023-52731 fbdev: Fix invalid page access after closing deferred I/O devices
- CVE-2023-52730 mmc: sdio: fix possible resource leaks in some error paths
- CVE-2023-5273 SourceCodester Best Courier Management System manage_parcel_status.php cross site scripting
- CVE-2023-52729 TCPServer.cpp in SimpleNetwork through 29bc615 has an off-by-one error that causes a buffer overflow when trying to add '\0' to the end of long msg data.
- CVE-2023-52728 Memory corruption in linuxfoundation:onos-lib-go
- CVE-2023-52727 Memory corruption in linuxfoundation:onos-lib-go
- CVE-2023-52726 Denial of service in linuxfoundation:onos-ric-sdk-go
- CVE-2023-52725 Memory corruption in linuxfoundation:onos-kpimon
- CVE-2023-52724 Memory corruption in linuxfoundation:onos-kpimon
- CVE-2023-52723 In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is acciden
- CVE-2023-52722 Security feature bypass in artifex:ghostscript
- CVE-2023-52721 Missing authorization in EMUI
- CVE-2023-52720 Race condition in EMUI
- CVE-2023-5272 SourceCodester Best Courier Management System GET Parameter edit_parcel.php sql injection
- CVE-2023-52719 Privilege escalation in EMUI
- CVE-2023-52718 Other in PT9030-15
- CVE-2023-52717 Missing authorization in EMUI
- CVE-2023-52716 Other in EMUI
- CVE-2023-52715 Misconfiguration in HarmonyOS
- CVE-2023-52714 Information disclosure in EMUI
- CVE-2023-52713 Missing authorization in EMUI
- CVE-2023-52712 Security feature bypass in CurieM-WFG9B
- CVE-2023-52711 Security feature bypass in CurieM-WFG9B
- CVE-2023-52710 Memory corruption in CurieM-WFG9B
- CVE-2023-5271 SourceCodester Best Courier Management System edit_parcel.php sql injection
- CVE-2023-52708 mmc: mmc_spi: fix error handling in mmc_spi_probe()
- CVE-2023-52707 sched/psi: Fix use-after-free in ep_remove_wait_queue()
- CVE-2023-52706 gpio: sim: fix a memory leak
- CVE-2023-52705 nilfs2: fix underflow in second superblock position calculations
- CVE-2023-52704 freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL
- CVE-2023-52703 net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- CVE-2023-52702 net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- CVE-2023-52701 net: use a bounce buffer for copying skb->mark
- CVE-2023-52700 tipc: fix kernel warning when sending SYN message
- CVE-2023-5270 SourceCodester Best Courier Management System view_parcel.php sql injection
- CVE-2023-52699 sysv: don't call sb_bread() with pointers_lock held
- CVE-2023-52698 calipso: fix memory leak in netlbl_calipso_add_pass()
- CVE-2023-52697 ASoC: Intel: sof_sdw_rt_sdca_jack_common: ctx->headset_codec_dev = NULL
- CVE-2023-52696 powerpc/powernv: Add a null pointer check in opal_powercap_init()
- CVE-2023-52695 drm/amd/display: Check writeback connectors in create_validate_stream_for_sink
- CVE-2023-52694 drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- CVE-2023-52693 ACPI: video: check for error while searching for backlight device parent
- CVE-2023-52692 ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()
- CVE-2023-52691 drm/amd/pm: fix a double-free in si_dpm_init
- CVE-2023-52690 powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- CVE-2023-5269 SourceCodester Best Courier Management System GET Parameter parcel_list.php sql injection
- CVE-2023-52689 ALSA: scarlett2: Add missing mutex lock around get meter levels
- CVE-2023-52688 wifi: ath12k: fix the error handler of rfkill config
- CVE-2023-52687 crypto: safexcel - Add error handling for dma_map_sg() calls
- CVE-2023-52686 powerpc/powernv: Add a null pointer check in opal_event_init()
- CVE-2023-52684 firmware: qcom: qseecom: fix memory leaks in error paths
- CVE-2023-52683 ACPI: LPIT: Avoid u32 multiplication overflow
- CVE-2023-52682 f2fs: fix to wait on block writeback for post_read case
- CVE-2023-52681 efivarfs: Free s_fs_info on unmount
- CVE-2023-52680 ALSA: scarlett2: Add missing error checks to *_ctl_get()
- CVE-2023-5268 DedeBIZ makehtml_taglist_action.php sql injection
- CVE-2023-52679 of: Fix double free in of_parse_phandle_with_args_map
- CVE-2023-52678 drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c
- CVE-2023-52677 riscv: Check if the code to patch lies in the exit section
- CVE-2023-52676 bpf: Guard stack limits against 32bit overflow
- CVE-2023-52675 powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- CVE-2023-52674 ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- CVE-2023-52673 drm/amd/display: Fix a debugfs null pointer error
- CVE-2023-52672 pipe: wakeup wr_wait after setting max_usage
- CVE-2023-52671 drm/amd/display: Fix hang/underflow when transitioning to ODM4:1
- CVE-2023-52670 rpmsg: virtio: Free driver_override when rpmsg_remove()
- CVE-2023-5267 Tongda OA 2017 delete.php sql injection
- CVE-2023-52669 crypto: s390/aes - Fix buffer overread in CTR mode
- CVE-2023-52668 btrfs: zoned: fix lock ordering in btrfs_zone_activate()
- CVE-2023-52667 net/mlx5e: fix a potential double-free in fs_any_create_groups
- CVE-2023-52664 net: atlantic: eliminate double free in error handling logic
- CVE-2023-52663 ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()
- CVE-2023-52662 drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node
- CVE-2023-52661 drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe()
- CVE-2023-52660 media: rkisp1: Fix IRQ handling due to shared interrupts
- CVE-2023-5266 DedeBIZ tags_main.php sql injection
- CVE-2023-52659 x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type
- CVE-2023-52658 Revert "net/mlx5: Block entering switchdev mode with ns inconsistency"
- CVE-2023-52657 Revert "drm/amd/pm: resolve reboot exception for si oland"
- CVE-2023-52656 io_uring: drop any code related to SCM_RIGHTS
- CVE-2023-52655 usb: aqc111: check packet for fixup for true limit
- CVE-2023-52654 io_uring/af_unix: disable sending io_uring over sockets
- CVE-2023-52653 SUNRPC: fix a memleak in gss_import_v2_context
- CVE-2023-52652 NTB: fix possible name leak in ntb_register_device()
- CVE-2023-52650 drm/tegra: dsi: Add missing check for of_find_device_by_node
- CVE-2023-5265 Tongda OA 2017 delete.php sql injection
- CVE-2023-52649 drm/vkms: Avoid reading beyond LUT array
- CVE-2023-52648 drm/vmwgfx: Unmap the surface before resetting it on a plane state
- CVE-2023-52647 media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access
- CVE-2023-52646 aio: fix mremap after fork null-deref
- CVE-2023-52645 pmdomain: mediatek: fix race conditions with genpd