Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 159 of 430.
- CVE-2023-52644 wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- CVE-2023-52643 iio: core: fix memleak in iio_device_register_sysfs
- CVE-2023-52642 media: rc: bpf attach/detach requires write permission
- CVE-2023-52641 fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame()
- CVE-2023-52640 fs/ntfs3: Fix oob in ntfs_listxattr
- CVE-2023-5264 huakecms cms_content.php sql injection
- CVE-2023-52639 KVM: s390: vsie: fix race during shadow creation
- CVE-2023-52638 can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
- CVE-2023-52637 can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- CVE-2023-52636 libceph: just wait for more data to be available on the socket
- CVE-2023-52635 PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- CVE-2023-52634 drm/amd/display: Fix disable_otg_wa logic
- CVE-2023-52633 um: time-travel: fix time corruption
- CVE-2023-52632 drm/amdkfd: Fix lock dependency warning with srcu
- CVE-2023-52631 fs/ntfs3: Fix an NULL dereference bug
- CVE-2023-5263 ZZZCMS Database Backup File save.php restore permission
- CVE-2023-52629 sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- CVE-2023-52628 netfilter: nftables: exthdr: fix 4-byte stack OOB write
- CVE-2023-52627 iio: adc: ad7091r: Allow users to configure device events
- CVE-2023-52626 net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context
- CVE-2023-52625 drm/amd/display: Refactor DMCUB enter/exit idle interface
- CVE-2023-52624 drm/amd/display: Wake DMCUB before executing GPINT commands
- CVE-2023-52623 SUNRPC: Fix a suspicious RCU usage warning
- CVE-2023-52622 ext4: avoid online resizing failures due to oversized flex bg
- CVE-2023-52621 bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- CVE-2023-52620 netfilter: nf_tables: disallow timeout for anonymous sets
- CVE-2023-5262 OpenRapid RapidCMS uploadicon.php isImg unrestricted upload
- CVE-2023-52619 pstore/ram: Fix crash when setting number of cpus to an odd number
- CVE-2023-52618 block/rnbd-srv: Check for unlikely string overflow
- CVE-2023-52617 PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- CVE-2023-52616 crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- CVE-2023-52615 hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- CVE-2023-52614 PM / devfreq: Fix buffer overflow in trans_stat_show
- CVE-2023-52613 drivers/thermal/loongson2_thermal: Fix incorrect PTR_ERR() judgment
- CVE-2023-52612 crypto: scomp - fix req->dst buffer overflow
- CVE-2023-52611 wifi: rtw88: sdio: Honor the host max_req_size in the RX path
- CVE-2023-52610 net/sched: act_ct: fix skb leak and crash on ooo frags
- CVE-2023-5261 Tongda OA 2017 delete.php sql injection
- CVE-2023-52609 binder: fix race between mmput() and do_exit()
- CVE-2023-52608 firmware: arm_scmi: Check mailbox/SMT channel for consistency
- CVE-2023-52607 powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- CVE-2023-52606 powerpc/lib: Validate size for vector operations
- CVE-2023-52604 FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- CVE-2023-52603 UBSAN: array-index-out-of-bounds in dtSplitRoot
- CVE-2023-52602 jfs: fix slab-out-of-bounds Read in dtSearch
- CVE-2023-52601 jfs: fix array-index-out-of-bounds in dbAdjTree
- CVE-2023-52600 jfs: fix uaf in jfs_evict_inode
- CVE-2023-5260 SourceCodester Simple Membership System group_validator.php sql injection
- CVE-2023-52599 jfs: fix array-index-out-of-bounds in diNewExt
- CVE-2023-52598 s390/ptrace: handle setting of fpc register correctly
- CVE-2023-52597 KVM: s390: fix setting of fpc register
- CVE-2023-52596 sysctl: Fix out of bounds access for empty sysctl registers
- CVE-2023-52595 wifi: rt2x00: restart beacon queue when hardware reset
- CVE-2023-52594 wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- CVE-2023-52593 wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- CVE-2023-52591 reiserfs: Avoid touching renamed directory if parent does not change
- CVE-2023-52590 ocfs2: Avoid touching renamed directory if parent does not change
- CVE-2023-5259 ForU CMS cms_admin.php denial of service
- CVE-2023-52589 media: rkisp1: Fix IRQ disable race issue
- CVE-2023-52588 f2fs: fix to tag gcing flag on page during block migration
- CVE-2023-52587 IB/ipoib: Fix mcast list locking
- CVE-2023-52586 drm/msm/dpu: Add mutex lock in control vblank irq
- CVE-2023-52585 drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- CVE-2023-52584 spmi: mediatek: Fix UAF on device remove
- CVE-2023-52583 ceph: fix deadlock or deadcode of misusing dget()
- CVE-2023-52582 netfs: Only call folio_start_fscache() one time for each folio
- CVE-2023-52581 netfilter: nf_tables: fix memleak when more than 255 elements expired
- CVE-2023-52580 net/core: Fix ETH_P_1588 flow dissector
- CVE-2023-5258 OpenRapid RapidCMS addgood.php sql injection
- CVE-2023-52578 net: bridge: use DEV_STATS_INC()
- CVE-2023-52577 dccp: fix dccp_v4_err()/dccp_v6_err() again
- CVE-2023-52576 x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
- CVE-2023-52574 team: fix null-ptr-deref when team device type is changed
- CVE-2023-52573 net: rds: Fix possible NULL-pointer dereference
- CVE-2023-52572 cifs: Fix UAF in cifs_demultiplex_thread()
- CVE-2023-52571 power: supply: rk817: Fix node refcount leak
- CVE-2023-52570 vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent()
- CVE-2023-5257 WhiteHSBG JNDIExploit HTTPServer.java handleFileRequest path traversal
- CVE-2023-52569 btrfs: remove BUG() after failure to insert delayed dir index item
- CVE-2023-52568 x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- CVE-2023-52567 serial: 8250_port: Check IRQ data before use
- CVE-2023-52566 nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- CVE-2023-52565 media: uvcvideo: Fix OOB read
- CVE-2023-52564 Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux"
- CVE-2023-52563 drm/meson: fix memory leak on ->hpd_notify callback
- CVE-2023-52562 mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy()
- CVE-2023-52561 arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- CVE-2023-52560 mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- CVE-2023-5256 Drupal core - Critical - Cache poisoning - SA-CORE-2023-006
- CVE-2023-52559 iommu/vt-d: Avoid memory allocation in iommu_suspend()
- CVE-2023-52558 OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash
- CVE-2023-52557 OpenBSD 7.3 invalid l2tp message npppd crash
- CVE-2023-52556 OpenBSD 7.4 pf state race condition kernel crash
- CVE-2023-52555 mongo-express Cross-site Request Forgery vulnerability
- CVE-2023-52554 Missing authorization in EMUI
- CVE-2023-52553 Race condition in EMUI
- CVE-2023-52552 Other in EMUI
- CVE-2023-52551 Memory corruption in EMUI
- CVE-2023-52550 Memory corruption in EMUI
- CVE-2023-5255 Denial of Service for Revocation of Auto Renewed Certificates