Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 160 of 430.
- CVE-2023-52549 Memory corruption in EMUI
- CVE-2023-52548 Memory corruption in CurieM-WFG9B
- CVE-2023-52547 Memory corruption in CurieM-WFG9B
- CVE-2023-52546 Security feature bypass in EMUI
- CVE-2023-52545 Misconfiguration in EMUI
- CVE-2023-52544 Path traversal in EMUI
- CVE-2023-52543 Missing authorization in EMUI
- CVE-2023-52542 Missing authorization in EMUI
- CVE-2023-52541 Missing authorization in EMUI
- CVE-2023-52540 Auth bypass in EMUI
- CVE-2023-5254 AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user
- CVE-2023-52539 Missing authorization in EMUI
- CVE-2023-52538 Security feature bypass in EMUI
- CVE-2023-52537 Security feature bypass in EMUI
- CVE-2023-52536 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-52535 Denial of service in SC7731E/SC9832E/SC9863A/T310/T610/T618
- CVE-2023-52534 Denial of service in T760/T770/T820/S8000
- CVE-2023-52533 Information disclosure in T760/T770/T820/S8000
- CVE-2023-52532 net: mana: Fix TX CQE error handling
- CVE-2023-52531 wifi: iwlwifi: mvm: Fix a memory corruption issue
- CVE-2023-52530 wifi: mac80211: fix potential key use-after-free
- CVE-2023-5253 Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0
- CVE-2023-52529 HID: sony: Fix a potential memory leak in sony_probe()
- CVE-2023-52528 net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- CVE-2023-52527 ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- CVE-2023-52526 erofs: fix memory leak of LZMA global compressed deduplication
- CVE-2023-52525 wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet
- CVE-2023-52524 net: nfc: llcp: Add lock when modifying device list
- CVE-2023-52523 bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets
- CVE-2023-52522 net: fix possible store tearing in neigh_periodic_work()
- CVE-2023-52520 platform/x86: think-lmi: Fix reference leak
- CVE-2023-5252 FareHarbor for WordPress <= 3.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-52519 HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit
- CVE-2023-52518 Bluetooth: hci_codec: Fix leaking content of local_codecs
- CVE-2023-52517 spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain
- CVE-2023-52516 dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- CVE-2023-52515 RDMA/srp: Do not call scsi_done() from srp_abort()
- CVE-2023-52513 RDMA/siw: Fix connection failure handling
- CVE-2023-52512 pinctrl: nuvoton: wpcm450: fix out of bounds write
- CVE-2023-52511 spi: sun6i: reduce DMA RX transfer width to single byte
- CVE-2023-52510 ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- CVE-2023-5251 Grid Plus <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Grid Layout Add/Update/Delete
- CVE-2023-52509 ravb: Fix use-after-free issue in ravb_tx_timeout_work()
- CVE-2023-52508 nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()
- CVE-2023-52507 nfc: nci: assert requested protocol is valid
- CVE-2023-52506 LoongArch: Set all reserved memblocks on Node#0 at initialization
- CVE-2023-52505 phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers
- CVE-2023-52504 x86/alternatives: Disable KASAN in apply_alternatives()
- CVE-2023-52503 tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- CVE-2023-52502 net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- CVE-2023-52501 ring-buffer: Do not attempt to read past "commit"
- CVE-2023-52500 scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- CVE-2023-5250 Grid Plus <= 1.3.3 - Authenticated (Subscriber+) Local File Inclusion via Shortcode
- CVE-2023-52499 powerpc/47x: Fix 47x syscall return crash
- CVE-2023-52498 PM: sleep: Fix possible deadlocks in core system-wide PM code
- CVE-2023-52497 erofs: fix lz4 inplace decompression
- CVE-2023-52495 soc: qcom: pmic_glink_altmode: fix port sanity check
- CVE-2023-52494 bus: mhi: host: Add alignment check for event ring read pointer
- CVE-2023-52493 bus: mhi: host: Drop chan lock before queuing buffers
- CVE-2023-52492 dmaengine: fix NULL pointer in channel unregistration function
- CVE-2023-52491 media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- CVE-2023-52490 mm: migrate: fix getting incorrect page mapping during page migration
- CVE-2023-5249 Mali GPU Kernel Driver allows improper GPU memory processing operations
- CVE-2023-52489 mm/sparsemem: fix race in accessing memory_section->usage
- CVE-2023-52488 serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- CVE-2023-52487 net/mlx5e: Fix peer flow lists handling
- CVE-2023-52486 drm: Don't unref the same fb many times by mistake due to deadlock handling
- CVE-2023-52485 drm/amd/display: Wake DMCUB before sending a command
- CVE-2023-52484 iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- CVE-2023-52483 mctp: perform route lookups under a RCU read-side lock
- CVE-2023-52482 x86/srso: Add SRSO mitigation for Hygon processors
- CVE-2023-52481 arm64: errata: Add Cortex-A520 speculative unprivileged load workaround
- CVE-2023-52480 ksmbd: fix race condition between session lookup and expire
- CVE-2023-52479 ksmbd: fix uaf in smb20_oplock_break_ack
- CVE-2023-52478 HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
- CVE-2023-52477 usb: hub: Guard against accesses to uninitialized BOS descriptors
- CVE-2023-52476 perf/x86/lbr: Filter vsyscall addresses
- CVE-2023-52475 Input: powermate - fix use-after-free in powermate_config_complete
- CVE-2023-52474 IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests
- CVE-2023-52473 thermal: core: Fix NULL pointer dereference in zone registration error path
- CVE-2023-52472 crypto: rsa - add a check for allocation failure
- CVE-2023-52471 ice: Fix some null pointer dereference issues in ice_ptp.c
- CVE-2023-52470 drm/radeon: check the alloc_workqueue return value in radeon_crtc_init()
- CVE-2023-5247 Code injection in GX Works3
- CVE-2023-52469 drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- CVE-2023-52468 class: fix use-after-free in class_register()
- CVE-2023-52467 mfd: syscon: Fix null pointer dereference in of_syscon_register()
- CVE-2023-52465 power: supply: Fix null pointer dereference in smb2_probe
- CVE-2023-52464 EDAC/thunderx: Fix possible out-of-bounds string access
- CVE-2023-52463 efivarfs: force RO when remounting if SetVariable is not supported
- CVE-2023-52462 bpf: fix check for attempt to corrupt spilled pointer
- CVE-2023-52461 drm/sched: Fix bounds limiting when given a malformed entity
- CVE-2023-52460 drm/amd/display: Fix NULL pointer dereference at hibernate
- CVE-2023-5246 Auth bypass in FX0-GENT00000
- CVE-2023-52459 media: v4l: async: Fix duplicated list deletion
- CVE-2023-52458 block: add check that partition length needs to be aligned with block size
- CVE-2023-52457 serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed
- CVE-2023-52456 serial: imx: fix tx statemachine deadlock
- CVE-2023-52455 iommu: Don't reserve 0-length IOVA region
- CVE-2023-52454 nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length