2023 CVEs (page 16)
Page 16 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-47466 | Low | 2.9 | 2025-05-22 | TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk. |
CVE-2023-33861 | Medium | 6.5 | 2025-05-20 | IBM Security ReaQta EDR 3.12 could allow an attacker to spoof a trusted entity by interfering with the communication path between the host and client. |
CVE-2023-7297 | Low | 3.5 | 2025-05-15 | The TwitterPosts WordPress plugin through 1.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in a… |
CVE-2023-7239 | High | 7.5 | 2025-05-15 | The WP Dashboard Notes WordPress plugin before 1.0.11 does not validate that the user has access to the post_id parameter in its wpdn_update_note AJAX action… |
CVE-2023-7231 | High | 7.3 | 2025-05-15 | The illi Link Party! WordPress plugin through 1.0 lacks proper access controls, allowing unauthenticated visitors to delete links. |
CVE-2023-7230 | Medium | 6.1 | 2025-05-15 | The illi Link Party! WordPress plugin through 1.0 does not sanitize and escape some parameters, which could allow users with a role as low as admin to perform… |
CVE-2023-7229 | Medium | 5.5 | 2025-05-15 | The illi Link Party! WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in… |
CVE-2023-7228 | Medium | 6.1 | 2025-05-15 | The illi Link Party! WordPress plugin through 1.0 does not sanitise and escape some parameters, which could allow unauthenticated vistors to perform Cross-Site… |
CVE-2023-7197 | High | 7.1 | 2025-05-15 | The Marketing Twitter Bot WordPress plugin through 1.11 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could a… |
CVE-2023-7196 | Medium | 4.3 | 2025-05-15 | The Ultimate Noindex Nofollow Tool WordPress plugin through 1.1.2 does not have CSRF check in place when updating its settings, which could allow attackers to… |
CVE-2023-7195 | Medium | 4.3 | 2025-05-15 | The WP-Reply Notify WordPress plugin through 1.1 does not have a CSRF check in place when updating its settings, which could allow attackers to make a logged-i… |
CVE-2023-7174 | High | 7.1 | 2025-05-15 | The aBitGone CommentSafe WordPress plugin through 1.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could a… |
CVE-2023-7168 | Medium | 4.8 | 2025-05-15 | The Better Follow Button for Jetpack WordPress plugin through 8.0 does not sanitise and escape some of its settings, which could allow high privilege users suc… |
CVE-2023-7088 | Medium | 5.4 | 2025-05-15 | The Add SVG Support for Media Uploader | inventivo WordPress plugin through 1.0.5 does not sanitize uploaded SVG files, which could allow users with a role as… |
CVE-2023-7086 | Medium | 5.4 | 2025-05-15 | The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a m… |
CVE-2023-6786 | Medium | 6.1 | 2025-05-15 | The Payment Gateway for Telcell WordPress plugin through 2.0.1 does not validate the api_url parameter before redirecting the user to its value, leading to an… |
CVE-2023-6783 | Medium | 4.8 | 2025-05-15 | The WolfNet IDX for WordPress plugin through 1.19.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to… |
CVE-2023-6541 | Medium | 6.1 | 2025-05-15 | The Allow SVG WordPress plugin before 1.2.0 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SV… |
CVE-2023-6030 | Medium | 5.4 | 2025-05-15 | The LogDash Activity Log WordPress plugin before 1.1.4 hooks the wp_login_failed function (from src/Hooks/Users.php) in order to log failed login attempts to t… |
CVE-2023-5934 | High | 7.3 | 2025-05-15 | The Travelpayouts: All Travel Brands in One Place WordPress plugin before 1.1.13 does not have CSRF check in place when importing settings from the v1, which c… |
CVE-2023-5932 | Medium | 4.8 | 2025-05-15 | The Travelpayouts: All Travel Brands in One Place WordPress plugin before 1.1.14 does not sanitise and escape a parameter before outputting it back in the page… |
CVE-2023-5529 | Medium | 4.8 | 2025-05-15 | The Advanced Page Visit Counter WordPress plugin before 8.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such a… |
CVE-2023-2334 | Medium | 5.4 | 2025-05-15 | The edd-google-sheet-connector-pro WordPress plugin before 1.4, Easy Digital Downloads Google Sheet Connector WordPress plugin before 1.6.6 does not have CSRF… |
CVE-2023-53146 | Medium | 5.5 | 2025-05-14 | In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() In dw2102_i2c_transfer, msg is… |
CVE-2023-31359 | High | 7.3 | 2025-05-13 | Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code exe… |
CVE-2023-31358 | High | 7.3 | 2025-05-13 | A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code exe… |
CVE-2023-49641 | Critical | 9.8 | 2025-05-13 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginCheck.php resource does not… |
CVE-2023-34732 | Medium | 5.4 | 2025-05-12 | An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force… |
CVE-2023-53145 | High | 7.8 | 2025-05-10 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition In btsdi… |
CVE-2023-31585 | Critical | 9.8 | 2025-05-08 | Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php. |
CVE-2023-51328 | Medium | 5.4 | 2025-05-08 | PHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "c_name, name" parameters. |
CVE-2023-51295 | Medium | 6.5 | 2025-05-08 | PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_ap… |
CVE-2023-7303 | Low | 3.5 | 2025-05-07 | A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This affects the function process_request o… |
CVE-2023-33770 | Medium | 5.1 | 2025-05-06 | Real Estate Management System v1.0 was discovered to contain a SQL injection vulnerability via the message parameter at /contact.php. |
CVE-2023-53144 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms As the call trace shown, the… |
CVE-2023-53143 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix another off-by-one fsmap error on 1k block filesystems Apparently syzbot figure… |
CVE-2023-53142 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ice: copy last block omitted in ice_get_module_eeprom() ice_get_module_eeprom() is broken… |
CVE-2023-53141 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping() ila_xlat_nl_cmd_get_… |
CVE-2023-53140 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Remove the /proc/scsi/${proc_name} directory earlier Remove the /proc/scsi/${… |
CVE-2023-53139 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties devm… |
CVE-2023-53138 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net: caif: Fix use-after-free in cfusbl_device_notify() syzbot reported use-after-free in… |
CVE-2023-53136 | High | 7.1 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: af_unix: fix struct pid leaks in OOB support syzbot reported struct pid leak [1]. Issue… |
CVE-2023-53135 | High | 7.1 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode When CONFIG_FRAME_POINTER… |
CVE-2023-53134 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Avoid order-5 memory allocation for TPA data The driver needs to keep track of a… |
CVE-2023-53133 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() When t… |
CVE-2023-53132 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix mpi3mr_hba_port memory leak in mpi3mr_remove() Free mpi3mr_hba_port at… |
CVE-2023-53131 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthread_stop() may prevent the thread… |
CVE-2023-53128 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix throttle_groups memory leak Add a missing kfree(). |
CVE-2023-53127 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix expander node leak in mpi3mr_remove() Add a missing resource clean up i… |
CVE-2023-53126 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove() Free mrioc->sas_hba.phy at… |
CVE-2023-53125 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb->len Packet length retrieved from skb data… |
CVE-2023-53124 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() Port is allocated… |
CVE-2023-53123 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: PCI: s390: Fix use-after-free of PCI resources with per-function hotplug On s390 PCI func… |
CVE-2023-53121 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: tcp: tcp_make_synack() can be called from process context tcp_rtx_synack() now could be c… |
CVE-2023-53120 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix config page DMA memory leak A fix for: DMA-API: pci 0000:83:00.0: devi… |
CVE-2023-53119 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: initialize struct pn533_out_arg properly struct pn533_out_arg used as a tempo… |
CVE-2023-53118 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a procfs host directory removal regression scsi_proc_hostdir_rm() decreas… |
CVE-2023-53117 | High | 7.1 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: fs: prevent out-of-bounds array speculation when closing a file descriptor Google-Bug-Id… |
CVE-2023-53116 | Critical | 9.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid potential UAF in nvmet_req_complete() An nvme target ->queue_response() oper… |
CVE-2023-53115 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix memory leaks in mpi3mr_init_ioc() Don't allocate memory again when IOC… |
CVE-2023-53114 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: i40e: Fix kernel crash during reboot when adapter is in recovery mode If the driver detec… |
CVE-2023-53113 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix NULL-ptr deref in offchan check If, e.g. in AP mode, the link was alre… |
CVE-2023-53112 | High | 7.1 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/sseu: fix max_subslices array-index-out-of-bounds access It seems that commit bc… |
CVE-2023-53111 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: loop: Fix use-after-free issues do_req_filebacked() calls blk_mq_complete_request() synch… |
CVE-2023-53110 | High | 7.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler() When performing a stress test on SM… |
CVE-2023-53109 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net: tunnels: annotate lockless accesses to dev->needed_headroom IP tunnels can apparentl… |
CVE-2023-53108 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net/iucv: Fix size of interrupt data iucv_irq_data needs to be 4 bytes larger. These byte… |
CVE-2023-53107 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: veth: Fix use after free in XDP_REDIRECT Commit 718a18a0c8a6 ("veth: Rework veth_xdp_rcv_… |
CVE-2023-53106 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition This bug influen… |
CVE-2023-53105 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix cleanup null-ptr deref on encap lock During module is unloaded while a pee… |
CVE-2023-53103 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails syzbot reported a w… |
CVE-2023-53102 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ice: xsk: disable txq irq before flushing hw ice_qp_dis() intends to stop a given queue p… |
CVE-2023-53101 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ext4: zero i_disksize when initializing the bootloader inode If the boot loader inode has… |
CVE-2023-53100 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix WARNING in ext4_update_inline_data Syzbot found the following issue: EXT4-fs (l… |
CVE-2023-53099 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: firmware: xilinx: don't make a sleepable memory allocation from an atomic context The fol… |
CVE-2023-53098 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: media: rc: gpio-ir-recv: add remove function In case runtime PM is enabled, do runtime PM… |
CVE-2023-53097 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: fix memory leak with using debugfs_lookup() When calling debugfs_lookup()… |
CVE-2023-53096 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: interconnect: fix mem leak when freeing nodes The node link array is allocated when addin… |
CVE-2023-53095 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix a NULL pointer dereference The LRU mechanism may look up a resource in the p… |
CVE-2023-53094 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: fsl_lpuart: fix race on RX DMA shutdown From time to time DMA completion can… |
CVE-2023-53093 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: tracing: Do not let histogram values have some modifiers Histogram values can not be stri… |
CVE-2023-53092 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: interconnect: exynos: fix node leak in probe PM QoS error path Make sure to add the newly… |
CVE-2023-53091 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ext4: update s_journal_inum if it changes after journal replay When mounting a crafted ex… |
CVE-2023-53090 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix an illegal memory access In the kfd_wait_on_events() function, the kfd_ev… |
CVE-2023-53089 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix task hung in ext4_xattr_delete_inode Syzbot reported a hung task problem: =====… |
CVE-2023-53088 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix UaF in listener shutdown As reported by Christoph after having refactored the… |
CVE-2023-53087 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/active: Fix misuse of non-idle barriers as fence trackers Users reported oopses… |
CVE-2023-53086 | High | 8.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: do not check WED status for non-mmio devices WED is supported just fo… |
CVE-2023-53085 | High | 7.1 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buff… |
CVE-2023-53084 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove another errant put in error path drm_gem_shmem_mmap() doesn't ow… |
CVE-2023-53083 | Critical | 9.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: nfsd: don't replace page in rq_pages if it's a continuation of last page The splice read… |
CVE-2023-53082 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: vp_vdpa: fix the crash in hot unplug with vp_vdpa While unplugging the vp_vdpa device, it… |
CVE-2023-53081 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after failed write When buffered write fails to copy data into… |
CVE-2023-53080 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: xsk: Add missing overflow check in xdp_umem_reg The number of chunks can overflow u32. Ma… |
CVE-2023-53079 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix steering rules cleanup vport's mc, uc and multicast rules are not deleted i… |
CVE-2023-53078 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() If alua_rtpg_queue() faile… |
CVE-2023-53077 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes [WHY] When PTEBufferSi… |
CVE-2023-53075 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix invalid address access in lookup_rec() when index is 0 KASAN reported follow… |
CVE-2023-53074 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini The call trace occurs when the am… |
CVE-2023-53073 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Always clear status for idx The variable 'status' (which contains the… |