2023 CVEs (page 17)
Page 17 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-53072 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: mptcp: use the workqueue to destroy unaccepted sockets Christoph reported a UaF at token… |
CVE-2023-53071 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: do not run mt76_unregister_device() on unregistered hw Trying to probe a mt79… |
CVE-2023-53070 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent Commit 0c80f9e16… |
CVE-2023-53069 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: Add missing free for alloc_percpu Add the free_percpu for the allocated "vf… |
CVE-2023-53068 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb->len Packet length retrieved from descripto… |
CVE-2023-53067 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Only call get_timer_irq() once in constant_clockevent_init() Under CONFIG_DEBU… |
CVE-2023-53066 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info We have to make sure th… |
CVE-2023-53065 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output… |
CVE-2023-53064 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: iavf: fix hang on reboot with ice When a system with E810 with existing VFs gets rebooted… |
CVE-2023-53062 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb->len Packet length retrieved from descript… |
CVE-2023-53061 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible refcount leak in smb2_open() Reference count of acls will leak when m… |
CVE-2023-53060 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: igb: revert rtnl_lock() that causes deadlock The commit 6faee3d4ee8b ("igb: Add lock to a… |
CVE-2023-53059 | High | 7.1 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl It is possible to peep… |
CVE-2023-53058 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, Fix an Oops in error handling code The error handling dereferences "v… |
CVE-2023-53057 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Fix global-out-of-bounds To loop a variable-length array, hci_init_stage_… |
CVE-2023-53056 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Synchronize the IOCB count to be in order A system hang was observed with… |
CVE-2023-53055 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: fscrypt: destroy keyring after security_sb_delete() fscrypt_destroy_keyring() must be cal… |
CVE-2023-53054 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix a devres leak in hw_enable upon suspend resume Each time the platform goes… |
CVE-2023-53053 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: erspan: do not use skb_mac_header() in ndo_start_xmit() Drivers should not assume skb_mac… |
CVE-2023-53052 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix use-after-free bug in refresh_cache_worker() The UAF bug occurred because we we… |
CVE-2023-53051 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: dm crypt: add cond_resched() to dmcrypt_write() The loop in dmcrypt_write may be running… |
CVE-2023-53050 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix memory leak in margining Memory for the usb4->margining needs to be rela… |
CVE-2023-53049 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: usb: ucsi: Fix NULL pointer deref in ucsi_connector_change() When ucsi_init() fails, ucsi… |
CVE-2023-53048 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix warning when handle discover_identity message Since both source and… |
CVE-2023-53047 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix race condition in amdtee_open_session There is a potential race conditio… |
CVE-2023-53046 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix race condition in hci_cmd_sync_clear There is a potential race condition i… |
CVE-2023-53045 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_audio: don't let userspace block driver unbind In the unbind callback for… |
CVE-2023-53044 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: dm stats: check for and propagate alloc_percpu failure Check alloc_precpu()'s return valu… |
CVE-2023-53043 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: sc7280: Mark PCIe controller as cache coherent If the controller is not… |
CVE-2023-53042 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not set DRR on pipe Commit [WHY] Writing to DRR registers such as OTG… |
CVE-2023-53041 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Perform lockless command completion in abort path While adding and removin… |
CVE-2023-53040 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ca8210: fix mac_len negative array access This patch fixes a buffer overflow access of sk… |
CVE-2023-53039 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function When a reset notif… |
CVE-2023-53038 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() If kzalloc() fails in lpfc_sli… |
CVE-2023-53037 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Bad drive in topology results kernel crash When the SAS Transport Layer sup… |
CVE-2023-53036 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix call trace warning and hang when removing amdgpu device On GPUs with RAS… |
CVE-2023-53035 | High | 7.1 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() The ioctl helper function nilfs_io… |
CVE-2023-46669 | Medium | 6.2 | 2025-05-01 | Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead to loss of confidentiality and impersona… |
CVE-2023-45721 | Medium | 5.3 | 2025-04-30 | Insufficient default configuration in HCL Leap allows anonymous access to directory information. |
CVE-2023-37535 | High | 7.1 | 2025-04-30 | Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters. |
CVE-2023-37517 | Low | 3.2 | 2025-04-30 | Missing "no cache" headers in HCL Leap permits sensitive data to be cached. |
CVE-2023-42404 | Medium | 4.9 | 2025-04-28 | OneVision Workspace before WS23.1 SR1 (build w31.040) allows arbitrary Java EL execution. |
CVE-2023-35817 | Medium | 5.0 | 2025-04-28 | DevExpress before 23.1.3 allows AsyncDownloader SSRF. |
CVE-2023-35816 | Low | 3.5 | 2025-04-28 | DevExpress before 23.1.3 allows arbitrary TypeConverter conversion. |
CVE-2023-35815 | Low | 3.5 | 2025-04-28 | DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data. |
CVE-2023-35814 | Low | 3.5 | 2025-04-28 | DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms. |
CVE-2023-37516 | Low | 3.2 | 2025-04-24 | Missing "no cache" headers in HCL Leap permits user directory information to be cached. |
CVE-2023-45720 | Medium | 5.3 | 2025-04-24 | Insufficient default configuration in HCL Leap allows anonymous access to directory information. |
CVE-2023-37534 | High | 7.1 | 2025-04-24 | Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters. |
CVE-2023-44755 | Critical | 9.8 | 2025-04-22 | Sacco Management system v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /sacco/ajax.php. |
CVE-2023-44753 | Medium | 6.1 | 2025-04-22 | A stored cross-site scripting (XSS) vulnerability fin Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted pa… |
CVE-2023-44752 | Critical | 9.8 | 2025-04-22 | An issue in Student Study Center Desk Management System v1.0 allows attackers to bypass authentication via a crafted GET request to /php-sscdms/admin/login.php. |
CVE-2023-43958 | Critical | 9.8 | 2025-04-22 | An arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital Management System v4.0 allows an unauthenticated a… |
CVE-2023-43378 | Medium | 6.1 | 2025-04-22 | A cross-site scripting (XSS) vulnerability in Hoteldruid v3.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into t… |
CVE-2023-30421 | Low | 2.9 | 2025-04-19 | mystrtod in mjson 1.2.7 requires more than a billion iterations during processing of certain digit strings such as 8891110122900e913013935755114. |
CVE-2023-26819 | Low | 2.9 | 2025-04-19 | cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,999999999999999999999999999999999999999999999991234567… |
CVE-2023-53034 | High | 7.1 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans There is a kernel… |
CVE-2023-32197 | Medium | 6.6 | 2025-04-16 | A Improper Privilege Management vulnerability in SUSE rancher in RoleTemplateobjects when external=true is set can lead to privilege escalation in specific sce… |
CVE-2023-5616 | Medium | 4.9 | 2025-04-15 | In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-se… |
CVE-2023-27272 | Low | 3.1 | 2025-04-14 | IBM Aspera Console 3.4.0 through 3.4.4 allows passwords to be reused when a new user logs into the system. |
CVE-2023-42983 | Medium | 6.4 | 2025-04-11 | Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improv… |
CVE-2023-42982 | Medium | 6.4 | 2025-04-11 | Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improv… |
CVE-2023-42981 | Medium | 5.4 | 2025-04-11 | Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improv… |
CVE-2023-42977 | High | 7.8 | 2025-04-11 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to break out of… |
CVE-2023-42973 | Medium | 4.0 | 2025-04-11 | Private Browsing tabs may be accessed without authentication. This issue is fixed in iOS 17 and iPadOS 17. The issue was addressed with improved UI. |
CVE-2023-42970 | High | 8.8 | 2025-04-11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari… |
CVE-2023-42969 | Low | 3.3 | 2025-04-11 | An app may be able to break out of its sandbox. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, mac… |
CVE-2023-42961 | Medium | 6.3 | 2025-04-11 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14, macOS Ven… |
CVE-2023-42875 | High | 7.3 | 2025-04-11 | Processing web content may lead to arbitrary code execution. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. The… |
CVE-2023-41076 | High | 7.3 | 2025-04-11 | An app may be able to elevate privileges. This issue is fixed in macOS 14. This issue was addressed by removing the vulnerable code. |
CVE-2023-38614 | Medium | 4.3 | 2025-04-11 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access sens… |
CVE-2023-43037 | Medium | 6.5 | 2025-04-10 | IBM Maximo Application Suite 8.11 and 9.0 could allow an authenticated user to perform unauthorized actions due to improper input validation. |
CVE-2023-43035 | Medium | 4.0 | 2025-04-10 | IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another user on the system. |
CVE-2023-42007 | Medium | 5.4 | 2025-04-10 | IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code i… |
CVE-2023-33844 | Medium | 5.4 | 2025-04-09 | IBM Security Verify Governance 10.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI t… |
CVE-2023-37930 | High | 7.5 | 2025-04-08 | Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834] vulnerabilities vulnerability in Fortinet allows a V… |
CVE-2023-47639 | Medium | 5.3 | 2025-04-03 | API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. From 3.2.0 until 3.2.4, exception messages, that are not HTTP exceptions, are… |
CVE-2023-40714 | Critical | 9.9 | 2025-04-02 | A relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0 through 6.6.3, 6.5.1, 6.5.0 allows attacker to escalate privilege vi… |
CVE-2023-46988 | Medium | 6.7 | 2025-04-01 | Path Traversal vulnerability in ONLYOFFICE Document Server before v8.0.1 allows a remote attacker to copy arbitrary files by manipulating the fileExt parameter… |
CVE-2023-33302 | Medium | 4.7 | 2025-03-31 | A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and administrative interface version 6.4.0 through 6.4… |
CVE-2023-0881 | High | 7.5 | 2025-03-31 | Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nft_lookup without the subsequent fixes… |
CVE-2023-38272 | Medium | 5.9 | 2025-03-27 | IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 co… |
CVE-2023-37405 | Medium | 6.5 | 2025-03-27 | IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 stor… |
CVE-2023-53033 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits If the offse… |
CVE-2023-53032 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. When firs… |
CVE-2023-53031 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Fix use of mutex in IRQs disabled section Current imc-pmu code triggers… |
CVE-2023-53030 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Avoid use of GFP_KERNEL in atomic context Using GFP_KERNEL in preemption di… |
CVE-2023-53029 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt The commit 4af1b64f80fb (… |
CVE-2023-53028 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" This reverts commit 13e5af… |
CVE-2023-53026 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix ib block iterator counter overflow When registering a new DMA MR after sel… |
CVE-2023-53024 | High | 7.1 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation To mitigate… |
CVE-2023-53023 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: Fix use-after-free in local_cleanup() Fix a use-after-free that occurs in kfree… |
CVE-2023-53022 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() This lockdep splat says it better… |
CVE-2023-53021 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: fix possible use-after-free syzbot reported a nasty crash [1] in n… |
CVE-2023-53020 | Medium | 4.7 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: l2tp: close all race conditions in l2tp_tunnel_register() The code in l2tp_tunnel_registe… |
CVE-2023-53019 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobus_get_phy() The caller may pass any value as… |
CVE-2023-53018 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix memory leaks When hci_cmd_sync_queue() failed in hci_le_terminat… |
CVE-2023-53017 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix memory leak in hci_update_adv_data() When hci_cmd_sync_queue() f… |
CVE-2023-53016 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix possible deadlock in rfcomm_sk_state_change syzbot reports a possible dead… |
CVE-2023-53015 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: HID: betop: check shape of output reports betopff_init() only checks the total sum of the… |