2023 CVEs (page 32)
Page 32 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-37411 | Medium | 4.8 | 2024-05-28 | IBM Aspera Faspex 5.0.0 through 5.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI t… |
CVE-2023-52712 | High | 7.8 | 2024-05-28 | Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previou… |
CVE-2023-52711 | High | 7.8 | 2024-05-28 | Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previou… |
CVE-2023-52710 | High | 7.8 | 2024-05-28 | Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26), As the communication buffer size hasn’t been properly validated to be of the expected size, it can partiall… |
CVE-2023-52548 | High | 7.8 | 2024-05-28 | Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26) Arbitrary Memory Corruption in SMI Handler of ThisiServicesSmm SMM module. This can be leveraged by a malici… |
CVE-2023-52547 | High | 7.8 | 2024-05-28 | Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26. Memory Corruption in SMI Handler of HddPassword SMM Module. This can be leveraged by a malicious OS attacker… |
CVE-2023-6349 | High | 7.5 | 2024-05-27 | A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap… |
CVE-2023-46442 | Medium | 4.3 | 2024-05-24 | An infinite loop in the retrieveActiveBody function of Soot before v4.4.1 under Java 8 allows attackers to cause a Denial of Service (DoS). |
CVE-2023-52880 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc Any unprivileged user can att… |
CVE-2023-49575 | High | 7.1 | 2024-05-24 | A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14, in Sync Breeze Enterprise Server 10.4.18 version, and in Disk Pulse Ente… |
CVE-2023-49574 | High | 7.1 | 2024-05-24 | A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14 that could allow an attacker to execute persistent XSS through /add_job i… |
CVE-2023-49573 | High | 7.1 | 2024-05-24 | A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14 that could allow an attacker to execute persistent XSS through /add_comma… |
CVE-2023-49572 | High | 7.1 | 2024-05-24 | A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14, and in Disk Pulse Enterprise 10.4.18 version, that could allow an attack… |
CVE-2023-47710 | Medium | 5.4 | 2024-05-24 | IBM Security Guardium 11.4, 11.5, and 12.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… |
CVE-2023-7259 | Low | 2.4 | 2024-05-24 | ** DISPUTED ** A vulnerability was found in zzdevelop lenosp up to 20230831. It has been classified as problematic. This affects an unknown part of the compone… |
CVE-2023-1111 | Low | 2.4 | 2024-05-24 | A vulnerability was found in FastCMS up to 0.1.5 and classified as problematic. Affected by this issue is some unknown functionality of the component New Artic… |
CVE-2023-1001 | Low | 3.5 | 2024-05-24 | A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file p… |
CVE-2023-7045 | Medium | 5.4 | 2024-05-23 | A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1. By leveraging this vuln… |
CVE-2023-6502 | Medium | 4.3 | 2024-05-23 | A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17.0 before 17… |
CVE-2023-6325 | Medium | 5.3 | 2024-05-23 | The RomethemeForm For Elementor plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the exp… |
CVE-2023-6844 | Medium | 5.0 | 2024-05-23 | The iframe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to and including 5.0 due to insuf… |
CVE-2023-46807 | Medium | 6.7 | 2024-05-22 | An SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated user with appropriate privilege to access or modify data in the… |
CVE-2023-46806 | Medium | 6.7 | 2024-05-22 | An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with appropriate privilege to access or modify… |
CVE-2023-51637 | Critical | 9.8 | 2024-05-22 | Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2023-51636 | High | 7.8 | 2024-05-22 | Avira Prime Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations… |
CVE-2023-6487 | Medium | 4.4 | 2024-05-22 | The LuckyWP Table of Contents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Header Title' field in all versions up to and includin… |
CVE-2023-52879 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: tracing: Have trace_event_file have ref counters The following can crash the kernel: #… |
CVE-2023-52878 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of… |
CVE-2023-52877 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() It is possible that type… |
CVE-2023-52876 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data Add the check for the ret… |
CVE-2023-52875 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data Add the check for the return… |
CVE-2023-52874 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Zero out the missing RSI in TDX_HYPERCALL macro In the TDX_HYPERCALL asm, after… |
CVE-2023-52873 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data Add the check for the return… |
CVE-2023-52872 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix race condition in status line change on dead connections gsm_cleanup_mux(… |
CVE-2023-52871 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: soc: qcom: llcc: Handle a second device without data corruption Usually there is only one… |
CVE-2023-52870 | Medium | 4.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data Add the check for the return… |
CVE-2023-52869 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: pstore/platform: Add check for kstrdup Add check for the return value of kstrdup() and re… |
CVE-2023-52868 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow The dev->id value comes from ida_alloc()… |
CVE-2023-52867 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmt_status' of size 6 could overflow, since… |
CVE-2023-52866 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Fix user-memory-access bug in uclogic_params_ugee_v2_init_event_hooks() Whe… |
CVE-2023-52865 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data Add the check for the return… |
CVE-2023-52864 | High | 7.0 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: wmi: Fix opening of char device Since commit fa1f68db6ca7 ("drivers: misc… |
CVE-2023-52863 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (axi-fan-control) Fix possible NULL pointer dereference axi_fan_control_irq_handle… |
CVE-2023-52862 | Medium | 4.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null pointer dereference in error message This patch fixes a null po… |
CVE-2023-52861 | Medium | 6.2 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm: bridge: it66121: Fix invalid connector dereference Fix the NULL pointer dereference… |
CVE-2023-52860 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit pro… |
CVE-2023-52859 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: perf: hisi: Fix use-after-free when register pmu fails When we fail to register the uncor… |
CVE-2023-52858 | Medium | 6.2 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data Add the check for the return… |
CVE-2023-52857 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix coverity issue with unintentional integer overflow 1. Instead of multip… |
CVE-2023-52856 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: lt8912b: Fix crash on bridge detach The lt8912b driver, in its bridge detach… |
CVE-2023-52855 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency In _dwc2_hc… |
CVE-2023-52854 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: padata: Fix refcnt handling in padata_free_shell() In a high-load arm64 environment, the… |
CVE-2023-52853 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: hid: cp2112: Fix duplicate workqueue initialization Previously the cp2112 driver called I… |
CVE-2023-52852 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to avoid use-after-free on dic Call trace: __memcpy+0x128/0x250 f2f… |
CVE-2023-52851 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF In the unl… |
CVE-2023-52850 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: media: hantro: Check whether reset op is defined before use The i.MX8MM/N/P does not defi… |
CVE-2023-52849 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: cxl/mem: Fix shutdown order Ira reports that removing cxl_mock_mem causes a crash with th… |
CVE-2023-52848 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to drop meta_inode's page cache in f2fs_put_super() syzbot reports a kernel bug… |
CVE-2023-52847 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: media: bttv: fix use after free error due to btv->timeout timer There may be some a race… |
CVE-2023-52846 | High | 8.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: hsr: Prevent use after free in prp_create_tagged_frame() The prp_fill_rct() function can… |
CVE-2023-52845 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING syzbot reported the fo… |
CVE-2023-52844 | Medium | 6.2 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: psi: Add check for kstrdup Add check for the return value of kstrdup() and… |
CVE-2023-52843 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: llc: verify mac len before reading mac header LLC reads the mac header with eth_hdr witho… |
CVE-2023-52842 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt() KMSAN reported the followin… |
CVE-2023-52841 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: mux: Add check and kfree for kstrdup Add check for the return value of kstr… |
CVE-2023-52840 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() The put_device()… |
CVE-2023-52839 | Low | 3.3 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drivers: perf: Do not broadcast to other cpus when starting a counter This command: $ pe… |
CVE-2023-52838 | Medium | 6.2 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: fbdev: imsttfb: fix a resource leak in probe I've re-written the error handling but the b… |
CVE-2023-52837 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: nbd: fix uaf in nbd_open Commit 4af5f2e03013 ("nbd: use blk_mq_alloc_disk and blk_cleanup… |
CVE-2023-52836 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: locking/ww_mutex/test: Fix potential workqueue corruption In some cases running with the… |
CVE-2023-52835 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Bail out early if the request AUX area is out of bound When perf-record with a… |
CVE-2023-52834 | High | 7.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: atl1c: Work around the DMA RX overflow issue This is based on alx driver commit 881d0327d… |
CVE-2023-52833 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Add date->evt_skb is NULL check fix crash because of null pointers [ 6… |
CVE-2023-52832 | Critical | 9.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211_get_tx_power() We can get a UBSAN w… |
CVE-2023-52831 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: cpu/hotplug: Don't offline the last non-isolated CPU If a system has isolated CPUs via th… |
CVE-2023-52829 | High | 8.4 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps() reg_cap.ph… |
CVE-2023-52828 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: bpf: Detect IP == ksym.end as part of BPF program Now that bpf_throw kfunc is the first s… |
CVE-2023-52827 | High | 7.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats() len is extra… |
CVE-2023-52826 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference In tpg110_get_modes()… |
CVE-2023-52825 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix a race condition of vram buffer unref in svm code prange->svm_bo unref ca… |
CVE-2023-52821 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/panel: fix a possible null pointer dereference In versatile_panel_get_modes(), the re… |
CVE-2023-52819 | Medium | 6.6 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga For pptable structs th… |
CVE-2023-52818 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 For pptable structs that use flexib… |
CVE-2023-52817 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL In certain types… |
CVE-2023-52816 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix shift out-of-bounds issue [ 567.613292] shift exponent 255 is too large… |
CVE-2023-52815 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vkms: fix a possible null pointer dereference In amdgpu_vkms_conn_get_modes()… |
CVE-2023-52814 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix potential null pointer derefernce The amdgpu_ras_get_context may return N… |
CVE-2023-52813 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix hungtask for PADATA_RESET We found a hungtask bug in test_aead_vec_c… |
CVE-2023-52812 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd: check num of link levels when update pcie param In SR-IOV environment, the value… |
CVE-2023-52811 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool In practice the driver sho… |
CVE-2023-52810 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add check for negative db_l2nbperpage l2nbperpage is log2(number of blks per page… |
CVE-2023-52809 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() fc_lport_ptp_… |
CVE-2023-52808 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs If init debugfs fa… |
CVE-2023-52807 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs The… |
CVE-2023-52806 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix possible null-ptr-deref when assigning a stream While AudioDSP drivers ass… |
CVE-2023-52805 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diAlloc Currently there is not check against the ag… |
CVE-2023-52804 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add validity check for db_maxag and db_agpref Both db_maxag and db_agpref are use… |
CVE-2023-52803 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries RPC client pipefs dentries cl… |
CVE-2023-52801 | High | 8.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix missing update of domains_itree after splitting iopt_area In iopt_area_split… |
CVE-2023-52800 | Medium | 4.4 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix htt pktlog locking The ath11k active pdevs are protected by RCU but the… |