2023 CVEs (page 33)
Page 33 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-52743 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: ice: Do not use WQ_MEM_RECLAIM flag for workqueue When both ice and the irdma driver are… |
CVE-2023-52742 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: USB: Fix wrong-direction WARNING in plusb.c The syzbot fuzzer detected a bug in the… |
CVE-2023-52741 | Critical | 9.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix use-after-free in rdata->read_into_pages() When the network status is unstable… |
CVE-2023-52740 | Medium | 4.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch The RFI an… |
CVE-2023-52739 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: Fix page corruption caused by racy check in __free_pages When we upgraded our kernel, we… |
CVE-2023-52738 | Medium | 5.3 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini Currently amdgpu calls… |
CVE-2023-52737 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: btrfs: lock the inode in shared mode before starting fiemap Currently fiemap does not tak… |
CVE-2023-52736 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Do not unset preset when cleaning up codec Several functions that take part in… |
CVE-2023-52735 | Critical | 9.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself sock_map proto callba… |
CVE-2023-52732 | Critical | 9.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: ceph: blocklist the kclient when receiving corrupted snap trace When received corrupted s… |
CVE-2023-52731 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix invalid page access after closing deferred I/O devices When a fbdev with defer… |
CVE-2023-52730 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: mmc: sdio: fix possible resource leaks in some error paths If sdio_add_func() or sdio_ini… |
CVE-2023-52708 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: mmc: mmc_spi: fix error handling in mmc_spi_probe() If mmc_add_host() fails, it doesn't n… |
CVE-2023-52707 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: sched/psi: Fix use-after-free in ep_remove_wait_queue() If a non-root cgroup gets removed… |
CVE-2023-52706 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: gpio: sim: fix a memory leak Fix an inverted logic bug in gpio_sim_remove_hogs() that lea… |
CVE-2023-52705 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix underflow in second superblock position calculations Macro NILFS_SB2_OFFSET_B… |
CVE-2023-52704 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL Tetsuo-San noted that commit f5d3… |
CVE-2023-52703 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path syzbot reported that act_l… |
CVE-2023-52702 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() old_meter needs to be f… |
CVE-2023-52701 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: use a bounce buffer for copying skb->mark syzbot found arm64 builds would crash in s… |
CVE-2023-52700 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix kernel warning when sending SYN message When sending a SYN message, this kernel… |
CVE-2023-3943 | Critical | 10.0 | 2024-05-21 | Stack-based Buffer Overflow vulnerability in ZkTeco-based OEM devices allows, in some cases, the execution of arbitrary code. Due to the lack of protection mec… |
CVE-2023-3942 | High | 7.5 | 2024-05-21 | An 'SQL Injection' vulnerability, due to improper neutralization of special elements used in SQL commands, exists in ZKTeco-based OEM devices. This vulnerabili… |
CVE-2023-3941 | Critical | 10.0 | 2024-05-21 | Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to write any file on the system with root privileges. This issue affec… |
CVE-2023-3940 | High | 7.5 | 2024-05-21 | Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to access any file on the system. This issue affects ZkTeco-based OEM… |
CVE-2023-3939 | Critical | 10.0 | 2024-05-21 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in ZkTeco-based OEM devices allows OS Command Inject… |
CVE-2023-3938 | Medium | 4.6 | 2024-05-21 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ZkTeco-based OEM devices allows an attacker to authen… |
CVE-2023-37929 | Medium | 6.5 | 2024-05-21 | The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause… |
CVE-2023-49335 | High | 8.3 | 2024-05-20 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details. |
CVE-2023-49334 | High | 8.3 | 2024-05-20 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report. |
CVE-2023-49333 | High | 8.3 | 2024-05-20 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature. |
CVE-2023-49332 | High | 8.3 | 2024-05-20 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares. |
CVE-2023-49331 | High | 8.3 | 2024-05-20 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option. |
CVE-2023-49330 | High | 8.3 | 2024-05-20 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data. |
CVE-2023-52699 | Medium | 5.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sb_bread() with pointers_lock held syzbot is reporting sleep in atomic c… |
CVE-2023-52424 | High | 7.4 | 2024-05-17 | The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-lo… |
CVE-2023-5597 | Medium | 5.4 | 2024-05-17 | A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows… |
CVE-2023-52698 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: calipso: fix memory leak in netlbl_calipso_add_pass() If IPv6 support is disabled at boot… |
CVE-2023-52697 | High | 7.1 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw_rt_sdca_jack_common: ctx->headset_codec_dev = NULL sof_sdw_rt_sdca_j… |
CVE-2023-52696 | High | 7.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_powercap_init() kasprintf() returns a p… |
CVE-2023-52695 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check writeback connectors in create_validate_stream_for_sink [WHY & HOW… |
CVE-2023-52694 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function With tpd12s015_re… |
CVE-2023-52693 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: ACPI: video: check for error while searching for backlight device parent If acpi_get_pare… |
CVE-2023-52692 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config() scarlett2_usb_set_… |
CVE-2023-52691 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a double-free in si_dpm_init When the allocation of adev->pm.dpm.dyn_stat… |
CVE-2023-52690 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check to scom_debug_init_one() kasprintf() returns a… |
CVE-2023-52689 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add missing mutex lock around get meter levels As scarlett2_meter_ctl_ge… |
CVE-2023-52688 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix the error handler of rfkill config When the core rfkill config throws e… |
CVE-2023-52687 | Critical | 9.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: crypto: safexcel - Add error handling for dma_map_sg() calls Macro dma_map_sg() may retur… |
CVE-2023-52686 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_event_init() kasprintf() returns a poin… |
CVE-2023-52684 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: qseecom: fix memory leaks in error paths Fix instances of returning error… |
CVE-2023-52683 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: ACPI: LPIT: Avoid u32 multiplication overflow In lpit_update_residency() there is a possi… |
CVE-2023-52682 | High | 7.1 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to wait on block writeback for post_read case If inode is compressed, but not e… |
CVE-2023-52681 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: efivarfs: Free s_fs_info on unmount Now that we allocate a s_fs_info struct on fs context… |
CVE-2023-52680 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add missing error checks to *_ctl_get() The *_ctl_get() functions which… |
CVE-2023-52679 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: of: Fix double free in of_parse_phandle_with_args_map In of_parse_phandle_with_args_map()… |
CVE-2023-52678 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c … |
CVE-2023-52677 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: riscv: Check if the code to patch lies in the exit section Otherwise we fall through to v… |
CVE-2023-52676 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: bpf: Guard stack limits against 32bit overflow This patch promotes the arithmetic around… |
CVE-2023-52675 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() kasprintf() returns… |
CVE-2023-52674 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put() Ensure the value passed to scar… |
CVE-2023-52673 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a debugfs null pointer error [WHY & HOW] Check whether get_subvp_en(… |
CVE-2023-52672 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: pipe: wakeup wr_wait after setting max_usage Commit c73be61cede5 ("pipe: Add general noti… |
CVE-2023-52671 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix hang/underflow when transitioning to ODM4:1 [Why] Under some circums… |
CVE-2023-52670 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: rpmsg: virtio: Free driver_override when rpmsg_remove() Free driver_override when rpmsg_r… |
CVE-2023-52669 | High | 8.2 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s3… |
CVE-2023-52668 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix lock ordering in btrfs_zone_activate() The btrfs CI reported a lockdep… |
CVE-2023-52667 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a potential double-free in fs_any_create_groups When kcalloc() for ft->g s… |
CVE-2023-52664 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: net: atlantic: eliminate double free in error handling logic Driver has a logic leak in r… |
CVE-2023-52663 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe() Driver uses kasprintf() to initial… |
CVE-2023-52662 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node When ida_alloc_max fails, resources a… |
CVE-2023-52661 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe() … |
CVE-2023-52660 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fix IRQ handling due to shared interrupts The driver requests the interrup… |
CVE-2023-52659 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type On 64-bit platforms, t… |
CVE-2023-52658 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" This reverts commi… |
CVE-2023-52657 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd/pm: resolve reboot exception for si oland" This reverts commit e490d60a2f… |
CVE-2023-51546 | High | 7.2 | 2024-05-17 | Improper Privilege Management vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels allows Privilege Escalatio… |
CVE-2023-51483 | Critical | 9.8 | 2024-05-17 | Improper Privilege Management vulnerability in Glowlogix WP Frontend Profile allows Privilege Escalation.This issue affects WP Frontend Profile: from n/a throu… |
CVE-2023-51481 | Critical | 9.8 | 2024-05-17 | Improper Privilege Management vulnerability in powerfulwp Local Delivery Drivers for WooCommerce allows Privilege Escalation.This issue affects Local Delivery… |
CVE-2023-51479 | High | 8.8 | 2024-05-17 | Improper Privilege Management vulnerability in Abdul Hakeem Build App Online allows Privilege Escalation.This issue affects Build App Online: from n/a through… |
CVE-2023-51476 | Critical | 9.8 | 2024-05-17 | Improper Privilege Management vulnerability in IOSS WP MLM Unilevel allows Privilege Escalation.This issue affects WP MLM Unilevel: from n/a through 4.0. |
CVE-2023-51424 | Critical | 9.8 | 2024-05-17 | Improper Privilege Management vulnerability in Saleswonder Team WebinarIgnition allows Privilege Escalation.This issue affects WebinarIgnition: from n/a throug… |
CVE-2023-51401 | Medium | 6.3 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder allows Rela… |
CVE-2023-51398 | High | 8.8 | 2024-05-17 | Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder allows Privilege Escalation.This issue affects Ultimate Addo… |
CVE-2023-51356 | High | 8.8 | 2024-05-17 | Improper Privilege Management vulnerability in Repute Infosystems ARMember allows Privilege Escalation.This issue affects ARMember: from n/a through 4.0.10. |
CVE-2023-50890 | High | 8.8 | 2024-05-17 | Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Elementor allows Privilege Escalation.This issue affects Ultimate Addons fo… |
CVE-2023-49753 | High | 7.5 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spoonthemes Adifier System allows PHP Local File Inclusion.This… |
CVE-2023-48757 | High | 8.8 | 2024-05-17 | Improper Privilege Management vulnerability in Crocoblock JetEngine allows Privilege Escalation.This issue affects JetEngine: from n/a through 3.2.4. |
CVE-2023-48319 | Medium | 6.8 | 2024-05-17 | Improper Privilege Management vulnerability in Salon Booking System Salon booking system allows Privilege Escalation.This issue affects Salon booking system: f… |
CVE-2023-47868 | High | 7.3 | 2024-05-17 | Improper Privilege Management vulnerability in wpForo wpForo Forum allows Privilege Escalation.This issue affects wpForo Forum: from n/a through 2.2.3. |
CVE-2023-47782 | High | 8.8 | 2024-05-17 | Improper Privilege Management vulnerability in Thrive Themes Thrive Theme Builder allows Privilege Escalation.This issue affects Thrive Theme Builder: from n/a… |
CVE-2023-47683 | High | 8.0 | 2024-05-17 | Improper Privilege Management vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Privilege Escalation… |
CVE-2023-47682 | High | 7.2 | 2024-05-17 | Improper Privilege Management vulnerability in weDevs WP User Frontend allows Privilege Escalation.This issue affects WP User Frontend: from n/a through 3.6.5. |
CVE-2023-47679 | Medium | 6.4 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QODE Interactive Qi Addons For Elementor allows PHP Local File… |
CVE-2023-47178 | High | 8.6 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro allows PH… |
CVE-2023-46784 | High | 8.2 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Server-Side Request Forgery (SSRF) vulnerability in Room 34 Creative Services… |
CVE-2023-46205 | High | 7.1 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder allo… |
CVE-2023-46197 | Medium | 5.3 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in supsystic.Com Popup by Supsystic allows Relative Path Traversal… |
CVE-2023-46145 | High | 8.8 | 2024-05-17 | Improper Privilege Management vulnerability in Themify Themify Ultra allows Privilege Escalation.This issue affects Themify Ultra: from n/a through 7.3.5. |
CVE-2023-45652 | Medium | 6.5 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Justin Silver Remote Content Shortcode allows PHP Local File In… |