2023 CVEs (page 51)
Page 51 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-42419 | Low | 3.8 | 2024-03-05 | Maintenance Server, in Cybellum's QCOW air-gapped distribution (China Edition), versions 2.15.5 through 2.27, was compiled with a hard-coded private cryptograp… |
CVE-2023-52432 | Medium | 5.9 | 2024-03-05 | Improper input validation in IpcTxSndSetLoopbackCtrl in libsec-ril prior to SMR Sep-2023 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2023-49970 | Critical | 9.8 | 2024-03-05 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customer_support/ajax.php?action=save_ticket. |
CVE-2023-49969 | Medium | 4.3 | 2024-03-05 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/index.php?page=edit_customer. |
CVE-2023-49968 | High | 7.3 | 2024-03-05 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/manage_department.php. |
CVE-2023-49548 | High | 8.8 | 2024-03-05 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customer_support/ajax.php?action=save_user. |
CVE-2023-49547 | Critical | 9.8 | 2024-03-05 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customer_support/ajax.php?action=login. |
CVE-2023-49546 | High | 8.8 | 2024-03-05 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customer_support/ajax.php. |
CVE-2023-41829 | Medium | 5.0 | 2024-03-04 | An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application to read files withou… |
CVE-2023-41827 | Medium | 5.1 | 2024-03-04 | An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based m… |
CVE-2023-6068 | Low | 3.1 | 2024-03-04 | On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the c… |
CVE-2023-32331 | High | 7.5 | 2024-03-04 | IBM Connect:Express for UNIX 1.5.0 is vulnerable to a buffer overflow that could allow a remote attacker to cause a denial of service through its browser UI… |
CVE-2023-38360 | Medium | 6.1 | 2024-03-04 | IBM CICS TX Advanced 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering… |
CVE-2023-5451 | Medium | 6.1 | 2024-03-04 | Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Management Client downloads and ECA conf… |
CVE-2023-38362 | Medium | 5.3 | 2024-03-04 | IBM CICS TX Advanced 10.1 could disclose sensitive information to a remote attacker due to observable discrepancy in HTTP responses. IBM X-Force ID: 260814. |
CVE-2023-6241 | High | 7.0 | 2024-03-04 | Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GP… |
CVE-2023-43553 | Critical | 9.8 | 2024-03-04 | Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE. |
CVE-2023-43552 | Critical | 9.8 | 2024-03-04 | Memory corruption while processing MBSSID beacon containing several subelement IE. |
CVE-2023-43550 | High | 7.8 | 2024-03-04 | Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem. |
CVE-2023-43549 | High | 8.4 | 2024-03-04 | Memory corruption while processing TPC target power table in FTM TPC. |
CVE-2023-43548 | High | 7.3 | 2024-03-04 | Memory corruption while parsing qcp clip with invalid chunk data size. |
CVE-2023-43547 | High | 8.4 | 2024-03-04 | Memory corruption while invoking IOCTLs calls in Automotive Multimedia. |
CVE-2023-43546 | High | 8.4 | 2024-03-04 | Memory corruption while invoking HGSL IOCTL context create. |
CVE-2023-43541 | High | 8.4 | 2024-03-04 | Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics render. |
CVE-2023-43540 | High | 8.4 | 2024-03-04 | Memory corruption while processing the IOCTL FM HCI WRITE request. |
CVE-2023-43539 | High | 7.5 | 2024-03-04 | Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame. |
CVE-2023-33105 | High | 7.5 | 2024-03-04 | Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number. |
CVE-2023-33104 | High | 7.5 | 2024-03-04 | Transient DOS while processing PDU Release command with a parameter PDU ID out of range. |
CVE-2023-33103 | High | 7.5 | 2024-03-04 | Transient DOS while processing CAG info IE received from NW. |
CVE-2023-33096 | High | 7.5 | 2024-03-04 | Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16. |
CVE-2023-33095 | High | 7.5 | 2024-03-04 | Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR. |
CVE-2023-33090 | Medium | 5.5 | 2024-03-04 | Transient DOS while processing channel information for speaker protection v2 module in ADSP. |
CVE-2023-33086 | High | 7.5 | 2024-03-04 | Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers. |
CVE-2023-33084 | High | 7.5 | 2024-03-04 | Transient DOS while processing IE fragments from server during DTLS handshake. |
CVE-2023-33078 | Medium | 5.1 | 2024-03-04 | Information Disclosure while processing IOCTL request in FastRPC. |
CVE-2023-33066 | High | 8.4 | 2024-03-04 | Memory corruption in Audio while processing RT proxy port register driver. |
CVE-2023-28582 | Critical | 9.8 | 2024-03-04 | Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake. |
CVE-2023-28578 | Critical | 9.3 | 2024-03-04 | Memory corruption in Core Services while executing the command for removing a single event listener. |
CVE-2023-6143 | High | 8.4 | 2024-03-04 | Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GP… |
CVE-2023-4479 | High | 7.3 | 2024-03-04 | Stored XSS Vulnerability in M-Files Web versions before 23.8 allows attacker to execute script on users browser via stored HTML document within limited time pe… |
CVE-2023-49602 | Low | 2.9 | 2024-03-04 | in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion. |
CVE-2023-46708 | Medium | 4.3 | 2024-03-04 | in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free. |
CVE-2023-25176 | Low | 2.9 | 2024-03-04 | in OpenHarmony v3.2.4 and prior versions allow a local attacker cause information leak through out-of-bounds Read. |
CVE-2023-28512 | Medium | 5.9 | 2024-03-03 | IBM Watson CP4D Data Stores 4.6.0, 4.6.1, and 4.6.2 could allow an attacker with specific knowledge about the system to manipulate data due to improper input v… |
CVE-2023-27291 | Medium | 4.5 | 2024-03-03 | IBM Watson CP4D Data Stores 4.6.0, 4.6.1, 4.6.2, and 4.6.3 does not encrypt sensitive or critical information before storage or transmission which could allow… |
CVE-2023-47742 | Medium | 5.9 | 2024-03-03 | IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could disclose sensitive information using man… |
CVE-2023-43054 | Medium | 6.4 | 2024-03-03 | IBM Engineering Test Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript cod… |
CVE-2023-47745 | Medium | 6.2 | 2024-03-03 | IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or tra… |
CVE-2023-52582 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: netfs: Only call folio_start_fscache() one time for each folio If a network filesystem us… |
CVE-2023-52581 | Medium | 6.3 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memleak when more than 255 elements expired When more than 255… |
CVE-2023-52580 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net/core: Fix ETH_P_1588 flow dissector When a PTP ethernet raw frame with a size of more… |
CVE-2023-52578 | High | 7.0 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEV_STATS_INC() syzbot/KCSAN reported data-races in br_handle_frame_fini… |
CVE-2023-52577 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: dccp: fix dccp_v4_err()/dccp_v6_err() again dh->dccph_x is the 9th byte (offset 8) in "st… |
CVE-2023-52576 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() The code callin… |
CVE-2023-52574 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: team: fix null-ptr-deref when team device type is changed Get a null-ptr-deref bug as fol… |
CVE-2023-52573 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: rds: Fix possible NULL-pointer dereference In rds_rdma_cm_event_handler_cmn() check… |
CVE-2023-52572 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix UAF in cifs_demultiplex_thread() There is a UAF when xfstests on cifs: BUG… |
CVE-2023-52571 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: power: supply: rk817: Fix node refcount leak Dan Carpenter reports that the Smatch static… |
CVE-2023-52570 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent() Inject fault while probi… |
CVE-2023-52569 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: btrfs: remove BUG() after failure to insert delayed dir index item Instead of calling BUG… |
CVE-2023-52568 | Medium | 4.7 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race The SGX EPC reclaimer (ksgxd)… |
CVE-2023-52567 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_port: Check IRQ data before use In case the leaf driver wants to use IRQ pol… |
CVE-2023-52566 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() In nilfs_gccache… |
CVE-2023-52565 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix OOB read If the index provided by the user is bigger than the mask s… |
CVE-2023-52564 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" This reverts commit 9b9c8195f3f0d74a82607… |
CVE-2023-52563 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: drm/meson: fix memory leak on ->hpd_notify callback The EDID returned by drm_bridge_get_e… |
CVE-2023-52562 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() After the comm… |
CVE-2023-52561 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved Adding a rese… |
CVE-2023-52560 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() When CONFIG_D… |
CVE-2023-52559 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid memory allocation in iommu_suspend() The iommu_suspend() syscore suspen… |
CVE-2023-52532 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix TX CQE error handling For an unknown TX CQE error type (probably from a ne… |
CVE-2023-52531 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix a memory corruption issue A few lines above, space is kzalloc()'e… |
CVE-2023-52530 | High | 8.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential key use-after-free When ieee80211_key_link() is called by i… |
CVE-2023-52529 | Medium | 6.0 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: HID: sony: Fix a potential memory leak in sony_probe() If an error occurs after a success… |
CVE-2023-52528 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg syzbot reported the fo… |
CVE-2023-52527 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() Including the transhdrl… |
CVE-2023-52526 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix memory leak of LZMA global compressed deduplication When stressing microLZMA E… |
CVE-2023-52525 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet Only skip the code pa… |
CVE-2023-52524 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: llcp: Add lock when modifying device list The device list needs its associated… |
CVE-2023-52523 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets With a SOCKMAP/SOCKHASH m… |
CVE-2023-52522 | High | 8.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: fix possible store tearing in neigh_periodic_work() While looking at a related syzbo… |
CVE-2023-52520 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix reference leak If a duplicate attribute is found using kset_… |
CVE-2023-52519 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit The EHL (Elkhart Lake) based p… |
CVE-2023-52518 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_codec: Fix leaking content of local_codecs The following memory leak can b… |
CVE-2023-52517 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain Previously the… |
CVE-2023-52516 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock __dma_entry_… |
CVE-2023-52515 | Critical | 9.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsi_done() from srp_abort() After scmd_eh_abort_handler() has call… |
CVE-2023-52513 | High | 7.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix connection failure handling In case immediate MPA request processing fails… |
CVE-2023-52512 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: wpcm450: fix out of bounds write Write into 'pctrl->gpio_bank' happens… |
CVE-2023-52511 | Medium | 5.3 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: spi: sun6i: reduce DMA RX transfer width to single byte Through empirical testing it has… |
CVE-2023-52510 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: ieee802154: ca8210: Fix a potential UAF in ca8210_probe If of_clk_add_provider() fails in… |
CVE-2023-52509 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: ravb: Fix use-after-free issue in ravb_tx_timeout_work() The ravb_stop() should call canc… |
CVE-2023-52508 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() The nvme_fc_fcp_op stru… |
CVE-2023-52507 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The protocol is used in a bit mask to determ… |
CVE-2023-52506 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Set all reserved memblocks on Node#0 at initialization After commit 61167ad5fe… |
CVE-2023-52505 | Medium | 4.7 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers The prot… |
CVE-2023-52504 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: x86/alternatives: Disable KASAN in apply_alternatives() Fei has reported that KASAN trigg… |
CVE-2023-52503 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix use-after-free vulnerability in amdtee_close_session There is a potentia… |
CVE-2023-52502 | High | 8.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Sili Luo reported a… |
CVE-2023-52501 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not attempt to read past "commit" When iterating over the ring buffer whi… |