2023 CVEs (page 52)
Page 52 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-47745 | Medium | 6.2 | 2024-03-03 | IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or tra… |
CVE-2023-52582 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: netfs: Only call folio_start_fscache() one time for each folio If a network filesystem us… |
CVE-2023-52581 | Medium | 6.3 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memleak when more than 255 elements expired When more than 255… |
CVE-2023-52580 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net/core: Fix ETH_P_1588 flow dissector When a PTP ethernet raw frame with a size of more… |
CVE-2023-52578 | High | 7.0 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEV_STATS_INC() syzbot/KCSAN reported data-races in br_handle_frame_fini… |
CVE-2023-52577 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: dccp: fix dccp_v4_err()/dccp_v6_err() again dh->dccph_x is the 9th byte (offset 8) in "st… |
CVE-2023-52576 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() The code callin… |
CVE-2023-52574 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: team: fix null-ptr-deref when team device type is changed Get a null-ptr-deref bug as fol… |
CVE-2023-52573 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: rds: Fix possible NULL-pointer dereference In rds_rdma_cm_event_handler_cmn() check… |
CVE-2023-52572 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix UAF in cifs_demultiplex_thread() There is a UAF when xfstests on cifs: BUG… |
CVE-2023-52571 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: power: supply: rk817: Fix node refcount leak Dan Carpenter reports that the Smatch static… |
CVE-2023-52570 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent() Inject fault while probi… |
CVE-2023-52569 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: btrfs: remove BUG() after failure to insert delayed dir index item Instead of calling BUG… |
CVE-2023-52568 | Medium | 4.7 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race The SGX EPC reclaimer (ksgxd)… |
CVE-2023-52567 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_port: Check IRQ data before use In case the leaf driver wants to use IRQ pol… |
CVE-2023-52566 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() In nilfs_gccache… |
CVE-2023-52565 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix OOB read If the index provided by the user is bigger than the mask s… |
CVE-2023-52564 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" This reverts commit 9b9c8195f3f0d74a82607… |
CVE-2023-52563 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: drm/meson: fix memory leak on ->hpd_notify callback The EDID returned by drm_bridge_get_e… |
CVE-2023-52562 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() After the comm… |
CVE-2023-52561 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved Adding a rese… |
CVE-2023-52560 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() When CONFIG_D… |
CVE-2023-52559 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid memory allocation in iommu_suspend() The iommu_suspend() syscore suspen… |
CVE-2023-52532 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix TX CQE error handling For an unknown TX CQE error type (probably from a ne… |
CVE-2023-52531 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix a memory corruption issue A few lines above, space is kzalloc()'e… |
CVE-2023-52530 | High | 8.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential key use-after-free When ieee80211_key_link() is called by i… |
CVE-2023-52529 | Medium | 6.0 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: HID: sony: Fix a potential memory leak in sony_probe() If an error occurs after a success… |
CVE-2023-52528 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg syzbot reported the fo… |
CVE-2023-52527 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() Including the transhdrl… |
CVE-2023-52526 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix memory leak of LZMA global compressed deduplication When stressing microLZMA E… |
CVE-2023-52525 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet Only skip the code pa… |
CVE-2023-52524 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: llcp: Add lock when modifying device list The device list needs its associated… |
CVE-2023-52523 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets With a SOCKMAP/SOCKHASH m… |
CVE-2023-52522 | High | 8.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: fix possible store tearing in neigh_periodic_work() While looking at a related syzbo… |
CVE-2023-52520 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix reference leak If a duplicate attribute is found using kset_… |
CVE-2023-52519 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit The EHL (Elkhart Lake) based p… |
CVE-2023-52518 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_codec: Fix leaking content of local_codecs The following memory leak can b… |
CVE-2023-52517 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain Previously the… |
CVE-2023-52516 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock __dma_entry_… |
CVE-2023-52515 | Critical | 9.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsi_done() from srp_abort() After scmd_eh_abort_handler() has call… |
CVE-2023-52513 | High | 7.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix connection failure handling In case immediate MPA request processing fails… |
CVE-2023-52512 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: wpcm450: fix out of bounds write Write into 'pctrl->gpio_bank' happens… |
CVE-2023-52511 | Medium | 5.3 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: spi: sun6i: reduce DMA RX transfer width to single byte Through empirical testing it has… |
CVE-2023-52510 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: ieee802154: ca8210: Fix a potential UAF in ca8210_probe If of_clk_add_provider() fails in… |
CVE-2023-52509 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: ravb: Fix use-after-free issue in ravb_tx_timeout_work() The ravb_stop() should call canc… |
CVE-2023-52508 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() The nvme_fc_fcp_op stru… |
CVE-2023-52507 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The protocol is used in a bit mask to determ… |
CVE-2023-52506 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Set all reserved memblocks on Node#0 at initialization After commit 61167ad5fe… |
CVE-2023-52505 | Medium | 4.7 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers The prot… |
CVE-2023-52504 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: x86/alternatives: Disable KASAN in apply_alternatives() Fei has reported that KASAN trigg… |
CVE-2023-52503 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix use-after-free vulnerability in amdtee_close_session There is a potentia… |
CVE-2023-52502 | High | 8.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Sili Luo reported a… |
CVE-2023-52501 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not attempt to read past "commit" When iterating over the ring buffer whi… |
CVE-2023-52500 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command Ta… |
CVE-2023-52499 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: powerpc/47x: Fix 47x syscall return crash Eddie reported that newer kernels were crashing… |
CVE-2023-6326 | Medium | 5.4 | 2024-03-02 | The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.9.10. This… |
CVE-2023-49545 | High | 7.5 | 2024-03-01 | A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiri… |
CVE-2023-49544 | Medium | 4.9 | 2024-03-01 | A local file inclusion (LFI) in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the p… |
CVE-2023-49543 | Critical | 9.8 | 2024-03-01 | Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenti… |
CVE-2023-49540 | Medium | 6.1 | 2024-03-01 | Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/history. This vulnerability allows… |
CVE-2023-49539 | Medium | 6.1 | 2024-03-01 | Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/category. This vulnerability allow… |
CVE-2023-7244 | Critical | 9.8 | 2024-03-01 | Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write in their… |
CVE-2023-7243 | Critical | 9.8 | 2024-03-01 | Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while a… |
CVE-2023-7242 | High | 8.2 | 2024-03-01 | Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read during… |
CVE-2023-52558 | High | 7.5 | 2024-03-01 | In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after r… |
CVE-2023-52557 | High | 7.5 | 2024-03-01 | In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length. |
CVE-2023-52556 | Medium | 6.2 | 2024-03-01 | In OpenBSD 7.4 before errata 009, a race condition between pf(4)'s processing of packets and expiration of packet states may cause a kernel panic. |
CVE-2023-50378 | Medium | 6.1 | 2024-03-01 | Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8 Impact : As it will be stored XSS, Could be exploited to perform… |
CVE-2023-52497 | High | 7.1 | 2024-03-01 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix lz4 inplace decompression Currently EROFS can map another compressed buffer fo… |
CVE-2023-46951 | Medium | 6.1 | 2024-03-01 | Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted payload to the uniquejo… |
CVE-2023-46950 | Medium | 6.1 | 2024-03-01 | Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted URL to the filter funct… |
CVE-2023-48674 | Medium | 6.8 | 2024-03-01 | Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentially send maliciou… |
CVE-2023-39254 | Medium | 6.7 | 2024-03-01 | Dell Update Package (DUP), Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user with local access to the system could p… |
CVE-2023-52555 | Medium | 6.1 | 2024-03-01 | In mongo-express 1.0.2, /admin allows CSRF, as demonstrated by deletion of a Collection. |
CVE-2023-50312 | Medium | 5.3 | 2024-03-01 | IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.2 could provide weaker than expected security for outbound TLS connections caused by a failure… |
CVE-2023-47716 | Medium | 6.3 | 2024-03-01 | IBM CP4BA - Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a user to gain the privileges of another user under unusual circumsta… |
CVE-2023-38366 | Medium | 5.3 | 2024-03-01 | IBM Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a remote attacker to traverse directories on the system. An attacker could se… |
CVE-2023-50324 | Medium | 5.3 | 2024-03-01 | IBM Cognos Command Center 10.2.4.1 and 10.2.5 exposes details the X-AspNet-Version Response Header that could allow an attacker to obtain information of the ap… |
CVE-2023-50305 | Medium | 5.1 | 2024-03-01 | IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by default, which makes it easier for attackers… |
CVE-2023-28949 | Medium | 6.5 | 2024-03-01 | IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauth… |
CVE-2023-28525 | Medium | 4.8 | 2024-03-01 | IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th… |
CVE-2023-6132 | High | 7.3 | 2024-02-29 | The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by… |
CVE-2023-52485 | Medium | 5.5 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wake DMCUB before sending a command [Why] We can hang in place trying to… |
CVE-2023-6090 | Critical | 9.1 | 2024-02-29 | Unrestricted Upload of File with Dangerous Type vulnerability in Mollie Mollie Payments for WooCommerce.This issue affects Mollie Payments for WooCommerce: fro… |
CVE-2023-52484 | Medium | 5.5 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range When running… |
CVE-2023-52483 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: mctp: perform route lookups under a RCU read-side lock Our current route lookups (mctp_ro… |
CVE-2023-52482 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: x86/srso: Add SRSO mitigation for Hygon processors Add mitigation for the speculative ret… |
CVE-2023-52481 | Medium | 4.7 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Add Cortex-A520 speculative unprivileged load workaround Implement the wor… |
CVE-2023-52480 | Critical | 9.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A… |
CVE-2023-52479 | High | 8.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix uaf in smb20_oplock_break_ack drop reference after use opinfo. |
CVE-2023-52478 | High | 8.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect hidpp_connect_event() ha… |
CVE-2023-52477 | Medium | 5.5 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drive… |
CVE-2023-52476 | Medium | 5.5 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/lbr: Filter vsyscall addresses We found that a panic can occur when a vsyscall i… |
CVE-2023-52475 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: Input: powermate - fix use-after-free in powermate_config_complete syzbot has found a use… |
CVE-2023-50905 | High | 7.1 | 2024-02-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows Stored XSS.This issue af… |
CVE-2023-47874 | Medium | 5.4 | 2024-02-29 | Missing Authorization vulnerability in Perfmatters.This issue affects Perfmatters: from n/a through 2.1.6. |
CVE-2023-1841 | High | 8.1 | 2024-02-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Honeywell MPA2 Access Panel (Web server modules) allows X… |
CVE-2023-51696 | Medium | 4.3 | 2024-02-29 | Cross-Site Request Forgery (CSRF) vulnerability in СleanTalk - Anti-Spam Protection Spam protection, Anti-Spam, FireWall by CleanTalk.This issue affects Spam p… |
CVE-2023-51531 | Medium | 5.4 | 2024-02-29 | Cross-Site Request Forgery (CSRF) vulnerability in Thrive Themes Thrive Automator.This issue affects Thrive Automator: from n/a through 1.17. |
CVE-2023-51530 | Medium | 4.3 | 2024-02-29 | Cross-Site Request Forgery (CSRF) vulnerability in GS Plugins Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation.This issue… |