2023 CVEs (page 7)
Page 7 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-53893 | Medium | 6.5 | 2025-12-15 | Ateme TITAN File 3.9.12.4 contains an authenticated server-side request forgery vulnerability in the job callback URL parameter that allows attackers to bypass… |
CVE-2023-53892 | High | 7.2 | 2025-12-15 | Blackcat CMS 1.4 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the jquery plugi… |
CVE-2023-53891 | Medium | 5.4 | 2025-12-15 | Blackcat CMS 1.4 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into page content. Attackers… |
CVE-2023-53890 | Medium | 5.4 | 2025-12-15 | Perch CMS 3.2 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with embedded JavaScript. Atta… |
CVE-2023-53889 | High | 7.2 | 2025-12-15 | Perch CMS 3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload arbitrary PHP files through the assets manageme… |
CVE-2023-53888 | High | 8.8 | 2025-12-15 | Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arbitrary PHP code through file manipulati… |
CVE-2023-53887 | Medium | 5.4 | 2025-12-15 | Zomplog 3.9 contains a cross-site scripting vulnerability that allows authenticated users to inject malicious scripts when creating new pages. Attackers can cr… |
CVE-2023-53886 | High | 7.5 | 2025-12-15 | Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that allows attackers to crash the application… |
CVE-2023-53885 | High | 7.2 | 2025-12-15 | Webutler v3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload PHP files with system command execution. Attack… |
CVE-2023-53884 | Medium | 5.4 | 2025-12-15 | Webedition CMS v2.9.8.8 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with embedded JavaSc… |
CVE-2023-53883 | High | 7.2 | 2025-12-15 | Webedition CMS v2.9.8.8 contains a remote code execution vulnerability that allows authenticated attackers to inject system commands through PHP page creation… |
CVE-2023-53882 | | 2025-12-15 | JLex GuestBook 1.6.4 contains a reflected cross-site scripting vulnerability in the 'q' URL parameter that allows attackers to inject malicious scripts. Attack… | |
CVE-2023-53881 | High | 8.1 | 2025-12-15 | ReyeeOS 1.204.1614 contains an unencrypted CWMP communication vulnerability that allows attackers to intercept and manipulate device communication through a ma… |
CVE-2023-53880 | | 2025-12-15 | Lucee 5.4.2.17 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through administrative i… | |
CVE-2023-53879 | Medium | 5.5 | 2025-12-15 | NVClient 5.0 contains a stack buffer overflow vulnerability in the user configuration contact field that allows attackers to crash the application. Attackers c… |
CVE-2023-53878 | | 2025-12-15 | Member Login Script 3.3 contains a client-side desynchronization vulnerability that allows attackers to manipulate HTTP request handling by exploiting Content-… | |
CVE-2023-53877 | Critical | 9.8 | 2025-12-15 | Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attackers to manipulate database queries. Attackers ca… |
CVE-2023-53876 | Medium | 5.4 | 2025-12-15 | Academy LMS 6.1 contains a file upload vulnerability that allows authenticated users to upload malicious SVG files with stored cross-site scripting payloads. A… |
CVE-2023-53875 | High | 8.8 | 2025-12-15 | GOM Player 2.3.90.5360 contains a remote code execution vulnerability in its Internet Explorer component that allows attackers to execute arbitrary code throug… |
CVE-2023-53874 | Critical | 9.8 | 2025-12-15 | GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that allows attackers to crash the application. Attack… |
CVE-2023-53873 | | 2025-12-15 | SyncBreeze 15.2.24 contains a denial of service vulnerability in the login authentication mechanism that allows attackers to crash the service. Attackers can s… | |
CVE-2023-53872 | | 2025-12-15 | Wp2Fac 1.0 contains an OS command injection vulnerability in the send.php endpoint that allows remote attackers to execute arbitrary system commands. Attackers… | |
CVE-2023-53871 | Critical | 9.8 | 2025-12-15 | Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers ca… |
CVE-2023-53870 | | 2025-12-15 | Jorani 1.0.3 contains a reflected cross-site scripting vulnerability in the language parameter that allows attackers to inject malicious scripts. Attackers can… | |
CVE-2023-53869 | | 2025-12-15 | WEBIGniter 28.7.23 contains a file upload vulnerability that allows authenticated attackers to upload and execute dangerous PHP files through the media functio… | |
CVE-2023-53868 | High | 8.8 | 2025-12-15 | Coppermine Gallery 1.6.25 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the plugin m… |
CVE-2023-38913 | Medium | 5.3 | 2025-12-15 | SQL injection vulnerability in anirbandutta9 NEWS-BUZZ v.1.0 allows a remote attacker to execute arbitrary code via a crafted script. |
CVE-2023-36338 | Medium | 5.3 | 2025-12-15 | Inventory Management System 1 was discovered to contain a SQL injection vulnerability. |
CVE-2023-36337 | Medium | 6.1 | 2025-12-15 | A reflected cross-site scripting (XSS) vulnerability in the component /index.php/cuzh4 of PHP Inventory Management System 1 allows attackers to execute arbitra… |
CVE-2023-29144 | Low | 3.3 | 2025-12-12 | Malwarebytes 1.0.14 for Linux doesn't properly compute signatures in some scenarios. This allows a bypass of detection. |
CVE-2023-53776 | High | 8.8 | 2025-12-10 | Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak session management by reusing IP-bound session ident… |
CVE-2023-53775 | Medium | 6.5 | 2025-12-10 | Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management contr… |
CVE-2023-53741 | High | 8.1 | 2025-12-10 | Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound sessi… |
CVE-2023-53740 | Critical | 9.8 | 2025-12-10 | Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without providing the current credentia… |
CVE-2023-53774 | Critical | 9.8 | 2025-12-09 | MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. A… |
CVE-2023-53773 | Medium | 5.3 | 2025-12-09 | MiniDVBLinux 5.4 contains an unauthenticated vulnerability in the tv_action.sh script that allows remote attackers to generate live stream snapshots through th… |
CVE-2023-53772 | High | 7.5 | 2025-12-09 | MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Att… |
CVE-2023-53771 | Critical | 9.8 | 2025-12-09 | MiniDVBLinux 5.4 contains an authentication bypass vulnerability that allows remote attackers to change the root password without authentication. Attackers can… |
CVE-2023-53770 | High | 7.5 | 2025-12-09 | MiniDVBLinux 5.4 contains an unauthenticated configuration download vulnerability that allows remote attackers to access sensitive system configuration files t… |
CVE-2023-53739 | | 2025-12-09 | Tinycontrol LAN Controller v3 LK3 version 1.58a contains an unauthenticated vulnerability that allows remote attackers to download configuration backup files c… | |
CVE-2023-23729 | Medium | 5.4 | 2025-12-09 | Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spec… |
CVE-2023-22675 | Medium | 4.3 | 2025-12-09 | Cross-Site Request Forgery (CSRF) vulnerability in Taylor Hawkes WP Fast Cache allows Cross Site Request Forgery.This issue affects WP Fast Cache: from n/a thr… |
CVE-2023-53866 | High | 7.8 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-compress: Reposition and add pcm_mutex If panic_on_warn is set and compress str… |
CVE-2023-53865 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix warning when putting transaction with qgroups enabled after abort If we have a… | |
CVE-2023-53864 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() When disabling o… | |
CVE-2023-53863 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: netlink: do not hard code device address lenth in fdb dumps syzbot reports that some netd… | |
CVE-2023-53862 | High | 7.8 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: hfs: fix missing hfs_bnode_get() in __hfs_bnode_create Syzbot found a kernel BUG in hfs_b… |
CVE-2023-53861 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4_mb_good_group Group corruption check will access mem… | |
CVE-2023-53860 | High | 7.8 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: dm: don't attempt to queue IO under RCU protection dm looks up the table for IO based on… |
CVE-2023-53859 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: s390/idle: mark arch_cpu_idle() noinstr linux-next commit ("cpuidle: tracing: Warn about… | |
CVE-2023-53858 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error I… | |
CVE-2023-53857 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: bpf: bpf_sk_storage: Fix invalid wait context lockdep report './test_progs -t test_local_… | |
CVE-2023-53856 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: of: overlay: Call of_changeset_init() early When of_overlay_fdt_apply() fails, the change… | |
CVE-2023-53855 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: ocelot: call dsa_tag_8021q_unregister() under rtnl_lock() on driver remove When… | |
CVE-2023-53854 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8186: Fix use-after-free in driver remove path When devm runs function… | |
CVE-2023-53853 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: netlink: annotate accesses to nlk->cb_running Both netlink_recvmsg() and netlink_native_s… | |
CVE-2023-53852 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: nvme-core: fix memory leak in dhchap_secret_store Free dhchap_secret in nvme_ctrl_dhchap_… | |
CVE-2023-53851 | High | 8.4 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Drop aux devices together with DP controller Using devres to depopulate the a… |
CVE-2023-53850 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: iavf: use internal state to free traffic IRQs If the system tries to close the netdev whi… | |
CVE-2023-53849 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix workqueue leak on bind errors Make sure to destroy the workqueue also in cas… | |
CVE-2023-53848 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: md/raid5-cache: fix a deadlock in r5l_exit_log() Commit b13015af94cf ("md/raid5-cache: Cl… | |
CVE-2023-53847 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Fix uninit-value in alauda_check_media() Syzbot got KMSAN to complai… | |
CVE-2023-53846 | High | 7.8 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on direct node in truncate_dnode() syzbot reports below bug… |
CVE-2023-53845 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix infinite loop in nilfs_mdt_get_block() If the disk image that nilfs2 mounts i… | |
CVE-2023-53844 | High | 7.8 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Don't leak a resource on swapout move error If moving the bo to system for swapo… |
CVE-2023-53843 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject negative ifindex Recent changes in net-next (commit 759ab1edb56c… | |
CVE-2023-53842 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove The MBHC resources must… | |
CVE-2023-53841 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: devlink: report devlink_port_type_warn source device devlink_port_type_warn is scheduled… | |
CVE-2023-53840 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: usb: early: xhci-dbc: Fix a potential out-of-bound memory access If xdbc_bulk_write() fai… | |
CVE-2023-53839 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: dccp: fix data-race around dp->dccps_mss_cache dccp_sendmsg() reads dp->dccps_mss_cache b… | |
CVE-2023-53838 | High | 7.8 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: f2fs: synchronize atomic write aborts To fix a race condition between atomic write aborts… |
CVE-2023-53837 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix NULL-deref on snapshot tear down In case of early initialisation errors and… | |
CVE-2023-53836 | High | 7.8 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix skb refcnt race after locking changes There is a race where skb's from… |
CVE-2023-53834 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ina2xx: avoid NULL pointer dereference on OF device match The affected lines we… | |
CVE-2023-53833 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix NULL ptr deref by checking new_crtc_state intel_atomic_get_new_crtc_state c… | |
CVE-2023-53832 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null-ptr-deref in raid10_sync_request init_resync() inits mempool and sets… | |
CVE-2023-53831 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: net: read sk->sk_family once in sk_mc_loop() syzbot is playing with IPV6_ADDRFORM quite a… | |
CVE-2023-53830 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix memory leak when showing current settings When retriving a i… | |
CVE-2023-53829 | High | 7.8 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: f2fs: flush inode if atomic file is aborted Let's flush the inode being aborted atomic op… |
CVE-2023-53828 | High | 7.8 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() KSAN reports u… |
CVE-2023-53827 | High | 8.8 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} Similar to commit d0be… |
CVE-2023-53826 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() Wear-leveling entry could b… | |
CVE-2023-53825 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). syzkaller found a memory leak in… | |
CVE-2023-53824 | High | 7.8 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: netlink: annotate lockless accesses to nlk->max_recvmsg_len syzbot reported a data-race i… |
CVE-2023-53823 | High | 7.8 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: block/rq_qos: protect rq_qos apis with a new lock commit 50e34d78815e ("block: disable th… |
CVE-2023-53822 | High | 8.8 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Ignore frags from uninitialized peer in dp. When max virtual ap interfaces… |
CVE-2023-53821 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: ip6_vti: fix slab-use-after-free in decode_session6 When ipv6_vti device is set to the qd… | |
CVE-2023-53820 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: loop: loop_set_status_from_info() check before assignment In loop_set_status_from_info()… | |
CVE-2023-53819 | High | 7.8 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: amdgpu: validate offset_in_bo of drm_amdgpu_gem_va This is motivated by OOB access in amd… |
CVE-2023-53818 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: ARM: zynq: Fix refcount leak in zynq_early_slcr_init of_find_compatible_node() returns a… | |
CVE-2023-53817 | High | 7.5 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() During NVMeTCP Authentication… |
CVE-2023-53816 | High | 7.8 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix potential kgd_mem UAFs kgd_mem pointers returned by kfd_process_device_tr… |
CVE-2023-53815 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: posix-timers: Prevent RT livelock in itimer_delete() itimer_delete() has a retry loop whe… | |
CVE-2023-53814 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: PCI: Fix dropping valid root bus resources with .end = zero On r8a7791/koelsch: kmemle… | |
CVE-2023-53813 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix rbtree traversal bug in ext4_mb_use_preallocated During allocations, while look… | |
CVE-2023-53812 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: fix decoder disable pm crash Can't call pm_runtime_disable when… | |
CVE-2023-53811 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Cap MSIX used to online CPUs + 1 The irdma driver can use a maximum number of… | |
CVE-2023-53810 | High | 7.8 | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: blk-mq: release crypto keyslot before reporting I/O complete Once all I/O using a blk_cry… |
CVE-2023-53809 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register() When a file descriptor… | |
CVE-2023-53808 | | 2025-12-09 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix memory leak in mwifiex_histogram_read() Always free the zeroed page on… |