CVEs from 2023
Total
6,664
critical
critical 222
high
high 1,548
medium
medium 1,277
low
low 23
% Critical
3.3%
% with KEV
2.4%
% with exploit
2.5%
Top vendors
- redhat 120
- microsoft 76
- f5 43
- cisco 26
- automattic 19
- cbot 12
- brainstormforce 11
- gvectors 10
Top products
- office 29
- office_long_term_servicing_channel 15
- 365_apps 14
- openstack_platform 6
- codeready_linux_builder_for_ibm_z_systems_eus 6
- registrationmagic 6
- codeready_linux_builder_eus 6
- cbot_panel 6
| CVE | Severity | CVSS | Risk | Published | Description | Impact |
|---|---|---|---|---|---|---|
| CVE-2023-37920 | medium | — | 5.5 | 2y ago | Moderate: fence-agents security update | |
| CVE-2023-25433 | medium | — | 5.5 | 2y ago | Moderate: libtiff security update | |
| CVE-2023-52458 | medium | 5.5 | 5.5 | 2y ago | In the Linux kernel, the following vulnerability has been resolved: block: add check that partition length needs to be aligned with block size Before calling add partition or resize partition, ther… | |
| CVE-2023-45237 | medium | — | 5.5 | 2y ago | Moderate: edk2 security update | |
| CVE-2023-31346 | medium | — | 5.5 | 2y ago | Moderate: linux-firmware security update | |
| CVE-2023-45236 | medium | — | 5.5 | 2y ago | Moderate: edk2 security update | |
| CVE-2023-52598 | medium | — | 5.5 | 2y ago | In the Linux kernel, the following vulnerability has been resolved: s390/ptrace: handle setting of fpc register correctly If the content of the floating point control (fpc) register of a traced pro… | |
| CVE-2023-52607 | medium | — | 5.5 | 2y ago | In the Linux kernel, the following vulnerability has been resolved: powerpc/mm: Fix null-pointer dereference in pgtable_cache_add kasprintf() returns a pointer to dynamically allocated memory which… | |
| CVE-2023-42755 | medium | — | 5.5 | 2y ago | A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the `r… | |
| CVE-2023-43361 | medium | — | 5.5 | 2y ago | Moderate: vorbis-tools security update | |
| CVE-2023-1513 | medium | — | 5.5 | 2y ago | A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace, caus… | |
| CVE-2023-39192 | medium | — | 5.5 | 2y ago | A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a local privileged attacker to trigger an out-… | |
| CVE-2023-6240 | medium | — | 5.5 | 2y ago | A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting… | |
| CVE-2023-25775 | medium | — | 5.5 | 2y ago | Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network acc… | |
| CVE-2023-39189 | medium | — | 5.5 | 2y ago | A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num field. This flaw allows a local privileged (CAP_N… | |
| CVE-2023-51780 | medium | — | 5.5 | 2y ago | An issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a use-after-free because of a vcc_recvmsg race condition. | |
| CVE-2023-42754 | medium | — | 5.5 | 2y ago | A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always t… | |
| CVE-2023-6917 | medium | — | 5.5 | 2y ago | Moderate: pcp security update | |
| CVE-2023-52610 | medium | — | 5.5 | 2y ago | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix skb leak and crash on ooo frags act_ct adds skb->users before defragmentation. If frags arrive in order, t… | |
| CVE-2023-52580 | medium | — | 5.5 | 2y ago | In the Linux kernel, the following vulnerability has been resolved: net/core: Fix ETH_P_1588 flow dissector When a PTP ethernet raw frame with a size of more than 256 bytes followed by a 0xff patte… | |
| CVE-2023-52578 | medium | — | 5.5 | 2y ago | In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEV_STATS_INC() syzbot/KCSAN reported data-races in br_handle_frame_finish() [1] This function can run from mult… | |
| CVE-2023-43789 | medium | — | 5.5 | 2y ago | Moderate: motif security update | |
| CVE-2023-24023 | medium | — | 5.5 | 2y ago | Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key lengt… | |
| CVE-2023-45863 | medium | — | 5.5 | 2y ago | An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fill_kobj_path out-of-bounds write. | |
| CVE-2023-41360 | medium | — | 5.5 | 2y ago | Moderate: frr security update | |
| CVE-2023-5380 | medium | — | 5.5 | 2y ago | Moderate: xorg-x11-server security update | |
| CVE-2023-3618 | medium | — | 5.5 | 2y ago | Moderate: libtiff security update | |
| CVE-2023-51779 | medium | — | 5.5 | 2y ago | bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_sock_ioctl race condition. | |
| CVE-2023-45802 | medium | — | 5.5 | 2y ago | Moderate: mod_http2 security update | |
| CVE-2023-1579 | medium | — | 5.5 | 2y ago | Moderate: mingw components security update | |
| CVE-2023-40569 | medium | — | 5.5 | 2y ago | Moderate: freerdp security update | |
| CVE-2023-46753 | medium | — | 5.5 | 2y ago | Moderate: frr security update | |
| CVE-2023-6228 | medium | — | 5.5 | 2y ago | Moderate: libtiff security update | |
| CVE-2023-4692 | medium | — | 5.5 | 2y ago | Moderate: grub2 security update | |
| CVE-2023-6622 | medium | — | 5.5 | 2y ago | A null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in the Linux kernel. This issue may allow a local attacker with CAP_NET_ADMIN user p… | |
| CVE-2023-6915 | medium | — | 5.5 | 2y ago | A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing ch… | |
| CVE-2023-29406 | medium | — | 5.5 | 2y ago | Moderate: container-tools:rhel8 security and bug fix update | |
| CVE-2023-6710 | medium | — | 5.5 | 2y ago | Moderate: mod_jk and mod_proxy_cluster security update | |
| CVE-2023-38469 | medium | — | 5.5 | 2y ago | Moderate: avahi security update | |
| CVE-2023-53297 | medium | — | 5.5 | 2y ago | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp conn->chan_lock isn't acquired before l2cap_get_chan_by_scid, … | |
| CVE-2023-4875 | medium | — | 5.5 | 2y ago | Moderate: mutt security update | |
| CVE-2023-31122 | medium | — | 5.5 | 2y ago | Moderate: httpd security update | |
| CVE-2023-38473 | medium | — | 5.5 | 2y ago | Moderate: avahi security update | |
| CVE-2023-40567 | medium | — | 5.5 | 2y ago | Moderate: freerdp security update | |
| CVE-2023-39354 | medium | — | 5.5 | 2y ago | Moderate: freerdp security update | |
| CVE-2023-39353 | medium | — | 5.5 | 2y ago | Moderate: freerdp security update | |
| CVE-2023-6683 | medium | — | 5.5 | 2y ago | Moderate: qemu-kvm security update | |
| CVE-2023-3567 | medium | — | 5.5 | 2y ago | A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak int… | |
| CVE-2023-40474 | medium | — | 5.5 | 2y ago | Moderate: gstreamer1-plugins-bad-free security update | |
| CVE-2023-53539 | medium | — | 5.5 | 2y ago | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix incomplete state save in rxe_requester If a send packet is dropped by the IP layer in rxe_requester() the call to r… | |
| CVE-2023-52448 | medium | — | 5.5 | 2y ago | In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump Syzkaller has reported a NULL pointer dereference when accessing rgd-… | |
| CVE-2023-39351 | medium | — | 5.5 | 2y ago | Moderate: freerdp security update | |
| CVE-2023-31083 | medium | — | 5.5 | 2y ago | An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCI_UART_PROTO_SET is s… | |
| CVE-2023-43786 | medium | — | 5.5 | 2y ago | Moderate: libX11 security update | |
| CVE-2023-42467 | medium | — | 5.5 | 2y ago | Moderate: qemu-kvm security update | |
| CVE-2023-39356 | medium | — | 5.5 | 2y ago | Moderate: freerdp security update | |
| CVE-2023-52489 | medium | — | 5.5 | 2y ago | In the Linux kernel, the following vulnerability has been resolved: mm/sparsemem: fix race in accessing memory_section->usage The below race is observed on a PFN which falls into the device memory … | |
| CVE-2023-3758 | medium | — | 5.5 | 2y ago | Moderate: sssd security and bug fix update | |
| CVE-2023-49083 | medium | — | 5.5 | 2y ago | Moderate: python-cryptography security update | |
| CVE-2023-5088 | medium | — | 5.5 | 2y ago | Moderate: qemu-kvm security update | |
| CVE-2023-40475 | medium | — | 5.5 | 2y ago | Moderate: gstreamer1-plugins-bad-free security update | |
| CVE-2023-53513 | medium | — | 5.5 | 2y ago | In the Linux kernel, the following vulnerability has been resolved: nbd: fix incomplete validation of ioctl arg We tested and found an alarm caused by nbd_ioctl arg without verification. The UBSAN … | |
| CVE-2023-45287 | medium | — | 5.5 | 2y ago | Moderate: runc security update | |
| CVE-2023-31490 | medium | — | 5.5 | 2y ago | Moderate: frr security update | |
| CVE-2023-6176 | medium | — | 5.5 | 2y ago | A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific … | |
| CVE-2023-45897 | medium | — | 5.5 | 2y ago | Moderate: exfatprogs security update | |
| CVE-2023-40186 | medium | — | 5.5 | 2y ago | Moderate: freerdp security update | |
| CVE-2023-38470 | medium | — | 5.5 | 2y ago | Moderate: avahi security update | |
| CVE-2023-41081 | medium | — | 5.5 | 2y ago | Moderate: mod_jk and mod_proxy_cluster security update | |
| CVE-2023-31489 | medium | — | 5.5 | 2y ago | Moderate: frr security update | |
| CVE-2023-28464 | medium | — | 5.5 | 2y ago | hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_dev_put and hci_conn_put. There is a doub… | |
| CVE-2023-53762 | medium | — | 5.5 | 2y ago | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync Use-after-free can occur in hci_disconnect_all_sync if a connection is de… | |
| CVE-2023-4693 | medium | — | 5.5 | 2y ago | Moderate: grub2 security update | |
| CVE-2023-4133 | medium | — | 5.5 | 2y ago | A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower_stats_timer from the work … | |
| CVE-2023-37328 | medium | — | 5.5 | 2y ago | Moderate: gstreamer1-plugins-base security update | |
| CVE-2023-5215 | medium | — | 5.5 | 2y ago | Moderate: libnbd security update | |
| CVE-2023-3255 | medium | — | 5.5 | 2y ago | Moderate: qemu-kvm security update | |
| CVE-2023-39198 | medium | — | 5.5 | 2y ago | A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the … | |
| CVE-2023-43622 | medium | — | 5.5 | 2y ago | Moderate: mod_http2 security update | |
| CVE-2023-39352 | medium | — | 5.5 | 2y ago | Moderate: freerdp security update | |
| CVE-2023-51714 | medium | — | 5.5 | 2y ago | Moderate: qt5-qtbase security update | |
| CVE-2023-43788 | medium | — | 5.5 | 2y ago | Moderate: libXpm security update | |
| CVE-2023-39193 | medium | — | 5.5 | 2y ago | A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an ou… | |
| CVE-2023-46316 | medium | — | 5.5 | 2y ago | Moderate: traceroute security update | |
| CVE-2023-52434 | medium | — | 5.5 | 2y ago | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2_parse_contexts() Validate offsets and lengths before dereferencing create contexts in smb… | |
| CVE-2023-46752 | medium | — | 5.5 | 2y ago | Moderate: frr security update | |
| CVE-2023-5871 | medium | — | 5.5 | 2y ago | Moderate: libnbd security update | |
| CVE-2023-37453 | medium | — | 5.5 | 2y ago | An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c. | |
| CVE-2023-38471 | medium | — | 5.5 | 2y ago | Moderate: avahi security update | |
| CVE-2023-52581 | medium | — | 5.5 | 2y ago | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memleak when more than 255 elements expired When more than 255 elements expired we're supposed to switc… | |
| CVE-2023-52323 | medium | — | 5.5 | 2y ago | Moderate: fence-agents security and bug fix update | |
| CVE-2023-40188 | medium | — | 5.5 | 2y ago | Moderate: freerdp security update | |
| CVE-2023-7008 | medium | — | 5.5 | 2y ago | Moderate: systemd security update | |
| CVE-2023-41359 | medium | — | 5.5 | 2y ago | Moderate: frr security update | |
| CVE-2023-40476 | medium | — | 5.5 | 2y ago | Moderate: gstreamer1-plugins-bad-free security update | |
| CVE-2023-37327 | medium | — | 5.5 | 2y ago | Moderate: gstreamer1-plugins-good security update | |
| CVE-2023-43787 | medium | — | 5.5 | 2y ago | Moderate: libX11 security update | |
| CVE-2023-47038 | medium | — | 5.5 | 2y ago | Moderate: perl security update | |
| CVE-2023-52574 | medium | — | 5.5 | 2y ago | In the Linux kernel, the following vulnerability has been resolved: team: fix null-ptr-deref when team device type is changed Get a null-ptr-deref bug as follows with reproducer [1]. BUG: kernel N… | |
| CVE-2023-41909 | medium | — | 5.5 | 2y ago | Moderate: frr security update |