CVE-2023 records published after 2023
This page lists the 7,334 CVE-2023 records published after 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 11 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.
- Critical
- 6568.9% of these records
- Listed in CISA KEV
- 110.1% of these records
- Reported exploited
- 130.2% of these records
- Detection signal
- 801.1% of these records
- Exploit code
- 3144.3% of these records
- Actionable vendor fix
- 5,47174.6% of these records
Figures as of 2026-10-24 13:46 UTC. Records published after 2023 have had from less than a month to about 34 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-54413 | WPML Multilingual CMS WordPress plugin reflected XSS via wp-login.php wp_lang | 5.1CNA v4.0 | 0.2% | 2026-10-22 | Reported exploitedFix |
| CVE-2023-7356 | Linux kernel Bluetooth ISO vulnerability | – | 0.2% | 2026-10-21 | Fix |
| CVE-2023-38375 | IBM Cloud Pak System cross-site scripting | 6.1CNA v3.1 | 0.3% | 2026-10-19 | Fix |
| CVE-2023-32198 | Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks | 8.0CNA v3.1 | 0.3% | 2026-10-15 | Fix |
| CVE-2023-54412 | Frappe improper access control for Email templates | 7.1CNA v4.0 | 0.2% | 2026-10-12 | Fix |
| CVE-2023-54411 | Frappe weak authentication via Print View Key | 8.2CNA v4.0 | 0.3% | 2026-10-12 | Fix |
| CVE-2023-54410 | Frappe improper authorization via Document Rename | 5.3CNA v4.0 | 0.2% | 2026-10-12 | Fix |
| CVE-2023-54409 | Frappe XSS via html2text Weak Sanitization | 5.9CNA v4.0 | 0.2% | 2026-10-12 | Fix |
| CVE-2023-54408 | Frappe HTML injection via Weak Escaping | 5.1CNA v4.0 | 0.2% | 2026-10-12 | Fix |
| CVE-2023-54407 | Frappe information disclosure via Error Log Tracebacks | 6.9CNA v4.0 | 0.3% | 2026-10-12 | Fix |
| CVE-2023-54406 | Frappe Safe Execution Flag Bypass in Server scripts | 6.9CNA v4.0 | 0.3% | 2026-10-12 | Fix |
| CVE-2023-25996 | Booster Elite for WooCommerce WordPress plugin arbitrary WordPress option disclosure vulnerability | 6.5CNA v3.1 | 0.3% | 2026-10-12 | Fix |
| CVE-2023-5649 | Brocade Active Support Connectivity Gateway improper input validation | 6.8CNA v4.0 | 0.1% | 2026-10-08 | Fix |
| CVE-2023-5648 | Brocade Active Support Connectivity Gateway cross-site scripting | 6.5CNA v4.0 | 0.2% | 2026-10-08 | Fix |
| CVE-2023-54405 | H3C CVM unauthenticated file upload via fileUpload/upload Token | 9.3CNA v4.0 | 0.6% | 2026-10-02 | Reported exploited |
| CVE-2023-54404 | Zod uncontrolled resource consumption via Unbounded Array, Set, and Map Validation | 8.2CNA v4.0 | 0.4% | 2026-10-01 | |
| CVE-2023-54403 | Yonyou U8 CRM arbitrary file read via getemaildata.php | 8.7CNA v4.0 | 0.5% | 2026-09-30 | Reported exploitedFix |
| CVE-2023-54402 | iDocView SSRF via /doc/upload endpoint hard-coded token | 8.7CNA v4.0 | 0.4% | 2026-09-30 | Reported exploited |
| CVE-2023-54400 | Fumeng Cloud SQL injection via AjaxMethod.ashx getEmpByname | 9.3CNA v4.0 | 0.5% | 2026-09-29 | Reported exploited |
| CVE-2023-54399 | Hongjing e-HR SQL injection via /servlet/codesettree | 9.3CNA v4.0 | 0.4% | 2026-09-18 | Fix |
| CVE-2023-5778 | ABB Freelance Controller DCP Missing Length Check | 9.2CNA v4.0 | 0.3% | 2026-09-18 | Fix |
| CVE-2023-54398 | Yonyou U8 Cloud Java deserialization RCE via FileManageServlet | 9.3CNA v4.0 | 0.6% | 2026-09-15 | Reported exploitedFix |
| CVE-2023-54397 | Tornado HTTP request smuggling via Content-Length | 9.0CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2023-51769 | frappe cross-site scripting | 6.1CNA v3.1 | 0.2% | 2026-09-14 | Fix |
| CVE-2023-50462 | Insecure direct object reference in extension Content Consent (content_consent) | 5.3CNA v3.1 | 0.3% | 2026-09-14 | Fix |
| CVE-2023-50461 | Configuration injection in extension Direct Mail (direct_mail) | 8.8CNA v3.1 | 0.3% | 2026-09-14 | Fix |
| CVE-2023-50460 | TYPO3 femanager incorrect authorization | 5.4CNA v3.1 | 0.2% | 2026-09-14 | Fix |
| CVE-2023-50459 | Broken access control in extension femanager | 5.4CNA v3.1 | 0.4% | 2026-09-14 | Fix |
| CVE-2023-46273 | Extreme Networks IQ Engine stack-based buffer overflow | 8.8CNA v3.1 | 0.3% | 2026-09-14 | Fix |
| CVE-2023-46035 | svg_optimizer rubygem external XML entity (XXE) | 5.9CNA v3.1 | 0.4% | 2026-09-14 | Fix |
| CVE-2023-45858 | Paessler PRTG Network Monitor path traversal | 8.6CNA v3.1 | 0.7% | 2026-09-14 | Fix |
| CVE-2023-45023 | TYPO3 extension femanager broken access control | 4.2CNA v3.1 | 0.2% | 2026-09-14 | Fix |
| CVE-2023-40772 | dataease path traversal | 4.3CNA v3.1 | 1.1% | 2026-09-14 | Fix |
| CVE-2023-37366 | Samsung Exynos 850 firmware infinite loop | 2.8CNA v3.1 | 0.1% | 2026-09-14 | Fix |
| CVE-2023-37253 | mediawiki ProofreadPage incorrect resource transfer | 3.1CNA v3.1 | 0.2% | 2026-09-14 | Fix |
| CVE-2023-37252 | mediawiki CheckUser incorrect resource transfer | 3.1CNA v3.1 | 0.2% | 2026-09-14 | Fix |
| CVE-2023-34854 | digitaldruid HotelDruid unrestricted file upload | 6.6CNA v3.1 | 0.2% | 2026-09-14 | Fix |
| CVE-2023-32803 | Amazon ca-certificates incorrect resource transfer | 7.5CNA v3.1 | 0.2% | 2026-09-14 | Fix |
| CVE-2023-32778 | ILIAS relative path traversal | 3.3CNA v3.1 | 0.2% | 2026-09-14 | Fix |
| CVE-2023-29377 | Softing Secure Integration Server relative path traversal | 6.6CNA v3.1 | 0.5% | 2026-09-14 | |
| CVE-2023-28148 | Paessler PRTG Network Monitor cross-site scripting | 7.2CNA v3.1 | 0.2% | 2026-09-14 | Fix |
| CVE-2023-24291 | Simon Tatham Portable Puzzle Collection buffer overflow | 2.9CNA v3.1 | 0.1% | 2026-09-14 | Fix |
| CVE-2023-24288 | Simon Tatham Portable Puzzle Collection integer overflow | 2.9CNA v3.1 | 0.1% | 2026-09-14 | Fix |
| CVE-2023-24287 | Simon Tatham Portable Puzzle Collection buffer overflow | 2.9CNA v3.1 | 0.1% | 2026-09-14 | Fix |
| CVE-2023-24286 | Simon Tatham Portable Puzzle Collection buffer overflow | 2.9CNA v3.1 | 0.1% | 2026-09-14 | Fix |
| CVE-2023-24285 | Simon Tatham Portable Puzzle Collection buffer overflow | 2.9CNA v3.1 | 0.1% | 2026-09-14 | Fix |
| CVE-2023-24284 | Simon Tatham Portable Puzzle Collection buffer overflow | 2.9CNA v3.1 | 0.1% | 2026-09-14 | Fix |
| CVE-2023-24283 | Simon Tatham Portable Puzzle Collection buffer overflow | 2.9CNA v3.1 | 0.1% | 2026-09-14 | Fix |
| CVE-2023-24035 | Nagios XI timing side channel | 3.5CNA v3.1 | 0.8% | 2026-09-14 | Fix |
| CVE-2023-24034 | Nagios XI open redirect | 3.1CNA v3.1 | 0.5% | 2026-09-14 | Fix |
| CVE-2023-22632 | Paessler PRTG Network Monitor argument injection | 2.7CNA v3.1 | 0.2% | 2026-09-14 | Fix |
| CVE-2023-22631 | Paessler PRTG Network Monitor argument injection | 2.7CNA v3.1 | 0.2% | 2026-09-14 | Fix |
| CVE-2023-54396 | PocketMine-MP server crash via Banner NBT | 7.1CNA v4.0 | 0.4% | 2026-09-09 | Fix |
| CVE-2023-54395 | PocketMine-MP denial of service via ModalFormResponsePacket | 5.3CNA v4.0 | 0.3% | 2026-09-09 | Fix |
| CVE-2023-54394 | PocketMine-MP Bandwidth Amplification via InventoryTransactionPacket | 5.3CNA v4.0 | 0.4% | 2026-09-09 | Fix |
| CVE-2023-54393 | PocketMine-MP denial of service via LoginPacket | 8.7CNA v4.0 | 0.4% | 2026-09-09 | Fix |
| CVE-2023-54392 | PocketMine-MP denial of service via BlockActorDataPacket | 7.1CNA v4.0 | 0.4% | 2026-09-09 | Fix |
| CVE-2023-54390 | PocketMine-MP denial of service via LoginPacket | 8.7CNA v4.0 | 0.3% | 2026-09-09 | Fix |
| CVE-2023-54355 | PocketMine-MP server crash via Incorrect EC Curve | 8.7CNA v4.0 | 0.2% | 2026-09-09 | Fix |
| CVE-2023-20577 | AMD 2nd Gen AMD EPYC™ Processors SMM module heap-based buffer overflow | 7.4CNA v3.1 | 0.2% | 2026-09-02 | |
| CVE-2023-20576 | AMD Ryzen™ 3000 Series Desktop Processors AGESA™ insufficient verification of data authenticity | 7.7CNA v3.1 | 0.1% | 2026-09-02 | |
| CVE-2023-3360 | Weaver Show Posts WordPress plugin Admin+ PHP object injection | 3.3CNA v3.1 | 0.2% | 2026-09-02 | Fix |
| CVE-2023-54391 | Proxmox VE authentication bypass via tfa-challenge parameter | 9.3CNA v4.0 | 3.1% | 2026-09-01 | Reported exploitedNucleiExploit codeFix |
| CVE-2023-54356 | Kyverno Sweet32 Medium Strength Cipher Suites | 9.3CNA v4.0 | 0.1% | 2026-09-01 | Fix |
| CVE-2023-31308 | AMD Radeon™ PRO V620 Graphics Products improper array index validation | 3.3CNA v3.1 | 0.1% | 2026-08-31 | |
| CVE-2023-20511 | AMD Radeon™ Instinct™ MI25 Graphics Products release of an invalid pointer | 6.4CNA v3.0 | 0.2% | 2026-08-31 | |
| CVE-2023-42179 | Bird Home Automation D1101V-F key derivation and password validation improper access control | 9.8CISA ADP v3.1 | 0.4% | 2026-08-26 | |
| CVE-2023-37508 | HCL DevOps Plan is susceptible to a cross-site scripting (XSS) | 2.3CNA v4.0 | 0.2% | 2026-07-21 | Fix |
| CVE-2023-37507 | An information disclosure vulnerability affects HCL DevOps Plan | 6.9CNA v4.0 | 0.4% | 2026-07-21 | Fix |
| CVE-2023-54366 | SurrealDB insecure default Table Permissions | 8.7CNA v4.0 | 0.5% | 2026-07-18 | Fix |
| CVE-2023-49900 | Origin validation error in X-Rite MA-T6 | 9.8CNA v3.1 | 1.0% | 2026-07-16 | Fix |
| CVE-2023-49899 | Origin validation error in X-Rite MA-T6 | 9.8CNA v3.1 | 0.3% | 2026-07-16 | Fix |
| CVE-2023-37524 | HCL Traveler for Microsoft Outlook .NET Framework dependency vulnerability | 7.7CNA v3.1 | 0.3% | 2026-06-27 | Fix |
| CVE-2023-20572 | AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics ASP timing side channel | 5.6CNA v4.0 | 0.2% | 2026-06-26 | Fix |
| CVE-2023-20540 | AMD Ryzen™ 3000 Series Desktop Processors ASP timing side channel | 1.8CNA v4.0 | 0.2% | 2026-06-26 | |
| CVE-2023-54365 | Traefik denial of service via HTTP/2 Request Handling | 8.7CNA v4.0 | 0.8% | 2026-06-23 | Fix |
| CVE-2023-45796 | XSS vulnerability in PILZ PASvisu and PMI v8xx | 8.1CNA v3.1 | 0.6% | 2026-06-22 | Fix |
| CVE-2023-45795 | PILZ: XSS vulnerability in PILZ PASvisu and PMI v8xx | 7.8CNA v3.1 | 0.2% | 2026-06-22 | Fix |
| CVE-2023-33854 | IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, and 5.3 could allow an authenticated user to bypass client-side validation and manipulate input data using man in the middle techniques. | 5.3CNA v3.1 | 0.3% | 2026-06-22 | Fix |
| CVE-2023-54357 | Joomla com_booking information disclosure via Account Enumeration | 8.7CNA v4.0 | 0.7% | 2026-06-19 | Exploit code |
| CVE-2023-54353 | Chromacam unquoted service path privilege escalation | 8.5CNA v4.0 | 0.2% | 2026-06-19 | Exploit code |
| CVE-2023-40200 | WP Logo Showcase Responsive Slider and Carousel WordPress plugin broken access control | 5.3CNA v3.1 | 0.2% | 2026-06-11 | Fix |
| CVE-2023-33999 | WP Mail Log WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-06-11 | Fix |
| CVE-2023-32959 | MetroStore WordPress theme broken access control | 4.3CNA v3.1 | 0.2% | 2026-06-11 | |
| CVE-2023-25969 | Contact Form and Lead Form Elementor Builder WordPress plugin broken access control | 5.4CNA v3.1 | 0.2% | 2026-06-11 | Fix |
| CVE-2023-43688 | Malwarebytes buffer encryption utility heap-based buffer overflow | 7.5CISA ADP v3.1 | 0.2% | 2026-06-09 | |
| CVE-2023-43686 | Malwarebytes browser preference file parser denial of service | 6.2CISA ADP v3.1 | 0.1% | 2026-06-09 | |
| CVE-2023-29146 | Malwarebytes EDR hash calculation utility integer overflow | 8.2CISA ADP v3.1 | 0.1% | 2026-06-09 | |
| CVE-2023-54352 | WP Travel Kit Travelscape WordPress Seotheme remote code execution Unauthenticated | 9.3CNA v4.0 | 0.6% | 2026-06-08 | Exploit code |
| CVE-2023-54351 | WordPress Sonaar Music Plugin stored XSS via Comments | 5.1CNA v4.0 | 0.2% | 2026-06-08 | Exploit code |
| CVE-2023-54350 | webandprint Augmented-Reality plugin elFinder file manager connector vulnerability | 8.7CNA v4.0 | 0.5% | 2026-06-08 | Exploit code |
| CVE-2023-5502 | Arista Networks EOS 802.1x authentication authentication bypass | 8.2CNA v4.0 | 0.3% | 2026-06-04 | |
| CVE-2023-52951 | Synology Note Station Client cleartext transmission of sensitive information | 5.9CNA v3.1 | 0.1% | 2026-06-03 | Fix |
| CVE-2023-52945 | Synology BeeDrive for desktop OpenSSL DLL component uncontrolled search path | 7.8CNA v3.1 | 0.1% | 2026-05-27 | Fix |
| CVE-2023-7346 | Ledger Bitcoin app Address Derivation Error via Miniscript | 4.1CNA v4.0 | 0.1% | 2026-05-20 | Fix |
| CVE-2023-7345 | Ledger Live hw-app-eth EIP-712 Message Parsing Integer Truncation | 6.9CNA v4.0 | 0.3% | 2026-05-19 | Fix |
| CVE-2023-24215 | NOVUS AirGate 4G /uci/get/ endpoint improper access control | 9.1CISA ADP v3.1 | 0.2% | 2026-05-18 | |
| CVE-2023-31317 | AMD Radeon™ RX 6000 Series Graphics Products memory corruption | 8.8CNA v4.0 | 0.1% | 2026-05-15 | |
| CVE-2023-31316 | AMD Ryzen processors Secure Processor vulnerability | 7.1CNA v4.0 | 0.1% | 2026-05-15 | |
| CVE-2023-31309 | AMD Radeon™ RX 6000 Series Graphics Products Power Management firmware improper input validation | 6.8CNA v4.0 | 0.1% | 2026-05-15 | |
| CVE-2023-30059 | MK-Auth An insecure direct object reference | 5.4CISA ADP v3.1 | 0.2% | 2026-05-12 | |
| CVE-2023-27753 | MK-Auth An arbitrary file upload | 8.0CISA ADP v3.1 | 0.3% | 2026-05-12 | |
| CVE-2023-47268 | Prusa3d Prusaslicer command injection | 5.3CISA ADP v3.1 | 0.7% | 2026-05-08 | Exploit code |
| CVE-2023-46453 | Certain GL.iNet devices with 4.x firmware allow authentication bypass (resulting in administrative control of the device) via a username that is both a valid SQL statement and a valid regular expression. For example, this affects version 4.3.7 on GL-MT3000 GL-AR300M GL-B1300 GL-AX1800 GL-AR750S GL-M | 9.8CISA ADP v3.1 | 0.8% | 2026-05-08 | Exploit code |
| CVE-2023-42346 | Alkacon OpenCms XML external entity injection | 7.5CISA ADP v3.1 | 0.2% | 2026-05-08 | Fix |
| CVE-2023-42345 | Alkacon OpenCms is vulnerable to XSS via updateModelGroups.jsp | 6.1CISA ADP v3.1 | 0.1% | 2026-05-08 | Fix |
| CVE-2023-42344 | Alkacon OpenCms allows remote unauthenticated attackers to obtain sensitive information | 7.3CISA ADP v3.1 | 2.2% | 2026-05-08 | NucleiFix |
| CVE-2023-42343 | Alkacon OpenCms is vulnerable to XSS via cmis-online/type | 6.1CISA ADP v3.1 | 0.6% | 2026-05-08 | NucleiFix |
| CVE-2023-54349 | AmazCart CMS reflected cross-site scripting via Search | 5.1CNA v4.0 | 0.3% | 2026-05-05 | Exploit code |
| CVE-2023-54348 | ERPGo SaaS CSV injection via Vendor Creation | 8.7CNA v4.0 | 0.4% | 2026-05-05 | Exploit code |
| CVE-2023-54347 | OpenEMR authentication brute force Mitigation Bypass | 8.7CNA v4.0 | 0.5% | 2026-05-05 | Exploit code |
| CVE-2023-54346 | WordPress Plugin Backup Migration Unauthenticated Database Backup Download | 8.7CNA v4.0 | 0.3% | 2026-05-05 | Exploit codeFix |
| CVE-2023-54345 | Frappe Framework ERPNext remote code execution | 8.7CNA v4.0 | 0.6% | 2026-05-05 | Exploit code |
| CVE-2023-54344 | Eclipse Equinox OSGi remote code execution via console | 9.3CNA v4.0 | 0.6% | 2026-05-05 | Exploit code |
| CVE-2023-54342 | Eclipse Equinox OSGi console remote code execution | 9.3CNA v4.0 | 0.5% | 2026-05-05 | Exploit code |
| CVE-2023-20585 | AMD EPYC™ 7003 Series Processors out-of-bounds access | 5.6CNA v4.0 | 0.1% | 2026-04-16 | Fix |
| CVE-2023-5872 | WAGO Smart Designer information disclosure | 4.3CNA v3.1 | 0.3% | 2026-04-16 | Fix |
| CVE-2023-3634 | Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible functions | 8.8CNA v3.1 | 0.6% | 2026-04-16 | Fix |
| CVE-2023-54364 | Joomla HikaShop reflected XSS via Product Filter | 5.1CNA v4.0 | 0.2% | 2026-04-09 | Exploit code |
| CVE-2023-54363 | Joomla Solidres reflected XSS via multiple parameters | 5.1CNA v4.0 | 0.2% | 2026-04-09 | Exploit code |
| CVE-2023-54362 | Joomla VirtueMart Shopping-Cart reflected XSS via keyword | 5.1CNA v4.0 | 0.2% | 2026-04-09 | Exploit code |
| CVE-2023-54361 | Joomla iProperty Real Estate reflected XSS via filter_keyword | 5.1CNA v4.0 | 0.2% | 2026-04-09 | Exploit code |
| CVE-2023-54360 | Joomla JLex Review reflected XSS via review_id parameter | 5.1CNA v4.0 | 0.2% | 2026-04-09 | Exploit code |
| CVE-2023-54359 | WordPress Adivaha Travel Plugin SQL injection via pid | 8.8CNA v4.0 | 0.3% | 2026-04-09 | Exploit code |
| CVE-2023-54358 | WordPress Adivaha Travel Plugin reflected XSS via isMobile | 5.1CNA v4.0 | 0.3% | 2026-04-09 | Exploit code |
| CVE-2023-46945 | Qd-today Qd server-side request forgery | 9.1CISA ADP v3.1 | 0.2% | 2026-04-08 | |
| CVE-2023-7343 | Belden Industrial HiVision arbitrary code execution via Malicious Project file | 8.5CNA v4.0 | 0.1% | 2026-04-02 | Fix |
| CVE-2023-7342 | Belden HiSecOS web server privilege escalation | 8.7CNA v4.0 | 0.3% | 2026-04-02 | Fix |
| CVE-2023-7340 | Wazuh authd service (os_auth) heap-based buffer overflow | 4.3v3.1 | 0.3% | 2026-03-27 | |
| CVE-2023-7339 | Softing pnGate data collection for dowloading leads into buffer overflow | 6.5CNA v3.1 | 0.4% | 2026-03-27 | |
| CVE-2023-7338 | RUCKUS Unleashed Authenticated RCE in Gateway Mode | 7.7CNA v4.0 | 0.5% | 2026-03-26 | Fix |
| CVE-2023-40693 | IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting | 5.4CNA v3.1 | 0.2% | 2026-03-13 | Fix |
| CVE-2023-43010 | Apple Safari buffer overflow | 8.8CISA ADP v3.1 | 0.9% | 2026-03-12 | Fix |
| CVE-2023-27573 | netbox-community netbox-docker default credentials | 9.8v3.1 | 0.5% | 2026-03-11 | Fix |
| CVE-2023-7337 | JS Help Desk AI-Powered Support and Ticketing System unauthenticated SQL injection | 7.5CNA v3.1 | 1.3% | 2026-03-04 | NucleiFix |
| CVE-2023-31044 | Nokia Impact Mobile code injection | 8.8v3.1 | 0.2% | 2026-03-03 | |
| CVE-2023-31364 | AMD EPYC™ 7001 Series Processors denial of service | 8.3CNA v4.0 | 0.2% | 2026-02-26 | |
| CVE-2023-38265 | IBM Cloud Pak System directory listing | 5.3CNA v3.1 | 0.2% | 2026-02-17 | Fix |
| CVE-2023-38005 | IBM Cloud Pak System improper access control | 4.3CNA v3.1 | 0.2% | 2026-02-17 | Fix |
| CVE-2023-31323 | AMD Radeon™ RX 5000 Series Graphics Products type confusion | 8.4CNA v4.0 | 0.1% | 2026-02-12 | |
| CVE-2023-31313 | AMD Instinct™ MI210 An confused deputy | 7.2CNA v3.1 | 0.1% | 2026-02-12 | |
| CVE-2023-20601 | AMD Radeon™ PRO VII improper array index validation | 4.6CNA v4.0 | 0.2% | 2026-02-12 | |
| CVE-2023-31324 | AMD Radeon™ RX 5000 Series Graphics Products time-of-check time-of-use race condition | 7.1CNA v4.0 | 0.1% | 2026-02-11 | Fix |
| CVE-2023-20548 | AMD Radeon™ RX 5000 Series Graphics Products time-of-check time-of-use race condition | 7.1CNA v4.0 | 0.1% | 2026-02-11 | Fix |
| CVE-2023-20514 | AMD Radeon™ RX 6000 Series Graphics Products improper parameter handling | 8.7CNA v4.0 | 0.1% | 2026-02-11 | |
| CVE-2023-38281 | IBM Cloud Pak System session cookies information disclosure | 5.3CNA v3.1 | 0.3% | 2026-02-04 | Fix |
| CVE-2023-38017 | IBM Cloud Pak System web UI cross-site scripting | 5.3CNA v3.1 | 0.3% | 2026-02-04 | Fix |
| CVE-2023-38010 | IBM Cloud Pak System user messages vulnerability | 5.3CNA v3.1 | 0.3% | 2026-02-04 | Fix |
| CVE-2023-54343 | QWE DL persistent XSS vulnerability via Path parameter | 5.1CNA v4.0 | 0.3% | 2026-02-01 | |
| CVE-2023-37525 | HCL BigFix Compliance is vulnerable to a sensitive information disclosure | 5.3CNA v3.1 | 0.3% | 2026-01-28 | Fix |
| CVE-2023-7335 | EduSoho arbitrary file read via classroom-course-statistics | 8.7CNA v4.0 | 0.8% | 2026-01-22 | Fix |
| CVE-2023-7334 | Changjetong T+ GetStoreWarehouseByStore deserialization RCE | 9.8v3.1 | 1.1% | 2026-01-15 | Fix |
| CVE-2023-54341 | Webgrind reflected cross-site scripting (XSS) via file parameter | 5.1CNA v4.0 | 0.4% | 2026-01-13 | Exploit code |
| CVE-2023-54340 | WorkOrder CMS SQL injection | 8.8CNA v4.0 | 0.3% | 2026-01-13 | Exploit code |
| CVE-2023-54339 | Webgrind remote command execution (RCE) via dataFile parameter | 9.3CNA v4.0 | 1.7% | 2026-01-13 | Exploit code |
| CVE-2023-54338 | Tftpd32_SE Tftpd32_svc unquoted service path | 8.5CNA v4.0 | 0.1% | 2026-01-13 | Exploit code |
| CVE-2023-54337 | Sysax Multi Server password denial of service (PoC) | 9.1v3.1 | 0.5% | 2026-01-13 | Exploit code |
| CVE-2023-54336 | Mediconta servermedicontservice unquoted service path | 8.5CNA v4.0 | 0.2% | 2026-01-13 | Exploit code |
| CVE-2023-54335 | eXtplorer authentication bypass and remote code execution (RCE) | 9.3CNA v4.0 | 5.7% | 2026-01-13 | Exploit code |
| CVE-2023-54334 | Explorer32++ buffer overflow | 7.0CNA v4.0 | 0.6% | 2026-01-13 | Exploit code |
| CVE-2023-54333 | Social-Share-Buttons SQL injection via project_id parameter | 8.8CNA v4.0 | 0.3% | 2026-01-13 | Exploit code |
| CVE-2023-54332 | Jetpack cross-site scripting (XSS) | 5.1CNA v4.0 | 0.3% | 2026-01-13 | Exploit code |
| CVE-2023-54331 | Outline unquoted service path | 7.8v3.1 | 0.2% | 2026-01-13 | Exploit code |
| CVE-2023-54330 | Inbit Messenger Unauthenticated Remote SEH Overflow | 9.3CNA v4.0 | 0.8% | 2026-01-13 | Exploit code |
| CVE-2023-54329 | Inbit Messenger unauthenticated remote command execution (RCE) | 9.3CNA v4.0 | 1.2% | 2026-01-13 | Exploit code |
| CVE-2023-54328 | AimOne Video Converter Build 103 buffer overflow in Registration form | 5.5NVD v3.1 | 0.4% | 2026-01-13 | Exploit code |
| CVE-2023-53985 | Zstore reflected cross-site scripting (XSS) | 5.1CNA v4.0 | 0.3% | 2026-01-13 | Exploit code |
| CVE-2023-53984 | HotKey Clipboard privilege escalation unquoted service path | 8.5CNA v4.0 | 0.2% | 2026-01-13 | Exploit code |
| CVE-2023-36331 | Exrick xmall insecure direct object reference | 8.2CISA ADP v3.1 | 0.2% | 2026-01-12 | |
| CVE-2023-7333 | bluelabsio records-mover Table object SQL injection | 4.8CNA v4.0 | 0.2% | 2026-01-07 | Fix |
| CVE-2023-52212 | WP Job Manager WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.1% | 2026-01-05 | Fix |
| CVE-2023-51513 | Geo Controller WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-01-05 | Fix |
| CVE-2023-50897 | Media File Renamer WordPress plugin arbitrary file Rename lead to RCE | 9.1CNA v3.1 | 0.3% | 2026-01-05 | Fix |
| CVE-2023-49186 | Machic Core WordPress theme reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2026-01-05 | |
| CVE-2023-7332 | PocketMine-MP improper validation of Dropped Item Count allows Remote Server crash | 7.1CNA v4.0 | 0.4% | 2025-12-31 | Fix |
| CVE-2023-7331 | PKrystian Full-Stack-Bank User SQL injection | 5.1CNA v4.0 | 0.2% | 2025-12-31 | |
| CVE-2023-54327 | Tinycontrol LAN Controller authentication bypass via Admin Password Change | 9.8v3.1 | 0.7% | 2025-12-30 | Exploit code |
| CVE-2023-54326 | Linux kernel PCI endpoint test driver vulnerability | 7.8CNA v3.1 | 0.1% | 2025-12-30 | Fix |
| CVE-2023-54325 | Linux kernel crypto out-of-bounds read | 7.1CNA v3.1 | 0.1% | 2025-12-30 | Fix |
| CVE-2023-54324 | Linux kernel device mapper multipath target race condition | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54323 | Linux kernel CXL pmem nvdimm registration race condition | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54322 | Linux kernel arm64 IRQ stack unwind filtering vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54321 | Linux kernel driver core device_add null pointer dereference | 5.5v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54320 | Linux kernel AMD PMC STB debugfs driver memory leak | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54319 | Linux kernel at91 PIO4 pin controller driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54318 | Linux kernel SMC-R link group list vulnerability | 8.8CNA v3.1 | 0.3% | 2025-12-30 | Fix |
| CVE-2023-54317 | Linux kernel dm-flakey device mapper target vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54316 | Linux kernel refscale crash | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54315 | Linux kernel PowerNV SR-IOV driver null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54314 | Linux kernel af9005 USB DVB driver null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54313 | Linux kernel overlay filesystem ACL lookup null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54312 | Linux kernel bpf tcp_basertt sample buffer overflow | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54311 | Linux kernel ext4 inline directory conversion deadlock | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54310 | Linux kernel mptlan use-after-free | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54309 | Linux kernel vtpm proxy driver race condition | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54308 | Linux kernel ymfpci sound driver vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54307 | Linux kernel ptp_qoriq driver memory leak | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54306 | Linux kernel TLS transmit lock denial of service | 7.5CNA v3.1 | 0.6% | 2025-12-30 | Fix |
| CVE-2023-54305 | Linux kernel ext4 kernel panic | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54304 | Linux kernel meson_sm null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54303 | Linux kernel BPF perf event output vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54302 | Linux kernel irdma RDMA driver race condition | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54301 | Linux kernel 8250_bcm7271 serial driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54300 | Linux kernel ath9k Wi-Fi driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54299 | Linux kernel USB Type-C Alt Mode bus driver null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54298 | Linux kernel Quark thermal driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54297 | Linux kernel btrfs zoned block group allocation memory leak | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54296 | Linux kernel KVM SVM SEV-ES migration vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54295 | Linux kernel SPI NOR flash driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54294 | Linux kernel MD RAID10 driver memory leak | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54293 | Linux kernel bcache btree cache wait list denial of service | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54292 | Linux kernel irdma RDMA driver race condition | 9.8CNA v3.1 | 0.5% | 2025-12-30 | Fix |
| CVE-2023-54291 | Linux kernel VDUSE driver null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54289 | Linux kernel qedf null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54288 | Linux kernel mac80211 Wi-Fi stack deadlock | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54287 | Linux kernel i.MX serial driver null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54286 | Linux kernel iwlwifi DVM Wi-Fi driver vulnerability | 7.6CNA v3.1 | 0.3% | 2025-12-30 | Fix |
| CVE-2023-54285 | Linux kernel iomap delayed allocation scan out-of-bounds write | 7.1CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54284 | In the Linux kernel, the following vulnerability has been resolved: media: av7110: prevent underflow in write_ts_to_decoder() The buf[4] value comes from the user via ts_play(). It is a value in the u8 range. The final length we pass to av7110_ipack_instant_repack() is "len - (buf[4] + 1) - 4" s | 7.1CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54283 | Linux kernel BPF LRU map race condition | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54282 | Linux kernel qt1010 tuner driver buffer overflow | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54281 | Linux kernel btrfs inode lookup ioctl deadlock | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54280 | Linux kernel CIFS DFS tree connection use-after-free | 9.8CNA v3.1 | 0.5% | 2025-12-30 | Fix |
| CVE-2023-54279 | Linux kernel fw null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54278 | Linux kernel s390/vmem crash | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54277 | Linux kernel udlfb USB display driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54276 | Linux kernel NFSD reply cache statistics null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54275 | Linux kernel ath11k Wi-Fi driver memory leak | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54274 | Linux kernel RDMA/srpt null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54273 | Linux kernel XFRM device reference tracking vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54272 | Linux kernel NTFS3 filesystem null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54271 | Linux kernel block cgroup policy data null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54270 | Linux kernel siano use-after-free | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54269 | Linux kernel SUNRPC deferred request handling double free | 9.8CNA v3.1 | 0.5% | 2025-12-30 | Fix |
| CVE-2023-54268 | Linux kernel debug objects pool allocator vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54267 | Linux kernel pseries lppaca access vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54266 | Linux kernel m920x I2C driver memory leak | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54265 | Linux kernel IPv6 skb construction vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54264 | Linux kernel sysv filesystem null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54263 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP Fixes OOPS on boards with ANX9805 DP encoders. | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54262 | Linux kernel mlx5e flow post-action handling use-after-free | 8.8CNA v3.1 | 0.3% | 2025-12-30 | Fix |
| CVE-2023-54261 | Linux kernel AMDKFD GFX11 MQD manager null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54260 | Linux kernel CIFS SMB direct client vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54259 | Linux kernel SoundWire bus driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54258 | Linux kernel CIFS client race condition | 9.8CNA v3.1 | 0.6% | 2025-12-30 | Fix |
| CVE-2023-54257 | Linux kernel macb Ethernet driver memory corruption | 9.8CNA v3.1 | 0.6% | 2025-12-30 | Fix |
| CVE-2023-54255 | Linux kernel SH DMA driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54254 | Linux kernel DRM TTM memory manager vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54253 | Linux kernel Btrfs relocation denial of service | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54252 | Linux kernel think-lmi WMI driver memory leak | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54251 | Linux kernel taprio traffic scheduler vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54250 | Linux kernel ksmbd SMB server vulnerability | 8.2CNA v3.1 | 0.5% | 2025-12-30 | Fix |
| CVE-2023-54249 | Linux kernel MHI endpoint bus driver null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54248 | Linux kernel NTFS3 filesystem null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54247 | Linux kernel BPF BTF verifier vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54246 | In the Linux kernel, the following vulnerability has been resolved: rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() The rcuscale.holdoff module parameter can be used to delay the start of rcu_scale_writer() kthread. However, the hung-task timeout will trigger when t | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54245 | Linux kernel tx-macro codec driver out-of-bounds read | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54244 | Linux kernel ACPI EC query handlers vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54243 | Linux kernel ebtables netfilter use-after-free | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54242 | Linux kernel divide by zero | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54241 | Linux kernel MIPS KVM null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54240 | Linux kernel mtk_eth_soc null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54239 | Linux kernel IOMMUFD vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54238 | Linux kernel mlx5 Ethernet driver memory leak | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54237 | Linux kernel SMC LLC link setup vulnerability | 9.8CNA v3.1 | 0.6% | 2025-12-30 | Fix |
| CVE-2023-54236 | Linux kernel net_failover driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54235 | Linux kernel PCI DOE driver race condition | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54234 | Linux kernel mpi3mr SCSI driver use-after-free | 7.8CNA v3.1 | 0.1% | 2025-12-30 | Fix |
| CVE-2023-54233 | Linux kernel SOF ASoC driver null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54232 | Linux kernel m68k bus error handler null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54231 | Linux kernel libwx Ethernet driver memory leak | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54230 | Linux kernel AMBA bus driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54229 | Linux kernel ath11k Wi-Fi driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54228 | Linux kernel RAA215300 regulator driver resource leak | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54227 | Linux kernel blk-mq tag allocation vulnerability | 7.5CNA v3.1 | 0.5% | 2025-12-30 | Fix |
| CVE-2023-54226 | Linux kernel AF_UNIX socket race condition | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54225 | Linux kernel IPA GSI driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54224 | Linux kernel Btrfs delayed items deadlock | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54223 | Linux kernel xsk crash | 9.8CNA v3.1 | 0.5% | 2025-12-30 | Fix |
| CVE-2023-54222 | Linux kernel Tegra194 HTE driver out-of-bounds read | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54221 | Linux kernel i.MX93 clock driver memory leak | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54220 | Linux kernel 8250 serial driver vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54219 | Linux kernel iSER connection release vulnerability | 7.5CNA v3.1 | 0.7% | 2025-12-30 | Fix |
| CVE-2023-54218 | Linux kernel socket timestamp handling race condition | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54217 | Linux kernel msm DRM driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54216 | Linux kernel mlx5e TC offload use-after-free | 7.8CNA v3.1 | 0.1% | 2025-12-30 | Fix |
| CVE-2023-54215 | Linux kernel virtio-vdpa driver memory leak | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54214 | Linux kernel Bluetooth L2CAP vulnerability | 8.8CNA v3.1 | 0.3% | 2025-12-30 | Fix |
| CVE-2023-54213 | Linux kernel sisusbvga USB driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54211 | Linux kernel ftrace buffered event vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54210 | Linux kernel Bluetooth advertising monitor use-after-free | 7.8CNA v3.1 | 0.1% | 2025-12-30 | Fix |
| CVE-2023-54209 | Linux kernel blktrace debugfs interface vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54208 | Linux kernel ov5675 memory leak | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54207 | Linux kernel uclogic HID driver use-after-free | 7.8v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54206 | Linux kernel flower null pointer dereference | 7.8CNA v3.1 | 0.1% | 2025-12-30 | Fix |
| CVE-2023-54205 | Linux kernel STM32 pin controller driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54204 | Linux kernel Sunplus MMC driver improper error handling | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54203 | Linux kernel ksmbd SMB2 header init vulnerability | 9.1CNA v3.1 | 0.5% | 2025-12-30 | Fix |
| CVE-2023-54202 | Linux kernel i915 performance counter ioctl race condition | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54201 | Linux kernel RDMA efa driver integer underflow | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54200 | Linux kernel netfilter nf_tables use-after-free | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54199 | Linux kernel Adreno GPU driver null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54198 | Linux kernel tty driver lookup vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54197 | Linux kernel Bluetooth btsdio driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54196 | Linux kernel NTFS3 driver null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54195 | Linux kernel rxrpc null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54194 | Linux kernel exFAT driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54193 | Linux kernel cls_api use-after-free | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54192 | Linux kernel F2FS null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54191 | Linux kernel mt76 Wi-Fi driver memory leak | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54190 | Linux kernel LED core vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54189 | Linux kernel pstore RAM backend null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54188 | Linux kernel apple-admac memory leak | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54187 | Linux kernel F2FS vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54186 | Linux kernel USB Type-C DisplayPort altmode driver vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54185 | Linux kernel Btrfs vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54184 | Linux kernel iSCSI target driver use-after-free | 9.8CNA v3.1 | 0.6% | 2025-12-30 | Fix |
| CVE-2023-54183 | Linux kernel V4L2 core vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54182 | Linux kernel F2FS vulnerability | 7.1CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54181 | Linux kernel BPF verifier vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54180 | Linux kernel Btrfs vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54179 | Linux kernel qla2xxx SCSI driver vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54178 | Linux kernel devicetree unittest node lookup null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54177 | Linux kernel quota disable handling vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54176 | Linux kernel MPTCP worker state handling vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54175 | Linux kernel xiic I2C driver runtime PM vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54174 | Linux kernel vfio null pointer dereference | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54173 | Linux kernel BPF event output vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54172 | Linux kernel Hyper-V hypercall page denial of service | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54171 | Linux kernel ftrace trace_pipe memory leak | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54170 | Linux kernel keyring associative array vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54169 | Linux kernel mlx5e PTP handling memory leak | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54168 | Linux kernel mlx4 RDMA user queue size handling vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54167 | Linux kernel m68k initrd memory mapping vulnerability | – | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54166 | Linux kernel igc Ethernet driver tx timeout handling race condition | 7.8CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54165 | Linux kernel zsmalloc memory allocator vulnerability | 7.8CNA v3.1 | 0.1% | 2025-12-30 | Fix |
| CVE-2023-54164 | Linux kernel Bluetooth ISO connection handling race condition | 8.0CNA v3.1 | 0.3% | 2025-12-30 | Fix |
| CVE-2023-54163 | Nlb mKlik Macedonia SQL injection via International Transfer parameters | 7.5v3.1 | 0.3% | 2025-12-30 | |
| CVE-2023-54162 | Linux kernel ksmbd SMB2 lock handling memory leak | 8.8CNA v3.1 | 0.4% | 2025-12-30 | Fix |
| CVE-2023-53983 | Anevia Flamingo XL/XS default credentials authentication bypass | 9.8NVD v3.1 | 0.6% | 2025-12-30 | |
| CVE-2023-41656 | Better Elementor Addons WordPress plugin broken access control | 5.4CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-32238 | TheGem WordPress theme broken access control | 5.4CNA v3.1 | 0.2% | 2025-12-30 | Fix |
| CVE-2023-54160 | Linux kernel ARM SDEI firmware interface vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54159 | Linux kernel mtu3 USB QMU transfer handling vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54158 | Linux kernel btrfs qgroup space accounting vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54157 | Linux kernel binder driver VMA handling use-after-free | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54156 | Linux kernel sfc crash | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54155 | Linux kernel bpf_xdp_adjust_tail frame size check vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54154 | Linux kernel SCSI target core memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54153 | Linux kernel ext4 quota handling memory leak | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54152 | Linux kernel j1939 deadlock | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54151 | Linux kernel f2fs filesystem denial of service | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54150 | Linux kernel AMD BIOS parser vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54149 | Linux kernel DSA switch driver vulnerability | 7.5CNA v3.1 | 0.3% | 2025-12-24 | Fix |
| CVE-2023-54148 | Linux kernel mlx5e representor driver use-after-free | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54147 | Linux kernel mtk-mdp3 null pointer dereference | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54146 | Linux kernel kexec double free | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54145 | Linux kernel BPF verifier log vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54144 | Linux kernel amdkfd topology driver vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54143 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init() If we encounter any error in the vdec_msg_queue_init() then we need to set "msg_queue->wdma_addr.size = 0;". Normally, this is done inside the vdec_msg_queue_de | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54142 | Linux kernel GTP driver use-after-free | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54141 | Linux kernel ath11k Wi-Fi driver null pointer dereference | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54140 | Linux kernel nilfs2 filesystem vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54139 | Linux kernel user_events tracing vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54138 | Linux kernel MSM DRM driver vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54137 | Linux kernel VFIO type1 IOMMU driver information disclosure | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54136 | Linux kernel sprd serial driver memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54135 | Linux kernel maple tree vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54134 | Linux kernel autofs memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54133 | Linux kernel nfp driver resource leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54132 | Linux kernel EROFS filesystem vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54131 | Linux kernel rt2x00 Wi-Fi driver memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54130 | Linux kernel hfs/hfsplus memory leak | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54129 | Linux kernel octeontx2-af driver denial of service | 7.1CNA v3.1 | 0.3% | 2025-12-24 | Fix |
| CVE-2023-54128 | Linux kernel mount namespace peer groups vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54127 | Linux kernel JFS filesystem double free | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54126 | Linux kernel safexcel crypto driver vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54125 | Linux kernel NTFS3 extended attributes use-after-free | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54124 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to drop all dirty pages during umount() if cp_error is set xfstest generic/361 reports a bug as below: f2fs_bug_on(sbi, sbi->fsync_node_num); kernel BUG at fs/f2fs/super.c:1627! RIP: 0010:f2fs_put_super+0x3a8/0x3b0 Cal | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54123 | Linux kernel RAID10 driver memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54122 | Linux kernel MSM DPU driver null pointer dereference | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54121 | Linux kernel Btrfs extent map handling vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54120 | Linux kernel Bluetooth HIDP session thread race condition | 8.8CNA v3.1 | 0.3% | 2025-12-24 | Fix |
| CVE-2023-54119 | In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotify_freeing_mark() races with inotify_handle_inode_event() it can happen that inotify_handle_inode_event() sees that i_mark->wd got already reset to -1 and reports this value | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54118 | Linux kernel sc16is7xx GPIO controller race condition | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54117 | Linux kernel s390 dcssblk driver vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54116 | Linux kernel DRM fbdev-generic driver vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54115 | Linux kernel PCMCIA resource database memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54114 | Linux kernel NSH GSO segmentation vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54113 | Linux kernel RCU vmalloc memory dump deadlock | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54112 | Linux kernel KCM socket messaging memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54111 | Linux kernel Rockchip pin controller driver vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54110 | Linux kernel rndis_host driver integer overflow | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54109 | Linux kernel rcar_fdp1 media driver vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54108 | Linux kernel qla2xxx driver NVMe LS requests vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54107 | Linux kernel block cgroup policy data use-after-free | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54106 | Linux kernel mlx5 driver representor Rx path memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54105 | Linux kernel CAN ISOTP socket binding vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54104 | Linux kernel fsl_upm NAND driver vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54102 | Linux kernel lpfc debugfs interface buffer overflow | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54101 | Linux kernel xilinx use-after-free | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54100 | Linux kernel qedi iSCSI driver use-after-free | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54099 | Linux kernel filesystem remount handling race condition | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54098 | Linux kernel i915 GVT debugfs null pointer dereference | 7.3CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54097 | Linux kernel STM32 power regulator driver memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54096 | Linux kernel SoundWire enumeration completion memory corruption | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54095 | Linux kernel powerpc IOMMU notifier chain vulnerability | 7.0CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54094 | Linux kernel net null pointer dereference | 9.8CNA v3.1 | 0.5% | 2025-12-24 | Fix |
| CVE-2023-54093 | Linux kernel anysee DVB driver null pointer dereference | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54092 | Linux kernel KVM s390 protected virtualization denial of service | 8.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54091 | Linux kernel DRM client mode setting memory leak | – | 0.3% | 2025-12-24 | Fix |
| CVE-2023-54090 | Linux kernel ixgbe kernel panic | 9.8CNA v3.1 | 0.6% | 2025-12-24 | Fix |
| CVE-2023-54089 | Linux kernel virtio_pmem flush bio handling vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54088 | Linux kernel block cgroup queue handling vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54087 | Linux kernel UBI volume handling null pointer dereference | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54086 | Linux kernel BPF trampoline recursion check denial of service | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54085 | Linux kernel MPTCP fastopen fallback null pointer dereference | 7.5CNA v3.1 | 0.4% | 2025-12-24 | Fix |
| CVE-2023-54084 | Linux kernel ALSA firewire-digi00x driver use-after-free | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54083 | Linux kernel Tegra XUSB PHY driver use-after-free | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54081 | Linux kernel Xen grant table reclaim memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54080 | Linux kernel Btrfs zoned write handling null pointer dereference | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54079 | Linux kernel bq27xxx battery driver race condition | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54078 | Linux kernel max9286 media driver vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54077 | Linux kernel NTFS3 filesystem memory leak | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54076 | Linux kernel SMB client use-after-free | 9.8CNA v3.1 | 0.5% | 2025-12-24 | Fix |
| CVE-2023-54075 | Linux kernel MediaTek ASoC driver vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54074 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use correct encap attribute during invalidation With introduction of post action infrastructure most of the users of encap attribute had been modified in order to obtain the correct attribute by calling mlx5e_tc_get_enc | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54073 | Linux kernel tpm crash | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54072 | Linux kernel ALSA PCM memory allocation race condition | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54071 | Linux kernel rtw88 Wi-Fi driver vulnerability | 8.8CNA v3.1 | 0.3% | 2025-12-24 | Fix |
| CVE-2023-54070 | Linux kernel igb crash | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54069 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow When we calculate the end position of ext4_free_extent, this position may be exactly where ext4_lblk_t (i.e. uint) overflows. For example, if ac_g_ex.fe_logical is 4294965248 | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54068 | Linux kernel F2FS compression vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54067 | Linux kernel Btrfs free space tree race condition | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54066 | Linux kernel gl861 DVB-USB driver null pointer dereference | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54065 | Linux kernel Realtek DSA driver out-of-bounds access | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54064 | Linux kernel IPMI SSIF driver memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54063 | Linux kernel NTFS3 filesystem out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54062 | Linux kernel ext4 extended attribute handling vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54060 | Linux kernel IOMMUFD null pointer dereference | 8.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54059 | Linux kernel MediaTek SVS driver null pointer dereference | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54058 | Linux kernel ARM FF-A firmware driver null pointer dereference | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54057 | Linux kernel AMD IOMMU driver vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54056 | Linux kernel kheaders driver buffer overflow | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54055 | Linux kernel irdma RDMA driver memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54053 | Linux kernel iwlwifi PCIe driver null pointer dereference | – | 0.3% | 2025-12-24 | Fix |
| CVE-2023-54052 | Linux kernel mt7921 Wi-Fi driver vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54051 | Linux kernel virtio_net GSO handling null pointer dereference | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54050 | Linux kernel UBIFS filesystem memory leak | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54049 | Linux kernel rpmsg glink driver null pointer dereference | – | 0.3% | 2025-12-24 | Fix |
| CVE-2023-54048 | Linux kernel bnxt_re RDMA completion queue vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54047 | Linux kernel Rockchip dw_hdmi driver use-after-free | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54046 | Linux kernel ESSIV crypto template use-after-free | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54045 | Linux kernel audit kernel panic | – | 0.3% | 2025-12-24 | Fix |
| CVE-2023-54044 | Linux kernel SPMI driver removal null pointer dereference | – | 0.3% | 2025-12-24 | Fix |
| CVE-2023-54043 | Linux kernel iommufd hardware page table list vulnerability | 8.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54042 | Linux kernel VAS coprocessor use-after-free | 7.8CNA v3.1 | 0.1% | 2025-12-24 | Fix |
| CVE-2023-54041 | Linux kernel io_uring provided buffers memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54040 | Linux kernel ice memory leak | 8.8CNA v3.1 | 0.1% | 2025-12-24 | Fix |
| CVE-2023-54039 | Linux kernel J1939 transport protocol vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54038 | Linux kernel hci_conn null pointer dereference | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54037 | Linux kernel ice Ethernet driver reload null pointer dereference | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54036 | Linux kernel rtl8xxxu Wi-Fi driver memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54035 | Linux kernel nf_tables chain reference counting integer underflow | 7.8CNA v3.1 | 0.1% | 2025-12-24 | Fix |
| CVE-2023-54034 | Linux kernel iommufd VFIO compatibility interface vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54033 | Linux kernel BPF LRU hash map memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54032 | Linux kernel btrfs quota root cleanup race condition | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54031 | Linux kernel vdpa netlink queue index attribute out-of-bounds read | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54030 | Linux kernel io_uring multishot receive vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54028 | Linux kernel RDMA rxe queue pair cleanup vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54027 | Linux kernel IIO core device registration null pointer dereference | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54026 | Linux kernel opp use-after-free | 7.8CNA v3.1 | 0.1% | 2025-12-24 | Fix |
| CVE-2023-54025 | Linux kernel rsi Wi-Fi driver vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54024 | Linux kernel KVM coalesced MMIO memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54023 | Linux kernel btrfs balance operation race condition | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54022 | Linux kernel USB-audio UMP MIDI driver memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54021 | In the Linux kernel, the following vulnerability has been resolved: ext4: set goal start correctly in ext4_mb_normalize_request We need to set ac_g_ex to notify the goal start used in ext4_mb_find_by_goal. Set ac_g_ex instead of ac_f_ex in ext4_mb_normalize_request. Besides we should assure goal s | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54020 | Linux kernel sf-pdma memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54019 | Linux kernel PSI pressure trigger polling use-after-free | 7.8CNA v3.1 | 0.1% | 2025-12-24 | Fix |
| CVE-2023-54018 | Linux kernel MSM HDMI driver null pointer dereference | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54017 | Linux kernel pSeries ibmebus bus driver memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54016 | Linux kernel ath12k Wi-Fi driver memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54015 | Linux kernel mlx5 devcom use-after-free | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54014 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() Klocwork reported warning of rport maybe NULL and will be dereferenced. rport returned by call to fc_bsg_to_rport() could be NULL and dereferenced. Check valid rport | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54013 | Linux kernel interconnect bandwidth locking deadlock | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54012 | Linux kernel virtual interface feature propagation vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54011 | Linux kernel mpi3mr SCSI driver vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54010 | Linux kernel ACPICA debugger object display null pointer dereference | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54009 | Linux kernel Cadence I2C driver vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54008 | Linux kernel virtio vDPA affinity masks denial of service | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54007 | Linux kernel VMCI host driver race condition | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54006 | Linux kernel AF_UNIX socket accounting race condition | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54005 | Linux kernel binder driver memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54004 | Linux kernel UDP-Lite socket memory accounting null pointer dereference | 7.5CNA v3.1 | 0.6% | 2025-12-24 | Fix |
| CVE-2023-54003 | Linux kernel RDMA core GID table vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54002 | Linux kernel Btrfs balance race condition | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54001 | Linux kernel r8712 Wi-Fi driver memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-54000 | Linux kernel hns3 deadlock | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-53999 | Linux kernel mlx5e TC internal port memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-53998 | Linux kernel virtio hardware RNG driver race condition | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-53997 | Linux kernel thermal zone OF registration double free | 7.8CNA v3.1 | 0.1% | 2025-12-24 | Fix |
| CVE-2023-53996 | In the Linux kernel, the following vulnerability has been resolved: x86/sev: Make enc_dec_hypercall() accept a size instead of npages enc_dec_hypercall() accepted a page count instead of a size, which forced its callers to round up. As a result, non-page aligned vaddrs caused pages to be spuriousl | 9.3CNA v3.1 | 0.1% | 2025-12-24 | Fix |
| CVE-2023-53995 | Linux kernel IPv4 interface address deletion memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-53994 | In the Linux kernel, the following vulnerability has been resolved: ionic: remove WARN_ON to prevent panic_on_warn Remove unnecessary early code development check and the WARN_ON that it uses. The irq alloc and free paths have long been cleaned up and this check shouldn't have stuck around so lon | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-53993 | Linux kernel PCI/DOE memory leak | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-53992 | Linux kernel cfg80211 OCB mode handling vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-53991 | Linux kernel MSM DPU resource manager vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-53990 | Linux kernel SMB3 deferred close file list vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-53989 | Linux kernel arm64 memory mapping vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-53988 | Linux kernel NTFS3 index header handling out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-53987 | Linux kernel ping socket table vulnerability | – | 0.2% | 2025-12-24 | Fix |
| CVE-2023-53986 | Linux kernel BCM6358 RAC flush handling denial of service | 8.6CNA v3.1 | 0.4% | 2025-12-24 | Fix |
| CVE-2023-53867 | Linux kernel Ceph client use-after-free | 9.8CNA v3.1 | 0.5% | 2025-12-24 | Fix |
| CVE-2023-40679 | Master Elementor Addons WordPress plugin broken access control | 6.5CNA v3.1 | 0.4% | 2025-12-24 | Fix |
| CVE-2023-36525 | WPJobBoard WordPress plugin Unauth. blind SQL injection (SQLi) | 8.6CNA v3.1 | 0.5% | 2025-12-24 | Fix |
| CVE-2023-32120 | Hostel WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-12-24 | Fix |
| CVE-2023-28619 | Resoto WordPress theme broken access control to arbitrary plugin activation | 4.3CNA v3.1 | 0.3% | 2025-12-24 | |
| CVE-2023-53982 | PMB SQL injection vulnerability via Unsanitized Storage parameter | 7.5NVD v3.1 | 0.6% | 2025-12-23 | Exploit code |
| CVE-2023-52210 | Product Delivery Date for WooCommerce Lite WordPress plugin broken access control | 5.3CNA v3.1 | 0.3% | 2025-12-23 | Fix |
| CVE-2023-53981 | PhotoShow remote code execution via Exiftran path injection | 7.2v3.1 | 0.9% | 2025-12-22 | Exploit code |
| CVE-2023-53980 | ProjectSend r1605 remote code execution via file Extension Manipulation | 8.7CNA v4.0 | 0.9% | 2025-12-22 | Exploit code |
| CVE-2023-53979 | MyBB authenticated remote code execution via Chained | 8.6CNA v4.0 | 0.8% | 2025-12-22 | Exploit code |
| CVE-2023-53978 | myBB Forums stored cross-site scripting via Forum Announcements | 5.4v3.1 | 0.2% | 2025-12-22 | Exploit code |
| CVE-2023-53977 | myBB Forums stored cross-site scripting via Forum Management | 5.4v3.1 | 0.2% | 2025-12-22 | Exploit code |
| CVE-2023-53976 | myBB Forums stored cross-site scripting via Template Management | 5.4v3.1 | 0.2% | 2025-12-22 | Exploit code |
| CVE-2023-53975 | Atom CMS unauthenticated SQL injection via Admin Index page | 7.5NVD v3.1 | 0.5% | 2025-12-22 | Exploit code |
| CVE-2023-53974 | D-Link Dsl-124 ME_1.00 Backup Configuration File Disclosure via Unauthenticated request | 8.8CNA v4.0 | 0.5% | 2025-12-22 | Exploit code |
| CVE-2023-53973 | Zillya Total Security local privilege escalation via Quarantine module | 7.8v3.1 | 0.3% | 2025-12-22 | Exploit code |
| CVE-2023-53972 | WebTareas unauthenticated SQL injection via Session Cookie parameter | 7.5NVD v3.1 | 0.4% | 2025-12-22 | Exploit code |
| CVE-2023-53971 | WebTareas authenticated remote code execution via file upload | 8.7CNA v4.0 | 0.5% | 2025-12-22 | Exploit code |
| CVE-2023-53970 | Screen Sft Dab 600/c Firmware authentication bypass Reset Board Config | 8.7CNA v4.0 | 0.5% | 2025-12-22 | Exploit code |
| CVE-2023-53969 | Screen Sft Dab 600/c Firmware authentication bypass Password Change | 9.3CNA v4.0 | 0.5% | 2025-12-22 | Exploit code |
| CVE-2023-53968 | Screen Sft Dab 600/c Firmware authentication bypass Erase Account | 9.3CNA v4.0 | 0.6% | 2025-12-22 | Exploit code |
| CVE-2023-53967 | Screen Sft Dab 600/c Firmware authentication bypass Admin Password Change | 9.3CNA v4.0 | 0.5% | 2025-12-22 | Exploit code |
| CVE-2023-53966 | SOUND4 LinkAndShare Transmitter format string stack buffer overflow | 9.3CNA v4.0 | 0.7% | 2025-12-22 | Exploit code |
| CVE-2023-53965 | SOUND4 Server Service local privilege escalation via unquoted service path | 7.8v3.1 | 0.2% | 2025-12-22 | Exploit code |
| CVE-2023-53964 | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Factory Reset vulnerability | 9.8v3.1 | 1.0% | 2025-12-22 | Exploit code |
| CVE-2023-53963 | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x unauthenticated remote command injection | 9.3CNA v4.0 | 3.4% | 2025-12-22 | Exploit code |
| CVE-2023-53962 | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x unauthenticated directory traversal File Write | 7.5v3.1 | 1.2% | 2025-12-22 | Exploit code |
| CVE-2023-53961 | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x cross-site request forgery | 4.3v3.1 | 0.2% | 2025-12-22 | Exploit code |
| CVE-2023-53960 | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x SQL injection via authentication bypass | 9.8v3.1 | 0.7% | 2025-12-22 | Exploit code |
| CVE-2023-53955 | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x authorization bypass via Insecure Object References | 9.3CNA v4.0 | 0.9% | 2025-12-22 | Exploit code |
| CVE-2023-47232 | WP Affiliate Disclosure WordPress plugin broken access control + CSRF | 4.3CNA v3.1 | 0.2% | 2025-12-21 | Fix |
| CVE-2023-25446 | HappyFiles Pro WordPress plugin broken access control | 7.7CNA v3.1 | 0.4% | 2025-12-21 | Fix |
| CVE-2023-25445 | HappyFiles Pro WordPress plugin broken access control | 5.4CNA v3.1 | 0.2% | 2025-12-21 | Fix |
| CVE-2023-25068 | Magazine Edge WordPress theme authenticated arbitrary plugin activation | 4.3CNA v3.1 | 0.2% | 2025-12-21 | |
| CVE-2023-53959 | FileZilla Client DLL hijacking via Missing TextShaping.dll | 8.5CNA v4.0 | 0.9% | 2025-12-19 | Exploit code |
| CVE-2023-53958 | LDAP Tool Box Self Service Password account takeover via HTTP host header | 8.6CNA v4.0 | 0.4% | 2025-12-19 | Exploit code |
| CVE-2023-53957 | Kimai SameSite Cookie vulnerability session hijacking | 8.8NVD v3.1 | 0.6% | 2025-12-19 | Exploit codeFix |
| CVE-2023-53956 | Flatnux 2021- authenticated file upload remote code execution | 8.7CNA v4.0 | 0.8% | 2025-12-19 | Exploit code |
| CVE-2023-53954 | ActFax unquoted path services privilege escalation | 8.5CNA v4.0 | 0.1% | 2025-12-19 | Exploit code |
| CVE-2023-53953 | WebsiteBaker stored cross-site scripting via Page Creation | 5.4v3.1 | 0.2% | 2025-12-19 | Exploit code |
| CVE-2023-53952 | Dotclear Authenticated remote code execution via file upload | 8.7CNA v4.0 | 1.1% | 2025-12-19 | Exploit code |
| CVE-2023-53951 | Ever Gauzy JWT Authentication Weakness via HMAC Secret | 9.3CNA v4.0 | 0.4% | 2025-12-19 | Exploit code |
| CVE-2023-53950 | InnovaStudio WYSIWYG Editor unrestricted file upload via Filename Manipulation | 9.3CNA v4.0 | 0.7% | 2025-12-19 | Exploit code |
| CVE-2023-53949 | AspEmail local privilege escalation via Binary Permission | 8.5CNA v4.0 | 0.1% | 2025-12-19 | Exploit code |
| CVE-2023-53948 | Lilac-Reloaded for Nagios remote code execution via Autodiscovery | 9.3CNA v4.0 | 0.9% | 2025-12-19 | Exploit code |
| CVE-2023-53947 | OCS Inventory NG unquoted service path privilege escalation | 8.5CNA v4.0 | 0.2% | 2025-12-19 | Exploit code |
| CVE-2023-53946 | Arcsoft PhotoStudio unquoted service path privilege escalation | 8.5CNA v4.0 | 0.2% | 2025-12-19 | Exploit code |
| CVE-2023-53945 | BrainyCP remote code execution via Authenticated Crontab Manipulation | 8.7CNA v4.0 | 1.1% | 2025-12-19 | Exploit code |
| CVE-2023-30971 | Gotham Gaia application was found to be exposing multiple unauthenticated endpoints. | 6.8CNA v3.1 | 0.2% | 2025-12-19 | |
| CVE-2023-53944 | EasyPHP Webserver path traversal via directory traversal Sequences | 7.1CNA v4.0 | 1.0% | 2025-12-18 | Exploit code |
| CVE-2023-53943 | GLPI Username Enumeration vulnerability via Lost Password endpoint | 6.9CNA v4.0 | 0.4% | 2025-12-18 | Exploit code |
| CVE-2023-53942 | File Thingie authenticated arbitrary file upload remote code execution | 9.4CNA v4.0 | 0.6% | 2025-12-18 | Exploit code |
| CVE-2023-53941 | EasyPHP Webserver remote code execution | 9.3CNA v4.0 | 6.4% | 2025-12-18 | Exploit code |
| CVE-2023-53940 | Codigo Markdown Editor Electron arbitrary code execution via Markdown file | 8.4CNA v4.0 | 0.2% | 2025-12-18 | Exploit code |
| CVE-2023-53939 | TinyWebGallery stored cross-site scripting via Folder Name parameter | 5.1CNA v4.0 | 0.2% | 2025-12-18 | Exploit code |
| CVE-2023-53938 | RockMongo stored cross-site scripting vulnerability via multiple parameters | 5.1CNA v4.0 | 0.2% | 2025-12-18 | Exploit code |
| CVE-2023-53937 | Hubstaff DLL search order hijacking via wow64log library | 8.5CNA v4.0 | 0.2% | 2025-12-18 | Exploit code |
| CVE-2023-53936 | Cameleon CMS authenticated persistent cross-site scripting via Post Creation | 4.8v3.1 | 0.2% | 2025-12-18 | Exploit code |
| CVE-2023-53935 | Codester WBiz Desk ticket.php SQL injection | 5.3CNA v4.0 | 0.2% | 2025-12-18 | Exploit code |
| CVE-2023-53934 | Kentico Xperience GetResource handler denial of service | 8.7CNA v4.0 | 0.4% | 2025-12-18 | Fix |
| CVE-2023-53738 | Kentico Xperience Page Preview reflected XSS | 5.4v3.1 | 0.2% | 2025-12-18 | Fix |
| CVE-2023-53737 | Kentico Xperience Localization application stored XSS | 4.8v3.1 | 0.2% | 2025-12-18 | Fix |
| CVE-2023-53736 | Kentico Xperience Administration interface reflected XSS | 5.4v3.1 | 0.2% | 2025-12-18 | Fix |
| CVE-2023-53933 | Serendipity Authenticated remote code execution via file upload | 8.7CNA v4.0 | 1.0% | 2025-12-17 | Exploit code |
| CVE-2023-53932 | Serendipity stored cross-site scripting via Admin Entry Creation | 5.4v3.1 | 0.2% | 2025-12-17 | Exploit code |
| CVE-2023-53931 | Revive Adserver cross-site scripting via Banner Advanced settings | 6.1v3.1 | 2.7% | 2025-12-17 | Exploit code |
| CVE-2023-53930 | ProjectSend r1605 insecure direct object reference File Download | 7.5v3.1 | 0.4% | 2025-12-17 | Exploit code |
| CVE-2023-53929 | phpMyFAQ CSV injection via User Profile Export | 8.0v3.1 | 0.5% | 2025-12-17 | Exploit code |
| CVE-2023-53928 | PHPFusion stored cross-site scripting via File Manager upload | 6.1v3.1 | 0.3% | 2025-12-17 | Exploit code |
| CVE-2023-53927 | PHPJabbers Simple CMS stored cross-site scripting via Section Creation | 5.4v3.1 | 0.3% | 2025-12-17 | Exploit code |
| CVE-2023-53926 | PHPJabbers Simple CMS SQL injection via Column parameter | 8.7CNA v4.0 | 0.6% | 2025-12-17 | Exploit code |
| CVE-2023-53925 | UliCMS stored cross-site scripting via SVG file upload | 6.1v3.1 | 0.4% | 2025-12-17 | Exploit code |
| CVE-2023-53924 | Ulicms UliCMS-vicuna remote code execution via Avatar upload | 8.7CNA v4.0 | 0.9% | 2025-12-17 | Exploit code |
| CVE-2023-53923 | UliCMS privilege escalation via Unauthenticated Admin Account Creation | 9.3CNA v4.0 | 0.6% | 2025-12-17 | Exploit code |
| CVE-2023-53922 | TinyWebGallery remote code execution via unrestricted file upload | 9.3CNA v4.0 | 1.1% | 2025-12-17 | Exploit code |
| CVE-2023-53921 | SitemagicCMS remote code execution via unrestricted file upload | 8.7CNA v4.0 | 1.0% | 2025-12-17 | Exploit code |
| CVE-2023-53920 | PodcastGenerator stored cross-site scripting via Podcast Title field | 5.4v3.1 | 0.3% | 2025-12-17 | Exploit code |
| CVE-2023-53919 | PodcastGenerator stored cross-site scripting via Freebox Content field | 5.4v3.1 | 0.3% | 2025-12-17 | Exploit code |
| CVE-2023-53918 | PodcastGenerator stored cross-site scripting via Episode Title field | 6.1v3.1 | 0.3% | 2025-12-17 | Exploit code |
| CVE-2023-53917 | Affiliate Me SQL injection vulnerability via Admin Panel | 8.7CNA v4.0 | 0.4% | 2025-12-17 | Exploit code |
| CVE-2023-53916 | Zenphoto stored cross-site scripting via User Postal Code field | 4.6v3.1 | 0.3% | 2025-12-17 | Exploit codeFix |
| CVE-2023-53915 | Zenphoto stored cross-site scripting via Album Description | 4.6v3.1 | 0.3% | 2025-12-17 | Exploit codeFix |
| CVE-2023-53914 | UliCMS authentication bypass via mass assignment | 9.3CNA v4.0 | 0.7% | 2025-12-17 | Exploit code |
| CVE-2023-53913 | Rukovoditel CSV injection via User Account Export | 6.2CNA v4.0 | 0.7% | 2025-12-17 | Exploit code |
| CVE-2023-53912 | USB Flash Drives Control unquoted service path privilege escalation | 8.5CNA v4.0 | 0.1% | 2025-12-17 | Exploit code |
| CVE-2023-53911 | Textpattern CMS authenticated stored cross-site scripting via Article Excerpt | 5.4v3.1 | 0.3% | 2025-12-17 | Exploit code |
| CVE-2023-53910 | WBCE CMS stored cross-site scripting via Page Content | 5.4v3.1 | 0.3% | 2025-12-17 | Exploit code |
| CVE-2023-53909 | WBCE CMS SVG file content cross-site scripting | 5.4v3.1 | 0.3% | 2025-12-17 | Exploit code |
| CVE-2023-53908 | HiSecOS privilege escalation via User Role Modification | 8.7CNA v4.0 | 0.3% | 2025-12-17 | Exploit code |
| CVE-2023-53907 | Bludit Authenticated arbitrary file download via Backup Plugin | 7.1CNA v4.0 | 0.8% | 2025-12-17 | Exploit code |
| CVE-2023-53906 | ProjectSend r1605 stored cross-site scripting via Custom Assets page | 4.8v3.1 | 0.3% | 2025-12-17 | Exploit code |
| CVE-2023-53905 | ProjectSend r1605 CSV injection via User Account Export Functionality | 8.0v3.1 | 0.5% | 2025-12-17 | Exploit code |
| CVE-2023-53904 | XenForo Authenticated stored cross-site scripting via Smilie Categories | 5.1CNA v4.0 | 0.3% | 2025-12-17 | Exploit code |
| CVE-2023-53903 | WebsiteBaker stored cross-site scripting via SVG file upload | 5.1CNA v4.0 | 0.2% | 2025-12-16 | Exploit code |
| CVE-2023-53902 | WebsiteBaker directory traversal via Media Delete endpoint | 7.0CNA v4.0 | 1.0% | 2025-12-16 | Exploit code |
| CVE-2023-53901 | WBCE CMS cross-site scripting and open redirect | 6.1NVD v3.1 | 0.3% | 2025-12-16 | Exploit code |
| CVE-2023-53900 | Spip Admin Account spoofing via Malicious SVG upload | 6.1NVD v3.1 | 0.3% | 2025-12-16 | Exploit code |
| CVE-2023-53899 | PodcastGenerator blind server-side request forgery via XML injection | 9.8NVD v3.1 | 0.6% | 2025-12-16 | Exploit code |
| CVE-2023-53898 | Rukovoditel multiple stored cross-site scripting via Configuration | 5.4v3.1 | 0.2% | 2025-12-16 | Exploit code |
| CVE-2023-53897 | Rukovoditel multiple stored cross-site scripting via Comments | 5.4v3.1 | 0.2% | 2025-12-16 | Exploit code |
| CVE-2023-53896 | D-Link DAP-1325 Hardware A1 Unauthenticated Configuration Download | 8.7CNA v4.0 | 0.7% | 2025-12-16 | Exploit codeFix |
| CVE-2023-53895 | PimpMyLog improper access control via Account Creation endpoint | 9.3CNA v4.0 | 0.7% | 2025-12-16 | Exploit code |
| CVE-2023-53894 | phpfm authentication bypass via Type Juggling | 9.3CNA v4.0 | 0.6% | 2025-12-16 | Exploit code |
| CVE-2023-53893 | Ateme TITAN File authenticated server-side request forgery | 6.5v3.1 | 0.3% | 2025-12-15 | Exploit code |
| CVE-2023-53892 | Blackcat CMS remote code execution via Jquery Plugin Manager | 7.2v3.1 | 0.9% | 2025-12-15 | Exploit code |
| CVE-2023-53891 | Blackcat CMS stored cross-site scripting via Page Modification | 5.4v3.1 | 0.2% | 2025-12-15 | Exploit code |
| CVE-2023-53890 | Perch CMS stored cross-site scripting via SVG file upload | 5.4v3.1 | 0.2% | 2025-12-15 | Exploit code |
| CVE-2023-53889 | Perch CMS remote code execution via unrestricted file upload | 7.2v3.1 | 0.9% | 2025-12-15 | Exploit code |
| CVE-2023-53888 | Zomplog remote code execution via Authenticated File Manipulation | 8.8v3.1 | 1.0% | 2025-12-15 | Exploit code |
| CVE-2023-53887 | Zomplog cross-site scripting vulnerability via Page Creation | 5.4v3.1 | 0.2% | 2025-12-15 | Exploit code |
| CVE-2023-53886 | Xlight FTP Server stack buffer overflow vulnerability via Execute Program | 7.5v3.1 | 0.4% | 2025-12-15 | Exploit code |
| CVE-2023-53885 | Webutler remote code execution via arbitrary file upload | 7.2v3.1 | 0.9% | 2025-12-15 | Exploit code |
| CVE-2023-53884 | Webedition CMS stored cross-site scripting via SVG upload | 5.4v3.1 | 0.3% | 2025-12-15 | Exploit code |
| CVE-2023-53883 | Webedition CMS remote code execution via PHP Page Creation | 7.2v3.1 | 1.0% | 2025-12-15 | Exploit code |
| CVE-2023-53882 | JLex GuestBook reflected cross-site scripting via URL parameter | 5.1CNA v4.0 | 0.4% | 2025-12-15 | Exploit code |
| CVE-2023-53881 | Ruijie Reyee OS ReyeeOS man-in-the-middle remote code execution via CWMP | 8.1NVD v3.1 | 0.3% | 2025-12-15 | Exploit code |
| CVE-2023-53880 | Lucee Authenticated reflected cross-site scripting via Admin Interfaces | 4.8CNA v4.0 | 0.3% | 2025-12-15 | Exploit code |
| CVE-2023-53879 | NVClient stack buffer overflow vulnerability via User Configuration | 5.5v3.1 | 0.2% | 2025-12-15 | Exploit code |
| CVE-2023-53878 | Member Login Script Client-Side Request Desynchronization vulnerability | 6.9CNA v4.0 | 0.4% | 2025-12-15 | Exploit code |
| CVE-2023-53877 | Bus Reservation System multiple SQL injection via pickup_id parameter | 9.8v3.1 | 0.4% | 2025-12-15 | Exploit code |
| CVE-2023-53876 | Academy LMS arbitrary file upload vulnerability via Profile settings | 5.4v3.1 | 0.2% | 2025-12-15 | Exploit code |
| CVE-2023-53875 | GOM Player remote code execution via Insecure IE component | 8.8v3.1 | 0.4% | 2025-12-15 | Exploit code |
| CVE-2023-53874 | GOM Player buffer overflow via Equalizer Preset Name | 9.8v3.1 | 0.5% | 2025-12-15 | Exploit code |
| CVE-2023-53873 | SyncBreeze denial of service via Login Endpoint Overflow | 8.7CNA v4.0 | 0.5% | 2025-12-15 | Exploit code |
| CVE-2023-53872 | Wp2Fac OS command injection via send.php endpoint | 9.3CNA v4.0 | 1.1% | 2025-12-15 | Exploit code |
| CVE-2023-53871 | Soosyze unrestricted file upload via Broken Upload Logic | 9.8v3.1 | 0.6% | 2025-12-15 | Exploit code |
| CVE-2023-53870 | Jorani cross-site scripting vulnerability via Language parameter | 5.1CNA v4.0 | 0.4% | 2025-12-15 | Exploit code |
| CVE-2023-53869 | WEBIGniter unrestricted file upload remote code execution | 8.7CNA v4.0 | 0.5% | 2025-12-15 | Exploit code |
| CVE-2023-53868 | Coppermine Gallery remote code execution via plugin upload | 8.8v3.1 | 0.9% | 2025-12-15 | Exploit code |
| CVE-2023-38913 | anirbandutta9 News-Buzz SQL injection | 5.3CISA ADP v3.1 | 0.6% | 2025-12-15 | |
| CVE-2023-36338 | Inventory Management System SQL injection | 5.3CISA ADP v3.1 | 0.4% | 2025-12-15 | |
| CVE-2023-36337 | Inventory Management System component /index.php/cuzh4 of PHP reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-12-15 | |
| CVE-2023-29144 | Malwarebytes integer overflow | 3.3CISA ADP v3.1 | 0.2% | 2025-12-12 | Fix |
| CVE-2023-53776 | Screen SFT DAB authentication bypass via Session Management Weakness | 8.8v3.1 | 0.5% | 2025-12-10 | Exploit code |
| CVE-2023-53775 | Screen SFT DAB authentication bypass via Session Management Weakness | 6.5NVD v3.1 | 0.4% | 2025-12-10 | Exploit code |
| CVE-2023-53741 | Screen SFT DAB authentication bypass via IP Session Management | 8.1v3.1 | 0.7% | 2025-12-10 | Exploit code |
| CVE-2023-53740 | Screen SFT DAB authentication bypass via Admin Password Change | 9.8v3.1 | 0.9% | 2025-12-10 | Exploit code |
| CVE-2023-53866 | Linux kernel ASoC compress stream vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53865 | Linux kernel btrfs qgroups vulnerability | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53864 | Linux kernel mxsfb overlay plane driver null pointer dereference | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53863 | Linux kernel netlink FDB dump information disclosure | – | 0.3% | 2025-12-09 | Fix |
| CVE-2023-53862 | In the Linux kernel, the following vulnerability has been resolved: hfs: fix missing hfs_bnode_get() in __hfs_bnode_create Syzbot found a kernel BUG in hfs_bnode_put(): kernel BUG at fs/hfs/bnode.c:466! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 3634 Comm: kworker/u4:5 Not tainted | 7.8CNA v3.1 | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53861 | Linux kernel ext4 crash | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53860 | In the Linux kernel, the following vulnerability has been resolved: dm: don't attempt to queue IO under RCU protection dm looks up the table for IO based on the request type, with an assumption that if the request is marked REQ_NOWAIT, it's fine to attempt to submit that IO while under RCU read lo | 7.8CNA v3.1 | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53859 | Linux kernel s390 idle loop vulnerability | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53858 | Linux kernel samsung_tty memory leak | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53857 | Linux kernel BPF socket storage improper locking | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53856 | Linux kernel devicetree overlay changeset null pointer dereference | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53855 | Linux kernel Ocelot switch tagging protocol teardown vulnerability | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53854 | Linux kernel MT8186 audio clock driver use-after-free | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53853 | Linux kernel netlink dump handling race condition | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53852 | Linux kernel NVMe DH-CHAP secret store memory leak | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53851 | Linux kernel drm/msm/dp use-after-free | 8.4CNA v3.1 | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53850 | In the Linux kernel, the following vulnerability has been resolved: iavf: use internal state to free traffic IRQs If the system tries to close the netdev while iavf_reset_task() is running, __LINK_STATE_START will be cleared and netif_running() will return false in iavf_reinit_interrupt_scheme(). | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53849 | Linux kernel MSM display driver bind vulnerability | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53848 | Linux kernel RAID5 cache log deadlock | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53847 | Linux kernel alauda USB storage driver vulnerability | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53846 | Linux kernel f2fs node truncation use-after-free | 7.8CNA v3.1 | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53845 | Linux kernel NILFS2 metadata block handling denial of service | – | 0.3% | 2025-12-09 | Fix |
| CVE-2023-53844 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Don't leak a resource on swapout move error If moving the bo to system for swapout failed, we were leaking a resource. Fix. | 7.8CNA v3.1 | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53843 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject negative ifindex Recent changes in net-next (commit 759ab1edb56c ("net: store netdevs in an xarray")) refactored the handling of pre-assigned ifindexes and let syzbot surface a latent problem in ovs. ovs d | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53842 | Linux kernel WCD MBHC audio codec driver resource leak | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53841 | Linux kernel devlink port type warning vulnerability | – | 0.3% | 2025-12-09 | Fix |
| CVE-2023-53840 | Linux kernel xhci-dbc out-of-bounds access | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53839 | Linux kernel DCCP socket handling race condition | – | 0.3% | 2025-12-09 | Fix |
| CVE-2023-53838 | Linux kernel f2fs atomic write race condition | 7.8CNA v3.1 | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53837 | Linux kernel MSM display snapshot teardown vulnerability | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53836 | Linux kernel BPF sockmap use-after-free | 7.8CNA v3.1 | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53834 | Linux kernel INA2xx ADC driver null pointer dereference | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53833 | Linux kernel i915 CRTC atomic state handling null pointer dereference | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53832 | Linux kernel RAID10 driver null pointer dereference | – | 0.3% | 2025-12-09 | Fix |
| CVE-2023-53831 | In the Linux kernel, the following vulnerability has been resolved: net: read sk->sk_family once in sk_mc_loop() syzbot is playing with IPV6_ADDRFORM quite a lot these days, and managed to hit the WARN_ON_ONCE(1) in sk_mc_loop() We have many more similar issues to fix. WARNING: CPU: 1 PID: 1593 | – | 0.3% | 2025-12-09 | Fix |
| CVE-2023-53830 | Linux kernel think-lmi driver memory leak | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53829 | Linux kernel F2FS file system vulnerability | 7.8CNA v3.1 | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53828 | Linux kernel Bluetooth HCI advertising monitor use-after-free | 7.8CNA v3.1 | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53827 | Linux kernel Bluetooth L2CAP use-after-free | 8.8CNA v3.1 | 0.4% | 2025-12-09 | Fix |
| CVE-2023-53826 | Linux kernel UBI wear-leveling use-after-free | – | 0.3% | 2025-12-09 | Fix |
| CVE-2023-53825 | Linux kernel KCM socket layer improper error handling | – | 0.3% | 2025-12-09 | Fix |
| CVE-2023-53824 | Linux kernel netlink socket layer race condition | 7.8CNA v3.1 | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53823 | In the Linux kernel, the following vulnerability has been resolved: block/rq_qos: protect rq_qos apis with a new lock commit 50e34d78815e ("block: disable the elevator int del_gendisk") move rq_qos_exit() from disk_release() to del_gendisk(), this will introduce some problems: 1) If rq_qos_add() | 7.8CNA v3.1 | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53822 | Linux kernel ath11k Wi-Fi driver vulnerability | 8.8CNA v3.1 | 0.4% | 2025-12-09 | Fix |
| CVE-2023-53821 | Linux kernel IPv6 VTI driver use-after-free | – | 0.3% | 2025-12-09 | Fix |
| CVE-2023-53820 | Linux kernel loop device driver vulnerability | – | 0.3% | 2025-12-09 | Fix |
| CVE-2023-53819 | In the Linux kernel, the following vulnerability has been resolved: amdgpu: validate offset_in_bo of drm_amdgpu_gem_va This is motivated by OOB access in amdgpu_vm_update_range when offset_in_bo+map_size overflows. v2: keep the validations in amdgpu_vm_bo_map v3: add the validations to amdgpu_vm_ | 7.8CNA v3.1 | 0.1% | 2025-12-09 | Fix |
| CVE-2023-53818 | Linux kernel Zynq SLCR early init vulnerability | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53817 | Linux kernel MPI library null pointer dereference | 7.5CNA v3.1 | 0.5% | 2025-12-09 | Fix |
| CVE-2023-53816 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix potential kgd_mem UAFs kgd_mem pointers returned by kfd_process_device_translate_handle are only guaranteed to be valid while p->mutex is held. As soon as the mutex is unlocked, another thread can free the BO. | 7.8CNA v3.1 | 0.1% | 2025-12-09 | Fix |
| CVE-2023-53815 | Linux kernel posix-timers itimer deletion denial of service | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53814 | Linux kernel PCI root bus resource handling memory leak | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53813 | Linux kernel ext4 file system vulnerability | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53812 | Linux kernel vcodec crash | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53811 | Linux kernel irdma RDMA driver vulnerability | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53810 | Linux kernel blk-mq crypto keyslot handling use-after-free | 7.8CNA v3.1 | 0.1% | 2025-12-09 | Fix |
| CVE-2023-53809 | Linux kernel L2TP tunnel registration deadlock | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53808 | Linux kernel mwifiex Wi-Fi driver memory leak | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53807 | Linux kernel clocking-wizard clock driver vulnerability | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53806 | Linux kernel AMD display driver vulnerability | 7.8CNA v3.1 | 0.1% | 2025-12-09 | Fix |
| CVE-2023-53804 | Linux kernel NILFS2 file system use-after-free | 7.8CNA v3.1 | 0.1% | 2025-12-09 | Fix |
| CVE-2023-53803 | Linux kernel SCSI enclosure services driver vulnerability | 8.1CNA v3.1 | 0.3% | 2025-12-09 | Fix |
| CVE-2023-53802 | Linux kernel ath9k Wi-Fi driver memory leak | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53801 | Linux kernel iommu/sprd memory leak | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53800 | Linux kernel UBI flash driver use-after-free | 7.8CNA v3.1 | 0.1% | 2025-12-09 | Fix |
| CVE-2023-53799 | Linux kernel crypto API instance destruction vulnerability | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53798 | Linux kernel ethtool ioctl interface improper initialization | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53797 | Linux kernel Wacom HID driver vulnerability | 7.1CNA v3.1 | 0.3% | 2025-12-09 | Fix |
| CVE-2023-53796 | Linux kernel F2FS inline directory conversion information disclosure | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53795 | Linux kernel IOMMUFD driver race condition | 7.8CNA v3.1 | 0.1% | 2025-12-09 | Fix |
| CVE-2023-53794 | Linux kernel CIFS client use-after-free | 9.8CNA v3.1 | 0.5% | 2025-12-09 | Fix |
| CVE-2023-53793 | Linux kernel perf tool x86 support memory leak | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53792 | Linux kernel nvme-core memory leak | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53791 | In the Linux kernel, the following vulnerability has been resolved: md: fix warning for holder mismatch from export_rdev() Commit a1d767191096 ("md: use mddev->external to select holder in export_rdev()") fix the problem that 'claim_rdev' is used for blkdev_get_by_dev() while 'rdev' is used for bl | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53790 | Linux kernel BPF memory allocator denial of service | 7.8CNA v3.1 | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53789 | Linux kernel AMD IOMMU driver null pointer dereference | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53788 | Linux kernel hda/ca0132 buffer overflow | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53787 | Linux kernel da9063 regulator driver null pointer dereference | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53786 | Linux kernel null pointer dereference | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53785 | Linux kernel mt7921 Wi-Fi driver vulnerability | 8.8CNA v3.1 | 0.3% | 2025-12-09 | Fix |
| CVE-2023-53784 | Linux kernel dw_hdmi bridge driver null pointer dereference | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53783 | Linux kernel blk-iocost I/O cost controller vulnerability | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53782 | Linux kernel DCCP error handler vulnerability | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53781 | Linux kernel SMC socket layer use-after-free | 7.8CNA v3.1 | 0.1% | 2025-12-09 | Fix |
| CVE-2023-53780 | Linux kernel AMD display driver vulnerability | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53778 | Linux kernel qaic accelerator driver integer overflow | 7.8CNA v3.1 | 0.1% | 2025-12-09 | Fix |
| CVE-2023-53777 | Linux kernel EROFS filesystem vulnerability | – | 0.2% | 2025-12-09 | Fix |
| CVE-2023-53774 | MiniDVBLinux Simple VideoDiskRecorder Protocol remote code execution | 9.8v3.1 | 0.9% | 2025-12-09 | Exploit code |
| CVE-2023-53773 | MiniDVBLinux Unauthenticated Live Stream Disclosure via tv_action.sh | 5.3NVD v3.1 | 0.5% | 2025-12-09 | Exploit code |
| CVE-2023-53772 | MiniDVBLinux arbitrary file read vulnerability via About page | 7.5v3.1 | 1.0% | 2025-12-09 | Exploit code |
| CVE-2023-53771 | MiniDVBLinux Unauthenticated Root Password Change via System Setup | 9.8v3.1 | 1.0% | 2025-12-09 | Exploit code |
| CVE-2023-53770 | MiniDVBLinux Unauthenticated Configuration Download via Backup endpoint | 7.5v3.1 | 0.5% | 2025-12-09 | Exploit code |
| CVE-2023-53739 | Tinycontrol LAN Controller v3 LK3 Unauthenticated Configuration Backup Disclosure | 9.9CNA v4.0 | 0.6% | 2025-12-09 | Exploit codeFix |
| CVE-2023-23729 | Spectra WordPress Gutenberg Blocks plugin Contributor+ reCAPTCHA settings Change vulnerability | 5.4CNA v3.1 | 0.3% | 2025-12-09 | Fix |
| CVE-2023-22675 | WP Fast Cache WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-12-09 | |
| CVE-2023-53769 | Linux kernel virt/coco/sev-guest information disclosure | 9.3CNA v3.1 | 0.1% | 2025-12-08 | Fix |
| CVE-2023-53768 | Linux kernel regmap-irq subsystem vulnerability | 7.8CNA v3.1 | 0.1% | 2025-12-08 | Fix |
| CVE-2023-53767 | Linux kernel ath12k QMI driver memory leak | – | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53766 | Linux kernel JFS filesystem null pointer dereference | – | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53765 | Linux kernel dm-cache background tracker vulnerability | – | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53764 | Linux kernel ath12k Wi-Fi driver vulnerability | 8.8CNA v3.1 | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53763 | Linux kernel f2fs extent cache vulnerability | 7.8CNA v3.1 | 0.1% | 2025-12-08 | Fix |
| CVE-2023-53762 | Linux kernel Bluetooth hci_sync use-after-free | 8.8CNA v3.1 | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53761 | Linux kernel USB usbtmc driver vulnerability | – | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53760 | Linux kernel UFS mcq driver deadlock | – | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53759 | Linux kernel HID hidraw driver race condition | 7.8CNA v3.1 | 0.1% | 2025-12-08 | Fix |
| CVE-2023-53758 | Linux kernel Atmel QSPI driver vulnerability | – | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53757 | Linux kernel mvebu GICP irqchip driver vulnerability | – | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53756 | Linux kernel KVM VMX vulnerability | – | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53755 | Linux kernel ptdma driver null pointer dereference | – | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53754 | Linux kernel lpfc SCSI driver vulnerability | – | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53753 | Linux kernel AMD display driver vulnerability | 7.8CNA v3.1 | 0.1% | 2025-12-08 | Fix |
| CVE-2023-53752 | Linux kernel net crash | 7.8CNA v3.1 | 0.1% | 2025-12-08 | Fix |
| CVE-2023-53751 | Linux kernel CIFS client use-after-free | 9.8CNA v3.1 | 0.4% | 2025-12-08 | Fix |
| CVE-2023-53750 | Linux kernel Freescale pin controller driver vulnerability | – | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53748 | Linux kernel MediaTek video codec decoder vulnerability | 7.1CNA v3.1 | 0.1% | 2025-12-08 | Fix |
| CVE-2023-53747 | Linux kernel vc_screen driver use-after-free | 7.8CNA v3.1 | 0.1% | 2025-12-08 | Fix |
| CVE-2023-53746 | Linux kernel s390 vfio-ap device driver memory leak | – | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53745 | Linux kernel vector memory leak | – | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53744 | Linux kernel pm33xx resource leak | – | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53743 | Linux kernel PCI resource coalescing vulnerability | – | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53742 | Linux kernel KCSAN instrumented memory access vulnerability | – | 0.2% | 2025-12-08 | Fix |
| CVE-2023-53735 | WEBIGniter cross-site scripting (XSS) in User Creation Process | 5.3CNA v4.0 | 0.4% | 2025-12-04 | Exploit code |
| CVE-2023-53734 | dawa-pharma- SQL injection via Email parameter | 8.7CNA v4.0 | 0.5% | 2025-12-04 | Exploit code |
| CVE-2023-7330 | Ruijie Networks NBR Routers unauthenticated arbitrary file upload via fileupload.php | 9.3CNA v4.0 | 0.6% | 2025-11-24 | |
| CVE-2023-7328 | Screen Sft Dab 600/c unauthenticated information disclosure | 5.3v3.1 | 0.3% | 2025-11-14 | Exploit code |
| CVE-2023-7329 | Tinycontrol LAN Controller v3 (LK3) remote DoS | 8.7CNA v4.0 | 0.9% | 2025-11-12 | Exploit code |
| CVE-2023-7327 | Ozeki SMS Gateway Unauthenticated arbitrary file read | 8.7CNA v4.0 | 2.1% | 2025-11-12 | NucleiExploit code |
| CVE-2023-7326 | Epson Stylus SX510W Printer Remote Power Off DoS | 8.7CNA v4.0 | 0.6% | 2025-11-12 | Exploit code |
| CVE-2023-43000 | Apple Multiple products use-after-free | 8.8v3.1 | 3.9% | 2025-11-05 | KEVKCVFix |
| CVE-2023-53690 | Nagios Fusion LDAP/AD Integration stored XSS | 4.8NVD v3.1 | 0.8% | 2025-10-30 | Fix |
| CVE-2023-53689 | Nagios Fusion License Information reflected XSS | 4.8NVD v3.1 | 0.9% | 2025-10-30 | Fix |
| CVE-2023-53688 | Nagios XI XSS and CSRF via Hypermap Replay | 5.4NVD v3.1 | 0.3% | 2025-10-30 | Fix |
| CVE-2023-7325 | Mingyu Operations and Maintenance Audit and Risk Control System xmlrpc.sock SSRF | 9.3CNA v4.0 | 0.4% | 2025-10-30 | Fix |
| CVE-2023-7323 | Nagios Log Server XSS via Create User function | 5.4NVD v3.1 | 0.5% | 2025-10-30 | Fix |
| CVE-2023-7322 | Nagios Log Server incorrect authorization Granting Full API Access | 8.1NVD v3.1 | 1.1% | 2025-10-30 | Fix |
| CVE-2023-7321 | Nagios Log Server XSS via Snapshots page | 5.4NVD v3.1 | 0.5% | 2025-10-30 | Fix |
| CVE-2023-7319 | Nagios Network Analyzer XSS via Percentile Calculator menu | 5.4NVD v3.1 | 0.5% | 2025-10-30 | Fix |
| CVE-2023-7318 | Nagios XI XSS via Core Command Expansion | 5.4NVD v3.1 | 0.6% | 2025-10-30 | Fix |
| CVE-2023-7317 | Nagios XI Web SSH Terminal missing access control | 8.8NVD v3.1 | 1.7% | 2025-10-30 | Fix |
| CVE-2023-7316 | Nagios XI XSS via Graph Explorer | 5.4NVD v3.1 | 0.6% | 2025-10-30 | Fix |
| CVE-2023-7315 | Nagios XI XSS via Graph Explorer | 5.4NVD v3.1 | 0.5% | 2025-10-30 | Fix |
| CVE-2023-7314 | Nagios XI XSS via Bandwidth Report | 5.4NVD v3.1 | 0.5% | 2025-10-30 | Fix |
| CVE-2023-7313 | Nagios XI XSS via Bulk Modifications | 5.4NVD v3.1 | 0.5% | 2025-10-30 | Fix |
| CVE-2023-7312 | Nagios Fusion Email settings stored XSS via SMTP/sendmail | 4.8NVD v3.1 | 1.0% | 2025-10-30 | Fix |
| CVE-2023-32199 | Rancher user retains access to clusters despite Global Role removal | 4.3CNA v3.1 | 0.2% | 2025-10-29 | Fix |
| CVE-2023-7324 | Linux kernel SCSI enclosure services driver vulnerability | 8.1CNA v3.1 | 0.3% | 2025-10-29 | Fix |
| CVE-2023-7320 | WooCommerce WordPress plugin sensitive information exposure | 5.3CNA v3.1 | 0.3% | 2025-10-29 | Fix |
| CVE-2023-49440 | AhnLab EPP preview parameter SQL injection | 8.8CISA ADP v3.1 | 0.3% | 2025-10-27 | |
| CVE-2023-37749 | HubSpot REST API improper access control | 5.3CISA ADP v3.1 | 0.4% | 2025-10-27 | |
| CVE-2023-53733 | In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_u32: Undo tcf_bind_filter if u32_replace_hw_knode When u32_replace_hw_knode fails, we need to undo the tcf_bind_filter operation done at u32_set_parms. | 7.8CNA v3.1 | 0.2% | 2025-10-24 | Fix |
| CVE-2023-53732 | Linux kernel NTFS3 filesystem null pointer dereference | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53731 | Linux kernel netlink deadlock | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53730 | Linux kernel blk-iocost controller deadlock | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53729 | Linux kernel qmi_encdec out-of-bounds access | 7.8CNA v3.1 | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53728 | Linux kernel POSIX timer ID allocation race condition | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53727 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fq_pie: avoid stalls in fq_pie_timer() When setting a high number of flows (limit being 65536), fq_pie_timer() is currently using too much time as syzbot reported. Add logic to yield the cpu every 2048 flows (less than | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53726 | Linux kernel arm64 IP checksum code out-of-bounds read | 7.1CNA v3.1 | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53725 | Linux kernel Cadence TTC clocksource driver memory leak | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53724 | Linux kernel PCF50633 ADC driver memory leak | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53723 | Linux kernel amdgpu SDMA ECC interrupt handling vulnerability | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53722 | Linux kernel MD RAID1 driver vulnerability | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53721 | Linux kernel ath12k Wi-Fi driver null pointer dereference | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53720 | Linux kernel net/mlx5e memory leak | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53719 | Linux kernel arc_uart serial driver memory leak | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53718 | Linux kernel ftrace ring buffer vulnerability | 7.8CNA v3.1 | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53717 | Linux kernel ath9k Wi-Fi driver out-of-bounds write | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53716 | Linux kernel skb TX timestamp handling vulnerability | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53715 | Linux kernel brcmfmac Wi-Fi driver vulnerability | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53714 | Linux kernel STM LTDC display driver vulnerability | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53713 | Linux kernel SME streaming SVE context switching vulnerability | 7.8CNA v3.1 | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53712 | Linux kernel ARM kexec denial of service | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53711 | Linux kernel NFS client vulnerability | 8.2CNA v3.1 | 0.4% | 2025-10-22 | Fix |
| CVE-2023-53710 | Linux kernel mt7921 Wi-Fi driver null pointer dereference | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53709 | Linux kernel ftrace ring buffer race condition | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53708 | Linux kernel ACPI s2idle driver memory leak | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53707 | Linux kernel AMDGPU command submission integer overflow | 7.8CNA v3.1 | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53706 | Linux kernel devdax vmemmap driver denial of service | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53705 | Linux kernel IPv6 TLV parsing vulnerability | 8.2CNA v3.1 | 0.6% | 2025-10-22 | Fix |
| CVE-2023-53704 | Linux kernel i.MX8MP clock driver memory leak | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53703 | In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: Fix for shift-out-of-bounds Shift operation of 'exp' and 'shift' variables exceeds the maximum number of shift values in the u32 range leading to UBSAN shift-out-of-bounds. ... [ 6.120512] UBSAN: shift-out-of-bounds | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53702 | Linux kernel s390 ChaCha20 crypto driver denial of service | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53700 | Linux kernel max9286 media driver memory leak | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53699 | Linux kernel RISC-V memblock initialization vulnerability | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53698 | In the Linux kernel, the following vulnerability has been resolved: xsk: fix refcount underflow in error path Fix a refcount underflow problem reported by syzbot that can happen when a system is running out of memory. If xp_alloc_tx_descs() fails, and it can only fail due to not having enough memo | 7.8CNA v3.1 | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53697 | Linux kernel NVDIMM PMU driver memory leak | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53696 | Linux kernel qla2xxx driver memory leak | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53695 | Linux kernel UDF filesystem vulnerability | 7.8CNA v3.1 | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53694 | Linux kernel RISC-V ftrace vulnerability | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53693 | Linux kernel USB raw gadget driver memory leak | – | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53692 | Linux kernel ext4 filesystem use-after-free | 7.8CNA v3.1 | 0.2% | 2025-10-22 | Fix |
| CVE-2023-53691 | Hikvision CSMP iSecure Center path traversal | 8.3CNA v3.1 | 1.3% | 2025-10-22 | |
| CVE-2023-28815 | Hikvision iSecure Center command injection | 9.8CNA v3.1 | 1.4% | 2025-10-17 | |
| CVE-2023-28814 | Hikvision iSecure Center unrestricted file upload | 9.8CNA v3.1 | 0.5% | 2025-10-17 | |
| CVE-2023-7311 | BYTEVALUE Intelligent Flow Control Router command injection | 9.3CNA v4.0 | 1.9% | 2025-10-15 | |
| CVE-2023-7305 | SmartBI RMIServlet unrestricted file upload RCE | 9.2CNA v4.0 | 0.5% | 2025-10-15 | Fix |
| CVE-2023-7304 | Ruijie RG-UAC nmc_sync.php command injection | 9.3CNA v4.0 | 3.6% | 2025-10-15 | |
| CVE-2023-46718 | Fortinet FortiOS A stack-based buffer overflow | 6.3CNA v3.1 | 0.2% | 2025-10-14 | Fix |
| CVE-2023-37401 | IBM Aspera Faspex cross-origin resource sharing | 5.3CNA v3.1 | 0.2% | 2025-10-09 | Fix |
| CVE-2023-53687 | Linux kernel samsung_tty memory leak | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53686 | Linux kernel handshake netlink interface null pointer dereference | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53685 | Linux kernel TUN driver memory leak | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53684 | Linux kernel XFRM netlink interface vulnerability | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53683 | Linux kernel hfsplus kernel panic | 7.8CNA v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53682 | Linux kernel xgene hwmon driver memory leak | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53681 | Linux kernel bcache btree node allocation null pointer dereference | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53680 | Linux kernel NFSD compound operation decoding out-of-bounds write | 7.5CNA v3.1 | 0.3% | 2025-10-07 | Fix |
| CVE-2023-53679 | Linux kernel mt7601u Wi-Fi driver integer underflow | 8.3CNA v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53678 | Linux kernel i915 fbdev suspend handling null pointer dereference | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53677 | Linux kernel i915 graphics driver selftests memory leak | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53676 | Linux kernel iscsi buffer overflow | 8.8CNA v3.1 | 0.3% | 2025-10-07 | Fix |
| CVE-2023-53675 | Linux kernel SCSI enclosure services driver out-of-bounds read | 8.8CNA v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53674 | Linux kernel clk notifier registration memory leak | 7.8CNA v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53673 | Linux kernel Bluetooth HCI connection handling use-after-free | 8.8CNA v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53672 | Linux kernel Btrfs inline backref lookup denial of service | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53671 | Linux kernel SRCU subsystem denial of service | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53670 | Linux kernel NVMe core power management memory leak | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53669 | Linux kernel BIG TCP skb copy handling memory leak | 7.8CNA v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53668 | Linux kernel ring buffer trace_pipe reader out-of-bounds read | 7.1v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53667 | Linux kernel cdc_ncm null pointer dereference | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53666 | Linux kernel wcd938x audio codec vulnerability | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53665 | In the Linux kernel, the following vulnerability has been resolved: md: don't dereference mddev after export_rdev() Except for initial reference, mddev->kobject is referenced by rdev->kobject, and if the last rdev is freed, there is no guarantee that mddev is still valid. Hence mddev should not be | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53664 | Linux kernel OPP framework null pointer dereference | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53663 | Linux kernel nested SVM TSC scaling denial of service | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53662 | Linux kernel ext4 filename encryption memory leak | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53661 | Linux kernel bnxt NVRAM directory handling integer overflow | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53660 | Linux kernel BPF cpumap vulnerability | 7.8CNA v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53659 | Linux kernel iavf out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53658 | Linux kernel bcm-qspi SPI driver null pointer dereference | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53657 | Linux kernel ice null pointer dereference | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53656 | In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: Don't migrate perf to the CPU going to teardown The driver needs to migrate the perf context if the current using CPU going to teardown. By the time calling the cpuhp::teardown() callback the cpu_online_mask() | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53655 | Linux kernel RCU tick check kprobe handling uncontrolled recursion | 5.5v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53654 | Linux kernel octeontx2-af kernel panic | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53653 | Linux kernel amphion null pointer dereference | 5.5v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53652 | Linux kernel vDPA netlink interface out-of-bounds write | 7.8v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53651 | Linux kernel exc3000 touchscreen driver use-after-free | 7.8CNA v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53650 | Linux kernel omapfb lcd_mipid driver memory leak | 5.5v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53649 | Linux kernel perf trace evsel priv handling memory leak | 5.5v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53648 | Linux kernel AC97 codec mixer driver null pointer dereference | 5.5v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53647 | Linux kernel Hyper-V VMBus ACPI handling null pointer dereference | 5.5v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53646 | Linux kernel i915 performance OA counter table out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53645 | Linux kernel BPF non-owning reference tracking use-after-free | 7.8CNA v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53644 | Linux kernel radio-shark USB driver vulnerability | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53643 | Linux kernel nvme-tcp error recovery socket handling null pointer dereference | 7.8CNA v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53642 | Linux kernel x86 clear_user_rep_good exception handling vulnerability | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53641 | Linux kernel ath9k USB Wi-Fi driver memory leak | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53640 | Linux kernel lpass ASoC regcache use-after-free | 7.3CNA v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53639 | Linux kernel ath6kl Wi-Fi driver race condition | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53638 | Linux kernel octeon_ep use-after-free | 7.0CNA v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53637 | Linux kernel ov772x memory leak | 5.5v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53636 | Linux kernel Microchip clock driver auxiliary device release use-after-free | 7.8v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53635 | Linux kernel netfilter conntrack timeout accounting vulnerability | 8.2CNA v3.1 | 0.4% | 2025-10-07 | Fix |
| CVE-2023-53634 | Linux kernel BPF trampoline arm64 return path vulnerability | 5.5v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53633 | Linux kernel QAIC accelerator driver memory leak | 5.5v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53632 | Linux kernel mlx5e XDP feature switching vulnerability | 5.5v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53631 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-sysman: Fix reference leak If a duplicate attribute is found using kset_find_obj(), a reference to that attribute is returned. This means that we need to dispose it accordingly. Use kobject_put() to dispose the | 5.5v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53630 | Linux kernel IOMMUFD page unpinning vulnerability | 8.8CNA v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53629 | Linux kernel DLM midcomms use-after-free | 9.8CNA v3.1 | 0.5% | 2025-10-07 | Fix |
| CVE-2023-53628 | Linux kernel amdgpu GFX v11 ECC error IRQ handling vulnerability | 5.5v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53627 | Linux kernel hisi_sas device list traversal null pointer dereference | 7.8CNA v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53626 | Linux kernel ext4 directory rename double free | 7.8CNA v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53625 | Linux kernel i915 GVT vGPU debugfs null pointer dereference | 5.5v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53624 | Linux kernel sch_fq integer overflow | 5.5v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53623 | Linux kernel swap subsystem race condition | 4.7v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53622 | Linux kernel gfs2 race condition | 7.0v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53621 | Linux kernel memory cgroup eviction recency check null pointer dereference | 7.8v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53620 | Linux kernel md improper locking | 5.5v3.1 | 0.1% | 2025-10-07 | Fix |
| CVE-2023-53619 | Linux kernel netfilter conntrack helper use-after-free | 7.8CNA v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53618 | Linux kernel Btrfs relocation tree validation denial of service | 5.5v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-53617 | Linux kernel Aspeed socinfo driver memory leak | 5.5v3.1 | 0.2% | 2025-10-07 | Fix |
| CVE-2023-6215 | HP Sure Start IFD Protection BIOS Security Update | 7.2CNA v4.0 | 0.2% | 2025-10-07 | |
| CVE-2023-49886 | IBM Transformation Extender Advanced code execution | 9.8CNA v3.1 | 0.7% | 2025-10-06 | Fix |
| CVE-2023-53616 | Linux kernel JFS unmount double free | 7.8CNA v3.1 | 0.2% | 2025-10-04 | Fix |
| CVE-2023-53615 | Linux kernel qla2xxx session deletion race condition | 8.8CNA v3.1 | 0.2% | 2025-10-04 | Fix |
| CVE-2023-53614 | Linux kernel KSM VMA iteration race condition | 4.7v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53613 | Linux kernel device DAX mapping release use-after-free | 7.8v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53612 | Linux kernel coretemp hwmon driver null pointer dereference | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53611 | Linux kernel ipmi_si driver memory leak | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53610 | Linux kernel irqchip platform probe vulnerability | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53609 | Linux kernel SCSI command dispatch vulnerability | 7.8CNA v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53608 | Linux kernel nilfs2 segment constructor thread use-after-free | 7.8CNA v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53607 | Linux kernel ALSA ymfpci driver reachable assertion | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53606 | Linux kernel NFSD COPY operation vulnerability | 7.5CNA v3.1 | 0.3% | 2025-10-04 | Fix |
| CVE-2023-53605 | Linux kernel AMD display driver memory leak | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53604 | Linux kernel device-mapper integrity target vulnerability | 7.8v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53603 | Linux kernel qla2xxx null pointer dereference | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53602 | Linux kernel ath11k WMI firmware statistics memory leak | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53601 | Linux kernel bonding transmit hashing vulnerability | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53600 | Linux kernel IPv4 tunnel PMTU error handling out-of-bounds read | 9.1CNA v3.1 | 0.3% | 2025-10-04 | Fix |
| CVE-2023-53599 | Linux kernel AF_ALG crypto interface null pointer dereference | 7.8CNA v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53598 | Linux kernel mhi host kernel panic | 8.4CNA v3.1 | 0.2% | 2025-10-04 | Fix |
| CVE-2023-53597 | Linux kernel CIFS reconnection handling memory leak | 7.5CNA v3.1 | 0.3% | 2025-10-04 | Fix |
| CVE-2023-53596 | Linux kernel device unregistration vulnerability | 7.8v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53595 | Linux kernel octeontx2 MACsec offload null pointer dereference | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53594 | Linux kernel device registration memory leak | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53593 | Linux kernel CIFS fscache read vulnerability | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53592 | Linux kernel SiFive GPIO driver vulnerability | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53591 | Linux kernel mlx5e TC route query deadlock | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53590 | Linux kernel SCTP stream priorities denial of service | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53589 | Linux kernel iwlwifi MVM channel handling vulnerability | 8.8CNA v3.1 | 0.2% | 2025-10-04 | Fix |
| CVE-2023-53588 | Linux kernel mac80211 client probing vulnerability | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53587 | Linux kernel ring buffer IRQ work use-after-free | 7.8CNA v3.1 | 0.2% | 2025-10-04 | Fix |
| CVE-2023-53586 | Linux kernel SCSI target LUN reset handling double free | 8.8CNA v3.1 | 0.4% | 2025-10-04 | Fix |
| CVE-2023-53585 | Linux kernel BPF socket assignment vulnerability | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53584 | Linux kernel UBIFS page release reachable assertion | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53583 | Linux kernel RISC-V PMU driver vulnerability | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53582 | Linux kernel brcmfmac Wi-Fi driver out-of-bounds read | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53581 | Linux kernel mlx5e driver race condition | 4.7v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53580 | Linux kernel USB gadget core deadlock | 7.8CNA v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53579 | Linux kernel mvebu GPIO driver memory leak | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53578 | Linux kernel qrtr socket driver vulnerability | 7.8v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53577 | Linux kernel BPF cpumap memory leak | 7.8CNA v3.1 | 0.2% | 2025-10-04 | Fix |
| CVE-2023-53576 | Linux kernel null_blk driver null pointer dereference | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53575 | Linux kernel iwlwifi mvm driver out-of-bounds read | 7.1v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53574 | Linux kernel rtw88 Wi-Fi driver memory leak | 5.5NVD v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53573 | Linux kernel rs9 clock driver vulnerability | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53572 | Linux kernel i.MX SCU clock driver use-after-free | 7.0CNA v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53571 | Linux kernel i915 DRM driver vulnerability | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53570 | Linux kernel nl80211 MBSSID parsing integer overflow | 7.8CNA v3.1 | 0.2% | 2025-10-04 | Fix |
| CVE-2023-53569 | Linux kernel ext2 mount vulnerability | 7.8v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53568 | Linux kernel s390 zcrypt driver memory leak | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53567 | Linux kernel QUP SPI driver memory leak | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53566 | Linux kernel nftables rbtree set null pointer dereference | 7.8CNA v3.1 | 0.2% | 2025-10-04 | Fix |
| CVE-2023-53565 | Linux kernel brcmfmac Wi-Fi driver null pointer dereference | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53564 | Linux kernel OCFS2 defrag path reachable assertion | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53563 | Linux kernel amd-pstate cpufreq driver vulnerability | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53562 | Linux kernel msm DRM driver memory leak | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53561 | Linux kernel iosm WWAN driver null pointer dereference | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53560 | Linux kernel tracing histograms use-after-free | 7.8CNA v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53559 | Linux kernel VTI driver use-after-free | 7.8CNA v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53558 | Linux kernel RCU tasks improper locking | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53557 | Linux kernel fprobe rethook vulnerability | 7.8CNA v3.1 | 0.2% | 2025-10-04 | Fix |
| CVE-2023-53556 | Linux kernel iavf use-after-free | 7.8CNA v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53555 | Linux kernel DAMON access monitoring filters null pointer dereference | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53554 | Linux kernel KS7010 Wi-Fi driver out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2025-10-04 | Fix |
| CVE-2023-53553 | Linux kernel Hyper-V HID driver vulnerability | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53552 | Linux kernel i915 GuC virtual engines use-after-free | 7.8CNA v3.1 | 0.2% | 2025-10-04 | Fix |
| CVE-2023-53551 | Linux kernel USB gadget serial driver null pointer dereference | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53550 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: fix global sysfs attribute type In commit 3666062b87ec ("cpufreq: amd-pstate: move to use bus_get_dev_root()") the "amd_pstate" attributes where moved from a dedicated kobject to the cpu root kobject. While t | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53549 | Linux kernel netfilter ipset denial of service | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53548 | Linux kernel usbnet driver vulnerability | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53547 | Linux kernel AMDGPU SDMA firmware handling vulnerability | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53546 | Linux kernel net/mlx5 memory leak | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53545 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: unmap and remove csa_va properly Root PD BO should be reserved before unmap and remove a bo_va from VM otherwise lockdep will complain. v2: check fpriv->csa_va is not NULL instead of amdgpu_mcbp (christian) [14616.93 | 7.8CNA v3.1 | 0.2% | 2025-10-04 | Fix |
| CVE-2023-53544 | Linux kernel DaVinci cpufreq driver use-after-free | 7.8v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53543 | Linux kernel vDPA netlink interface out-of-bounds write | 7.8v3.1 | 0.2% | 2025-10-04 | Fix |
| CVE-2023-53542 | Linux kernel Exynos MIPI video PHY denial of service | 5.5v3.1 | 0.1% | 2025-10-04 | Fix |
| CVE-2023-53541 | Linux kernel brcmnand out-of-bounds access | 7.8v3.1 | 0.2% | 2025-10-04 | Fix |
| CVE-2023-53540 | Linux kernel cfg80211 wireless subsystem vulnerability | 7.1CNA v3.1 | 0.2% | 2025-10-04 | Fix |
| CVE-2023-53539 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix incomplete state save in rxe_requester If a send packet is dropped by the IP layer in rxe_requester() the call to rxe_xmit_packet() can fail with err == -EAGAIN. To recover, the state of the wqe is restored to the st | 7.8CNA v3.1 | 0.2% | 2025-10-04 | Fix |
| CVE-2023-53538 | Linux kernel Btrfs tree mod log null pointer dereference | 5.5NVD v3.1 | 0.2% | 2025-10-04 | Fix |