CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- dompdf URI validation failure on SVG parsing in Dompdf 10.0 Critical
- eta-dev eta Cross-site (XSS) vulnerability with Express API in Eta 8.6 High
- parseplatform parse server, parse-community parse-server +1 more Parse Server is vulnerable to authentication bypass via spoofing 8.7 High
- aveva application server SiteFusion Application Server Extension getextension.php path traversal 3.5 Low
- apache portable runtime (apr), portable runtime +1 more Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function 9.8 Critical
-
KernelLinux ipv6: raw: Deduct extension header length in rawv6_push_pending_frames No score -
KernelLinux netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. No score -
KernelLinux nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() No score - apache portable runtime utility, apache software foundation portable runtime utility (apr-util) +1 more Apache Portable Runtime Utility (APR-util): out-of-bounds writes in the apr_base64 family of functions 6.5 Medium
-
KernelLinux regulator: da9211: Use irq handler when ready No score -
KernelLinux usb: xhci: Check endpoint is valid before dereferencing it No score -
KernelLinux f2fs: let's avoid panic if extent_tree is not created No score -
KernelLinux gsmi: fix null-deref in gsmi_get_variable No score -
KernelLinux nilfs2: fix general protection fault in nilfs_btree_insert() No score -
KernelLinux usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() No score -
KernelLinux drm/virtio: Fix GEM handle creation UAF No score -
KernelLinux ipv6: raw: Deduct extension header length in rawv6_push_pending_frames No score -
KernelLinux netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. No score -
KernelLinux nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() No score -
KernelLinux regulator: da9211: Use irq handler when ready No score -
KernelLinux efi: fix NULL-deref in init error path No score -
KernelLinux f2fs: let's avoid panic if extent_tree is not created No score -
KernelLinux usb: xhci: Check endpoint is valid before dereferencing it No score -
KernelLinux Add exception protection processing for vd in axi_chan_handle_err function No score -
KernelLinux nilfs2: fix general protection fault in nilfs_btree_insert() No score -
KernelLinux gsmi: fix null-deref in gsmi_get_variable No score -
KernelLinux xhci: Fix null pointer dereference when host dies No score -
KernelLinux usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() No score -
KernelLinux drm/virtio: Fix GEM handle creation UAF No score -
KernelLinux ixgbe: fix pci device refcount leak No score -
KernelLinux ipv6: raw: Deduct extension header length in rawv6_push_pending_frames No score -
KernelLinux mm: Always release pages to the buddy allocator in memblock_free_late(). No score -
KernelLinux netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. No score -
KernelLinux powerpc/imc-pmu: Fix use of mutex in IRQs disabled section No score - apache portable runtime (apr), portable runtime +1 more Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions 9.8 Critical
-
KernelLinux nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() No score -
KernelLinux net/sched: act_mpls: Fix warning during failed attribute validation No score -
KernelLinux regulator: da9211: Use irq handler when ready No score -
KernelLinux efi: fix NULL-deref in init error path No score -
KernelLinux f2fs: let's avoid panic if extent_tree is not created No score -
KernelLinux Add exception protection processing for vd in axi_chan_handle_err function No score -
KernelLinux nilfs2: fix general protection fault in nilfs_btree_insert() No score -
KernelLinux usb: xhci: Check endpoint is valid before dereferencing it No score -
KernelLinux misc: fastrpc: Don't remove map on creater_process and device_release No score -
KernelLinux misc: fastrpc: Fix use-after-free race condition for maps No score -
KernelLinux xhci: Fix null pointer dereference when host dies No score -
KernelLinux btrfs: fix race between quota rescan and disable leading to NULL pointer deref No score -
KernelLinux USB: gadgetfs: Fix race between mounting and unmounting No score -
KernelLinux gsmi: fix null-deref in gsmi_get_variable No score -
KernelLinux usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() No score - Show olderLoading…