# Vulnerabilities published in 2023


- [CVE-2023-48411](https://insights.sbomify.com/CVE-2023-48411/): Memory corruption in Android (medium 5.5)
- [CVE-2023-48410](https://insights.sbomify.com/CVE-2023-48410/): Memory corruption in Android (high 7.5)
- [CVE-2023-4841](https://insights.sbomify.com/CVE-2023-4841/): Feeds for YouTube <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-48409](https://insights.sbomify.com/CVE-2023-48409/): Integer overflow in Android (high 7.8)
- [CVE-2023-48408](https://insights.sbomify.com/CVE-2023-48408/): Memory corruption in Android (medium 5.5)
- [CVE-2023-48407](https://insights.sbomify.com/CVE-2023-48407/): Business logic in Android (high 7.8)
- [CVE-2023-48406](https://insights.sbomify.com/CVE-2023-48406/): Privilege escalation in Android (medium 6.7)
- [CVE-2023-48405](https://insights.sbomify.com/CVE-2023-48405/): Privilege escalation in Android (medium 6.7)
- [CVE-2023-48404](https://insights.sbomify.com/CVE-2023-48404/): Memory corruption in Android (high 7.5)
- [CVE-2023-48403](https://insights.sbomify.com/CVE-2023-48403/): Memory corruption in Android (high 7.5)
- [CVE-2023-48402](https://insights.sbomify.com/CVE-2023-48402/): Missing authorization in Android (high 7.8)
- [CVE-2023-48401](https://insights.sbomify.com/CVE-2023-48401/): Memory corruption in Android (medium 5.5)
- [CVE-2023-4840](https://insights.sbomify.com/CVE-2023-4840/): MapPress Maps for WordPress <= 2.88.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-48399](https://insights.sbomify.com/CVE-2023-48399/): Memory corruption in Android (medium 5.5)
- [CVE-2023-48398](https://insights.sbomify.com/CVE-2023-48398/): Memory corruption in Android (high 7.5)
- [CVE-2023-48397](https://insights.sbomify.com/CVE-2023-48397/): Memory corruption in Android (medium 4.9)
- [CVE-2023-48396](https://insights.sbomify.com/CVE-2023-48396/): Apache SeaTunnel Web: Authentication bypass (critical 9.1)
- [CVE-2023-48395](https://insights.sbomify.com/CVE-2023-48395/): Kaifa Technology WebITR - SQL Injection (medium 6.5)
- [CVE-2023-48394](https://insights.sbomify.com/CVE-2023-48394/): Kaifa Technology WebITR - Arbitrary File Upload (high 8.8)
- [CVE-2023-48393](https://insights.sbomify.com/CVE-2023-48393/): Kaifa Technology WebITR - Error Message Leakage (medium 4.3)
- [CVE-2023-48392](https://insights.sbomify.com/CVE-2023-48392/): Kaifa Technology WebITR - Hard-coded Cryptographic Key (critical 9.8)
- [CVE-2023-48390](https://insights.sbomify.com/CVE-2023-48390/): Multisuns EasyLog web+ - Command Injection (critical 9.8)
- [CVE-2023-4839](https://insights.sbomify.com/CVE-2023-4839/): WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting (medium 4.4)
- [CVE-2023-48389](https://insights.sbomify.com/CVE-2023-48389/): Multisuns EasyLog web+ - Path Traversal (high 7.5)
- [CVE-2023-48388](https://insights.sbomify.com/CVE-2023-48388/): Multisuns EasyLog web+ - Use of Hard-coded Password (critical 9.8)
- [CVE-2023-48387](https://insights.sbomify.com/CVE-2023-48387/): TAIWAN-CA(TWCA) JCICSecurityTool - Improper Input Validation (high 8.8)
- [CVE-2023-48384](https://insights.sbomify.com/CVE-2023-48384/): ArmorX Global Technology Corporation ArmorX Spam - SQL Injectoin (critical 9.8)
- [CVE-2023-48383](https://insights.sbomify.com/CVE-2023-48383/): NetVision Information airPASS - Path Traversal (high 7.5)
- [CVE-2023-48382](https://insights.sbomify.com/CVE-2023-48382/): Softnext Mail SQR Expert - Local File Inclusion-2 (medium 6.5)
- [CVE-2023-48381](https://insights.sbomify.com/CVE-2023-48381/): Softnext Mail SQR Expert - Local File Inclusion-1 (medium 6.5)
- [CVE-2023-48380](https://insights.sbomify.com/CVE-2023-48380/): Softnext Mail SQR Expert - Command Injection (high 7.4)
- [CVE-2023-4838](https://insights.sbomify.com/CVE-2023-4838/): Cross-site scripting in Simple Download Counter (medium 6.4)
- [CVE-2023-48379](https://insights.sbomify.com/CVE-2023-48379/): Softnext Mail SQR Expert - Blind Server-Side Request Forgey (SSRF) (medium 5.3)
- [CVE-2023-48378](https://insights.sbomify.com/CVE-2023-48378/): Softnext Mail SQR Expert - Path Traversal (high 7.5)
- [CVE-2023-48376](https://insights.sbomify.com/CVE-2023-48376/): SmartStar Software CWS Web-Base - Arbitrary File Upload (critical 9.8)
- [CVE-2023-48375](https://insights.sbomify.com/CVE-2023-48375/): SmartStar Software CWS Web-Base - Broken Access Control (high 8.8)
- [CVE-2023-48374](https://insights.sbomify.com/CVE-2023-48374/): SmartStar Software CWS Web-Base - Use of Hard-coded Credentials (medium 6.5)
- [CVE-2023-48373](https://insights.sbomify.com/CVE-2023-48373/): ITPison OMICARD EDM 's SMS - Path Traversal (high 7.5)
- [CVE-2023-48372](https://insights.sbomify.com/CVE-2023-48372/): ITPison OMICARD EDM 's SMS - SQL Injection (critical 9.8)
- [CVE-2023-48371](https://insights.sbomify.com/CVE-2023-48371/): ITPison OMICARD EDM 's SMS - Arbitrary File Upload (critical 9.8)
- [CVE-2023-4837](https://insights.sbomify.com/CVE-2023-4837/): Cross-site request forgery (CSRF) in SmodBIP (high 8.8)
- [CVE-2023-48369](https://insights.sbomify.com/CVE-2023-48369/): Log Flooding due to specially crafted requests in different endpoints (medium 4.3)
- [CVE-2023-48368](https://insights.sbomify.com/CVE-2023-48368/): Memory corruption in Intel(R) Media SDK software (medium 5.9)
- [CVE-2023-48366](https://insights.sbomify.com/CVE-2023-48366/): Race condition in Intel(R) System Security Report and System Resources Defense firmware (medium 5.6)
- [CVE-2023-48365](https://insights.sbomify.com/CVE-2023-48365/): Qlik Sense HTTP Tunneling (critical 9.6, exploited in the wild)
- [CVE-2023-48364](https://insights.sbomify.com/CVE-2023-48364/): Null dereference in OpenPCS 7 V9.1 (high 7.1)
- [CVE-2023-48363](https://insights.sbomify.com/CVE-2023-48363/): Null dereference in OpenPCS 7 V9.1 (high 7.1)
- [CVE-2023-48362](https://insights.sbomify.com/CVE-2023-48362/): Apache Drill: XXE Vulnerability in XML Format Reader (critical 9.8)
- [CVE-2023-48361](https://insights.sbomify.com/CVE-2023-48361/): Information disclosure in Intel(R) CSME (medium 4.6)
- [CVE-2023-48360](https://insights.sbomify.com/CVE-2023-48360/): multimedia player has a UAF vulnerability (medium 4.0)
- [CVE-2023-4836](https://insights.sbomify.com/CVE-2023-4836/): WordPress File Sharing Plugin < 2.0.5 - Subscriber+ Sensitive Data and Files Exposure via IDOR (medium 4.3)
- [CVE-2023-48359](https://insights.sbomify.com/CVE-2023-48359/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2023-48358](https://insights.sbomify.com/CVE-2023-48358/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2023-48357](https://insights.sbomify.com/CVE-2023-48357/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2023-48356](https://insights.sbomify.com/CVE-2023-48356/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2023-48355](https://insights.sbomify.com/CVE-2023-48355/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2023-48354](https://insights.sbomify.com/CVE-2023-48354/): Information disclosure in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-48353](https://insights.sbomify.com/CVE-2023-48353/): Use after free in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2023-48352](https://insights.sbomify.com/CVE-2023-48352/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-48351](https://insights.sbomify.com/CVE-2023-48351/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-48350](https://insights.sbomify.com/CVE-2023-48350/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-4835](https://insights.sbomify.com/CVE-2023-4835/): SQLi in CF's Oil Management Software (critical 9.8)
- [CVE-2023-48349](https://insights.sbomify.com/CVE-2023-48349/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-48348](https://insights.sbomify.com/CVE-2023-48348/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-48347](https://insights.sbomify.com/CVE-2023-48347/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-48346](https://insights.sbomify.com/CVE-2023-48346/): Denial of service in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-48345](https://insights.sbomify.com/CVE-2023-48345/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-48344](https://insights.sbomify.com/CVE-2023-48344/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-48343](https://insights.sbomify.com/CVE-2023-48343/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-48342](https://insights.sbomify.com/CVE-2023-48342/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2023-48341](https://insights.sbomify.com/CVE-2023-48341/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-48340](https://insights.sbomify.com/CVE-2023-48340/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-4834](https://insights.sbomify.com/CVE-2023-4834/): Missing authorization in mbCONNECT24 (medium 4.3)
- [CVE-2023-48339](https://insights.sbomify.com/CVE-2023-48339/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2023-48336](https://insights.sbomify.com/CVE-2023-48336/): WordPress Easy Social Icons Plugin <= 3.2.4 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2023-48335](https://insights.sbomify.com/CVE-2023-48335/): WordPress Hide login page plugin <= 1.1.9 - Secret Login Page Location Disclosure on Multisites vulnerability (low 3.7)
- [CVE-2023-48334](https://insights.sbomify.com/CVE-2023-48334/): WordPress League Table Plugin <= 1.13 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-48333](https://insights.sbomify.com/CVE-2023-48333/): WordPress Booster for WooCommerce Plugin <= 7.1.1 is vulnerable to Sensitive Data Exposure (medium 6.5)
- [CVE-2023-48332](https://insights.sbomify.com/CVE-2023-48332/): WordPress Mail Bank – #1 Mail SMTP Plugin for WordPress plugin <= 4.0.14 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2023-48331](https://insights.sbomify.com/CVE-2023-48331/): WordPress MyBookTable Bookstore Plugin <= 3.3.4 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-48330](https://insights.sbomify.com/CVE-2023-48330/): WordPress Bulk Comment Remove Plugin <= 2 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-4833](https://insights.sbomify.com/CVE-2023-4833/): SQLi in Besttem's Network Marketing Software (critical 9.8)
- [CVE-2023-48329](https://insights.sbomify.com/CVE-2023-48329/): WordPress Fast Custom Social Share by CodeBard Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-48328](https://insights.sbomify.com/CVE-2023-48328/): WordPress NextGEN Gallery Plugin <= 3.37 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-48327](https://insights.sbomify.com/CVE-2023-48327/): WordPress WC Vendors Marketplace Plugin <= 2.4.7 is vulnerable to SQL Injection (high 7.6)
- [CVE-2023-48326](https://insights.sbomify.com/CVE-2023-48326/): WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-48325](https://insights.sbomify.com/CVE-2023-48325/): WordPress Landing Page Builder Plugin <= 1.5.1.5 is vulnerable to Open Redirection (medium 4.7)
- [CVE-2023-48324](https://insights.sbomify.com/CVE-2023-48324/): WordPress Awesome Support HelpDesk plugin <= 6.1.4 - Broken Access control vulnerability (medium 5.4)
- [CVE-2023-48323](https://insights.sbomify.com/CVE-2023-48323/): WordPress Awesome Support Plugin <= 6.1.4 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-48322](https://insights.sbomify.com/CVE-2023-48322/): WordPress eDoc Employee Job Application Plugin <= 1.13 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-48321](https://insights.sbomify.com/CVE-2023-48321/): WordPress Accelerated Mobile Pages Plugin <= 1.0.88.1 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2023-48320](https://insights.sbomify.com/CVE-2023-48320/): WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-4832](https://insights.sbomify.com/CVE-2023-4832/): SQLi in Aceka Holdings Company Management (critical 9.8)
- [CVE-2023-48319](https://insights.sbomify.com/CVE-2023-48319/): WordPress Salon booking system plugin < 8.7 - Editor+ Privilege Escalation vulnerability (medium 6.8)
- [CVE-2023-48318](https://insights.sbomify.com/CVE-2023-48318/): WordPress Contact Form Email plugin <= 1.3.41 - Captcha Bypass vulnerability (medium 5.3)
- [CVE-2023-48317](https://insights.sbomify.com/CVE-2023-48317/): WordPress Display Custom Post Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2023-48316](https://insights.sbomify.com/CVE-2023-48316/): Azure RTOS NetX Duo Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-48315](https://insights.sbomify.com/CVE-2023-48315/): Azure RTOS NetX Duo Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-48314](https://insights.sbomify.com/CVE-2023-48314/): Unescaped passing of the request URL in Collabora Online (high 7.1)
- [CVE-2023-48313](https://insights.sbomify.com/CVE-2023-48313/): Umbraco contains a DOM-XSS (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/190/