# Vulnerabilities published in 2023


- [CVE-2023-44417](https://insights.sbomify.com/CVE-2023-44417/): D-Link DAP-2622 DDP Set IPv4 Address Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-44416](https://insights.sbomify.com/CVE-2023-44416/): D-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-44415](https://insights.sbomify.com/CVE-2023-44415/): D-Link Multiple Routers cli Command Injection Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-44414](https://insights.sbomify.com/CVE-2023-44414/): D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-44413](https://insights.sbomify.com/CVE-2023-44413/): D-Link D-View shutdown_coreserver Missing Authentication Denial-of-Service Vulnerability (medium 5.9)
- [CVE-2023-44412](https://insights.sbomify.com/CVE-2023-44412/): D-Link D-View addDv7Probe XML External Entity Processing Information Disclosure Vulnerability (high 8.2)
- [CVE-2023-44411](https://insights.sbomify.com/CVE-2023-44411/): D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2023-44410](https://insights.sbomify.com/CVE-2023-44410/): D-Link D-View showUsers Improper Authorization Privilege Escalation Vulnerability (high 8.8)
- [CVE-2023-4441](https://insights.sbomify.com/CVE-2023-4441/): SourceCodester Free Hospital Management System for Small Practices appointment.php sql injection (medium 6.3)
- [CVE-2023-44409](https://insights.sbomify.com/CVE-2023-44409/): D-Link DAP-1325 SetSetupWizardStatus Enabled Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-44408](https://insights.sbomify.com/CVE-2023-44408/): D-Link DAP-1325 SetAPLanSettings IPAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-44407](https://insights.sbomify.com/CVE-2023-44407/): D-Link DAP-1325 SetAPLanSettings Gateway Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-44406](https://insights.sbomify.com/CVE-2023-44406/): D-Link DAP-1325 SetAPLanSettings DeviceName Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-44405](https://insights.sbomify.com/CVE-2023-44405/): D-Link DAP-1325 get_value_of_key Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-44404](https://insights.sbomify.com/CVE-2023-44404/): D-Link DAP-1325 get_value_from_app Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-44403](https://insights.sbomify.com/CVE-2023-44403/): D-Link DAP-1325 HNAP SetWLanRadioSettings Channel Command Injection Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-44402](https://insights.sbomify.com/CVE-2023-44402/): ASAR Integrity bypass via filetype confusion in electron (medium 6.1)
- [CVE-2023-44401](https://insights.sbomify.com/CVE-2023-44401/): Silverstripe GraqhQL's view permissions are bypassed for paginated lists of ORM data (medium 5.3)
- [CVE-2023-44400](https://insights.sbomify.com/CVE-2023-44400/): Uptime Kuma has Persistentent User Sessions (medium 6.7)
- [CVE-2023-4440](https://insights.sbomify.com/CVE-2023-4440/): SourceCodester Free Hospital Management System for Small Practices appointment.php sql injection (medium 6.3)
- [CVE-2023-44399](https://insights.sbomify.com/CVE-2023-44399/): ZITADEL's password reset does not respect the "Ignoring unknown usernames" setting (medium 5.3)
- [CVE-2023-44398](https://insights.sbomify.com/CVE-2023-44398/): Out-of-bounds write in exiv2 (high 8.8)
- [CVE-2023-44397](https://insights.sbomify.com/CVE-2023-44397/): CloudExplorer Lite permission bypass vulnerability (high 7.5)
- [CVE-2023-44396](https://insights.sbomify.com/CVE-2023-44396/): iTop vulnerable to XSS in dashlet modifications ajax endpoints (medium 6.8)
- [CVE-2023-44395](https://insights.sbomify.com/CVE-2023-44395/): Autolab has Path Traversal vulnerability in Assessment functionality (medium 4.9)
- [CVE-2023-44394](https://insights.sbomify.com/CVE-2023-44394/): Disclosure of project names to unauthorized users in MantisBT (medium 4.3)
- [CVE-2023-44393](https://insights.sbomify.com/CVE-2023-44393/): Piwigo Reflected XSS vulnerability (critical 9.3)
- [CVE-2023-44392](https://insights.sbomify.com/CVE-2023-44392/): Arbitrary code execution vulnerability when using shared Kubernetes cluster (high 8.3)
- [CVE-2023-44391](https://insights.sbomify.com/CVE-2023-44391/): Prevent unauthorized access to summary details in Discourse (medium 5.3)
- [CVE-2023-44390](https://insights.sbomify.com/CVE-2023-44390/): HtmlSanitizer vulnerable to Cross-site Scripting in Foreign Content (medium 6.1)
- [CVE-2023-4439](https://insights.sbomify.com/CVE-2023-4439/): SourceCodester Card Holder Management System Minus Value unknown vulnerability (medium 4.3)
- [CVE-2023-44389](https://insights.sbomify.com/CVE-2023-44389/): Zope management interface vulnerable to stored cross site scripting via the title property (low 3.1)
- [CVE-2023-44388](https://insights.sbomify.com/CVE-2023-44388/): Malicious requests can fill up the log files resulting in a deinal of service in Discourse (high 7.5)
- [CVE-2023-44387](https://insights.sbomify.com/CVE-2023-44387/): Gradle has incorrect permission assignment for symlinked files used in copy or archiving operations (low 3.2)
- [CVE-2023-44386](https://insights.sbomify.com/CVE-2023-44386/): Incorrect request error handling triggers server crash in Vapor (medium 5.3)
- [CVE-2023-44385](https://insights.sbomify.com/CVE-2023-44385/): Client-Side Request Forgery in Home Assistant iOS/macOS native Apps (high 8.6)
- [CVE-2023-44384](https://insights.sbomify.com/CVE-2023-44384/): Discourse-Jira could make SSRF attack by setting Jira URL to an arbitrary location (medium 4.1)
- [CVE-2023-44383](https://insights.sbomify.com/CVE-2023-44383/): October CMS stored XSS by authenticated backend user with improper configuration (medium 5.4)
- [CVE-2023-44382](https://insights.sbomify.com/CVE-2023-44382/): October CMS safe mode bypass using Twig sandbox escape (critical 9.1)
- [CVE-2023-44381](https://insights.sbomify.com/CVE-2023-44381/): October CMS safe mode bypass using Page template injection (medium 4.9)
- [CVE-2023-4438](https://insights.sbomify.com/CVE-2023-4438/): SourceCodester Inventory Management System search_sales_report.php sql injection (medium 6.3)
- [CVE-2023-44379](https://insights.sbomify.com/CVE-2023-44379/): baserCMS Cross-site Scripting vulnerability in Site search Feature (medium 6.1)
- [CVE-2023-44378](https://insights.sbomify.com/CVE-2023-44378/): gnark vulnerable to unsoundness in variable comparison/non-unique binary decomposition (high 7.1)
- [CVE-2023-44374](https://insights.sbomify.com/CVE-2023-44374/): Other in RUGGEDCOM RM1224 LTE(4G) EU (high 7.1)
- [CVE-2023-44373](https://insights.sbomify.com/CVE-2023-44373/): Code injection in RUGGEDCOM RM1224 LTE(4G) EU (critical 9.4)
- [CVE-2023-44372](https://insights.sbomify.com/CVE-2023-44372/): TALOS-2023-1842 - Adobe Acrobat Reader U3D page event use-after-free vulnerability (high 7.8)
- [CVE-2023-44371](https://insights.sbomify.com/CVE-2023-44371/): ZDI-CAN-21998: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-4437](https://insights.sbomify.com/CVE-2023-4437/): SourceCodester Inventory Management System search_sell_paymen_report.php sql injection (medium 6.3)
- [CVE-2023-44367](https://insights.sbomify.com/CVE-2023-44367/): ZDI-CAN-21929: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-44366](https://insights.sbomify.com/CVE-2023-44366/): ZDI-CAN-21928: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-44365](https://insights.sbomify.com/CVE-2023-44365/): ZDI-CAN-21931: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-44362](https://insights.sbomify.com/CVE-2023-44362/): ZDI-CAN-21791: Adobe Prelude MP4 File Uninitialized Variable Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-44361](https://insights.sbomify.com/CVE-2023-44361/): ZDI-CAN-22041: Adobe Acrobat Reader DC AcroForm Doc Object Use-After-Free Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-44360](https://insights.sbomify.com/CVE-2023-44360/): ZDI-CAN-21882: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-4436](https://insights.sbomify.com/CVE-2023-4436/): SourceCodester Inventory Management System edit_update.php sql injection (medium 6.3)
- [CVE-2023-44359](https://insights.sbomify.com/CVE-2023-44359/): ZDI-CAN-21936: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-44358](https://insights.sbomify.com/CVE-2023-44358/): ZDI-CAN-21971: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-44357](https://insights.sbomify.com/CVE-2023-44357/): ZDI-CAN-21930: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-44356](https://insights.sbomify.com/CVE-2023-44356/): ZDI-CAN-21956: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-44355](https://insights.sbomify.com/CVE-2023-44355/): ColdFusion | Improper Input Validation (CWE-20) (medium 4.3)
- [CVE-2023-44353](https://insights.sbomify.com/CVE-2023-44353/): ColdFusion WDDX Deserialization Gadgets (critical 9.8)
- [CVE-2023-44352](https://insights.sbomify.com/CVE-2023-44352/): Unauthenticate Reflected XSS on Adobe Coldfusion 2018 - 2021 - 2023 last version (medium 6.1)
- [CVE-2023-44351](https://insights.sbomify.com/CVE-2023-44351/): Adobe ColdFusion RCE Security Vulnerability (critical 9.8)
- [CVE-2023-44350](https://insights.sbomify.com/CVE-2023-44350/): ColdFusion | Deserialization of Untrusted Data (CWE-502) (critical 9.8)
- [CVE-2023-4435](https://insights.sbomify.com/CVE-2023-4435/): Improper Input Validation in hamza417/inure (high 7.7)
- [CVE-2023-44348](https://insights.sbomify.com/CVE-2023-44348/): Memory corruption in Acrobat Reader (medium 5.5)
- [CVE-2023-44347](https://insights.sbomify.com/CVE-2023-44347/): Adobe InDesign CC 2023 Memory Corruption Vulnerability IX. (medium 5.5)
- [CVE-2023-44346](https://insights.sbomify.com/CVE-2023-44346/): Adobe InDesign CC 2023 Memory Corruption Vulnerability VIII. (medium 5.5)
- [CVE-2023-44345](https://insights.sbomify.com/CVE-2023-44345/): Adobe InDesign CC 2023 Memory Corruption Vulnerability VII. (medium 5.5)
- [CVE-2023-44344](https://insights.sbomify.com/CVE-2023-44344/): Adobe InDesign CC 2023 Memory Corruption Vulnerability V. (medium 5.5)
- [CVE-2023-44343](https://insights.sbomify.com/CVE-2023-44343/): Adobe InDesign CC 2023 Memory Corruption Vulnerability III. (medium 5.5)
- [CVE-2023-44342](https://insights.sbomify.com/CVE-2023-44342/): Adobe InDesign CC 2023 Memory Corruption Vulnerability II. (medium 5.5)
- [CVE-2023-44341](https://insights.sbomify.com/CVE-2023-44341/): Adobe InDesign CC 2023 Memory Corruption Vulnerability I (medium 5.5)
- [CVE-2023-44340](https://insights.sbomify.com/CVE-2023-44340/): ZDI-CAN-21424: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-4434](https://insights.sbomify.com/CVE-2023-4434/): Missing Authorization in hamza417/inure (medium 5.1)
- [CVE-2023-44339](https://insights.sbomify.com/CVE-2023-44339/): ZDI-CAN-21422: Adobe Acrobat Reader DC AcroForm value Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-44338](https://insights.sbomify.com/CVE-2023-44338/): ZDI-CAN-21493: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-44337](https://insights.sbomify.com/CVE-2023-44337/): ZDI-CAN-21509: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-44336](https://insights.sbomify.com/CVE-2023-44336/): TALOS-2023-1794 - Adobe Acrobat Reader Thermometer use-after-free vulnerability (high 7.8)
- [CVE-2023-44335](https://insights.sbomify.com/CVE-2023-44335/): Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability I. (medium 5.5)
- [CVE-2023-44334](https://insights.sbomify.com/CVE-2023-44334/): Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability VI. (medium 5.5)
- [CVE-2023-44333](https://insights.sbomify.com/CVE-2023-44333/): Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability V. (medium 5.5)
- [CVE-2023-44332](https://insights.sbomify.com/CVE-2023-44332/): Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability II. (medium 5.5)
- [CVE-2023-44331](https://insights.sbomify.com/CVE-2023-44331/): Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability IV. (medium 5.5)
- [CVE-2023-44330](https://insights.sbomify.com/CVE-2023-44330/): Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability III. (high 7.8)
- [CVE-2023-4433](https://insights.sbomify.com/CVE-2023-4433/): Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit (high 8.3)
- [CVE-2023-44329](https://insights.sbomify.com/CVE-2023-44329/): ZDI-CAN-21798: Adobe Bridge MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-44328](https://insights.sbomify.com/CVE-2023-44328/): ZDI-CAN-21797: Adobe Bridge MP4 File Parsing Use-After-Free Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-44327](https://insights.sbomify.com/CVE-2023-44327/): ZDI-CAN-21793: Adobe Bridge MP4 File Uninitialized Variable Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-44326](https://insights.sbomify.com/CVE-2023-44326/): ZDI-CAN-21866: Adobe Dimension GLTF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-44325](https://insights.sbomify.com/CVE-2023-44325/): ZDI-CAN-21666: Adobe Animate FLA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-44324](https://insights.sbomify.com/CVE-2023-44324/): ZDI-CAN-21344: Adobe FrameMaker Publishing Server Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2023-44323](https://insights.sbomify.com/CVE-2023-44323/): PDF Jbig2 memory-corruption Vulnerability - MSFT T5 (medium 5.5)
- [CVE-2023-44322](https://insights.sbomify.com/CVE-2023-44322/): Other in RUGGEDCOM RM1224 LTE(4G) EU (low 3.7)
- [CVE-2023-44321](https://insights.sbomify.com/CVE-2023-44321/): Denial of service in RUGGEDCOM RM1224 LTE(4G) EU (medium 5.1)
- [CVE-2023-44320](https://insights.sbomify.com/CVE-2023-44320/): Other in RUGGEDCOM RM1224 LTE(4G) EU (medium 4.3)
- [CVE-2023-4432](https://insights.sbomify.com/CVE-2023-4432/): Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit (high 8.3)
- [CVE-2023-44319](https://insights.sbomify.com/CVE-2023-44319/): Weak cryptography in RUGGEDCOM RM1224 LTE(4G) EU (medium 6.9)
- [CVE-2023-44318](https://insights.sbomify.com/CVE-2023-44318/): Hardcoded credentials in RUGGEDCOM RM1224 LTE(4G) EU (medium 6.9)
- [CVE-2023-44317](https://insights.sbomify.com/CVE-2023-44317/): Other in RUGGEDCOM RM1224 LTE(4G) EU (high 8.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/217/