# Vulnerabilities published in 2023


- [CVE-2023-4421](https://insights.sbomify.com/CVE-2023-4421/): Weak cryptography in NSS (medium 6.5)
- [CVE-2023-44209](https://insights.sbomify.com/CVE-2023-44209/): Privilege escalation in Acronis Cyber Protect 17 (medium 5.6)
- [CVE-2023-44208](https://insights.sbomify.com/CVE-2023-44208/): Missing authorization in Acronis Cyber Protect Home Office (high 7.8)
- [CVE-2023-44207](https://insights.sbomify.com/CVE-2023-44207/): Cross-site scripting in Acronis Cyber Protect 15 (medium 6.7)
- [CVE-2023-44206](https://insights.sbomify.com/CVE-2023-44206/): Missing authorization in Acronis Cyber Protect 15 (high 7.1)
- [CVE-2023-44205](https://insights.sbomify.com/CVE-2023-44205/): Missing authorization in Acronis Cyber Protect 15 (low 3.5)
- [CVE-2023-44204](https://insights.sbomify.com/CVE-2023-44204/): Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE message (medium 6.5)
- [CVE-2023-44203](https://insights.sbomify.com/CVE-2023-44203/): Denial of service in Junos OS (medium 6.5)
- [CVE-2023-44201](https://insights.sbomify.com/CVE-2023-44201/): Information disclosure in Junos OS (medium 5.0)
- [CVE-2023-4420](https://insights.sbomify.com/CVE-2023-4420/): Weak cryptography in LMS5xx (critical 9.8)
- [CVE-2023-44199](https://insights.sbomify.com/CVE-2023-44199/): Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot (high 7.5)
- [CVE-2023-44198](https://insights.sbomify.com/CVE-2023-44198/): Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets (medium 5.8)
- [CVE-2023-44197](https://insights.sbomify.com/CVE-2023-44197/): Junos OS and Junos OS Evolved: An rpd crash may occur when BGP is processing newly learned routes (high 7.5)
- [CVE-2023-44196](https://insights.sbomify.com/CVE-2023-44196/): Junos OS Evolved: PTX10003 Series: Packets which are not destined to the router can reach the RE (medium 6.5)
- [CVE-2023-44195](https://insights.sbomify.com/CVE-2023-44195/): Junos OS Evolved: Packets which are not destined to the router can reach the RE (medium 5.4)
- [CVE-2023-44194](https://insights.sbomify.com/CVE-2023-44194/): Junos OS: An unauthenticated attacker with local access to the device can create a backdoor with root privileges (high 8.4)
- [CVE-2023-44193](https://insights.sbomify.com/CVE-2023-44193/): Denial of service in Junos OS (medium 5.5)
- [CVE-2023-44192](https://insights.sbomify.com/CVE-2023-44192/): Junos OS: QFX5000 Series: DMA memory leak is observed when specific DHCP packets are transmitted over pseudo-VTEP (high 7.5)
- [CVE-2023-44191](https://insights.sbomify.com/CVE-2023-44191/): Junos OS: QFX5000 Series and EX4000 Series: Denial of Service (DoS) on a large scale VLAN due to PFE hogging (high 7.5)
- [CVE-2023-44190](https://insights.sbomify.com/CVE-2023-44190/): Junos OS Evolved: PTX10001, PTX10004, PTX10008, PTX10016: MAC address validation bypass vulnerability (medium 6.1)
- [CVE-2023-4419](https://insights.sbomify.com/CVE-2023-4419/): Hardcoded credentials in LMS5xx (critical 9.8)
- [CVE-2023-44189](https://insights.sbomify.com/CVE-2023-44189/): Junos OS Evolved: PTX10003 Series: MAC address validation bypass vulnerability (medium 6.1)
- [CVE-2023-44188](https://insights.sbomify.com/CVE-2023-44188/): Junos OS: jkdsd crash due to multiple telemetry requests (medium 5.3)
- [CVE-2023-44187](https://insights.sbomify.com/CVE-2023-44187/): Junos OS Evolved: 'file copy' CLI command can disclose password to shell users (medium 5.9)
- [CVE-2023-44186](https://insights.sbomify.com/CVE-2023-44186/): Denial of service in Junos OS (high 7.5)
- [CVE-2023-44185](https://insights.sbomify.com/CVE-2023-44185/): Denial of service in Junos OS (high 7.5)
- [CVE-2023-44184](https://insights.sbomify.com/CVE-2023-44184/): Junos OS and Junos OS Evolved: High CPU load due to specific NETCONF command (medium 6.5)
- [CVE-2023-44183](https://insights.sbomify.com/CVE-2023-44183/): Denial of service in Junos OS (medium 6.5)
- [CVE-2023-44182](https://insights.sbomify.com/CVE-2023-44182/): Privilege escalation in Junos OS (high 7.3)
- [CVE-2023-44181](https://insights.sbomify.com/CVE-2023-44181/): Junos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environment (high 7.5)
- [CVE-2023-4418](https://insights.sbomify.com/CVE-2023-4418/): Denial of service in LMS5xx (high 7.5)
- [CVE-2023-44178](https://insights.sbomify.com/CVE-2023-44178/): Junos OS : Stack overflow vulnerability in CLI command processing (medium 5.5)
- [CVE-2023-44177](https://insights.sbomify.com/CVE-2023-44177/): Junos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processing (medium 5.5)
- [CVE-2023-44176](https://insights.sbomify.com/CVE-2023-44176/): Junos OS : Stack overflow vulnerability in CLI command processing (medium 5.5)
- [CVE-2023-44175](https://insights.sbomify.com/CVE-2023-44175/): Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash (medium 6.5)
- [CVE-2023-44174](https://insights.sbomify.com/CVE-2023-44174/): Online Movie Ticket Booking System v1.0 - Stored Cross-Site Scripting (XSS) (medium 6.4)
- [CVE-2023-44173](https://insights.sbomify.com/CVE-2023-44173/): Online Movie Ticket Booking System v1.0 - Reflected Cross-Site Scripting (XSS) (medium 5.4)
- [CVE-2023-44172](https://insights.sbomify.com/CVE-2023-44172/): Path traversal in seacms:seacms (critical 9.8)
- [CVE-2023-44171](https://insights.sbomify.com/CVE-2023-44171/): Path traversal in seacms:seacms (critical 9.8)
- [CVE-2023-44170](https://insights.sbomify.com/CVE-2023-44170/): Path traversal in seacms:seacms (critical 9.8)
- [CVE-2023-4417](https://insights.sbomify.com/CVE-2023-4417/): Missing authorization in Remote Desktop Manager (medium 6.5)
- [CVE-2023-44169](https://insights.sbomify.com/CVE-2023-44169/): Path traversal in seacms:seacms (critical 9.8)
- [CVE-2023-44166](https://insights.sbomify.com/CVE-2023-44166/): Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (critical 9.8)
- [CVE-2023-44164](https://insights.sbomify.com/CVE-2023-44164/): Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (critical 9.8)
- [CVE-2023-44163](https://insights.sbomify.com/CVE-2023-44163/): Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (critical 9.8)
- [CVE-2023-44161](https://insights.sbomify.com/CVE-2023-44161/): Cross-site request forgery in Acronis Cyber Protect 15 (low 3.1)
- [CVE-2023-44160](https://insights.sbomify.com/CVE-2023-44160/): Cross-site request forgery in Acronis Cyber Protect 15 (low 3.1)
- [CVE-2023-44159](https://insights.sbomify.com/CVE-2023-44159/): Information disclosure in Acronis Cyber Protect 15 (medium 5.5)
- [CVE-2023-44158](https://insights.sbomify.com/CVE-2023-44158/): Information disclosure in Acronis Cyber Protect 15 (low 3.5)
- [CVE-2023-44157](https://insights.sbomify.com/CVE-2023-44157/): Privilege escalation in Acronis Cyber Protect 15 (low 3.3)
- [CVE-2023-44156](https://insights.sbomify.com/CVE-2023-44156/): Information disclosure in Acronis Cyber Protect 15 (medium 5.7)
- [CVE-2023-44155](https://insights.sbomify.com/CVE-2023-44155/): Information disclosure in Acronis Cyber Protect 15 (medium 4.4)
- [CVE-2023-44154](https://insights.sbomify.com/CVE-2023-44154/): Missing authorization in Acronis Cyber Protect 15 (medium 4.6)
- [CVE-2023-44153](https://insights.sbomify.com/CVE-2023-44153/): Information disclosure in Acronis Cyber Protect 15 (low 2.2)
- [CVE-2023-44152](https://insights.sbomify.com/CVE-2023-44152/): Auth bypass in Acronis Cyber Protect 15 (medium 6.1)
- [CVE-2023-44151](https://insights.sbomify.com/CVE-2023-44151/): WordPress Pre-Publish Checklist plugin <= 1.1.1 - Broken Access Control vulnerability (medium 5.4)
- [CVE-2023-44150](https://insights.sbomify.com/CVE-2023-44150/): WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure (high 7.5)
- [CVE-2023-4415](https://insights.sbomify.com/CVE-2023-4415/): Ruijie RG-EW1200G login improper authentication (high 7.3)
- [CVE-2023-44149](https://insights.sbomify.com/CVE-2023-44149/): WordPress Brands for WooCommerce plugin <= 3.8.2.2 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2023-44148](https://insights.sbomify.com/CVE-2023-44148/): WordPress Astra Bulk Edit plugin <= 1.2.7 - Broken Access Control vulnerability (medium 5.4)
- [CVE-2023-44147](https://insights.sbomify.com/CVE-2023-44147/): WordPress Comment Blacklist Updater plugin <= 1.1.0 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2023-44146](https://insights.sbomify.com/CVE-2023-44146/): WordPress Checkfront Online Booking System Plugin <= 3.6 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-44145](https://insights.sbomify.com/CVE-2023-44145/): WordPress Anchor Episodes Index (Spotify for Podcasters) Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2023-44144](https://insights.sbomify.com/CVE-2023-44144/): Cross-site scripting in Payment gateway per Product for WooCommerce (high 7.1)
- [CVE-2023-44143](https://insights.sbomify.com/CVE-2023-44143/): WordPress Bamboo Columns Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2023-44142](https://insights.sbomify.com/CVE-2023-44142/): WordPress Inactive Logout plugin <= 3.2.2 - Broken Access Control vulnerability (medium 5.4)
- [CVE-2023-44141](https://insights.sbomify.com/CVE-2023-44141/): Code injection in Inkdrop (high 7.8)
- [CVE-2023-4414](https://insights.sbomify.com/CVE-2023-4414/): Byzoro Smart S85F Management Platform decodmail.php command injection (medium 6.3)
- [CVE-2023-44129](https://insights.sbomify.com/CVE-2023-44129/): Messaging - Gaining access to arbitrary content providers via QClipIntentReceiverActivity (low 3.6)
- [CVE-2023-44128](https://insights.sbomify.com/CVE-2023-44128/): LGInstallService - Deletion of arbitrary files with system privilege (medium 5.0)
- [CVE-2023-44127](https://insights.sbomify.com/CVE-2023-44127/): Call management - Implicit activity intents disclose contact details and phone numbers (low 3.6)
- [CVE-2023-44126](https://insights.sbomify.com/CVE-2023-44126/): Call management - Implicit intents disclose telephony data such as phone numbers, call states, contacts (low 3.6)
- [CVE-2023-44125](https://insights.sbomify.com/CVE-2023-44125/): Personalized service - Theft and (over-)write of arbitrary files with system privilege via PendingIntent hijacking (medium 6.1)
- [CVE-2023-44124](https://insights.sbomify.com/CVE-2023-44124/): Screen recording - Theft of arbitrary files with system privilege (medium 6.1)
- [CVE-2023-44123](https://insights.sbomify.com/CVE-2023-44123/): Bluetooth - Theft and (over-)write of arbitrary files with system privilege via PendingIntent hijacking (medium 6.1)
- [CVE-2023-44122](https://insights.sbomify.com/CVE-2023-44122/): LockScreenSettings - Theft arbitrary files with system privilege (medium 6.1)
- [CVE-2023-44121](https://insights.sbomify.com/CVE-2023-44121/): LG ThinQ Service - Intent redirection with system privilege/LaunchAnyWhere (medium 5.0)
- [CVE-2023-44120](https://insights.sbomify.com/CVE-2023-44120/): Privilege escalation in Spectrum Power 7 (high 7.8)
- [CVE-2023-4412](https://insights.sbomify.com/CVE-2023-4412/): TOTOLINK EX1200L setWanCfg os command injection (medium 6.3)
- [CVE-2023-44119](https://insights.sbomify.com/CVE-2023-44119/): Race condition in EMUI (high 7.5)
- [CVE-2023-44118](https://insights.sbomify.com/CVE-2023-44118/): Missing authorization in EMUI (critical 9.1)
- [CVE-2023-44117](https://insights.sbomify.com/CVE-2023-44117/): Security feature bypass in EMUI (high 7.5)
- [CVE-2023-44116](https://insights.sbomify.com/CVE-2023-44116/): Missing authorization in EMUI (critical 9.8)
- [CVE-2023-44115](https://insights.sbomify.com/CVE-2023-44115/): Missing authorization in EMUI (high 7.5)
- [CVE-2023-44114](https://insights.sbomify.com/CVE-2023-44114/): Memory corruption in EMUI (high 7.5)
- [CVE-2023-44113](https://insights.sbomify.com/CVE-2023-44113/): Missing authorization in EMUI (high 7.5)
- [CVE-2023-44112](https://insights.sbomify.com/CVE-2023-44112/): Memory corruption in EMUI (high 7.5)
- [CVE-2023-44111](https://insights.sbomify.com/CVE-2023-44111/): Auth bypass in EMUI (high 7.5)
- [CVE-2023-44110](https://insights.sbomify.com/CVE-2023-44110/): Memory corruption in EMUI (medium 4.3)
- [CVE-2023-4411](https://insights.sbomify.com/CVE-2023-4411/): TOTOLINK EX1200L setTracerouteCfg os command injection (medium 6.3)
- [CVE-2023-44109](https://insights.sbomify.com/CVE-2023-44109/): Other in EMUI (high 7.5)
- [CVE-2023-44108](https://insights.sbomify.com/CVE-2023-44108/): Memory corruption in EMUI (high 7.5)
- [CVE-2023-44107](https://insights.sbomify.com/CVE-2023-44107/): Other in HarmonyOS (critical 9.1)
- [CVE-2023-44106](https://insights.sbomify.com/CVE-2023-44106/): Privilege escalation in EMUI (critical 9.8)
- [CVE-2023-44105](https://insights.sbomify.com/CVE-2023-44105/): Missing authorization in EMUI (critical 9.8)
- [CVE-2023-44104](https://insights.sbomify.com/CVE-2023-44104/): Missing authorization in EMUI (high 7.5)
- [CVE-2023-44103](https://insights.sbomify.com/CVE-2023-44103/): Memory corruption in EMUI (high 7.5)
- [CVE-2023-44102](https://insights.sbomify.com/CVE-2023-44102/): Missing authorization in EMUI (medium 5.3)
- [CVE-2023-44101](https://insights.sbomify.com/CVE-2023-44101/): Missing authorization in HarmonyOS (high 7.5)
- [CVE-2023-44100](https://insights.sbomify.com/CVE-2023-44100/): Missing authorization in EMUI (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/219/