# Vulnerabilities published in 2023


- [CVE-2023-43787](https://insights.sbomify.com/CVE-2023-43787/): Libx11: integer overflow in xcreateimage() leading to a heap overflow (high 7.8)
- [CVE-2023-43786](https://insights.sbomify.com/CVE-2023-43786/): Libx11: stack exhaustion from infinite recursion in putsubimage() (medium 5.5)
- [CVE-2023-43785](https://insights.sbomify.com/CVE-2023-43785/): Libx11: out-of-bounds memory access in _xkbreadkeysyms() (medium 6.5)
- [CVE-2023-43784](https://insights.sbomify.com/CVE-2023-43784/): Information disclosure in plesk:onyx (high 7.5)
- [CVE-2023-43783](https://insights.sbomify.com/CVE-2023-43783/): Other in falktx:cadence (high 7.5)
- [CVE-2023-43782](https://insights.sbomify.com/CVE-2023-43782/): Other in falktx:cadence (medium 5.5)
- [CVE-2023-4378](https://insights.sbomify.com/CVE-2023-4378/): Insertion of Sensitive Information Into Sent Data in GitLab (medium 5.5)
- [CVE-2023-43777](https://insights.sbomify.com/CVE-2023-43777/): Insecure storage of password in easySoft (medium 5.9)
- [CVE-2023-43776](https://insights.sbomify.com/CVE-2023-43776/): Weak encoding vulnerability in easyE4 (medium 6.8)
- [CVE-2023-43775](https://insights.sbomify.com/CVE-2023-43775/): Security issue in SMP Gateway automation platform (medium 4.7)
- [CVE-2023-43771](https://insights.sbomify.com/CVE-2023-43771/): Denial of service in mikebrady:not quite ptp (medium 5.5)
- [CVE-2023-43770](https://insights.sbomify.com/CVE-2023-43770/): Roundcube Webmail Persistent Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild)
- [CVE-2023-43769](https://insights.sbomify.com/CVE-2023-43769/): Misconfiguration in couchbase:couchbase server (medium 6.3)
- [CVE-2023-43768](https://insights.sbomify.com/CVE-2023-43768/): Denial of service in couchbase:couchbase server (high 7.5)
- [CVE-2023-43767](https://insights.sbomify.com/CVE-2023-43767/): Denial of service in f-secure:atlant (high 7.5)
- [CVE-2023-43766](https://insights.sbomify.com/CVE-2023-43766/): Privilege escalation in f-secure:atlant (high 7.8)
- [CVE-2023-43765](https://insights.sbomify.com/CVE-2023-43765/): Denial of service in f-secure:atlant (high 7.5)
- [CVE-2023-43763](https://insights.sbomify.com/CVE-2023-43763/): Cross-site scripting in withsecure:f-secure policy manager (medium 6.1)
- [CVE-2023-43762](https://insights.sbomify.com/CVE-2023-43762/): Other in withsecure:f-secure policy manager (critical 9.8)
- [CVE-2023-43761](https://insights.sbomify.com/CVE-2023-43761/): Denial of service in f-secure:atlant (high 7.5)
- [CVE-2023-43760](https://insights.sbomify.com/CVE-2023-43760/): Denial of service in f-secure:atlant (high 7.5)
- [CVE-2023-4376](https://insights.sbomify.com/CVE-2023-4376/): Serial Codes Generator and Validator with WooCommerce Support < 2.4.15 - Admin+ Stored XSS (medium 4.8)
- [CVE-2023-43758](https://insights.sbomify.com/CVE-2023-43758/): Privilege escalation in Intel(R) processors (high 8.7)
- [CVE-2023-43757](https://insights.sbomify.com/CVE-2023-43757/): Weak cryptography in LAN-W300N/P (medium 6.5)
- [CVE-2023-43756](https://insights.sbomify.com/CVE-2023-43756/): Dsoftbus has an out-of-bounds read vulnerability (low 2.9)
- [CVE-2023-43755](https://insights.sbomify.com/CVE-2023-43755/): Zavio IP Camera Stack-Based Buffer Overflow (critical 9.8)
- [CVE-2023-43754](https://insights.sbomify.com/CVE-2023-43754/): Permalink previews displayed for posts in archived channels even if users are disallowed to view archived channels (medium 4.3)
- [CVE-2023-43753](https://insights.sbomify.com/CVE-2023-43753/): Information disclosure in Intel(R) Processors with Intel(R) SGX (medium 6.8)
- [CVE-2023-43752](https://insights.sbomify.com/CVE-2023-43752/): Command injection in WRC-X3000GS2-B (high 8.0)
- [CVE-2023-43751](https://insights.sbomify.com/CVE-2023-43751/): Privilege escalation in Intel(R) Graphics Windows DCH driver software (medium 6.7)
- [CVE-2023-43748](https://insights.sbomify.com/CVE-2023-43748/): Privilege escalation in Intel(R) GPA Framework software installers (high 7.8)
- [CVE-2023-43747](https://insights.sbomify.com/CVE-2023-43747/): Misconfiguration in Intel(R) Connectivity Performance Suite software installers (medium 5.4)
- [CVE-2023-43746](https://insights.sbomify.com/CVE-2023-43746/): BIG-IP Appliance mode external monitor vulnerability (high 8.7)
- [CVE-2023-43745](https://insights.sbomify.com/CVE-2023-43745/): Denial of service in Intel(R) CBI software (low 2.8)
- [CVE-2023-43744](https://insights.sbomify.com/CVE-2023-43744/): Command injection in zultys:mx-e firmware (high 7.2)
- [CVE-2023-43743](https://insights.sbomify.com/CVE-2023-43743/): SQL injection in zultys:mx-e firmware (high 8.8)
- [CVE-2023-43742](https://insights.sbomify.com/CVE-2023-43742/): Auth bypass in zultys:mx-e firmware (critical 9.8)
- [CVE-2023-43741](https://insights.sbomify.com/CVE-2023-43741/): Buildkite Elastic CI for AWS time-of-check-time-of-use race condition vulnerability (high 7.0)
- [CVE-2023-43740](https://insights.sbomify.com/CVE-2023-43740/): Online Book Store Project v1.0 - Insecure File Upload (high 8.8)
- [CVE-2023-4374](https://insights.sbomify.com/CVE-2023-4374/): WP Remote Users Sync <= 1.2.11 - Missing Authorization to Authenticated (Subscriber+) Log View (medium 4.3)
- [CVE-2023-43739](https://insights.sbomify.com/CVE-2023-43739/): Online Book Store Project v1.0 - Unauthenticated SQL Injection (SQLi) (critical 9.8)
- [CVE-2023-43735](https://insights.sbomify.com/CVE-2023-43735/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43734](https://insights.sbomify.com/CVE-2023-43734/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43733](https://insights.sbomify.com/CVE-2023-43733/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43732](https://insights.sbomify.com/CVE-2023-43732/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43731](https://insights.sbomify.com/CVE-2023-43731/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43730](https://insights.sbomify.com/CVE-2023-43730/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-4373](https://insights.sbomify.com/CVE-2023-4373/): Missing authorization in Remote Desktop Manager (critical 9.8)
- [CVE-2023-43729](https://insights.sbomify.com/CVE-2023-43729/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43728](https://insights.sbomify.com/CVE-2023-43728/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43727](https://insights.sbomify.com/CVE-2023-43727/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43726](https://insights.sbomify.com/CVE-2023-43726/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43725](https://insights.sbomify.com/CVE-2023-43725/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43724](https://insights.sbomify.com/CVE-2023-43724/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43723](https://insights.sbomify.com/CVE-2023-43723/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43722](https://insights.sbomify.com/CVE-2023-43722/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43721](https://insights.sbomify.com/CVE-2023-43721/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43720](https://insights.sbomify.com/CVE-2023-43720/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-4372](https://insights.sbomify.com/CVE-2023-4372/): LiteSpeed Cache <= 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-43719](https://insights.sbomify.com/CVE-2023-43719/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43718](https://insights.sbomify.com/CVE-2023-43718/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43717](https://insights.sbomify.com/CVE-2023-43717/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43716](https://insights.sbomify.com/CVE-2023-43716/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43715](https://insights.sbomify.com/CVE-2023-43715/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43714](https://insights.sbomify.com/CVE-2023-43714/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43713](https://insights.sbomify.com/CVE-2023-43713/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43712](https://insights.sbomify.com/CVE-2023-43712/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43711](https://insights.sbomify.com/CVE-2023-43711/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43710](https://insights.sbomify.com/CVE-2023-43710/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-4371](https://insights.sbomify.com/CVE-2023-4371/): phpRecDB index.php cross site scripting (low 3.5)
- [CVE-2023-43709](https://insights.sbomify.com/CVE-2023-43709/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43708](https://insights.sbomify.com/CVE-2023-43708/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43707](https://insights.sbomify.com/CVE-2023-43707/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43706](https://insights.sbomify.com/CVE-2023-43706/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43705](https://insights.sbomify.com/CVE-2023-43705/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43704](https://insights.sbomify.com/CVE-2023-43704/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43703](https://insights.sbomify.com/CVE-2023-43703/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43702](https://insights.sbomify.com/CVE-2023-43702/): Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) (medium 5.4)
- [CVE-2023-43701](https://insights.sbomify.com/CVE-2023-43701/): Apache Superset: Stored XSS on API endpoint (medium 4.3)
- [CVE-2023-43700](https://insights.sbomify.com/CVE-2023-43700/): Missing authorization in APU0200 (high 7.7)
- [CVE-2023-43699](https://insights.sbomify.com/CVE-2023-43699/): Auth bypass in APU0200 (high 7.5)
- [CVE-2023-43698](https://insights.sbomify.com/CVE-2023-43698/): Cross-site scripting in APU0200 (high 7.1)
- [CVE-2023-43697](https://insights.sbomify.com/CVE-2023-43697/): Other in APU0200 (medium 6.5)
- [CVE-2023-43696](https://insights.sbomify.com/CVE-2023-43696/): Missing authorization in APU0200 (high 8.2)
- [CVE-2023-43694](https://insights.sbomify.com/CVE-2023-43694/): An issue was discovered in Malwarebytes 4.6.14.326 and before and 5.1.5.116 and before (and Nebula 2020-10-21 and later). (medium 5.2)
- [CVE-2023-43692](https://insights.sbomify.com/CVE-2023-43692/): An issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 (and Nebula 2020-10-21 and later). (high 7.5)
- [CVE-2023-4369](https://insights.sbomify.com/CVE-2023-4369/): Security feature bypass in Chrome (high 8.8)
- [CVE-2023-43688](https://insights.sbomify.com/CVE-2023-43688/): An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). (high 7.5)
- [CVE-2023-43687](https://insights.sbomify.com/CVE-2023-43687/): An issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 (and Nebula 2020-10-21 and later). (medium 6.5)
- [CVE-2023-43686](https://insights.sbomify.com/CVE-2023-43686/): An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). (medium 6.2)
- [CVE-2023-43683](https://insights.sbomify.com/CVE-2023-43683/): An issue was discovered in Malwarebytes 4.6.14.326 and before 5.1.5.116 (and Nebula 2020-10-21 and later). (medium 6.5)
- [CVE-2023-4368](https://insights.sbomify.com/CVE-2023-4368/): Security feature bypass in Chrome (high 8.8)
- [CVE-2023-4367](https://insights.sbomify.com/CVE-2023-4367/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2023-43669](https://insights.sbomify.com/CVE-2023-43669/): Tungstenite allows remote attackers to cause a denial of service (high 7.5)
- [CVE-2023-43668](https://insights.sbomify.com/CVE-2023-43668/): Apache InLong: Jdbc Connection Security Bypass in InLong (critical 9.8)
- [CVE-2023-43667](https://insights.sbomify.com/CVE-2023-43667/): Apache InLong: Log Injection in Global functions (high 7.5)
- [CVE-2023-43666](https://insights.sbomify.com/CVE-2023-43666/): Apache InLong: General user Unauthorized access User Management (medium 6.5)
- [CVE-2023-43665](https://insights.sbomify.com/CVE-2023-43665/): Django Denial-of-service in django.utils.text.Truncator (high 7.5)
- [CVE-2023-43664](https://insights.sbomify.com/CVE-2023-43664/): Employee without any access rights can list all installed modules in Prestashop (medium 4.3)
- [CVE-2023-43663](https://insights.sbomify.com/CVE-2023-43663/): Improper Privilege Management in Prestashop (medium 6.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/222/