# Vulnerabilities published in 2023 - [CVE-2023-43000](https://insights.sbomify.com/CVE-2023-43000/): Apple Multiple products Use-After-Free (high 8.8, exploited in the wild) - [CVE-2023-4300](https://insights.sbomify.com/CVE-2023-4300/): Import XML and RSS Feeds < 2.1.4 - Admin+ Arbitrary File Upload (high 7.2) - [CVE-2023-4299](https://insights.sbomify.com/CVE-2023-4299/): Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication (critical 9.0) - [CVE-2023-42983](https://insights.sbomify.com/CVE-2023-42983/): Denial of service in macOS (medium 6.4) - [CVE-2023-42982](https://insights.sbomify.com/CVE-2023-42982/): Memory corruption in macOS (medium 6.4) - [CVE-2023-42981](https://insights.sbomify.com/CVE-2023-42981/): Memory corruption in macOS (medium 5.4) - [CVE-2023-4298](https://insights.sbomify.com/CVE-2023-4298/): 123.chat < 1.3.1 - Admin+ Stored XSS (medium 4.8) - [CVE-2023-42977](https://insights.sbomify.com/CVE-2023-42977/): Path traversal in iOS and iPadOS (high 7.8) - [CVE-2023-42974](https://insights.sbomify.com/CVE-2023-42974/): Race condition in iOS and iPadOS (high 7.0) - [CVE-2023-42973](https://insights.sbomify.com/CVE-2023-42973/): Missing authorization in iOS and iPadOS (medium 4.0) - [CVE-2023-42970](https://insights.sbomify.com/CVE-2023-42970/): Use after free in Safari (high 8.8) - [CVE-2023-4297](https://insights.sbomify.com/CVE-2023-4297/): Mmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory Listing (medium 4.3) - [CVE-2023-42969](https://insights.sbomify.com/CVE-2023-42969/): Security feature bypass in iOS and iPadOS (low 3.3) - [CVE-2023-42962](https://insights.sbomify.com/CVE-2023-42962/): Denial of service in iOS and iPadOS (high 7.5) - [CVE-2023-42961](https://insights.sbomify.com/CVE-2023-42961/): Path traversal in iOS and iPadOS (medium 6.3) - [CVE-2023-4296](https://insights.sbomify.com/CVE-2023-4296/): PTC Codebeamer Cross site scripting (high 8.8) - [CVE-2023-42959](https://insights.sbomify.com/CVE-2023-42959/): Race condition in macOS (high 7.0) - [CVE-2023-42958](https://insights.sbomify.com/CVE-2023-42958/): Privilege escalation in macOS (high 7.8) - [CVE-2023-42957](https://insights.sbomify.com/CVE-2023-42957/): Missing authorization in iOS and iPadOS (low 3.3) - [CVE-2023-42956](https://insights.sbomify.com/CVE-2023-42956/): Memory corruption in Safari (medium 6.5) - [CVE-2023-42955](https://insights.sbomify.com/CVE-2023-42955/): Information disclosure in FileMaker Server (medium 6.1) - [CVE-2023-42954](https://insights.sbomify.com/CVE-2023-42954/): Information disclosure in FileMaker Server (medium 6.5) - [CVE-2023-42953](https://insights.sbomify.com/CVE-2023-42953/): Misconfiguration in iOS and iPadOS (medium 5.5) - [CVE-2023-42952](https://insights.sbomify.com/CVE-2023-42952/): Privilege escalation in iOS and iPadOS (medium 4.4) - [CVE-2023-42951](https://insights.sbomify.com/CVE-2023-42951/): Other in iOS and iPadOS (medium 4.3) - [CVE-2023-42950](https://insights.sbomify.com/CVE-2023-42950/): Use after free in Safari (high 8.8) - [CVE-2023-4295](https://insights.sbomify.com/CVE-2023-4295/): Mali GPU Kernel Driver allows improper GPU memory processing operations (high 7.8) - [CVE-2023-42949](https://insights.sbomify.com/CVE-2023-42949/): Information disclosure in iOS and iPadOS (low 3.3) - [CVE-2023-42948](https://insights.sbomify.com/CVE-2023-42948/): Information disclosure in macOS (low 3.3) - [CVE-2023-42947](https://insights.sbomify.com/CVE-2023-42947/): Path traversal in iOS and iPadOS (high 8.6) - [CVE-2023-42946](https://insights.sbomify.com/CVE-2023-42946/): Information disclosure in iOS and iPadOS (high 7.5) - [CVE-2023-42945](https://insights.sbomify.com/CVE-2023-42945/): Privilege escalation in macOS (critical 9.1) - [CVE-2023-42943](https://insights.sbomify.com/CVE-2023-42943/): Information disclosure in macOS (medium 5.5) - [CVE-2023-42942](https://insights.sbomify.com/CVE-2023-42942/): Privilege escalation in iOS and iPadOS (high 7.8) - [CVE-2023-42941](https://insights.sbomify.com/CVE-2023-42941/): Denial of service in iOS and iPadOS (medium 4.8) - [CVE-2023-42940](https://insights.sbomify.com/CVE-2023-42940/): Information disclosure in macOS (medium 5.7) - [CVE-2023-4294](https://insights.sbomify.com/CVE-2023-4294/): URL Shortify < 1.7.6 - Unauthenticated Stored XSS via referer header (medium 6.1) - [CVE-2023-42939](https://insights.sbomify.com/CVE-2023-42939/): Business logic in iOS and iPadOS (low 3.3) - [CVE-2023-42938](https://insights.sbomify.com/CVE-2023-42938/): Privilege escalation in iTunes for Windows (high 7.8) - [CVE-2023-42937](https://insights.sbomify.com/CVE-2023-42937/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2023-42936](https://insights.sbomify.com/CVE-2023-42936/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2023-42935](https://insights.sbomify.com/CVE-2023-42935/): Auth bypass in macOS (medium 5.5) - [CVE-2023-42934](https://insights.sbomify.com/CVE-2023-42934/): Information disclosure in iOS and iPadOS (medium 4.2) - [CVE-2023-42933](https://insights.sbomify.com/CVE-2023-42933/): Privilege escalation in macOS (high 7.8) - [CVE-2023-42932](https://insights.sbomify.com/CVE-2023-42932/): Business logic in macOS (medium 5.5) - [CVE-2023-42931](https://insights.sbomify.com/CVE-2023-42931/): Privilege escalation in macOS (high 8.3) - [CVE-2023-42930](https://insights.sbomify.com/CVE-2023-42930/): Security feature bypass in macOS (medium 5.5) - [CVE-2023-4293](https://insights.sbomify.com/CVE-2023-4293/): Privilege escalation in Premium Packages – Sell Digital Products Securely (high 8.8) - [CVE-2023-42929](https://insights.sbomify.com/CVE-2023-42929/): Security feature bypass in macOS (medium 5.5) - [CVE-2023-42928](https://insights.sbomify.com/CVE-2023-42928/): Privilege escalation in iOS and iPadOS (high 8.4) - [CVE-2023-42926](https://insights.sbomify.com/CVE-2023-42926/): Memory corruption in macOS (high 7.8) - [CVE-2023-42925](https://insights.sbomify.com/CVE-2023-42925/): Information disclosure in iOS and iPadOS (low 3.3) - [CVE-2023-42924](https://insights.sbomify.com/CVE-2023-42924/): Business logic in macOS (medium 5.5) - [CVE-2023-42923](https://insights.sbomify.com/CVE-2023-42923/): Auth bypass in iOS and iPadOS (medium 5.3) - [CVE-2023-42922](https://insights.sbomify.com/CVE-2023-42922/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2023-42920](https://insights.sbomify.com/CVE-2023-42920/): Other in FileMaker Pro (high 7.8) - [CVE-2023-4292](https://insights.sbomify.com/CVE-2023-4292/): Frauscher FDS101 for FAdC/FAdCi SQL injection vulnerability (medium 5.3) - [CVE-2023-42919](https://insights.sbomify.com/CVE-2023-42919/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2023-42918](https://insights.sbomify.com/CVE-2023-42918/): Security feature bypass in macOS (high 8.6) - [CVE-2023-42917](https://insights.sbomify.com/CVE-2023-42917/): Apple Multiple Products WebKit Memory Corruption (high 8.8, exploited in the wild) - [CVE-2023-42916](https://insights.sbomify.com/CVE-2023-42916/): Apple Multiple Products WebKit Out-of-Bounds Read (medium 6.5, exploited in the wild) - [CVE-2023-42914](https://insights.sbomify.com/CVE-2023-42914/): Memory corruption in iOS and iPadOS (medium 6.3) - [CVE-2023-42913](https://insights.sbomify.com/CVE-2023-42913/): Privilege escalation in macOS (high 8.8) - [CVE-2023-42912](https://insights.sbomify.com/CVE-2023-42912/): Memory corruption in macOS (high 7.8) - [CVE-2023-42911](https://insights.sbomify.com/CVE-2023-42911/): Memory corruption in macOS (high 7.8) - [CVE-2023-42910](https://insights.sbomify.com/CVE-2023-42910/): Memory corruption in macOS (high 8.8) - [CVE-2023-4291](https://insights.sbomify.com/CVE-2023-4291/): Frauscher FDS101 for FAdC/FAdCi remote code execution vulnerability (critical 9.8) - [CVE-2023-42909](https://insights.sbomify.com/CVE-2023-42909/): Memory corruption in macOS (high 7.8) - [CVE-2023-42908](https://insights.sbomify.com/CVE-2023-42908/): Memory corruption in macOS (high 7.8) - [CVE-2023-42907](https://insights.sbomify.com/CVE-2023-42907/): Memory corruption in macOS (high 7.8) - [CVE-2023-42906](https://insights.sbomify.com/CVE-2023-42906/): Memory corruption in macOS (high 8.8) - [CVE-2023-42905](https://insights.sbomify.com/CVE-2023-42905/): Memory corruption in macOS (high 7.8) - [CVE-2023-42904](https://insights.sbomify.com/CVE-2023-42904/): Memory corruption in macOS (high 7.8) - [CVE-2023-42903](https://insights.sbomify.com/CVE-2023-42903/): Memory corruption in macOS (high 7.8) - [CVE-2023-42902](https://insights.sbomify.com/CVE-2023-42902/): Memory corruption in macOS (high 7.8) - [CVE-2023-42901](https://insights.sbomify.com/CVE-2023-42901/): Memory corruption in macOS (high 7.8) - [CVE-2023-42900](https://insights.sbomify.com/CVE-2023-42900/): Information disclosure in macOS (medium 5.5) - [CVE-2023-4290](https://insights.sbomify.com/CVE-2023-4290/): WP Matterport Shortcode < 2.1.7 - Reflected XSS (medium 6.1) - [CVE-2023-42899](https://insights.sbomify.com/CVE-2023-42899/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2023-42898](https://insights.sbomify.com/CVE-2023-42898/): Memory corruption in iOS and iPadOS (medium 5.5) - [CVE-2023-42897](https://insights.sbomify.com/CVE-2023-42897/): Information disclosure in iOS and iPadOS (medium 4.6) - [CVE-2023-42896](https://insights.sbomify.com/CVE-2023-42896/): Missing authorization in iOS and iPadOS (medium 5.5) - [CVE-2023-42894](https://insights.sbomify.com/CVE-2023-42894/): Information disclosure in macOS (medium 5.5) - [CVE-2023-42893](https://insights.sbomify.com/CVE-2023-42893/): Missing authorization in iOS and iPadOS (medium 5.5) - [CVE-2023-42892](https://insights.sbomify.com/CVE-2023-42892/): Use after free in macOS (high 7.8) - [CVE-2023-42891](https://insights.sbomify.com/CVE-2023-42891/): Auth bypass in macOS (medium 5.5) - [CVE-2023-42890](https://insights.sbomify.com/CVE-2023-42890/): Memory corruption in Safari (high 8.8) - [CVE-2023-4289](https://insights.sbomify.com/CVE-2023-4289/): WP Matterport Shortcode < 2.1.8 - Contributor+ Stored XSS via shortcode (medium 5.4) - [CVE-2023-42889](https://insights.sbomify.com/CVE-2023-42889/): Security feature bypass in macOS (medium 5.3) - [CVE-2023-42888](https://insights.sbomify.com/CVE-2023-42888/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2023-42887](https://insights.sbomify.com/CVE-2023-42887/): Security feature bypass in macOS (medium 6.3) - [CVE-2023-42886](https://insights.sbomify.com/CVE-2023-42886/): Memory corruption in macOS (high 7.8) - [CVE-2023-42884](https://insights.sbomify.com/CVE-2023-42884/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2023-42883](https://insights.sbomify.com/CVE-2023-42883/): Memory corruption in Safari (medium 5.5) - [CVE-2023-42882](https://insights.sbomify.com/CVE-2023-42882/): Memory corruption in macOS (high 7.8) - [CVE-2023-42881](https://insights.sbomify.com/CVE-2023-42881/): Memory corruption in macOS (high 7.8) - [CVE-2023-42878](https://insights.sbomify.com/CVE-2023-42878/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2023-42877](https://insights.sbomify.com/CVE-2023-42877/): Security feature bypass in macOS (high 7.7) - [CVE-2023-42876](https://insights.sbomify.com/CVE-2023-42876/): Memory corruption in macOS (high 7.1) - [CVE-2023-42875](https://insights.sbomify.com/CVE-2023-42875/): Memory corruption in Safari (high 7.3) --- From sbomify Insights: https://insights.sbomify.com/years/2023/page/227/