# Vulnerabilities published in 2023


- [CVE-2023-42670](https://insights.sbomify.com/CVE-2023-42670/): Samba: ad dc busy rpc multiple listener dos (medium 6.5)
- [CVE-2023-42669](https://insights.sbomify.com/CVE-2023-42669/): Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc (medium 6.5)
- [CVE-2023-42668](https://insights.sbomify.com/CVE-2023-42668/): Misconfiguration in onboard video driver software for Intel(R) Server Boards based on Intel(R) 62X Chipset (medium 6.7)
- [CVE-2023-42667](https://insights.sbomify.com/CVE-2023-42667/): Privilege escalation in Intel(R) Core(TM) Ultra Processor stream cache mechanism (high 7.3)
- [CVE-2023-42666](https://insights.sbomify.com/CVE-2023-42666/): Exposure of Sensitive Information to an Unauthorized Actor in DEXMA DEXGate (medium 5.3)
- [CVE-2023-42664](https://insights.sbomify.com/CVE-2023-42664/): Command injection in ER7206 Omada Gigabit VPN Router (high 7.2)
- [CVE-2023-42663](https://insights.sbomify.com/CVE-2023-42663/): Apache Airflow: Bypass permission verification to view task instances of other dags (medium 6.5)
- [CVE-2023-42662](https://insights.sbomify.com/CVE-2023-42662/): JFrog Artifactory Improper SSO Mechanism may lead to Exposure of Access Tokens (critical 9.3)
- [CVE-2023-42661](https://insights.sbomify.com/CVE-2023-42661/): JFrog Artifactory Improper input validation leads to arbitrary file write (high 7.2)
- [CVE-2023-42660](https://insights.sbomify.com/CVE-2023-42660/): MOVEit Transfer Machine Interface SQL Injection (high 8.8)
- [CVE-2023-42659](https://insights.sbomify.com/CVE-2023-42659/): WS_FTP Server Arbitrary File Upload (critical 9.1)
- [CVE-2023-42658](https://insights.sbomify.com/CVE-2023-42658/): InSpec Archive Command Vulnerable to Maliciously Crafted Profile (high 8.8)
- [CVE-2023-42657](https://insights.sbomify.com/CVE-2023-42657/): WS_FTP Server Directory Traversal (critical 9.9)
- [CVE-2023-42656](https://insights.sbomify.com/CVE-2023-42656/): MOVEit Transfer Reflected XSS (medium 6.1)
- [CVE-2023-42655](https://insights.sbomify.com/CVE-2023-42655/): Missing authorization in T760/T770/T820/S8000 (medium 6.7)
- [CVE-2023-42654](https://insights.sbomify.com/CVE-2023-42654/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42653](https://insights.sbomify.com/CVE-2023-42653/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42652](https://insights.sbomify.com/CVE-2023-42652/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42651](https://insights.sbomify.com/CVE-2023-42651/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42650](https://insights.sbomify.com/CVE-2023-42650/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-4265](https://insights.sbomify.com/CVE-2023-4265/): Buffer overflow in Zephyr USB (medium 6.4)
- [CVE-2023-42649](https://insights.sbomify.com/CVE-2023-42649/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42648](https://insights.sbomify.com/CVE-2023-42648/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42647](https://insights.sbomify.com/CVE-2023-42647/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42646](https://insights.sbomify.com/CVE-2023-42646/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42645](https://insights.sbomify.com/CVE-2023-42645/): Missing authorization in T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42644](https://insights.sbomify.com/CVE-2023-42644/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42643](https://insights.sbomify.com/CVE-2023-42643/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42642](https://insights.sbomify.com/CVE-2023-42642/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42641](https://insights.sbomify.com/CVE-2023-42641/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42640](https://insights.sbomify.com/CVE-2023-42640/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-4264](https://insights.sbomify.com/CVE-2023-4264/): Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem (high 7.1)
- [CVE-2023-42639](https://insights.sbomify.com/CVE-2023-42639/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42638](https://insights.sbomify.com/CVE-2023-42638/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42637](https://insights.sbomify.com/CVE-2023-42637/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42636](https://insights.sbomify.com/CVE-2023-42636/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42635](https://insights.sbomify.com/CVE-2023-42635/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42634](https://insights.sbomify.com/CVE-2023-42634/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42633](https://insights.sbomify.com/CVE-2023-42633/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42632](https://insights.sbomify.com/CVE-2023-42632/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-42631](https://insights.sbomify.com/CVE-2023-42631/): Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-4263](https://insights.sbomify.com/CVE-2023-4263/): Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver (high 7.6)
- [CVE-2023-42629](https://insights.sbomify.com/CVE-2023-42629/): Liferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page (critical 9.0)
- [CVE-2023-42628](https://insights.sbomify.com/CVE-2023-42628/): Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget (critical 9.0)
- [CVE-2023-42627](https://insights.sbomify.com/CVE-2023-42627/): Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module (critical 9.6)
- [CVE-2023-4260](https://insights.sbomify.com/CVE-2023-4260/): Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem (medium 6.3)
- [CVE-2023-4259](https://insights.sbomify.com/CVE-2023-4259/): Potential buffer overflow vulnerabilities in the Zephyr eS-WiFi driver (high 7.1)
- [CVE-2023-42581](https://insights.sbomify.com/CVE-2023-42581/): Security feature bypass in Galaxy Store (high 7.5)
- [CVE-2023-42580](https://insights.sbomify.com/CVE-2023-42580/): Security feature bypass in Galaxy Store (high 7.5)
- [CVE-2023-4258](https://insights.sbomify.com/CVE-2023-4258/): bt: mesh: vulnerability in provisioning protocol implementation on provisionee side (high 8.6)
- [CVE-2023-42579](https://insights.sbomify.com/CVE-2023-42579/): Information disclosure in Samsung Keyboard (medium 6.5)
- [CVE-2023-42578](https://insights.sbomify.com/CVE-2023-42578/): Missing authorization in Samsung Data Store (medium 6.5)
- [CVE-2023-42577](https://insights.sbomify.com/CVE-2023-42577/): Missing authorization in Samsung Voice Recorder (medium 6.8)
- [CVE-2023-42576](https://insights.sbomify.com/CVE-2023-42576/): Auth bypass in Samsung Pass (medium 5.4)
- [CVE-2023-42575](https://insights.sbomify.com/CVE-2023-42575/): Auth bypass in Samsung Pass (medium 5.4)
- [CVE-2023-42574](https://insights.sbomify.com/CVE-2023-42574/): Missing authorization in GameHomeCN (medium 5.1)
- [CVE-2023-42573](https://insights.sbomify.com/CVE-2023-42573/): Other in Search Widget (medium 4.7)
- [CVE-2023-42572](https://insights.sbomify.com/CVE-2023-42572/): Information disclosure in Samsung Account Web SDK (low 3.3)
- [CVE-2023-42571](https://insights.sbomify.com/CVE-2023-42571/): Auth bypass in Find My Mobile (high 7.6)
- [CVE-2023-42570](https://insights.sbomify.com/CVE-2023-42570/): Missing authorization in Samsung Mobile Devices (medium 5.9)
- [CVE-2023-4257](https://insights.sbomify.com/CVE-2023-4257/): Unchecked user input length in the Zephyr WiFi shell module (high 7.6)
- [CVE-2023-42569](https://insights.sbomify.com/CVE-2023-42569/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2023-42568](https://insights.sbomify.com/CVE-2023-42568/): Missing authorization in Samsung Mobile Devices (high 7.3)
- [CVE-2023-42567](https://insights.sbomify.com/CVE-2023-42567/): Memory corruption in Samsung Mobile Devices (high 7.3)
- [CVE-2023-42566](https://insights.sbomify.com/CVE-2023-42566/): Memory corruption in Samsung Mobile Devices (high 7.3)
- [CVE-2023-42565](https://insights.sbomify.com/CVE-2023-42565/): Other in Samsung Mobile Devices (high 7.3)
- [CVE-2023-42564](https://insights.sbomify.com/CVE-2023-42564/): Missing authorization in Samsung Mobile Devices (medium 6.6)
- [CVE-2023-42563](https://insights.sbomify.com/CVE-2023-42563/): Integer overflow in Samsung Mobile Devices (medium 6.7)
- [CVE-2023-42562](https://insights.sbomify.com/CVE-2023-42562/): Integer overflow in Samsung Mobile Devices (medium 6.7)
- [CVE-2023-42561](https://insights.sbomify.com/CVE-2023-42561/): Memory corruption in Samsung Mobile Devices (high 7.1)
- [CVE-2023-42560](https://insights.sbomify.com/CVE-2023-42560/): Memory corruption in Samsung Mobile Devices (high 7.4)
- [CVE-2023-4256](https://insights.sbomify.com/CVE-2023-4256/): Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c (medium 5.5)
- [CVE-2023-42559](https://insights.sbomify.com/CVE-2023-42559/): Security feature bypass in Samsung Mobile Devices (medium 4.9)
- [CVE-2023-42558](https://insights.sbomify.com/CVE-2023-42558/): Memory corruption in Samsung Mobile Devices (medium 6.0)
- [CVE-2023-42557](https://insights.sbomify.com/CVE-2023-42557/): Memory corruption in Samsung Mobile Devices (medium 5.6)
- [CVE-2023-42556](https://insights.sbomify.com/CVE-2023-42556/): Information disclosure in Samsung Mobile Devices (low 3.3)
- [CVE-2023-42555](https://insights.sbomify.com/CVE-2023-42555/): Information disclosure in EasySetup (medium 6.3)
- [CVE-2023-42554](https://insights.sbomify.com/CVE-2023-42554/): Auth bypass in Samsung Pass (medium 5.4)
- [CVE-2023-42553](https://insights.sbomify.com/CVE-2023-42553/): Missing authorization in Samsung Email (medium 4.0)
- [CVE-2023-42552](https://insights.sbomify.com/CVE-2023-42552/): Other in Firewall (medium 4.4)
- [CVE-2023-42551](https://insights.sbomify.com/CVE-2023-42551/): Information disclosure in Samsung Account (medium 5.5)
- [CVE-2023-42550](https://insights.sbomify.com/CVE-2023-42550/): Information disclosure in Samsung Account (medium 5.5)
- [CVE-2023-4255](https://insights.sbomify.com/CVE-2023-4255/): W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223) (medium 5.5)
- [CVE-2023-42549](https://insights.sbomify.com/CVE-2023-42549/): Information disclosure in Samsung Account (medium 5.5)
- [CVE-2023-42548](https://insights.sbomify.com/CVE-2023-42548/): Information disclosure in Samsung Account (medium 5.5)
- [CVE-2023-42547](https://insights.sbomify.com/CVE-2023-42547/): Information disclosure in Samsung Account (medium 5.5)
- [CVE-2023-42546](https://insights.sbomify.com/CVE-2023-42546/): Information disclosure in Samsung Account (medium 5.5)
- [CVE-2023-42545](https://insights.sbomify.com/CVE-2023-42545/): Information disclosure in Phone (medium 5.5)
- [CVE-2023-42544](https://insights.sbomify.com/CVE-2023-42544/): Missing authorization in Quick Share (medium 5.5)
- [CVE-2023-42543](https://insights.sbomify.com/CVE-2023-42543/): Missing authorization in Bixby Voice (medium 6.2)
- [CVE-2023-42542](https://insights.sbomify.com/CVE-2023-42542/): Missing authorization in Samsung Push Service (low 3.3)
- [CVE-2023-42541](https://insights.sbomify.com/CVE-2023-42541/): Missing authorization in Samsung Push Service (medium 4.0)
- [CVE-2023-42540](https://insights.sbomify.com/CVE-2023-42540/): Missing authorization in Samsung Account (medium 4.0)
- [CVE-2023-4254](https://insights.sbomify.com/CVE-2023-4254/): Chatbot < 4.7.8 - Admin+ Stored XSS in Language Settings (medium 4.8)
- [CVE-2023-42539](https://insights.sbomify.com/CVE-2023-42539/): Information disclosure in Samsung Health (medium 4.7)
- [CVE-2023-42538](https://insights.sbomify.com/CVE-2023-42538/): Memory corruption in Samsung Mobile Devices (medium 5.9)
- [CVE-2023-42537](https://insights.sbomify.com/CVE-2023-42537/): Memory corruption in Samsung Mobile Devices (high 8.4)
- [CVE-2023-42536](https://insights.sbomify.com/CVE-2023-42536/): Memory corruption in Samsung Mobile Devices (high 8.4)
- [CVE-2023-42535](https://insights.sbomify.com/CVE-2023-42535/): Memory corruption in Samsung Mobile Devices (high 8.4)
- [CVE-2023-42534](https://insights.sbomify.com/CVE-2023-42534/): Path traversal in Samsung Mobile Devices (medium 6.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/230/