# Vulnerabilities published in 2023


- [CVE-2023-4220](https://insights.sbomify.com/CVE-2023-4220/): Chamilo LMS Unauthenticated Big Upload File Remote Code Execution (high 8.1)
- [CVE-2023-4219](https://insights.sbomify.com/CVE-2023-4219/): SourceCodester Doctors Appointment System login.php sql injection (high 7.3)
- [CVE-2023-42189](https://insights.sbomify.com/CVE-2023-42189/): Denial of service in eve:eve door and window firmware (high 7.5)
- [CVE-2023-42188](https://insights.sbomify.com/CVE-2023-42188/): Cross-site request forgery in macwk:icecms (medium 6.5)
- [CVE-2023-42183](https://insights.sbomify.com/CVE-2023-42183/): Security feature bypass in lockss:classic lockss daemon (medium 5.3)
- [CVE-2023-42180](https://insights.sbomify.com/CVE-2023-42180/): File upload in lenosp project:lenosp (high 8.8)
- [CVE-2023-4218](https://insights.sbomify.com/CVE-2023-4218/): XXE in eclipse.platform / Eclipse IDE (medium 5.0)
- [CVE-2023-42179](https://insights.sbomify.com/CVE-2023-42179/): Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key derivation process, password validation process. (critical 9.8)
- [CVE-2023-42178](https://insights.sbomify.com/CVE-2023-42178/): SQL injection in lenosp project:lenosp (medium 6.5)
- [CVE-2023-4217](https://insights.sbomify.com/CVE-2023-4217/): Session cookies attribute not set properly (low 3.1)
- [CVE-2023-4216](https://insights.sbomify.com/CVE-2023-4216/): Orders Tracking for WooCommerce < 1.2.6 - Admin+ Arbitrary File Access/Read (low 2.7)
- [CVE-2023-4215](https://insights.sbomify.com/CVE-2023-4215/): Advantech WebAccess Debug Messages Revealing Unnecessary Information (medium 6.5)
- [CVE-2023-42147](https://insights.sbomify.com/CVE-2023-42147/): Information disclosure in fit2cloud:cloudexplorer lite (high 7.5)
- [CVE-2023-42144](https://insights.sbomify.com/CVE-2023-42144/): Information disclosure in shelly:trv firmware (medium 5.5)
- [CVE-2023-42143](https://insights.sbomify.com/CVE-2023-42143/): Security feature bypass in shelly:trv firmware (medium 5.4)
- [CVE-2023-4214](https://insights.sbomify.com/CVE-2023-4214/): AppPresser <= 4.2.5 - Insecure Password Reset Mechanism (high 8.1)
- [CVE-2023-42138](https://insights.sbomify.com/CVE-2023-42138/): Memory corruption in KV REPLAY VIEWER (high 7.8)
- [CVE-2023-42137](https://insights.sbomify.com/CVE-2023-42137/): Command injection in POS terminals (high 7.8)
- [CVE-2023-42136](https://insights.sbomify.com/CVE-2023-42136/): Command injection in POS terminals (high 7.8)
- [CVE-2023-42135](https://insights.sbomify.com/CVE-2023-42135/): Code injection in A50 (medium 6.8)
- [CVE-2023-42134](https://insights.sbomify.com/CVE-2023-42134/): Code injection in POS terminals (medium 6.8)
- [CVE-2023-42133](https://insights.sbomify.com/CVE-2023-42133/): Privilege escalation in POS terminals (medium 6.7)
- [CVE-2023-42132](https://insights.sbomify.com/CVE-2023-42132/): XML external entity in FD Application (medium 5.5)
- [CVE-2023-42131](https://insights.sbomify.com/CVE-2023-42131/): Ansys SpaceClaim X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42130](https://insights.sbomify.com/CVE-2023-42130/): A10 Thunder ADC FileMgmtExport Directory Traversal Arbitrary File Read and Deletion Vulnerability (high 8.3)
- [CVE-2023-4213](https://insights.sbomify.com/CVE-2023-4213/): Missing authorization in Simplr Registration Form Plus+ (high 8.8)
- [CVE-2023-42129](https://insights.sbomify.com/CVE-2023-42129/): A10 Thunder ADC ShowTechDownloadView Directory Traversal Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-42128](https://insights.sbomify.com/CVE-2023-42128/): Magnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability (high 8.0)
- [CVE-2023-42127](https://insights.sbomify.com/CVE-2023-42127/): Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42126](https://insights.sbomify.com/CVE-2023-42126/): G DATA Total Security GDBackupSvc Service Link Following Local Privilege Escalation Vulnerability (high 7.8)
- [CVE-2023-42125](https://insights.sbomify.com/CVE-2023-42125/): Avast Premium Security Sandbox Protection Link Following Privilege Escalation Vulnerability (high 7.8)
- [CVE-2023-42124](https://insights.sbomify.com/CVE-2023-42124/): Avast Premium Security Sandbox Protection Incorrect Authorization Privilege Escalation Vulnerability (medium 5.3)
- [CVE-2023-42123](https://insights.sbomify.com/CVE-2023-42123/): Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-42122](https://insights.sbomify.com/CVE-2023-42122/): Control Web Panel wloggui Command Injection Local Privilege Escalation Vulnerability (high 7.8)
- [CVE-2023-42121](https://insights.sbomify.com/CVE-2023-42121/): Control Web Panel Missing Authentication Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-42120](https://insights.sbomify.com/CVE-2023-42120/): Control Web Panel dns_zone_editor Command Injection Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-4212](https://insights.sbomify.com/CVE-2023-4212/): Trane Thermostats Injection (medium 6.8)
- [CVE-2023-42119](https://insights.sbomify.com/CVE-2023-42119/): Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.1)
- [CVE-2023-42118](https://insights.sbomify.com/CVE-2023-42118/): Exim libspf2 Integer Underflow Remote Code Execution Vulnerability (high 7.5)
- [CVE-2023-42117](https://insights.sbomify.com/CVE-2023-42117/): Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability (high 8.1)
- [CVE-2023-42116](https://insights.sbomify.com/CVE-2023-42116/): Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.1)
- [CVE-2023-42115](https://insights.sbomify.com/CVE-2023-42115/): Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-42114](https://insights.sbomify.com/CVE-2023-42114/): Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.7)
- [CVE-2023-42113](https://insights.sbomify.com/CVE-2023-42113/): PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42112](https://insights.sbomify.com/CVE-2023-42112/): PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42111](https://insights.sbomify.com/CVE-2023-42111/): PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42110](https://insights.sbomify.com/CVE-2023-42110/): PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-4211](https://insights.sbomify.com/CVE-2023-4211/): Arm Mali GPU Kernel Driver Use-After-Free (medium 5.5, exploited in the wild)
- [CVE-2023-42109](https://insights.sbomify.com/CVE-2023-42109/): PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42108](https://insights.sbomify.com/CVE-2023-42108/): PDF-XChange Editor EMF File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42107](https://insights.sbomify.com/CVE-2023-42107/): PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42106](https://insights.sbomify.com/CVE-2023-42106/): PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42105](https://insights.sbomify.com/CVE-2023-42105/): Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability (high 7.0)
- [CVE-2023-42104](https://insights.sbomify.com/CVE-2023-42104/): Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42103](https://insights.sbomify.com/CVE-2023-42103/): Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42102](https://insights.sbomify.com/CVE-2023-42102/): Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42101](https://insights.sbomify.com/CVE-2023-42101/): Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42100](https://insights.sbomify.com/CVE-2023-42100/): Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42099](https://insights.sbomify.com/CVE-2023-42099/): Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability (high 7.8)
- [CVE-2023-42098](https://insights.sbomify.com/CVE-2023-42098/): Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42097](https://insights.sbomify.com/CVE-2023-42097/): Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42096](https://insights.sbomify.com/CVE-2023-42096/): Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42095](https://insights.sbomify.com/CVE-2023-42095/): Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42094](https://insights.sbomify.com/CVE-2023-42094/): Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42093](https://insights.sbomify.com/CVE-2023-42093/): Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42092](https://insights.sbomify.com/CVE-2023-42092/): Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42091](https://insights.sbomify.com/CVE-2023-42091/): Foxit PDF Reader XFA Doc Object Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42090](https://insights.sbomify.com/CVE-2023-42090/): Foxit PDF Reader XFA Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-4209](https://insights.sbomify.com/CVE-2023-4209/): POEditor < 0.9.8 - Settings Reset via CSRF (medium 4.3)
- [CVE-2023-42089](https://insights.sbomify.com/CVE-2023-42089/): Foxit PDF Reader templates Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42088](https://insights.sbomify.com/CVE-2023-42088/): PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42087](https://insights.sbomify.com/CVE-2023-42087/): PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42086](https://insights.sbomify.com/CVE-2023-42086/): PDF-XChange Editor EMF File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42085](https://insights.sbomify.com/CVE-2023-42085/): PDF-XChange Editor EMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42084](https://insights.sbomify.com/CVE-2023-42084/): PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42083](https://insights.sbomify.com/CVE-2023-42083/): PDF-XChange Editor JPG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42082](https://insights.sbomify.com/CVE-2023-42082/): PDF-XChange Editor JPG File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42081](https://insights.sbomify.com/CVE-2023-42081/): PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42080](https://insights.sbomify.com/CVE-2023-42080/): PDF-XChange Editor EMF File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-4208](https://insights.sbomify.com/CVE-2023-4208/): Use-after-free in Linux kernel's net/sched: cls_u32 component (high 7.8)
- [CVE-2023-42079](https://insights.sbomify.com/CVE-2023-42079/): PDF-XChange Editor J2K File Parsing Uninitialized Variable Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42078](https://insights.sbomify.com/CVE-2023-42078/): PDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42077](https://insights.sbomify.com/CVE-2023-42077/): PDF-XChange Editor EMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42076](https://insights.sbomify.com/CVE-2023-42076/): PDF-XChange Editor PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42075](https://insights.sbomify.com/CVE-2023-42075/): PDF-XChange Editor JPG File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42074](https://insights.sbomify.com/CVE-2023-42074/): PDF-XChange Editor addScript Type Confusion Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42073](https://insights.sbomify.com/CVE-2023-42073/): PDF-XChange Editor Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42072](https://insights.sbomify.com/CVE-2023-42072/): PDF-XChange Editor JPC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42071](https://insights.sbomify.com/CVE-2023-42071/): PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42070](https://insights.sbomify.com/CVE-2023-42070/): PDF-XChange Editor Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-4207](https://insights.sbomify.com/CVE-2023-4207/): Use-after-free in Linux kernel's net/sched: cls_fw component (high 7.8)
- [CVE-2023-42069](https://insights.sbomify.com/CVE-2023-42069/): PDF-XChange Editor PDF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42068](https://insights.sbomify.com/CVE-2023-42068/): PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42067](https://insights.sbomify.com/CVE-2023-42067/): PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42066](https://insights.sbomify.com/CVE-2023-42066/): PDF-XChange Editor J2K File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42065](https://insights.sbomify.com/CVE-2023-42065/): PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42064](https://insights.sbomify.com/CVE-2023-42064/): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42063](https://insights.sbomify.com/CVE-2023-42063/): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42062](https://insights.sbomify.com/CVE-2023-42062/): PDF-XChange Editor U3D File Parsing Uninitialized Variable Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42061](https://insights.sbomify.com/CVE-2023-42061/): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/233/