# Vulnerabilities published in 2023


- [CVE-2023-42060](https://insights.sbomify.com/CVE-2023-42060/): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-4206](https://insights.sbomify.com/CVE-2023-4206/): Use-after-free in Linux kernel's net/sched: cls_route component (high 7.8)
- [CVE-2023-42059](https://insights.sbomify.com/CVE-2023-42059/): PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42058](https://insights.sbomify.com/CVE-2023-42058/): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42057](https://insights.sbomify.com/CVE-2023-42057/): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42056](https://insights.sbomify.com/CVE-2023-42056/): PDF-XChange Editor U3D File Parsing Uninitialized Variable Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42055](https://insights.sbomify.com/CVE-2023-42055/): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42054](https://insights.sbomify.com/CVE-2023-42054/): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42053](https://insights.sbomify.com/CVE-2023-42053/): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42052](https://insights.sbomify.com/CVE-2023-42052/): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42051](https://insights.sbomify.com/CVE-2023-42051/): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42050](https://insights.sbomify.com/CVE-2023-42050/): PDF-XChange Editor EMF File Parsing Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42049](https://insights.sbomify.com/CVE-2023-42049/): PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42048](https://insights.sbomify.com/CVE-2023-42048/): PDF-XChange Editor J2K File Parsing Uninitialized Variable Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42047](https://insights.sbomify.com/CVE-2023-42047/): PDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42046](https://insights.sbomify.com/CVE-2023-42046/): PDF-XChange Editor J2K File Parsing Uninitialized Variable Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-42045](https://insights.sbomify.com/CVE-2023-42045/): PDF-XChange Editor J2K File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42044](https://insights.sbomify.com/CVE-2023-42044/): PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42043](https://insights.sbomify.com/CVE-2023-42043/): PDF-XChange Editor PDF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42042](https://insights.sbomify.com/CVE-2023-42042/): PDF-XChange Editor App Object Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42041](https://insights.sbomify.com/CVE-2023-42041/): PDF-XChange Editor Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42040](https://insights.sbomify.com/CVE-2023-42040/): PDF-XChange Editor mailForm Use-After-Free Code Execution Vulnerability (high 7.8)
- [CVE-2023-4204](https://insights.sbomify.com/CVE-2023-4204/): NPort IAW5000A-I/O Series Hardcoded Credential Vulnerability (medium 5.4)
- [CVE-2023-42039](https://insights.sbomify.com/CVE-2023-42039/): Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42038](https://insights.sbomify.com/CVE-2023-42038/): Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42037](https://insights.sbomify.com/CVE-2023-42037/): Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42036](https://insights.sbomify.com/CVE-2023-42036/): Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-42035](https://insights.sbomify.com/CVE-2023-42035/): Visualware MyConnection Server doIForward XML External Entity Processing Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-42034](https://insights.sbomify.com/CVE-2023-42034/): Visualware MyConnection Server doRTAAccessCTConfig Cross-Site Scripting Authentication Bypass Vulnerability (high 8.8)
- [CVE-2023-42033](https://insights.sbomify.com/CVE-2023-42033/): Visualware MyConnection Server doPostUploadfiles Directory Traversal Remote Code Execution Vulnerability (high 7.2)
- [CVE-2023-42032](https://insights.sbomify.com/CVE-2023-42032/): Visualware MyConnection Server doRTAAccessUPass Exposed Dangerous Method Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-42031](https://insights.sbomify.com/CVE-2023-42031/): IBM CICS TX denial of service (medium 4.9)
- [CVE-2023-4203](https://insights.sbomify.com/CVE-2023-4203/): Stored Cross-Site Scripting (critical 9.0)
- [CVE-2023-42029](https://insights.sbomify.com/CVE-2023-42029/): IBM CICS TX cross-site scripting (medium 4.8)
- [CVE-2023-42027](https://insights.sbomify.com/CVE-2023-42027/): IBM CICS TX cross-site request forgery (medium 4.3)
- [CVE-2023-42022](https://insights.sbomify.com/CVE-2023-42022/): IBM InfoSphere Information Server cross-site scripting (medium 5.4)
- [CVE-2023-4202](https://insights.sbomify.com/CVE-2023-4202/): Stored Cross-Site Scripting (critical 9.0)
- [CVE-2023-42019](https://insights.sbomify.com/CVE-2023-42019/): IBM InfoSphere Information Server information disclosure (medium 5.9)
- [CVE-2023-42017](https://insights.sbomify.com/CVE-2023-42017/): IBM Planning Analytics file upload (high 8.0)
- [CVE-2023-42016](https://insights.sbomify.com/CVE-2023-42016/): IBM Sterling B2B Integrator information disclosure (medium 4.3)
- [CVE-2023-42015](https://insights.sbomify.com/CVE-2023-42015/): IBM UrbanCode Deploy HTML injection (medium 4.3)
- [CVE-2023-42014](https://insights.sbomify.com/CVE-2023-42014/): IBM Sterling B2B Integrator Standard Edition cross-site scripting (medium 5.4)
- [CVE-2023-42013](https://insights.sbomify.com/CVE-2023-42013/): IBM UrbanCode Deploy information disclosure (medium 5.3)
- [CVE-2023-42012](https://insights.sbomify.com/CVE-2023-42012/): IBM UrbanCode Deploy denial of service (medium 6.2)
- [CVE-2023-42011](https://insights.sbomify.com/CVE-2023-42011/): IBM Sterling B2B Integrator Standard Edition tapjacking (medium 4.3)
- [CVE-2023-42010](https://insights.sbomify.com/CVE-2023-42010/): IBM Sterling B2B Integrator Standard Edition information disclosure (low 3.1)
- [CVE-2023-4201](https://insights.sbomify.com/CVE-2023-4201/): SourceCodester Inventory Management System ex_catagory_data.php sql injection (medium 6.3)
- [CVE-2023-42009](https://insights.sbomify.com/CVE-2023-42009/): IBM InfoSphere Information Server cross-site scripting (medium 5.4)
- [CVE-2023-42007](https://insights.sbomify.com/CVE-2023-42007/): IBM Sterling Control Center cross-site scripting (medium 5.4)
- [CVE-2023-42006](https://insights.sbomify.com/CVE-2023-42006/): IBM i information disclosure (high 8.4)
- [CVE-2023-42005](https://insights.sbomify.com/CVE-2023-42005/): IBM Db2 on Cloud Pak for Data privilege escalation (high 7.4)
- [CVE-2023-42004](https://insights.sbomify.com/CVE-2023-42004/): IBM Security Guardium CSV injection (high 8.0)
- [CVE-2023-42000](https://insights.sbomify.com/CVE-2023-42000/): Arcserve UDP Agent Unauthenticated Path Traversal File Upload (critical 9.8)
- [CVE-2023-4200](https://insights.sbomify.com/CVE-2023-4200/): SourceCodester Inventory Management System product_data.php. sql injection (medium 6.3)
- [CVE-2023-41999](https://insights.sbomify.com/CVE-2023-41999/): Arcserve UDP Management Authentication Bypass (critical 9.8)
- [CVE-2023-41998](https://insights.sbomify.com/CVE-2023-41998/): Arcserve UDP Unauthenticated RCE (critical 9.8)
- [CVE-2023-41997](https://insights.sbomify.com/CVE-2023-41997/): Security feature bypass in iOS and iPadOS (medium 4.6)
- [CVE-2023-41996](https://insights.sbomify.com/CVE-2023-41996/): Security feature bypass in macOS (medium 5.5)
- [CVE-2023-41995](https://insights.sbomify.com/CVE-2023-41995/): Use after free in iOS and iPadOS (high 7.8)
- [CVE-2023-41994](https://insights.sbomify.com/CVE-2023-41994/): Missing authorization in macOS (medium 5.5)
- [CVE-2023-41993](https://insights.sbomify.com/CVE-2023-41993/): Apple Multiple Products WebKit Code Execution (high 8.8, exploited in the wild)
- [CVE-2023-41992](https://insights.sbomify.com/CVE-2023-41992/): Apple Multiple Products Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2023-41991](https://insights.sbomify.com/CVE-2023-41991/): Apple Multiple Products Improper Certificate Validation (medium 5.5, exploited in the wild)
- [CVE-2023-41990](https://insights.sbomify.com/CVE-2023-41990/): Apple Multiple Products Code Execution (high 7.8, exploited in the wild)
- [CVE-2023-4199](https://insights.sbomify.com/CVE-2023-4199/): SourceCodester Inventory Management System catagory_data.php sql injection (medium 6.3)
- [CVE-2023-41989](https://insights.sbomify.com/CVE-2023-41989/): Security feature bypass in macOS (medium 6.8)
- [CVE-2023-41988](https://insights.sbomify.com/CVE-2023-41988/): Security feature bypass in iOS and iPadOS (medium 6.8)
- [CVE-2023-41987](https://insights.sbomify.com/CVE-2023-41987/): Information disclosure in macOS (medium 5.5)
- [CVE-2023-41986](https://insights.sbomify.com/CVE-2023-41986/): Security feature bypass in iOS and iPadOS (medium 5.5)
- [CVE-2023-41984](https://insights.sbomify.com/CVE-2023-41984/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2023-41983](https://insights.sbomify.com/CVE-2023-41983/): Memory corruption in Safari (medium 6.5)
- [CVE-2023-41982](https://insights.sbomify.com/CVE-2023-41982/): Security feature bypass in iOS and iPadOS (medium 4.6)
- [CVE-2023-41981](https://insights.sbomify.com/CVE-2023-41981/): Security feature bypass in iOS and iPadOS (medium 4.4)
- [CVE-2023-41980](https://insights.sbomify.com/CVE-2023-41980/): Security feature bypass in iOS and iPadOS (medium 5.5)
- [CVE-2023-4198](https://insights.sbomify.com/CVE-2023-4198/): Dolibarr ERP CRM (<= 17.0.3) Improper Access Control (medium 6.5)
- [CVE-2023-41979](https://insights.sbomify.com/CVE-2023-41979/): Race condition in macOS (medium 4.7)
- [CVE-2023-41977](https://insights.sbomify.com/CVE-2023-41977/): Information disclosure in iOS and iPadOS (medium 4.3)
- [CVE-2023-41976](https://insights.sbomify.com/CVE-2023-41976/): Use after free in Safari (high 8.8)
- [CVE-2023-41975](https://insights.sbomify.com/CVE-2023-41975/): Security feature bypass in macOS (medium 4.3)
- [CVE-2023-41974](https://insights.sbomify.com/CVE-2023-41974/): Apple iOS and iPadOS Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2023-41973](https://insights.sbomify.com/CVE-2023-41973/): Lack of input santization on Zscaler Client Connector enables arbitrary code execution (high 7.3)
- [CVE-2023-41972](https://insights.sbomify.com/CVE-2023-41972/): Revert password check incorrect type validation (high 7.3)
- [CVE-2023-41971](https://insights.sbomify.com/CVE-2023-41971/): Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control (medium 5.3)
- [CVE-2023-41970](https://insights.sbomify.com/CVE-2023-41970/): Repair App local code execution with arbitrary privileges (medium 6.0)
- [CVE-2023-4197](https://insights.sbomify.com/CVE-2023-4197/): Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE (high 7.5)
- [CVE-2023-41969](https://insights.sbomify.com/CVE-2023-41969/): ZSATrayManager Arbitrary File Deletion (high 7.3)
- [CVE-2023-41968](https://insights.sbomify.com/CVE-2023-41968/): Path traversal in iOS and iPadOS (medium 5.5)
- [CVE-2023-41967](https://insights.sbomify.com/CVE-2023-41967/): Information disclosure in Controller 6000 (low 2.4)
- [CVE-2023-41966](https://insights.sbomify.com/CVE-2023-41966/): Sielco Radio Link and Analog FM Transmitters Privilege Defined With Unsafe Actions (medium 6.5)
- [CVE-2023-41965](https://insights.sbomify.com/CVE-2023-41965/): Socomec MOD3GP-SY-120K Insecure Storage of Sensitive Information (high 7.5)
- [CVE-2023-41964](https://insights.sbomify.com/CVE-2023-41964/): BIG-IP and BIG-IQ Database Variable vulnerability (medium 4.3)
- [CVE-2023-41963](https://insights.sbomify.com/CVE-2023-41963/): Denial of service in GC-A22W-CW (high 7.5)
- [CVE-2023-41962](https://insights.sbomify.com/CVE-2023-41962/): Cross-site scripting in Welcart e-Commerce (medium 6.1)
- [CVE-2023-41961](https://insights.sbomify.com/CVE-2023-41961/): Privilege escalation in Intel(R) GPA software (medium 6.7)
- [CVE-2023-41960](https://insights.sbomify.com/CVE-2023-41960/): Missing authorization in ctrlX HMI Web Panel - WR21 (WR2107) (high 7.1)
- [CVE-2023-4196](https://insights.sbomify.com/CVE-2023-4196/): Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit (high 8.3)
- [CVE-2023-41957](https://insights.sbomify.com/CVE-2023-41957/): WordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerability (high 8.6)
- [CVE-2023-41956](https://insights.sbomify.com/CVE-2023-41956/): WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerability (high 8.8)
- [CVE-2023-41955](https://insights.sbomify.com/CVE-2023-41955/): WordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerability (high 8.8)
- [CVE-2023-41954](https://insights.sbomify.com/CVE-2023-41954/): WordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerability (high 8.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/234/