# Vulnerabilities published in 2023


- [CVE-2023-41298](https://insights.sbomify.com/CVE-2023-41298/): Missing authorization in EMUI (high 7.5)
- [CVE-2023-41297](https://insights.sbomify.com/CVE-2023-41297/): Other in EMUI (critical 9.8)
- [CVE-2023-41296](https://insights.sbomify.com/CVE-2023-41296/): Missing authorization in EMUI (critical 9.1)
- [CVE-2023-41295](https://insights.sbomify.com/CVE-2023-41295/): Misconfiguration in EMUI (medium 5.3)
- [CVE-2023-41294](https://insights.sbomify.com/CVE-2023-41294/): Other in HarmonyOS (critical 9.8)
- [CVE-2023-41293](https://insights.sbomify.com/CVE-2023-41293/): Information disclosure in EMUI (high 7.5)
- [CVE-2023-41292](https://insights.sbomify.com/CVE-2023-41292/): QTS, QuTS hero, QuTScloud (low 3.8)
- [CVE-2023-41291](https://insights.sbomify.com/CVE-2023-41291/): QuFirewall (medium 5.5)
- [CVE-2023-41290](https://insights.sbomify.com/CVE-2023-41290/): QuFirewall (medium 4.1)
- [CVE-2023-4129](https://insights.sbomify.com/CVE-2023-4129/): Weak cryptography in Data Protection Central (medium 5.9)
- [CVE-2023-41289](https://insights.sbomify.com/CVE-2023-41289/): QcalAgent (medium 6.3)
- [CVE-2023-41288](https://insights.sbomify.com/CVE-2023-41288/): Video Station (high 8.8)
- [CVE-2023-41287](https://insights.sbomify.com/CVE-2023-41287/): Video Station (medium 4.3)
- [CVE-2023-41285](https://insights.sbomify.com/CVE-2023-41285/): QuMagie (high 7.4)
- [CVE-2023-41284](https://insights.sbomify.com/CVE-2023-41284/): QuMagie (high 7.4)
- [CVE-2023-41283](https://insights.sbomify.com/CVE-2023-41283/): QTS, QuTS hero, QuTScloud (medium 5.5)
- [CVE-2023-41282](https://insights.sbomify.com/CVE-2023-41282/): QTS, QuTS hero, QuTScloud (medium 5.5)
- [CVE-2023-41281](https://insights.sbomify.com/CVE-2023-41281/): QTS, QuTS hero, QuTScloud (medium 5.5)
- [CVE-2023-41280](https://insights.sbomify.com/CVE-2023-41280/): QTS, QuTS hero, QuTScloud (medium 5.5)
- [CVE-2023-41279](https://insights.sbomify.com/CVE-2023-41279/): QTS, QuTS hero, QuTScloud (medium 5.5)
- [CVE-2023-41278](https://insights.sbomify.com/CVE-2023-41278/): QTS, QuTS hero, QuTScloud (medium 5.5)
- [CVE-2023-41277](https://insights.sbomify.com/CVE-2023-41277/): QTS, QuTS hero, QuTScloud (medium 5.5)
- [CVE-2023-41276](https://insights.sbomify.com/CVE-2023-41276/): QTS, QuTS hero, QuTScloud (medium 5.5)
- [CVE-2023-41275](https://insights.sbomify.com/CVE-2023-41275/): QTS, QuTS hero, QuTScloud (medium 5.5)
- [CVE-2023-41274](https://insights.sbomify.com/CVE-2023-41274/): QTS, QuTS hero, QuTScloud (medium 5.5)
- [CVE-2023-41273](https://insights.sbomify.com/CVE-2023-41273/): QTS, QuTS hero, QuTScloud (medium 5.5)
- [CVE-2023-41270](https://insights.sbomify.com/CVE-2023-41270/): Samsung Smart TV UE40D7000 WPS DoS attack (low 3.5)
- [CVE-2023-4127](https://insights.sbomify.com/CVE-2023-4127/): Race Condition within a Thread in answerdev/answer (medium 6.5)
- [CVE-2023-41268](https://insights.sbomify.com/CVE-2023-41268/): Possible stack overflow due to insufficient input validation (medium 5.3)
- [CVE-2023-41267](https://insights.sbomify.com/CVE-2023-41267/): Apache HDFS Provider error message suggested installation of incorrect pip package (high 7.8)
- [CVE-2023-41266](https://insights.sbomify.com/CVE-2023-41266/): Qlik Sense Path Traversal (high 8.2, exploited in the wild)
- [CVE-2023-41265](https://insights.sbomify.com/CVE-2023-41265/): Qlik Sense HTTP Tunneling (critical 9.6, exploited in the wild)
- [CVE-2023-41264](https://insights.sbomify.com/CVE-2023-41264/): Auth bypass in netwrix:usercube (critical 9.8)
- [CVE-2023-41263](https://insights.sbomify.com/CVE-2023-41263/): Information disclosure in plixer:scrutinizer (low 3.7)
- [CVE-2023-41262](https://insights.sbomify.com/CVE-2023-41262/): SQL injection in plixer:scrutinizer (critical 9.8)
- [CVE-2023-41261](https://insights.sbomify.com/CVE-2023-41261/): Missing authorization in plixer:scrutinizer (medium 5.3)
- [CVE-2023-41260](https://insights.sbomify.com/CVE-2023-41260/): Information disclosure in bestpractical:request tracker (high 7.5)
- [CVE-2023-4126](https://insights.sbomify.com/CVE-2023-4126/): Insufficient Session Expiration in answerdev/answer (medium 4.1)
- [CVE-2023-41259](https://insights.sbomify.com/CVE-2023-41259/): Information disclosure in bestpractical:request tracker (high 7.5)
- [CVE-2023-41257](https://insights.sbomify.com/CVE-2023-41257/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2023-41256](https://insights.sbomify.com/CVE-2023-41256/): Dover Fueling Solutions MAGLINK LX Console Authentication Bypass (critical 9.1)
- [CVE-2023-41255](https://insights.sbomify.com/CVE-2023-41255/): Auth bypass in ctrlX HMI Web Panel - WR21 (WR2107) (high 8.8)
- [CVE-2023-41254](https://insights.sbomify.com/CVE-2023-41254/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2023-41253](https://insights.sbomify.com/CVE-2023-41253/): BIG-IP DNS TSIG Key vulnerability (medium 5.5)
- [CVE-2023-41252](https://insights.sbomify.com/CVE-2023-41252/): Memory corruption in Intel(R) QAT software drivers for Windows (medium 6.5)
- [CVE-2023-41251](https://insights.sbomify.com/CVE-2023-41251/): Memory corruption in WBR-6013 (high 7.2)
- [CVE-2023-41250](https://insights.sbomify.com/CVE-2023-41250/): Cross-site scripting in TeamCity (low 3.5)
- [CVE-2023-4125](https://insights.sbomify.com/CVE-2023-4125/): Weak Password Requirements in answerdev/answer (high 8.8)
- [CVE-2023-41249](https://insights.sbomify.com/CVE-2023-41249/): Cross-site scripting in TeamCity (medium 4.6)
- [CVE-2023-41248](https://insights.sbomify.com/CVE-2023-41248/): Cross-site scripting in TeamCity (medium 4.6)
- [CVE-2023-41244](https://insights.sbomify.com/CVE-2023-41244/): WordPress Localize Remote Images Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-41243](https://insights.sbomify.com/CVE-2023-41243/): WordPress WPvivid Backup Plugin plugin <= 0.9.90 - Privilege Escalation on Staging Environment vulnerability (high 8.8)
- [CVE-2023-41242](https://insights.sbomify.com/CVE-2023-41242/): WordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-41241](https://insights.sbomify.com/CVE-2023-41241/): WordPress SureCart Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-41240](https://insights.sbomify.com/CVE-2023-41240/): Missing authorization in Pricing Deals for WooCommerce (medium 5.3)
- [CVE-2023-4124](https://insights.sbomify.com/CVE-2023-4124/): Missing Authorization in answerdev/answer (high 8.1)
- [CVE-2023-41239](https://insights.sbomify.com/CVE-2023-41239/): WordPress PowerPress Podcasting Plugin <= 11.0.6 is vulnerable to Server Side Request Forgery (SSRF) (medium 6.4)
- [CVE-2023-41238](https://insights.sbomify.com/CVE-2023-41238/): WordPress Social Media & Share Icons Plugin <= 2.8.3 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-41237](https://insights.sbomify.com/CVE-2023-41237/): WordPress Arya Multipurpose Pro Theme <= 1.0.8 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-41236](https://insights.sbomify.com/CVE-2023-41236/): WordPress Happy Elementor Addons Pro Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-41235](https://insights.sbomify.com/CVE-2023-41235/): WordPress Everest News Pro Theme <= 1.1.7 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-41234](https://insights.sbomify.com/CVE-2023-41234/): Null dereference in Intel(R) Power Gadget software for Windows (medium 5.0)
- [CVE-2023-41233](https://insights.sbomify.com/CVE-2023-41233/): Cross-site scripting in Welcart e-Commerce (medium 6.1)
- [CVE-2023-41232](https://insights.sbomify.com/CVE-2023-41232/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2023-41231](https://insights.sbomify.com/CVE-2023-41231/): Misconfiguration in ACAT software maintained by Intel(R) (medium 6.7)
- [CVE-2023-41230](https://insights.sbomify.com/CVE-2023-41230/): D-Link DIR-3040 HTTP Request Processing Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability (high 7.5)
- [CVE-2023-41229](https://insights.sbomify.com/CVE-2023-41229/): D-Link DIR-3040 HTTP Request Processing Referer Heap-Based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-41228](https://insights.sbomify.com/CVE-2023-41228/): D-Link DIR-3040 prog.cgi SetUsersSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-41227](https://insights.sbomify.com/CVE-2023-41227/): D-Link DIR-3040 prog.cgi SetTriggerPPPoEValidate Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-41226](https://insights.sbomify.com/CVE-2023-41226/): D-Link DIR-3040 prog.cgi SetMyDLinkRegistration Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-41225](https://insights.sbomify.com/CVE-2023-41225/): D-Link DIR-3040 prog.cgi SetIPv6PppoeSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-41224](https://insights.sbomify.com/CVE-2023-41224/): D-Link DIR-3040 prog.cgi SetDeviceSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-41223](https://insights.sbomify.com/CVE-2023-41223/): D-Link DIR-3040 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-41222](https://insights.sbomify.com/CVE-2023-41222/): D-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-41221](https://insights.sbomify.com/CVE-2023-41221/): D-Link DIR-3040 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-41220](https://insights.sbomify.com/CVE-2023-41220/): D-Link DIR-3040 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-4122](https://insights.sbomify.com/CVE-2023-4122/): Student Information System v1.0 - Insecure File Upload (critical 9.9)
- [CVE-2023-41219](https://insights.sbomify.com/CVE-2023-41219/): D-Link DIR-3040 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-41218](https://insights.sbomify.com/CVE-2023-41218/): D-Link DIR-3040 prog.cgi SetWan3Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-41217](https://insights.sbomify.com/CVE-2023-41217/): D-Link DIR-3040 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability (high 7.1)
- [CVE-2023-41216](https://insights.sbomify.com/CVE-2023-41216/): D-Link DIR-3040 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-41215](https://insights.sbomify.com/CVE-2023-41215/): D-Link DAP-2622 DDP Set Date-Time Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-41214](https://insights.sbomify.com/CVE-2023-41214/): D-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-41213](https://insights.sbomify.com/CVE-2023-41213/): D-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-41212](https://insights.sbomify.com/CVE-2023-41212/): D-Link DAP-1325 SetTriggerAPValidate Key Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-41211](https://insights.sbomify.com/CVE-2023-41211/): Memory corruption in DAP-1325 (high 8.8)
- [CVE-2023-41210](https://insights.sbomify.com/CVE-2023-41210/): D-Link DAP-1325 SetHostIPv6StaticSettings StaticDNS2 Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-4121](https://insights.sbomify.com/CVE-2023-4121/): Byzoro Smart S85F Management Platform unrestricted upload (medium 6.3)
- [CVE-2023-41209](https://insights.sbomify.com/CVE-2023-41209/): D-Link DAP-1325 SetHostIPv6StaticSettings StaticDNS1 Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-41208](https://insights.sbomify.com/CVE-2023-41208/): Memory corruption in DAP-1325 (high 8.8)
- [CVE-2023-41207](https://insights.sbomify.com/CVE-2023-41207/): D-Link DAP-1325 SetHostIPv6StaticSettings StaticAddress Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-41206](https://insights.sbomify.com/CVE-2023-41206/): D-Link DAP-1325 SetHostIPv6Settings IPv6Mode Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-41205](https://insights.sbomify.com/CVE-2023-41205/): D-Link DAP-1325 SetAPLanSettings SubnetMask Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-41204](https://insights.sbomify.com/CVE-2023-41204/): D-Link DAP-1325 SetAPLanSettings SecondaryDNS Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-41203](https://insights.sbomify.com/CVE-2023-41203/): D-Link DAP-1325 SetAPLanSettings PrimaryDNS Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-41202](https://insights.sbomify.com/CVE-2023-41202/): D-Link DAP-1325 SetAPLanSettings Mode Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-41201](https://insights.sbomify.com/CVE-2023-41201/): D-Link DAP-1325 HNAP SetSetupWizardStatus Enabled Command Injection Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-41200](https://insights.sbomify.com/CVE-2023-41200/): D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticPrefixLength Command Injection Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-4120](https://insights.sbomify.com/CVE-2023-4120/): Byzoro Smart S85F Management Platform importhtml.php command injection (medium 6.3)
- [CVE-2023-41199](https://insights.sbomify.com/CVE-2023-41199/): D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDNS2 Command Injection Remote Code Execution Vulnerability (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/240/