# Vulnerabilities published in 2023


- [CVE-2023-40555](https://insights.sbomify.com/CVE-2023-40555/): WordPress Flatsome Theme <= 3.17.5 is vulnerable to PHP Object Injection (high 8.3)
- [CVE-2023-40554](https://insights.sbomify.com/CVE-2023-40554/): WordPress Blog2Social Plugin <= 7.2.0 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-40553](https://insights.sbomify.com/CVE-2023-40553/): WordPress Plausible Analytics Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS) (medium 5.8)
- [CVE-2023-40552](https://insights.sbomify.com/CVE-2023-40552/): WordPress Fitness calculators plugin Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-40551](https://insights.sbomify.com/CVE-2023-40551/): Shim: out of bounds read when parsing mz binaries (medium 5.1)
- [CVE-2023-40550](https://insights.sbomify.com/CVE-2023-40550/): Shim: out-of-bound read in verify_buffer_sbat() (medium 5.5)
- [CVE-2023-4055](https://insights.sbomify.com/CVE-2023-4055/): Other in Firefox (high 7.5)
- [CVE-2023-40549](https://insights.sbomify.com/CVE-2023-40549/): Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file (medium 6.2)
- [CVE-2023-40548](https://insights.sbomify.com/CVE-2023-40548/): Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems (high 7.4)
- [CVE-2023-40547](https://insights.sbomify.com/CVE-2023-40547/): Shim: rce in http boot support may lead to secure boot bypass (high 8.3)
- [CVE-2023-40546](https://insights.sbomify.com/CVE-2023-40546/): Shim: out-of-bounds read printing error messages (medium 6.2)
- [CVE-2023-40545](https://insights.sbomify.com/CVE-2023-40545/): PingFederate OAuth client_secret_jwt Authentication Bypass (high 8.8)
- [CVE-2023-40544](https://insights.sbomify.com/CVE-2023-40544/): Westermo Lynx Cleartext Transmission of Sensitive Information (medium 5.7)
- [CVE-2023-40542](https://insights.sbomify.com/CVE-2023-40542/): BIG-IP TCP Profile vulnerability (high 7.5)
- [CVE-2023-40541](https://insights.sbomify.com/CVE-2023-40541/): Security feature bypass in macOS (medium 5.5)
- [CVE-2023-40540](https://insights.sbomify.com/CVE-2023-40540/): Information disclosure in Intel(R) NUC BIOS firmware (medium 4.1)
- [CVE-2023-4054](https://insights.sbomify.com/CVE-2023-4054/): Security feature bypass in Firefox (medium 5.5)
- [CVE-2023-40537](https://insights.sbomify.com/CVE-2023-40537/): Multi-blade VIPRION Configuration utility session cookie vulnerability (high 8.1)
- [CVE-2023-40536](https://insights.sbomify.com/CVE-2023-40536/): Race condition in Intel(R) PROSet/Wireless WiFi software for Windows (medium 4.3)
- [CVE-2023-40535](https://insights.sbomify.com/CVE-2023-40535/): Cross-site scripting in VI Web Client (medium 5.4)
- [CVE-2023-40534](https://insights.sbomify.com/CVE-2023-40534/): BIG-IP HTTP/2 vulnerability (high 7.5)
- [CVE-2023-40532](https://insights.sbomify.com/CVE-2023-40532/): Path traversal in Welcart e-Commerce (medium 4.3)
- [CVE-2023-40531](https://insights.sbomify.com/CVE-2023-40531/): Command injection in Archer AX6000 (high 8.0)
- [CVE-2023-40530](https://insights.sbomify.com/CVE-2023-40530/): Missing authorization in 'Skylark' App for Android (medium 4.7)
- [CVE-2023-4053](https://insights.sbomify.com/CVE-2023-4053/): Full screen notification obscured by external program (medium 6.5)
- [CVE-2023-40529](https://insights.sbomify.com/CVE-2023-40529/): Information disclosure in iOS and iPadOS (low 2.4)
- [CVE-2023-40528](https://insights.sbomify.com/CVE-2023-40528/): Security feature bypass in iOS and iPadOS (medium 5.5)
- [CVE-2023-40520](https://insights.sbomify.com/CVE-2023-40520/): Information disclosure in iOS and iPadOS (low 3.3)
- [CVE-2023-4052](https://insights.sbomify.com/CVE-2023-4052/): Other in Firefox (medium 6.5)
- [CVE-2023-40519](https://insights.sbomify.com/CVE-2023-40519/): Cross-site scripting in broadpeak:centralized accounts management auth agent (medium 6.1)
- [CVE-2023-40518](https://insights.sbomify.com/CVE-2023-40518/): Other in litespeedtech:openlitespeed (high 7.5)
- [CVE-2023-40517](https://insights.sbomify.com/CVE-2023-40517/): LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-40516](https://insights.sbomify.com/CVE-2023-40516/): LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability (high 7.8)
- [CVE-2023-40515](https://insights.sbomify.com/CVE-2023-40515/): LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability (high 7.5)
- [CVE-2023-40514](https://insights.sbomify.com/CVE-2023-40514/): LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-40513](https://insights.sbomify.com/CVE-2023-40513/): LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-40512](https://insights.sbomify.com/CVE-2023-40512/): LG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-40511](https://insights.sbomify.com/CVE-2023-40511/): LG Simple Editor checkServer Authentication Bypass Vulnerability (high 7.5)
- [CVE-2023-40510](https://insights.sbomify.com/CVE-2023-40510/): LG Simple Editor getServerSetting Authentication Bypass Vulnerability (high 7.5)
- [CVE-2023-4051](https://insights.sbomify.com/CVE-2023-4051/): Full screen notification obscured by file open dialog (high 7.5)
- [CVE-2023-40509](https://insights.sbomify.com/CVE-2023-40509/): LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability (high 8.2)
- [CVE-2023-40508](https://insights.sbomify.com/CVE-2023-40508/): LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability (high 8.2)
- [CVE-2023-40507](https://insights.sbomify.com/CVE-2023-40507/): LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-40506](https://insights.sbomify.com/CVE-2023-40506/): LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-40505](https://insights.sbomify.com/CVE-2023-40505/): LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-40504](https://insights.sbomify.com/CVE-2023-40504/): LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-40503](https://insights.sbomify.com/CVE-2023-40503/): LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-40502](https://insights.sbomify.com/CVE-2023-40502/): LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability (high 8.2)
- [CVE-2023-40501](https://insights.sbomify.com/CVE-2023-40501/): LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-40500](https://insights.sbomify.com/CVE-2023-40500/): LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-4050](https://insights.sbomify.com/CVE-2023-4050/): Memory corruption in Firefox (high 7.5)
- [CVE-2023-40499](https://insights.sbomify.com/CVE-2023-40499/): LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability (high 8.2)
- [CVE-2023-40498](https://insights.sbomify.com/CVE-2023-40498/): LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-40497](https://insights.sbomify.com/CVE-2023-40497/): LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-40496](https://insights.sbomify.com/CVE-2023-40496/): LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-40495](https://insights.sbomify.com/CVE-2023-40495/): LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-40494](https://insights.sbomify.com/CVE-2023-40494/): LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability (high 8.2)
- [CVE-2023-40493](https://insights.sbomify.com/CVE-2023-40493/): LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-40492](https://insights.sbomify.com/CVE-2023-40492/): LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability (high 8.2)
- [CVE-2023-40491](https://insights.sbomify.com/CVE-2023-40491/): Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-40490](https://insights.sbomify.com/CVE-2023-40490/): Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-4049](https://insights.sbomify.com/CVE-2023-4049/): Race condition in Firefox (medium 5.9)
- [CVE-2023-40489](https://insights.sbomify.com/CVE-2023-40489/): Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-40488](https://insights.sbomify.com/CVE-2023-40488/): Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-40487](https://insights.sbomify.com/CVE-2023-40487/): Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-40486](https://insights.sbomify.com/CVE-2023-40486/): Maxon Cinema 4D SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-40485](https://insights.sbomify.com/CVE-2023-40485/): Maxon Cinema 4D SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-40484](https://insights.sbomify.com/CVE-2023-40484/): Maxon Cinema 4D SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-40483](https://insights.sbomify.com/CVE-2023-40483/): Maxon Cinema 4D SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-40482](https://insights.sbomify.com/CVE-2023-40482/): Maxon Cinema 4D SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-40481](https://insights.sbomify.com/CVE-2023-40481/): 7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-40480](https://insights.sbomify.com/CVE-2023-40480/): NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-4048](https://insights.sbomify.com/CVE-2023-4048/): Memory corruption in Firefox (high 7.5)
- [CVE-2023-40479](https://insights.sbomify.com/CVE-2023-40479/): NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-40478](https://insights.sbomify.com/CVE-2023-40478/): NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.0)
- [CVE-2023-40477](https://insights.sbomify.com/CVE-2023-40477/): RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-40476](https://insights.sbomify.com/CVE-2023-40476/): GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-40475](https://insights.sbomify.com/CVE-2023-40475/): GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-40474](https://insights.sbomify.com/CVE-2023-40474/): GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-40473](https://insights.sbomify.com/CVE-2023-40473/): PDF-XChange Editor Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-40472](https://insights.sbomify.com/CVE-2023-40472/): PDF-XChange Editor JavaScript String Untrusted Pointer Dereference Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-40471](https://insights.sbomify.com/CVE-2023-40471/): PDF-XChange Editor App Untrusted Pointer Dereference Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-40470](https://insights.sbomify.com/CVE-2023-40470/): PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-4047](https://insights.sbomify.com/CVE-2023-4047/): Security feature bypass in Firefox (high 8.8)
- [CVE-2023-40469](https://insights.sbomify.com/CVE-2023-40469/): PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-40468](https://insights.sbomify.com/CVE-2023-40468/): PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-40465](https://insights.sbomify.com/CVE-2023-40465/): Improper input leads to DoS (high 8.3)
- [CVE-2023-40464](https://insights.sbomify.com/CVE-2023-40464/): Use of hardcoded certificate and private key (high 8.1)
- [CVE-2023-40463](https://insights.sbomify.com/CVE-2023-40463/): Use of Hard-Coded Credentials (high 8.1)
- [CVE-2023-40462](https://insights.sbomify.com/CVE-2023-40462/): Improper input leads to DoS (high 7.5)
- [CVE-2023-40461](https://insights.sbomify.com/CVE-2023-40461/): Cross-site scripting vulnerability in ACEManager (high 8.1)
- [CVE-2023-40460](https://insights.sbomify.com/CVE-2023-40460/): Improper input leads to DoS (high 7.1)
- [CVE-2023-4046](https://insights.sbomify.com/CVE-2023-4046/): Memory corruption in Firefox (medium 5.3)
- [CVE-2023-40459](https://insights.sbomify.com/CVE-2023-40459/): Improper input leads to DoS (high 7.5)
- [CVE-2023-40458](https://insights.sbomify.com/CVE-2023-40458/): AceManager DOS Vulnerability (high 7.5)
- [CVE-2023-40457](https://insights.sbomify.com/CVE-2023-40457/): The BGP daemon in Extreme Networks ExtremeXOS (aka EXOS) 30.7.1.1 allows an attacker (who is not on a directly connected network) to cause a (not scored)
- [CVE-2023-40456](https://insights.sbomify.com/CVE-2023-40456/): Information disclosure in iOS and iPadOS (low 3.3)
- [CVE-2023-40455](https://insights.sbomify.com/CVE-2023-40455/): Security feature bypass in macOS (critical 10.0)
- [CVE-2023-40454](https://insights.sbomify.com/CVE-2023-40454/): Missing authorization in iOS and iPadOS (high 7.1)
- [CVE-2023-40453](https://insights.sbomify.com/CVE-2023-40453/): Other in docker:machine (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/246/