# Vulnerabilities published in 2023


- [CVE-2023-38652](https://insights.sbomify.com/CVE-2023-38652/): Integer overflow in GTKWave (high 7.0)
- [CVE-2023-38651](https://insights.sbomify.com/CVE-2023-38651/): Integer overflow in GTKWave (high 7.0)
- [CVE-2023-38650](https://insights.sbomify.com/CVE-2023-38650/): Integer overflow in GTKWave (high 7.0)
- [CVE-2023-3865](https://insights.sbomify.com/CVE-2023-3865/): ksmbd: fix out-of-bound read in smb2_write (high 8.1)
- [CVE-2023-38649](https://insights.sbomify.com/CVE-2023-38649/): Memory corruption in GTKWave (high 7.8)
- [CVE-2023-38648](https://insights.sbomify.com/CVE-2023-38648/): Memory corruption in GTKWave (high 7.8)
- [CVE-2023-38647](https://insights.sbomify.com/CVE-2023-38647/): Apache Helix: Deserialization vulnerability in Helix workflow and REST (critical 9.8)
- [CVE-2023-38646](https://insights.sbomify.com/CVE-2023-38646/): Command injection in metabase:metabase (critical 9.8)
- [CVE-2023-38641](https://insights.sbomify.com/CVE-2023-38641/): Privilege escalation in SICAM TOOLBOX II (high 7.8)
- [CVE-2023-38640](https://insights.sbomify.com/CVE-2023-38640/): Misconfiguration in SICAM PAS/PQS (medium 6.6)
- [CVE-2023-3864](https://insights.sbomify.com/CVE-2023-3864/): SQL injection vulnerability in Snow License Manager (high 7.2)
- [CVE-2023-38633](https://insights.sbomify.com/CVE-2023-38633/): Path traversal in debian:debian linux (medium 5.5)
- [CVE-2023-38632](https://insights.sbomify.com/CVE-2023-38632/): Memory corruption in asynchronous sockets for c\+\+ project:asynchronous sockets for c\+\+ (critical 9.8)
- [CVE-2023-3863](https://insights.sbomify.com/CVE-2023-3863/): Use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c (medium 6.4)
- [CVE-2023-38627](https://insights.sbomify.com/CVE-2023-38627/): Server-side request forgery in Trend Micro Apex Central (medium 5.4)
- [CVE-2023-38626](https://insights.sbomify.com/CVE-2023-38626/): Server-side request forgery in Trend Micro Apex Central (medium 5.4)
- [CVE-2023-38625](https://insights.sbomify.com/CVE-2023-38625/): Server-side request forgery in Trend Micro Apex Central (medium 5.4)
- [CVE-2023-38624](https://insights.sbomify.com/CVE-2023-38624/): Server-side request forgery in Trend Micro Apex Central (medium 5.4)
- [CVE-2023-38623](https://insights.sbomify.com/CVE-2023-38623/): Integer overflow in GTKWave (high 7.8)
- [CVE-2023-38622](https://insights.sbomify.com/CVE-2023-38622/): Integer overflow in GTKWave (high 7.8)
- [CVE-2023-38621](https://insights.sbomify.com/CVE-2023-38621/): Integer overflow in GTKWave (high 7.8)
- [CVE-2023-38620](https://insights.sbomify.com/CVE-2023-38620/): Integer overflow in GTKWave (high 7.8)
- [CVE-2023-3862](https://insights.sbomify.com/CVE-2023-3862/): Travelmate Travelable Trek Management Solution Comment Box cross site scripting (low 3.1)
- [CVE-2023-38619](https://insights.sbomify.com/CVE-2023-38619/): Integer overflow in GTKWave (high 7.8)
- [CVE-2023-38618](https://insights.sbomify.com/CVE-2023-38618/): Integer overflow in GTKWave (high 7.8)
- [CVE-2023-38617](https://insights.sbomify.com/CVE-2023-38617/): Cross-site scripting in mobisystems:office suite (medium 6.1)
- [CVE-2023-38616](https://insights.sbomify.com/CVE-2023-38616/): Race condition in macOS (high 7.0)
- [CVE-2023-38615](https://insights.sbomify.com/CVE-2023-38615/): Memory corruption in macOS (high 7.8)
- [CVE-2023-38614](https://insights.sbomify.com/CVE-2023-38614/): Privilege escalation in iOS and iPadOS (medium 4.3)
- [CVE-2023-38612](https://insights.sbomify.com/CVE-2023-38612/): Security feature bypass in iOS and iPadOS (low 3.3)
- [CVE-2023-38611](https://insights.sbomify.com/CVE-2023-38611/): Memory corruption in Safari (high 8.8)
- [CVE-2023-38610](https://insights.sbomify.com/CVE-2023-38610/): Memory corruption in iOS and iPadOS (high 7.1)
- [CVE-2023-3861](https://insights.sbomify.com/CVE-2023-3861/): phpscriptpoint Insurance search.php cross site scripting (low 3.5)
- [CVE-2023-38609](https://insights.sbomify.com/CVE-2023-38609/): Security feature bypass in macOS (high 7.5)
- [CVE-2023-38608](https://insights.sbomify.com/CVE-2023-38608/): Missing authorization in macOS (medium 5.5)
- [CVE-2023-38607](https://insights.sbomify.com/CVE-2023-38607/): Other in macOS (medium 5.5)
- [CVE-2023-38606](https://insights.sbomify.com/CVE-2023-38606/): Apple Multiple Products Kernel Unspecified (medium 5.5, exploited in the wild)
- [CVE-2023-38605](https://insights.sbomify.com/CVE-2023-38605/): Information disclosure in macOS (low 3.3)
- [CVE-2023-38604](https://insights.sbomify.com/CVE-2023-38604/): Memory corruption in iOS and iPadOS (critical 9.8)
- [CVE-2023-38603](https://insights.sbomify.com/CVE-2023-38603/): Denial of service in iOS and iPadOS (high 7.5)
- [CVE-2023-38602](https://insights.sbomify.com/CVE-2023-38602/): Security feature bypass in macOS (medium 5.5)
- [CVE-2023-38601](https://insights.sbomify.com/CVE-2023-38601/): Security feature bypass in macOS (high 7.5)
- [CVE-2023-38600](https://insights.sbomify.com/CVE-2023-38600/): Memory corruption in Safari (high 8.8)
- [CVE-2023-3860](https://insights.sbomify.com/CVE-2023-3860/): phpscriptpoint Insurance page.php cross site scripting (low 3.5)
- [CVE-2023-38599](https://insights.sbomify.com/CVE-2023-38599/): Business logic in Safari (medium 6.5)
- [CVE-2023-38598](https://insights.sbomify.com/CVE-2023-38598/): Use after free in iOS and iPadOS (critical 9.8)
- [CVE-2023-38597](https://insights.sbomify.com/CVE-2023-38597/): Memory corruption in Safari (high 8.8)
- [CVE-2023-38596](https://insights.sbomify.com/CVE-2023-38596/): Security feature bypass in iOS and iPadOS (medium 5.5)
- [CVE-2023-38595](https://insights.sbomify.com/CVE-2023-38595/): Memory corruption in Safari (high 8.8)
- [CVE-2023-38594](https://insights.sbomify.com/CVE-2023-38594/): Memory corruption in Safari (high 8.8)
- [CVE-2023-38593](https://insights.sbomify.com/CVE-2023-38593/): Business logic in iOS and iPadOS (medium 5.5)
- [CVE-2023-38592](https://insights.sbomify.com/CVE-2023-38592/): Business logic in iOS and iPadOS (high 8.8)
- [CVE-2023-38591](https://insights.sbomify.com/CVE-2023-38591/): Memory corruption in netgear:dg834gv5 firmware (high 8.8)
- [CVE-2023-38590](https://insights.sbomify.com/CVE-2023-38590/): Memory corruption in iOS and iPadOS (high 8.8)
- [CVE-2023-3859](https://insights.sbomify.com/CVE-2023-3859/): phpscriptpoint Car Listing GET Parameter search.php sql injection (medium 6.3)
- [CVE-2023-38588](https://insights.sbomify.com/CVE-2023-38588/): Command injection in Archer C3150 (high 8.0)
- [CVE-2023-38587](https://insights.sbomify.com/CVE-2023-38587/): Privilege escalation in Intel NUC BIOS firmware (high 7.5)
- [CVE-2023-38586](https://insights.sbomify.com/CVE-2023-38586/): Security feature bypass in macOS (critical 10.0)
- [CVE-2023-38585](https://insights.sbomify.com/CVE-2023-38585/): Auth bypass in DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series (high 8.8)
- [CVE-2023-38584](https://insights.sbomify.com/CVE-2023-38584/): Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow (critical 9.8)
- [CVE-2023-38583](https://insights.sbomify.com/CVE-2023-38583/): Memory corruption in GTKWave (high 7.8)
- [CVE-2023-38582](https://insights.sbomify.com/CVE-2023-38582/): Socomec MOD3GP-SY-120K Cross-site Scripting (medium 6.3)
- [CVE-2023-38581](https://insights.sbomify.com/CVE-2023-38581/): Memory corruption in Intel(R) Power Gadget software for Windows (high 8.8)
- [CVE-2023-38580](https://insights.sbomify.com/CVE-2023-38580/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2023-3858](https://insights.sbomify.com/CVE-2023-3858/): phpscriptpoint Car Listing search.php cross site scripting (low 3.5)
- [CVE-2023-38579](https://insights.sbomify.com/CVE-2023-38579/): Westermo Lynx 206-F2G Cross-Site Request Forgery (high 8.0)
- [CVE-2023-38576](https://insights.sbomify.com/CVE-2023-38576/): Command injection in LAN-WH300N/RE (high 8.0)
- [CVE-2023-38575](https://insights.sbomify.com/CVE-2023-38575/): Information disclosure in Intel(R) Processors (medium 5.5)
- [CVE-2023-38574](https://insights.sbomify.com/CVE-2023-38574/): Open redirect in VI Web Client (medium 6.1)
- [CVE-2023-38573](https://insights.sbomify.com/CVE-2023-38573/): Use after free in Foxit Reader (high 8.8)
- [CVE-2023-38572](https://insights.sbomify.com/CVE-2023-38572/): Security feature bypass in Safari (high 7.5)
- [CVE-2023-38571](https://insights.sbomify.com/CVE-2023-38571/): Security feature bypass in macOS (high 7.5)
- [CVE-2023-38570](https://insights.sbomify.com/CVE-2023-38570/): Memory corruption in Intel Unison software (medium 5.3)
- [CVE-2023-3857](https://insights.sbomify.com/CVE-2023-3857/): phpscriptpoint Ecommerce product.php cross site scripting (low 3.5)
- [CVE-2023-38569](https://insights.sbomify.com/CVE-2023-38569/): Cross-site scripting in SHIRASAGI (medium 5.4)
- [CVE-2023-38568](https://insights.sbomify.com/CVE-2023-38568/): Command injection in Archer A10 (high 8.8)
- [CVE-2023-38566](https://insights.sbomify.com/CVE-2023-38566/): Privilege escalation in Intel(R) ISPC software (medium 6.7)
- [CVE-2023-38565](https://insights.sbomify.com/CVE-2023-38565/): Path traversal in iOS and iPadOS (high 7.8)
- [CVE-2023-38564](https://insights.sbomify.com/CVE-2023-38564/): Security feature bypass in macOS (high 7.5)
- [CVE-2023-38563](https://insights.sbomify.com/CVE-2023-38563/): Command injection in Archer C1200 (high 8.8)
- [CVE-2023-38562](https://insights.sbomify.com/CVE-2023-38562/): Memory corruption in uC-TCP-IP (high 8.7)
- [CVE-2023-38561](https://insights.sbomify.com/CVE-2023-38561/): Privilege escalation in Intel(R) XTU software (medium 5.5)
- [CVE-2023-38560](https://insights.sbomify.com/CVE-2023-38560/): Ghostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name (medium 5.5)
- [CVE-2023-3856](https://insights.sbomify.com/CVE-2023-3856/): phpscriptpoint Ecommerce blog-single.php cross site scripting (low 3.5)
- [CVE-2023-38559](https://insights.sbomify.com/CVE-2023-38559/): Ghostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos (medium 5.5)
- [CVE-2023-38558](https://insights.sbomify.com/CVE-2023-38558/): Information disclosure in SIMATIC PCS neo (Administration Console) V4.0 (medium 5.5)
- [CVE-2023-38557](https://insights.sbomify.com/CVE-2023-38557/): Privilege escalation in Spectrum Power 7 (high 8.2)
- [CVE-2023-38556](https://insights.sbomify.com/CVE-2023-38556/): Denial of service in SEIKO EPSON printer Web Config (high 7.5)
- [CVE-2023-38555](https://insights.sbomify.com/CVE-2023-38555/): Auth bypass in SR-M 50AP1 (high 8.8)
- [CVE-2023-38554](https://insights.sbomify.com/CVE-2023-38554/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-38553](https://insights.sbomify.com/CVE-2023-38553/): Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 6.7)
- [CVE-2023-38552](https://insights.sbomify.com/CVE-2023-38552/): Security feature bypass in Node (high 7.5)
- [CVE-2023-38551](https://insights.sbomify.com/CVE-2023-38551/): Cross-site scripting in Connect Secure (high 8.2)
- [CVE-2023-3855](https://insights.sbomify.com/CVE-2023-3855/): phpscriptpoint JobSeeker search-result.php cross site scripting (low 3.5)
- [CVE-2023-38549](https://insights.sbomify.com/CVE-2023-38549/): Cross-site scripting in One (medium 4.5)
- [CVE-2023-38548](https://insights.sbomify.com/CVE-2023-38548/): Information disclosure in One (critical 9.8)
- [CVE-2023-38547](https://insights.sbomify.com/CVE-2023-38547/): Information disclosure in One (critical 9.9)
- [CVE-2023-38546](https://insights.sbomify.com/CVE-2023-38546/): Information disclosure in curl (low 3.7)
- [CVE-2023-38545](https://insights.sbomify.com/CVE-2023-38545/): Memory corruption in curl (high 8.8)
- [CVE-2023-38544](https://insights.sbomify.com/CVE-2023-38544/): Missing authorization in Secure Access Linux (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/261/