# Vulnerabilities published in 2023


- [CVE-2023-38449](https://insights.sbomify.com/CVE-2023-38449/): Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 (high 7.8)
- [CVE-2023-38448](https://insights.sbomify.com/CVE-2023-38448/): Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 (medium 5.5)
- [CVE-2023-38447](https://insights.sbomify.com/CVE-2023-38447/): Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 (medium 5.5)
- [CVE-2023-38446](https://insights.sbomify.com/CVE-2023-38446/): Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 (medium 5.5)
- [CVE-2023-38445](https://insights.sbomify.com/CVE-2023-38445/): Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 (medium 5.5)
- [CVE-2023-38444](https://insights.sbomify.com/CVE-2023-38444/): Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 (high 7.8)
- [CVE-2023-38443](https://insights.sbomify.com/CVE-2023-38443/): Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 (high 7.8)
- [CVE-2023-38442](https://insights.sbomify.com/CVE-2023-38442/): Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 (medium 5.5)
- [CVE-2023-38441](https://insights.sbomify.com/CVE-2023-38441/): Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 (medium 5.5)
- [CVE-2023-38440](https://insights.sbomify.com/CVE-2023-38440/): Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 (medium 5.5)
- [CVE-2023-3844](https://insights.sbomify.com/CVE-2023-3844/): mooSocial mooDating URL friends cross site scripting (low 3.5)
- [CVE-2023-38439](https://insights.sbomify.com/CVE-2023-38439/): Missing authorization in SC9832E/SC9863A/T606/T612/T616/T610/T618 (medium 5.5)
- [CVE-2023-38438](https://insights.sbomify.com/CVE-2023-38438/): Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 (medium 5.5)
- [CVE-2023-38437](https://insights.sbomify.com/CVE-2023-38437/): Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 (medium 5.5)
- [CVE-2023-38436](https://insights.sbomify.com/CVE-2023-38436/): Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 (medium 5.5)
- [CVE-2023-38435](https://insights.sbomify.com/CVE-2023-38435/): Apache Felix Healthcheck Webconsole Plugin: XSS in healthcheck webconsole plugin (medium 6.1)
- [CVE-2023-38434](https://insights.sbomify.com/CVE-2023-38434/): Memory corruption in xhttp project:xhttp (high 7.5)
- [CVE-2023-38433](https://insights.sbomify.com/CVE-2023-38433/): Hardcoded credentials in IP-90 (high 7.5)
- [CVE-2023-38432](https://insights.sbomify.com/CVE-2023-38432/): Memory corruption in linux:linux kernel (critical 9.1)
- [CVE-2023-38431](https://insights.sbomify.com/CVE-2023-38431/): Memory corruption in linux:linux kernel (critical 9.1)
- [CVE-2023-38430](https://insights.sbomify.com/CVE-2023-38430/): Memory corruption in linux:linux kernel (critical 9.1)
- [CVE-2023-3843](https://insights.sbomify.com/CVE-2023-3843/): mooSocial mooDating URL question cross site scripting (low 3.5)
- [CVE-2023-38429](https://insights.sbomify.com/CVE-2023-38429/): Memory corruption in linux:linux kernel (critical 9.8)
- [CVE-2023-38428](https://insights.sbomify.com/CVE-2023-38428/): Memory corruption in linux:linux kernel (critical 9.1)
- [CVE-2023-38427](https://insights.sbomify.com/CVE-2023-38427/): Integer overflow in linux:linux kernel (critical 9.8)
- [CVE-2023-38426](https://insights.sbomify.com/CVE-2023-38426/): Memory corruption in linux:linux kernel (critical 9.1)
- [CVE-2023-38425](https://insights.sbomify.com/CVE-2023-38425/): Memory corruption in iOS and iPadOS (high 7.2)
- [CVE-2023-38424](https://insights.sbomify.com/CVE-2023-38424/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2023-38423](https://insights.sbomify.com/CVE-2023-38423/): BIG-IP Configuration utility vulnerability (medium 5.4)
- [CVE-2023-38422](https://insights.sbomify.com/CVE-2023-38422/): Walchem Intuition Missing Authentication for Critical Function (high 7.5)
- [CVE-2023-38421](https://insights.sbomify.com/CVE-2023-38421/): Information disclosure in macOS (medium 5.5)
- [CVE-2023-38420](https://insights.sbomify.com/CVE-2023-38420/): Information disclosure in Intel(R) Power Gadget software for macOS (low 3.8)
- [CVE-2023-3842](https://insights.sbomify.com/CVE-2023-3842/): Pointware EasyInventory Easy2W.exe unquoted search path (high 7.8)
- [CVE-2023-38419](https://insights.sbomify.com/CVE-2023-38419/): BIG-IP and BIG-IQ iControl SOAP vulnerability (medium 4.3)
- [CVE-2023-38418](https://insights.sbomify.com/CVE-2023-38418/): BIG-IP Edge Client for macOS vulnerability (high 7.8)
- [CVE-2023-38417](https://insights.sbomify.com/CVE-2023-38417/): Denial of service in Intel(R) PROSet/Wireless WiFi software (medium 4.3)
- [CVE-2023-38412](https://insights.sbomify.com/CVE-2023-38412/): Memory corruption in netgear:r6900p firmware (high 8.8)
- [CVE-2023-38411](https://insights.sbomify.com/CVE-2023-38411/): Privilege escalation in Intel Smart Campus android application (low 3.9)
- [CVE-2023-38410](https://insights.sbomify.com/CVE-2023-38410/): Privilege escalation in iOS and iPadOS (high 7.8)
- [CVE-2023-3841](https://insights.sbomify.com/CVE-2023-3841/): NxFilter user.jsp cross-site request forgery (medium 4.3)
- [CVE-2023-38409](https://insights.sbomify.com/CVE-2023-38409/): Race condition in linux:linux kernel (medium 5.5)
- [CVE-2023-38408](https://insights.sbomify.com/CVE-2023-38408/): Code injection in fedoraproject:fedora (critical 9.8)
- [CVE-2023-38407](https://insights.sbomify.com/CVE-2023-38407/): Memory corruption in frrouting:frrouting (high 7.5)
- [CVE-2023-38406](https://insights.sbomify.com/CVE-2023-38406/): Memory corruption in frrouting:frrouting (critical 9.8)
- [CVE-2023-38405](https://insights.sbomify.com/CVE-2023-38405/): Denial of service in crestron:cp3-gv 6506034 firmware (high 7.5)
- [CVE-2023-38404](https://insights.sbomify.com/CVE-2023-38404/): File upload in veritas:infoscale operations manager (high 7.2)
- [CVE-2023-38403](https://insights.sbomify.com/CVE-2023-38403/): Integer overflow in apple:macos (high 7.5)
- [CVE-2023-38402](https://insights.sbomify.com/CVE-2023-38402/): Arbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client (high 7.1)
- [CVE-2023-38401](https://insights.sbomify.com/CVE-2023-38401/): Local Privilege Escalation in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client (high 7.8)
- [CVE-2023-38400](https://insights.sbomify.com/CVE-2023-38400/): WordPress Enfold Theme <= 5.6.4 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-3840](https://insights.sbomify.com/CVE-2023-3840/): NxFilter cross site scripting (low 3.5)
- [CVE-2023-38399](https://insights.sbomify.com/CVE-2023-38399/): WordPress Phlox Portfolio plugin <= 2.3.1 - Unauthenticated Local File Inclusion vulnerability (high 8.6)
- [CVE-2023-38398](https://insights.sbomify.com/CVE-2023-38398/): WordPress Taboola Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-38397](https://insights.sbomify.com/CVE-2023-38397/): WordPress Gestion-Pymes Plugin <= 1.5.6 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-38396](https://insights.sbomify.com/CVE-2023-38396/): WordPress Google Map Shortcode Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-38395](https://insights.sbomify.com/CVE-2023-38395/): WordPress WP Clone Menu plugin <= 1.0.1 - Broken Access Control vulnerability (medium 5.4)
- [CVE-2023-38394](https://insights.sbomify.com/CVE-2023-38394/): WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability (medium 5.4)
- [CVE-2023-38393](https://insights.sbomify.com/CVE-2023-38393/): WordPress Ninja Forms plugin <= 3.6.25 - Subscriber+ Broken Access Control vulnerability (high 7.6)
- [CVE-2023-38392](https://insights.sbomify.com/CVE-2023-38392/): WordPress Custom Field Template Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-38391](https://insights.sbomify.com/CVE-2023-38391/): WordPress Onepage Builder – Easiest Landing Page Builder For WordPress Plugin <= 2.4.1 is vulnerable to SQL Injection (medium 6.7)
- [CVE-2023-38390](https://insights.sbomify.com/CVE-2023-38390/): WordPress Mobile Address Bar Changer Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-3839](https://insights.sbomify.com/CVE-2023-3839/): DedeBIZ sys_sql_query.php sql injection (medium 4.1)
- [CVE-2023-38389](https://insights.sbomify.com/CVE-2023-38389/): WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability (critical 9.8)
- [CVE-2023-38388](https://insights.sbomify.com/CVE-2023-38388/): WordPress Jupiter X Core plugin <= 3.3.5 - Unauth. Arbitrary File Upload vulnerability (critical 9.0)
- [CVE-2023-38387](https://insights.sbomify.com/CVE-2023-38387/): WordPress Elastic Email Sender Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-38386](https://insights.sbomify.com/CVE-2023-38386/): WordPress Ninja Forms plugin <= 3.6.25 - Contributor+ Broken Access Control vulnerability (high 7.6)
- [CVE-2023-38385](https://insights.sbomify.com/CVE-2023-38385/): WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability (high 8.3)
- [CVE-2023-38384](https://insights.sbomify.com/CVE-2023-38384/): WordPress eaSYNC Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-38383](https://insights.sbomify.com/CVE-2023-38383/): WordPress Language plugin <= 1.2.1 - Broken Access Control vulnerability (medium 5.4)
- [CVE-2023-38382](https://insights.sbomify.com/CVE-2023-38382/): WordPress Subscribe to Category Plugin <= 2.7.4 is vulnerable to SQL Injection (critical 9.8)
- [CVE-2023-38381](https://insights.sbomify.com/CVE-2023-38381/): WordPress WP-FlyBox Plugin <= 6.46 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-38380](https://insights.sbomify.com/CVE-2023-38380/): Denial of service in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (high 8.7)
- [CVE-2023-3838](https://insights.sbomify.com/CVE-2023-3838/): DedeBIZ vote_edit.php cross site scripting (low 2.4)
- [CVE-2023-38379](https://insights.sbomify.com/CVE-2023-38379/): Auth bypass in rigol:mso5000 firmware (high 7.5)
- [CVE-2023-38378](https://insights.sbomify.com/CVE-2023-38378/): Command injection in rigol:mso5000 firmware (critical 9.8)
- [CVE-2023-38375](https://insights.sbomify.com/CVE-2023-38375/): IBM Cloud Pak System Cross-Site Scripting (medium 6.1)
- [CVE-2023-38372](https://insights.sbomify.com/CVE-2023-38372/): IBM Watson IoT Platform information disclosure (medium 5.9)
- [CVE-2023-38371](https://insights.sbomify.com/CVE-2023-38371/): IBM Security Access Manager Docker information disclosure (medium 5.9)
- [CVE-2023-38370](https://insights.sbomify.com/CVE-2023-38370/): IBM Security Access Manager Docker information disclosure (high 7.5)
- [CVE-2023-3837](https://insights.sbomify.com/CVE-2023-3837/): DedeBIZ sys_sql_query.php cross site scripting (low 2.4)
- [CVE-2023-38369](https://insights.sbomify.com/CVE-2023-38369/): IBM Security Access Manager Container information disclosure (medium 6.2)
- [CVE-2023-38368](https://insights.sbomify.com/CVE-2023-38368/): IBM Security Access Manager Docker information disclosure (medium 5.5)
- [CVE-2023-38367](https://insights.sbomify.com/CVE-2023-38367/): IBM Cloud Pak for Automation authentication bypass (medium 6.5)
- [CVE-2023-38366](https://insights.sbomify.com/CVE-2023-38366/): IBM FileNet Content Manager directory traversal (medium 5.3)
- [CVE-2023-38364](https://insights.sbomify.com/CVE-2023-38364/): IBM CICS TX Advanced cross-site scripting (medium 6.1)
- [CVE-2023-38363](https://insights.sbomify.com/CVE-2023-38363/): IBM CICS TX information disclosure (medium 4.3)
- [CVE-2023-38362](https://insights.sbomify.com/CVE-2023-38362/): IBM CICS TX information disclosure (medium 5.3)
- [CVE-2023-38361](https://insights.sbomify.com/CVE-2023-38361/): IBM CICS TX Advanced information disclosure (medium 5.9)
- [CVE-2023-38360](https://insights.sbomify.com/CVE-2023-38360/): IBM CICS TX cross-site scripting (medium 6.1)
- [CVE-2023-3836](https://insights.sbomify.com/CVE-2023-3836/): Dahua Smart Park Management unrestricted upload (medium 6.3)
- [CVE-2023-38359](https://insights.sbomify.com/CVE-2023-38359/): IBM Cognos Analytics cross-site scripting (medium 6.1)
- [CVE-2023-38357](https://insights.sbomify.com/CVE-2023-38357/): Weak cryptography in rws:worldserver (medium 5.3)
- [CVE-2023-38356](https://insights.sbomify.com/CVE-2023-38356/): Supply chain in minitool:power data recovery (high 8.1)
- [CVE-2023-38355](https://insights.sbomify.com/CVE-2023-38355/): Supply chain in minitool:movie maker (high 8.1)
- [CVE-2023-38354](https://insights.sbomify.com/CVE-2023-38354/): Weak cryptography in minitool:shadowmaker (high 8.1)
- [CVE-2023-38353](https://insights.sbomify.com/CVE-2023-38353/): Weak cryptography in minitool:power data recovery (medium 5.9)
- [CVE-2023-38352](https://insights.sbomify.com/CVE-2023-38352/): Security feature bypass in minitool:partition wizard (high 8.1)
- [CVE-2023-38351](https://insights.sbomify.com/CVE-2023-38351/): Weak cryptography in minitool:partition wizard (high 8.1)
- [CVE-2023-38350](https://insights.sbomify.com/CVE-2023-38350/): Cross-site scripting in pnp4nagios:pnp4nagios (medium 5.4)
- [CVE-2023-3835](https://insights.sbomify.com/CVE-2023-3835/): Bug Finder MineStack Ticket create cross site scripting (low 3.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/263/