# Vulnerabilities published in 2023


- [CVE-2023-38138](https://insights.sbomify.com/CVE-2023-38138/): BIG-IP Configuration utility vulnerability (high 7.5)
- [CVE-2023-38136](https://insights.sbomify.com/CVE-2023-38136/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2023-38135](https://insights.sbomify.com/CVE-2023-38135/): Privilege escalation in Intel(R) PM software (medium 6.7)
- [CVE-2023-38133](https://insights.sbomify.com/CVE-2023-38133/): Information disclosure in Safari (medium 6.5)
- [CVE-2023-38132](https://insights.sbomify.com/CVE-2023-38132/): Auth bypass in LAN-W451NGR (high 8.8)
- [CVE-2023-38131](https://insights.sbomify.com/CVE-2023-38131/): Denial of service in Intel Unison software (medium 6.5)
- [CVE-2023-38130](https://insights.sbomify.com/CVE-2023-38130/): Cross-site request forgery in CubeCart (high 8.1)
- [CVE-2023-3813](https://insights.sbomify.com/CVE-2023-3813/): Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download (high 7.5)
- [CVE-2023-38128](https://insights.sbomify.com/CVE-2023-38128/): Memory corruption in Ichitaro 2023 (high 7.8)
- [CVE-2023-38127](https://insights.sbomify.com/CVE-2023-38127/): Integer overflow in Ichitaro 2023 (high 7.8)
- [CVE-2023-38126](https://insights.sbomify.com/CVE-2023-38126/): Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability (high 7.2)
- [CVE-2023-38125](https://insights.sbomify.com/CVE-2023-38125/): Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerability (high 7.5)
- [CVE-2023-38124](https://insights.sbomify.com/CVE-2023-38124/): Code injection in Ignition (high 7.2)
- [CVE-2023-38123](https://insights.sbomify.com/CVE-2023-38123/): Auth bypass in Ignition (high 7.5)
- [CVE-2023-38122](https://insights.sbomify.com/CVE-2023-38122/): Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnerability (high 7.2)
- [CVE-2023-38121](https://insights.sbomify.com/CVE-2023-38121/): Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability (high 8.3)
- [CVE-2023-38120](https://insights.sbomify.com/CVE-2023-38120/): Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-3812](https://insights.sbomify.com/CVE-2023-3812/): Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags (high 7.8)
- [CVE-2023-38119](https://insights.sbomify.com/CVE-2023-38119/): Foxit PDF Reader AcroForm signature Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38118](https://insights.sbomify.com/CVE-2023-38118/): Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38117](https://insights.sbomify.com/CVE-2023-38117/): Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38116](https://insights.sbomify.com/CVE-2023-38116/): Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-38115](https://insights.sbomify.com/CVE-2023-38115/): Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-38114](https://insights.sbomify.com/CVE-2023-38114/): Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38113](https://insights.sbomify.com/CVE-2023-38113/): Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-38112](https://insights.sbomify.com/CVE-2023-38112/): Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38111](https://insights.sbomify.com/CVE-2023-38111/): Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38110](https://insights.sbomify.com/CVE-2023-38110/): Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-3811](https://insights.sbomify.com/CVE-2023-3811/): Hospital Management System patientprofile.php sql injection (medium 6.3)
- [CVE-2023-38109](https://insights.sbomify.com/CVE-2023-38109/): Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-38108](https://insights.sbomify.com/CVE-2023-38108/): Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-38107](https://insights.sbomify.com/CVE-2023-38107/): Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38106](https://insights.sbomify.com/CVE-2023-38106/): Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-38105](https://insights.sbomify.com/CVE-2023-38105/): Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-38104](https://insights.sbomify.com/CVE-2023-38104/): GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-38103](https://insights.sbomify.com/CVE-2023-38103/): GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-38102](https://insights.sbomify.com/CVE-2023-38102/): NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability (high 8.8)
- [CVE-2023-38101](https://insights.sbomify.com/CVE-2023-38101/): Code injection in ProSAFE Network Management System (high 7.2)
- [CVE-2023-38100](https://insights.sbomify.com/CVE-2023-38100/): NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability (high 8.8)
- [CVE-2023-3810](https://insights.sbomify.com/CVE-2023-3810/): Hospital Management System patientappointment.php sql injection (medium 6.3)
- [CVE-2023-38099](https://insights.sbomify.com/CVE-2023-38099/): NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-38098](https://insights.sbomify.com/CVE-2023-38098/): NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-38097](https://insights.sbomify.com/CVE-2023-38097/): Code injection in ProSAFE Network Management System (high 7.2)
- [CVE-2023-38096](https://insights.sbomify.com/CVE-2023-38096/): NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2023-38095](https://insights.sbomify.com/CVE-2023-38095/): File upload in ProSAFE Network Management System (high 8.8)
- [CVE-2023-38094](https://insights.sbomify.com/CVE-2023-38094/): Kofax Power PDF replacePages Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38093](https://insights.sbomify.com/CVE-2023-38093/): Kofax Power PDF saveAs Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38092](https://insights.sbomify.com/CVE-2023-38092/): Kofax Power PDF importDataObject Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38091](https://insights.sbomify.com/CVE-2023-38091/): Kofax Power PDF response Type Confusion Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38090](https://insights.sbomify.com/CVE-2023-38090/): Kofax Power PDF popUpMenu Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-3809](https://insights.sbomify.com/CVE-2023-3809/): Hospital Management System patient.php sql injection (medium 6.3)
- [CVE-2023-38089](https://insights.sbomify.com/CVE-2023-38089/): Kofax Power PDF clearInterval Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38088](https://insights.sbomify.com/CVE-2023-38088/): Kofax Power PDF printf Uninitialized Variable Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38087](https://insights.sbomify.com/CVE-2023-38087/): Kofax Power PDF clearTimeOut Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38086](https://insights.sbomify.com/CVE-2023-38086/): Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-38085](https://insights.sbomify.com/CVE-2023-38085/): Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-38084](https://insights.sbomify.com/CVE-2023-38084/): Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38083](https://insights.sbomify.com/CVE-2023-38083/): Kofax Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38082](https://insights.sbomify.com/CVE-2023-38082/): Kofax Power PDF GIF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38081](https://insights.sbomify.com/CVE-2023-38081/): Kofax Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38080](https://insights.sbomify.com/CVE-2023-38080/): Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-3808](https://insights.sbomify.com/CVE-2023-3808/): Hospital Management System patientforgotpassword.php sql injection (medium 6.3)
- [CVE-2023-38079](https://insights.sbomify.com/CVE-2023-38079/): Kofax Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-38078](https://insights.sbomify.com/CVE-2023-38078/): Kofax Power PDF U3D File Parsing Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-38077](https://insights.sbomify.com/CVE-2023-38077/): Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-38076](https://insights.sbomify.com/CVE-2023-38076/): Memory corruption in JT2Go (high 7.8)
- [CVE-2023-38075](https://insights.sbomify.com/CVE-2023-38075/): Use after free in JT2Go (high 7.8)
- [CVE-2023-38074](https://insights.sbomify.com/CVE-2023-38074/): Memory corruption in JT2Go (high 7.8)
- [CVE-2023-38073](https://insights.sbomify.com/CVE-2023-38073/): Memory corruption in JT2Go (high 7.8)
- [CVE-2023-38072](https://insights.sbomify.com/CVE-2023-38072/): Memory corruption in JT2Go (high 7.8)
- [CVE-2023-38071](https://insights.sbomify.com/CVE-2023-38071/): Memory corruption in JT2Go (high 7.8)
- [CVE-2023-38070](https://insights.sbomify.com/CVE-2023-38070/): Memory corruption in JT2Go (high 7.8)
- [CVE-2023-3807](https://insights.sbomify.com/CVE-2023-3807/): Campcodes Beauty Salon Management System edit_product.php sql injection (medium 6.3)
- [CVE-2023-38069](https://insights.sbomify.com/CVE-2023-38069/): Security feature bypass in IntelliJ IDEA (low 3.3)
- [CVE-2023-38068](https://insights.sbomify.com/CVE-2023-38068/): Security feature bypass in YouTrack (medium 6.5)
- [CVE-2023-38067](https://insights.sbomify.com/CVE-2023-38067/): Information disclosure in TeamCity (medium 4.3)
- [CVE-2023-38066](https://insights.sbomify.com/CVE-2023-38066/): Cross-site scripting in TeamCity (medium 4.6)
- [CVE-2023-38065](https://insights.sbomify.com/CVE-2023-38065/): Cross-site scripting in TeamCity (medium 4.6)
- [CVE-2023-38064](https://insights.sbomify.com/CVE-2023-38064/): Information disclosure in TeamCity (medium 4.3)
- [CVE-2023-38063](https://insights.sbomify.com/CVE-2023-38063/): Cross-site scripting in TeamCity (medium 4.6)
- [CVE-2023-38062](https://insights.sbomify.com/CVE-2023-38062/): Information disclosure in TeamCity (medium 4.3)
- [CVE-2023-38061](https://insights.sbomify.com/CVE-2023-38061/): Cross-site scripting in TeamCity (medium 4.6)
- [CVE-2023-38060](https://insights.sbomify.com/CVE-2023-38060/): Host header injection by attachments in web service (medium 6.3)
- [CVE-2023-3806](https://insights.sbomify.com/CVE-2023-3806/): SourceCodester House Rental and Property Listing System btn_functions.php unrestricted upload (medium 6.3)
- [CVE-2023-38059](https://insights.sbomify.com/CVE-2023-38059/): External pictures can be loaded even if not allowed by configuration (medium 5.3)
- [CVE-2023-38058](https://insights.sbomify.com/CVE-2023-38058/): Tickets can be moved without permissions (medium 4.1)
- [CVE-2023-38057](https://insights.sbomify.com/CVE-2023-38057/): XSS stored in survey answers (medium 4.1)
- [CVE-2023-38056](https://insights.sbomify.com/CVE-2023-38056/): Code execution via System Configuration (high 7.2)
- [CVE-2023-38055](https://insights.sbomify.com/CVE-2023-38055/): A BOLA vulnerability in GET, PUT, DELETE /services/{serviceId} in EasyAppointments < 1.5.0 (critical 9.6)
- [CVE-2023-38054](https://insights.sbomify.com/CVE-2023-38054/): A BOLA vulnerability in GET, PUT, DELETE /customers/{customerId} in EasyAppointments < 1.5.0 (critical 9.9)
- [CVE-2023-38053](https://insights.sbomify.com/CVE-2023-38053/): A BOLA vulnerability in GET, PUT, DELETE /settings/{settingName} in EasyAppointments < 1.5.0 (critical 9.9)
- [CVE-2023-38052](https://insights.sbomify.com/CVE-2023-38052/): A BOLA vulnerability in GET, PUT, DELETE /admins/{adminId} in EasyAppointments < 1.5.0 (critical 9.9)
- [CVE-2023-38051](https://insights.sbomify.com/CVE-2023-38051/): A BOLA vulnerability in GET, PUT, DELETE /secretaries/{secretaryId} in EasyAppointments < 1.5.0 (critical 9.9)
- [CVE-2023-38050](https://insights.sbomify.com/CVE-2023-38050/): A BOLA vulnerability in GET, PUT, DELETE /webhooks/{webhookId} in EasyAppointments < 1.5.0 (critical 9.1)
- [CVE-2023-3805](https://insights.sbomify.com/CVE-2023-3805/): Xiamen Four Letter Video Surveillance Management System Login UserInfoAction.class improper authorization (high 7.3)
- [CVE-2023-38049](https://insights.sbomify.com/CVE-2023-38049/): A BOLA vulnerability in GET, PUT, DELETE /appointments/{appointmentId} in EasyAppointments < 1.5.0 (critical 9.9)
- [CVE-2023-38048](https://insights.sbomify.com/CVE-2023-38048/): A BOLA vulnerability in GET, PUT, DELETE /providers/{providerId} in EasyAppointments < 1.5.0 (critical 9.9)
- [CVE-2023-38047](https://insights.sbomify.com/CVE-2023-38047/): A BOLA vulnerability in GET, PUT, DELETE /categories/{categoryId} in EasyAppointments < 1.5.0. (high 8.5)
- [CVE-2023-38046](https://insights.sbomify.com/CVE-2023-38046/): PAN-OS: Read System Files and Resources During Configuration Commit (medium 5.5)
- [CVE-2023-38045](https://insights.sbomify.com/CVE-2023-38045/): Extension - admiror-design-studio.com - XSS in Admiror Gallery component for Joomla 5.0.0-5.2.0 (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/266/