# Vulnerabilities published in 2023


- [CVE-2023-37415](https://insights.sbomify.com/CVE-2023-37415/): Apache Airflow Apache Hive Provider: Improper Input Validation in Hive Provider with proxy_user (high 8.8)
- [CVE-2023-37413](https://insights.sbomify.com/CVE-2023-37413/): IBM Aspera Faspex information disclosure (medium 5.3)
- [CVE-2023-37412](https://insights.sbomify.com/CVE-2023-37412/): IBM Aspera Faspex improper access control (medium 4.4)
- [CVE-2023-37411](https://insights.sbomify.com/CVE-2023-37411/): IBM Aspera Faspex cross-site scripting (medium 4.8)
- [CVE-2023-37410](https://insights.sbomify.com/CVE-2023-37410/): IBM Personal Communications privilege escalation (high 8.4)
- [CVE-2023-3741](https://insights.sbomify.com/CVE-2023-3741/): Command injection in ITK-12D-1(BK)TEL (critical 9.8)
- [CVE-2023-37407](https://insights.sbomify.com/CVE-2023-37407/): IBM Aspera Orchestrator command execution (high 8.8)
- [CVE-2023-37405](https://insights.sbomify.com/CVE-2023-37405/): IBM Cloud Pak System information disclosure (medium 6.5)
- [CVE-2023-37404](https://insights.sbomify.com/CVE-2023-37404/): IBM Observability with Instana code execution (medium 6.4)
- [CVE-2023-37401](https://insights.sbomify.com/CVE-2023-37401/): IBM Aspera Faspex cross-origin resource sharing (medium 5.3)
- [CVE-2023-37400](https://insights.sbomify.com/CVE-2023-37400/): IBM Aspera Faspex privilege escalation (high 7.8)
- [CVE-2023-3740](https://insights.sbomify.com/CVE-2023-3740/): Other in Chrome (medium 4.3)
- [CVE-2023-37398](https://insights.sbomify.com/CVE-2023-37398/): IBM Aspera Faspex information disclosure (medium 5.9)
- [CVE-2023-37397](https://insights.sbomify.com/CVE-2023-37397/): IBM Aspera Faspex data manipulation (low 3.6)
- [CVE-2023-37396](https://insights.sbomify.com/CVE-2023-37396/): IBM Aspera Faspex information disclosure (low 2.5)
- [CVE-2023-37395](https://insights.sbomify.com/CVE-2023-37395/): IBM Aspera Faspex information disclosure (low 2.5)
- [CVE-2023-37394](https://insights.sbomify.com/CVE-2023-37394/): WordPress WP Dummy Content Generator plugin <= 2.3.0 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2023-37393](https://insights.sbomify.com/CVE-2023-37393/): WordPress Atarim Plugin <= 3.9.3 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-37392](https://insights.sbomify.com/CVE-2023-37392/): WordPress WP Dummy Content Generator Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-37391](https://insights.sbomify.com/CVE-2023-37391/): WordPress WordPress Mobile Pack Plugin <= 3.4.1 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-37390](https://insights.sbomify.com/CVE-2023-37390/): WordPress Themesflat Addons For Elementor Plugin <= 2.0.0 is vulnerable to PHP Object Injection (high 8.3)
- [CVE-2023-3739](https://insights.sbomify.com/CVE-2023-3739/): Command injection in Chrome (medium 6.3)
- [CVE-2023-37389](https://insights.sbomify.com/CVE-2023-37389/): WordPress Booking Package SAASPROJECT plugin <= 1.5.98 - Unauthenticated Privilege Escalation vulnerability (high 8.8)
- [CVE-2023-37388](https://insights.sbomify.com/CVE-2023-37388/): Cross-site scripting in Simple Light Weight Social Share (medium 5.9)
- [CVE-2023-37387](https://insights.sbomify.com/CVE-2023-37387/): WordPress Classified Listing Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-37386](https://insights.sbomify.com/CVE-2023-37386/): WordPress Media Library Helper by Codexin Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-37385](https://insights.sbomify.com/CVE-2023-37385/): WordPress Consulting theme <= 6.5.6 - Local File Inclusion (high 7.3)
- [CVE-2023-3738](https://insights.sbomify.com/CVE-2023-3738/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2023-37379](https://insights.sbomify.com/CVE-2023-37379/): Apache Airflow: Exposure of sensitive connection information, DOS and SSRF on "test connection" feature (high 8.1)
- [CVE-2023-37378](https://insights.sbomify.com/CVE-2023-37378/): Misconfiguration in nullsoft:nullsoft scriptable install system (medium 5.3)
- [CVE-2023-37377](https://insights.sbomify.com/CVE-2023-37377/): Memory corruption in samsung:exynos 2100 firmware (low 2.0)
- [CVE-2023-37376](https://insights.sbomify.com/CVE-2023-37376/): Memory corruption in Tecnomatix Plant Simulation V2201 (high 7.8)
- [CVE-2023-37375](https://insights.sbomify.com/CVE-2023-37375/): Memory corruption in Tecnomatix Plant Simulation V2201 (high 7.8)
- [CVE-2023-37374](https://insights.sbomify.com/CVE-2023-37374/): Memory corruption in Tecnomatix Plant Simulation V2201 (high 7.8)
- [CVE-2023-37373](https://insights.sbomify.com/CVE-2023-37373/): Missing authorization in RUGGEDCOM CROSSBOW (medium 5.3)
- [CVE-2023-37372](https://insights.sbomify.com/CVE-2023-37372/): SQL injection in RUGGEDCOM CROSSBOW (critical 9.8)
- [CVE-2023-3737](https://insights.sbomify.com/CVE-2023-3737/): Other in Chrome (medium 4.3)
- [CVE-2023-37369](https://insights.sbomify.com/CVE-2023-37369/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2023-37368](https://insights.sbomify.com/CVE-2023-37368/): Null dereference in samsung:exynos 1080 firmware (medium 5.9)
- [CVE-2023-37367](https://insights.sbomify.com/CVE-2023-37367/): Denial of service in samsung:exynos 1080 firmware (medium 5.3)
- [CVE-2023-37366](https://insights.sbomify.com/CVE-2023-37366/): Denial of service in Exynos 850 firmware (low 2.8)
- [CVE-2023-37365](https://insights.sbomify.com/CVE-2023-37365/): hnswlib Double Free vulnerability (medium 6.5)
- [CVE-2023-37364](https://insights.sbomify.com/CVE-2023-37364/): XML external entity in ws-inc:j wbem (critical 9.1)
- [CVE-2023-37362](https://insights.sbomify.com/CVE-2023-37362/): Weintek Weincloud Improper Authentication (high 7.2)
- [CVE-2023-37361](https://insights.sbomify.com/CVE-2023-37361/): SQL injection in vanderbilt:redcap (low 2.7)
- [CVE-2023-37360](https://insights.sbomify.com/CVE-2023-37360/): Cross-site scripting in pacparser project:pacparser (medium 5.9)
- [CVE-2023-3736](https://insights.sbomify.com/CVE-2023-3736/): Information disclosure in Chrome (medium 4.3)
- [CVE-2023-37359](https://insights.sbomify.com/CVE-2023-37359/): Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-37358](https://insights.sbomify.com/CVE-2023-37358/): Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-37357](https://insights.sbomify.com/CVE-2023-37357/): Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-37356](https://insights.sbomify.com/CVE-2023-37356/): Kofax Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-37355](https://insights.sbomify.com/CVE-2023-37355/): Kofax Power PDF JPG File Parsing Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-37354](https://insights.sbomify.com/CVE-2023-37354/): Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37353](https://insights.sbomify.com/CVE-2023-37353/): Kofax Power PDF JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-37352](https://insights.sbomify.com/CVE-2023-37352/): Kofax Power PDF JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-37351](https://insights.sbomify.com/CVE-2023-37351/): Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-37350](https://insights.sbomify.com/CVE-2023-37350/): Kofax Power PDF TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-3735](https://insights.sbomify.com/CVE-2023-3735/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2023-37349](https://insights.sbomify.com/CVE-2023-37349/): Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37348](https://insights.sbomify.com/CVE-2023-37348/): Kofax Power PDF U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37347](https://insights.sbomify.com/CVE-2023-37347/): Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37346](https://insights.sbomify.com/CVE-2023-37346/): Kofax Power PDF TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37345](https://insights.sbomify.com/CVE-2023-37345/): Kofax Power PDF J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37344](https://insights.sbomify.com/CVE-2023-37344/): Kofax Power PDF BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37343](https://insights.sbomify.com/CVE-2023-37343/): Kofax Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37342](https://insights.sbomify.com/CVE-2023-37342/): Kofax Power PDF PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37341](https://insights.sbomify.com/CVE-2023-37341/): Kofax Power PDF PNG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37340](https://insights.sbomify.com/CVE-2023-37340/): Kofax Power PDF PNG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-3734](https://insights.sbomify.com/CVE-2023-3734/): Other in Chrome (medium 4.3)
- [CVE-2023-37339](https://insights.sbomify.com/CVE-2023-37339/): Kofax Power PDF PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37338](https://insights.sbomify.com/CVE-2023-37338/): Kofax Power PDF GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37337](https://insights.sbomify.com/CVE-2023-37337/): Kofax Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37336](https://insights.sbomify.com/CVE-2023-37336/): Kofax Power PDF TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37335](https://insights.sbomify.com/CVE-2023-37335/): Kofax Power PDF BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37334](https://insights.sbomify.com/CVE-2023-37334/): Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37333](https://insights.sbomify.com/CVE-2023-37333/): Kofax Power PDF PCX File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37332](https://insights.sbomify.com/CVE-2023-37332/): Kofax Power PDF PNG File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37331](https://insights.sbomify.com/CVE-2023-37331/): Kofax Power PDF GIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-37330](https://insights.sbomify.com/CVE-2023-37330/): Kofax Power PDF exportAsText Exposed Dangerous Method Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-3733](https://insights.sbomify.com/CVE-2023-3733/): Other in Chrome (medium 4.3)
- [CVE-2023-37329](https://insights.sbomify.com/CVE-2023-37329/): GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-37328](https://insights.sbomify.com/CVE-2023-37328/): GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-37327](https://insights.sbomify.com/CVE-2023-37327/): GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability (high 7.6)
- [CVE-2023-37326](https://insights.sbomify.com/CVE-2023-37326/): D-Link DAP-2622 DDP Set Wireless Info Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-37325](https://insights.sbomify.com/CVE-2023-37325/): D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability (medium 5.4)
- [CVE-2023-37324](https://insights.sbomify.com/CVE-2023-37324/): D-Link DAP-2622 DDP Set Wireless Info Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-37323](https://insights.sbomify.com/CVE-2023-37323/): D-Link DAP-2622 DDP Set SSID List PSK Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-37322](https://insights.sbomify.com/CVE-2023-37322/): D-Link DAP-2622 DDP Set SSID List RADIUS Server Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-37321](https://insights.sbomify.com/CVE-2023-37321/): D-Link DAP-2622 DDP Set SSID List RADIUS Secret Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-37320](https://insights.sbomify.com/CVE-2023-37320/): D-Link DAP-2622 DDP Set SSID List SSID Name Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-3732](https://insights.sbomify.com/CVE-2023-3732/): Memory corruption in Chrome (high 8.8)
- [CVE-2023-37319](https://insights.sbomify.com/CVE-2023-37319/): D-Link DAP-2622 DDP Set IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-37318](https://insights.sbomify.com/CVE-2023-37318/): D-Link DAP-2622 DDP Set IPv6 Address Secondary DNS Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-37317](https://insights.sbomify.com/CVE-2023-37317/): D-Link DAP-2622 DDP Set IPv6 Address Primary DNS Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-37316](https://insights.sbomify.com/CVE-2023-37316/): D-Link DAP-2622 DDP Set IPv6 Address Default Gateway Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-37315](https://insights.sbomify.com/CVE-2023-37315/): D-Link DAP-2622 DDP Set IPv6 Address Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-37314](https://insights.sbomify.com/CVE-2023-37314/): D-Link DAP-2622 DDP Set IPv6 Address Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-37313](https://insights.sbomify.com/CVE-2023-37313/): D-Link DAP-2622 DDP Set IPv4 Address Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-37312](https://insights.sbomify.com/CVE-2023-37312/): D-Link DAP-2622 DDP Set Device Info Device Name Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-37311](https://insights.sbomify.com/CVE-2023-37311/): D-Link DAP-2622 DDP Set Device Info Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/272/