# Vulnerabilities published in 2023 - [CVE-2023-36892](https://insights.sbomify.com/CVE-2023-36892/): Microsoft SharePoint Server Spoofing Vulnerability (high 8.0) - [CVE-2023-36891](https://insights.sbomify.com/CVE-2023-36891/): Microsoft SharePoint Server Spoofing Vulnerability (high 8.0) - [CVE-2023-36890](https://insights.sbomify.com/CVE-2023-36890/): Microsoft SharePoint Server Information Disclosure Vulnerability (medium 6.5) - [CVE-2023-3689](https://insights.sbomify.com/CVE-2023-3689/): Bylancer QuickQR GET Parameter blog sql injection (medium 6.3) - [CVE-2023-36889](https://insights.sbomify.com/CVE-2023-36889/): Windows Group Policy Security Feature Bypass Vulnerability (medium 5.5) - [CVE-2023-36888](https://insights.sbomify.com/CVE-2023-36888/): Microsoft Edge for Android (Chromium-based) Tampering Vulnerability (medium 6.3) - [CVE-2023-36887](https://insights.sbomify.com/CVE-2023-36887/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-36886](https://insights.sbomify.com/CVE-2023-36886/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (high 7.6) - [CVE-2023-36884](https://insights.sbomify.com/CVE-2023-36884/): Microsoft Windows Search Remote Code Execution (high 7.5, exploited in the wild) - [CVE-2023-36883](https://insights.sbomify.com/CVE-2023-36883/): Microsoft Edge for iOS Spoofing Vulnerability (medium 4.3) - [CVE-2023-36882](https://insights.sbomify.com/CVE-2023-36882/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8) - [CVE-2023-36881](https://insights.sbomify.com/CVE-2023-36881/): Azure Apache Ambari Spoofing Vulnerability (medium 4.5) - [CVE-2023-36880](https://insights.sbomify.com/CVE-2023-36880/): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (medium 4.8) - [CVE-2023-3688](https://insights.sbomify.com/CVE-2023-3688/): Bylancer QuickJob GET Parameter sql injection (medium 6.3) - [CVE-2023-36878](https://insights.sbomify.com/CVE-2023-36878/): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (medium 4.3) - [CVE-2023-36877](https://insights.sbomify.com/CVE-2023-36877/): Azure Apache Oozie Spoofing Vulnerability (medium 4.5) - [CVE-2023-36876](https://insights.sbomify.com/CVE-2023-36876/): Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability (high 7.1) - [CVE-2023-36874](https://insights.sbomify.com/CVE-2023-36874/): Microsoft Windows Error Reporting Service Privilege Escalation (high 7.8, exploited in the wild) - [CVE-2023-36873](https://insights.sbomify.com/CVE-2023-36873/): .NET Framework Spoofing Vulnerability (high 7.4) - [CVE-2023-36872](https://insights.sbomify.com/CVE-2023-36872/): VP9 Video Extensions Information Disclosure Vulnerability (medium 5.5) - [CVE-2023-36871](https://insights.sbomify.com/CVE-2023-36871/): Azure Active Directory Security Feature Bypass Vulnerability (medium 6.5) - [CVE-2023-3687](https://insights.sbomify.com/CVE-2023-3687/): Bylancer QuickVCard GET Parameter blog sql injection (medium 6.3) - [CVE-2023-36869](https://insights.sbomify.com/CVE-2023-36869/): Azure DevOps Server Spoofing Vulnerability (medium 6.3) - [CVE-2023-36868](https://insights.sbomify.com/CVE-2023-36868/): Azure Service Fabric on Windows Information Disclosure Vulnerability (medium 6.5) - [CVE-2023-36867](https://insights.sbomify.com/CVE-2023-36867/): Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-36866](https://insights.sbomify.com/CVE-2023-36866/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-36865](https://insights.sbomify.com/CVE-2023-36865/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-36864](https://insights.sbomify.com/CVE-2023-36864/): Integer overflow in GTKWave (high 7.8) - [CVE-2023-36862](https://insights.sbomify.com/CVE-2023-36862/): Security feature bypass in macOS (medium 5.5) - [CVE-2023-36861](https://insights.sbomify.com/CVE-2023-36861/): Memory corruption in GTKWave (high 7.8) - [CVE-2023-36860](https://insights.sbomify.com/CVE-2023-36860/): Privilege escalation in Intel Unison software (high 7.6) - [CVE-2023-3686](https://insights.sbomify.com/CVE-2023-3686/): Bylancer QuickAI OpenAI GET Parameter blog sql injection (medium 6.3) - [CVE-2023-36859](https://insights.sbomify.com/CVE-2023-36859/): PiiGAB M-Bus Code Injection (high 8.8) - [CVE-2023-36858](https://insights.sbomify.com/CVE-2023-36858/): BIG-IP Edge Client for Windows and macOS vulnerability (high 7.1) - [CVE-2023-36857](https://insights.sbomify.com/CVE-2023-36857/): Baker Hughes Bently Nevada 3500 System Authentication Bypass by Capture-replay (medium 5.4) - [CVE-2023-36854](https://insights.sbomify.com/CVE-2023-36854/): Other in macOS (high 7.8) - [CVE-2023-36853](https://insights.sbomify.com/CVE-2023-36853/): Keysight Geolocation Server Exposed Dangerous Method or Function (high 7.8) - [CVE-2023-36851](https://insights.sbomify.com/CVE-2023-36851/): Juniper Junos OS SRX Series Missing Authentication for Critical Function (medium 5.3, exploited in the wild) - [CVE-2023-36850](https://insights.sbomify.com/CVE-2023-36850/): Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet. (medium 6.5) - [CVE-2023-3685](https://insights.sbomify.com/CVE-2023-3685/): Nesote Inout Search Engine AI Edition index.php cross site scripting (low 3.5) - [CVE-2023-36849](https://insights.sbomify.com/CVE-2023-36849/): Junos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received (medium 6.5) - [CVE-2023-36848](https://insights.sbomify.com/CVE-2023-36848/): Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet (medium 6.5) - [CVE-2023-36847](https://insights.sbomify.com/CVE-2023-36847/): Juniper Junos OS EX Series Missing Authentication for Critical Function (medium 5.3, exploited in the wild) - [CVE-2023-36846](https://insights.sbomify.com/CVE-2023-36846/): Juniper Junos OS SRX Series Missing Authentication for Critical Function (medium 5.3, exploited in the wild) - [CVE-2023-36845](https://insights.sbomify.com/CVE-2023-36845/): Juniper Junos OS EX Series and SRX Series PHP External Variable Modification (critical 9.8, exploited in the wild) - [CVE-2023-36844](https://insights.sbomify.com/CVE-2023-36844/): Juniper Junos OS EX Series PHP External Variable Modification (medium 5.3, exploited in the wild) - [CVE-2023-36843](https://insights.sbomify.com/CVE-2023-36843/): Junos OS: SRX Series: The PFE will crash on receiving malformed SSL traffic when Sky ATP is enabled (high 7.5) - [CVE-2023-36842](https://insights.sbomify.com/CVE-2023-36842/): Junos OS: jdhcpd will hang on receiving a specific DHCP packet (medium 6.5) - [CVE-2023-36841](https://insights.sbomify.com/CVE-2023-36841/): Junos OS: MX Series: Receipt of malformed TCP traffic will cause a Denial of Service (high 7.5) - [CVE-2023-36840](https://insights.sbomify.com/CVE-2023-36840/): Junos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is run (medium 5.5) - [CVE-2023-3684](https://insights.sbomify.com/CVE-2023-3684/): LivelyWorks Articart Base64 Encoding de_DE redirect (low 3.5) - [CVE-2023-36839](https://insights.sbomify.com/CVE-2023-36839/): Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received (medium 6.5) - [CVE-2023-36838](https://insights.sbomify.com/CVE-2023-36838/): Junos OS: SRX Series: A flowd core occurs when running a low privileged CLI command (medium 5.5) - [CVE-2023-36836](https://insights.sbomify.com/CVE-2023-36836/): Denial of service in Junos OS (medium 4.7) - [CVE-2023-36835](https://insights.sbomify.com/CVE-2023-36835/): Denial of service in Junos OS (high 7.5) - [CVE-2023-36834](https://insights.sbomify.com/CVE-2023-36834/): Denial of service in Junos OS (medium 6.5) - [CVE-2023-36833](https://insights.sbomify.com/CVE-2023-36833/): Use after free in Junos OS Evolved (medium 6.5) - [CVE-2023-36832](https://insights.sbomify.com/CVE-2023-36832/): Junos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface (high 7.5) - [CVE-2023-36831](https://insights.sbomify.com/CVE-2023-36831/): Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied (high 7.5) - [CVE-2023-36830](https://insights.sbomify.com/CVE-2023-36830/): SQLFluff vulnerability for users with access to config file, using `library_path` to call arbitrary python code. (medium 6.3) - [CVE-2023-3683](https://insights.sbomify.com/CVE-2023-3683/): LivelyWorks Articart search cross site scripting (low 3.5) - [CVE-2023-36829](https://insights.sbomify.com/CVE-2023-36829/): Sentry CORS misconfiguration vulnerability (medium 6.8) - [CVE-2023-36828](https://insights.sbomify.com/CVE-2023-36828/): Statamic's Antlers sanitizer cannot effectively sanitize malicious SVG (medium 5.5) - [CVE-2023-36827](https://insights.sbomify.com/CVE-2023-36827/): Fides vulnerable to Path Traversal in Webserver API (high 7.5) - [CVE-2023-36826](https://insights.sbomify.com/CVE-2023-36826/): Sentry vulnerable to improper authorization on debug and artifact file downloads (high 7.7) - [CVE-2023-36825](https://insights.sbomify.com/CVE-2023-36825/): Orchid Deserialization of Untrusted Data vulnerability leads to Remote Code Execution (critical 9.7) - [CVE-2023-36824](https://insights.sbomify.com/CVE-2023-36824/): Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis (high 7.4) - [CVE-2023-36823](https://insights.sbomify.com/CVE-2023-36823/): Sanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element content (high 7.1) - [CVE-2023-36822](https://insights.sbomify.com/CVE-2023-36822/): Uptime Kuma authenticated path traversal via plugin repository name may lead to unavailability or data loss (medium 6.5) - [CVE-2023-36821](https://insights.sbomify.com/CVE-2023-36821/): Uptime Kuma vulnerable to authenticated remote code execution via malicious plugin installation (high 8.8) - [CVE-2023-36820](https://insights.sbomify.com/CVE-2023-36820/): micronaut security has invalid IdTokenClaimsValidator logic on aud (medium 4.8) - [CVE-2023-3682](https://insights.sbomify.com/CVE-2023-3682/): Nesote Inout Blockchain EasyPayments POST Parameter getcoinaddress sql injection (medium 6.3) - [CVE-2023-36819](https://insights.sbomify.com/CVE-2023-36819/): Knowage-Server vulnerable to Path traversal in download functionalities (medium 6.5) - [CVE-2023-36818](https://insights.sbomify.com/CVE-2023-36818/): Denial of service via User Custom Sidebar Section Unlimited Link Creation in discourse (medium 6.5) - [CVE-2023-36817](https://insights.sbomify.com/CVE-2023-36817/): The King's Temple Church website Leaked Stripe API Key in Public Code Repository (high 7.5) - [CVE-2023-36816](https://insights.sbomify.com/CVE-2023-36816/): Cross-Site Scripting (XSS) at Account creation in 2FAuth (medium 6.1) - [CVE-2023-36815](https://insights.sbomify.com/CVE-2023-36815/): Sealos billing system permission control defect (high 7.3) - [CVE-2023-36814](https://insights.sbomify.com/CVE-2023-36814/): Products.CMFCore unauthenticated denial of service and crash via unchecked use of input with Python's marshal module (high 7.5) - [CVE-2023-36813](https://insights.sbomify.com/CVE-2023-36813/): Kanboard Authenticated SQL Injections vulnerability (high 7.1) - [CVE-2023-36812](https://insights.sbomify.com/CVE-2023-36812/): Remote Code Execution in OpenTSDB (critical 9.8) - [CVE-2023-36811](https://insights.sbomify.com/CVE-2023-36811/): Archive spoofing vulnerability in borgbackup (medium 4.7) - [CVE-2023-36810](https://insights.sbomify.com/CVE-2023-36810/): Quadratic runtime with malformed PDF missing xref marker in pypdf (medium 6.2) - [CVE-2023-3681](https://insights.sbomify.com/CVE-2023-3681/): Campcodes Retro Cellphone Online Store modal_add_product.php cross site scripting (low 3.5) - [CVE-2023-36809](https://insights.sbomify.com/CVE-2023-36809/): Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox (high 8.1) - [CVE-2023-36808](https://insights.sbomify.com/CVE-2023-36808/): GLPI vulnerable to SQL injection through Computer Virtual Machine information (high 8.6) - [CVE-2023-36807](https://insights.sbomify.com/CVE-2023-36807/): Infinite Loop when reading malformed objects in pypdf (medium 6.2) - [CVE-2023-36806](https://insights.sbomify.com/CVE-2023-36806/): Contao cross site scripting vulnerability via input unit widget (medium 6.5) - [CVE-2023-36805](https://insights.sbomify.com/CVE-2023-36805/): Windows MSHTML Platform Security Feature Bypass Vulnerability (high 7.0) - [CVE-2023-36804](https://insights.sbomify.com/CVE-2023-36804/): Windows GDI Elevation of Privilege Vulnerability (high 7.8) - [CVE-2023-36803](https://insights.sbomify.com/CVE-2023-36803/): Windows Kernel Information Disclosure Vulnerability (medium 5.5) - [CVE-2023-36802](https://insights.sbomify.com/CVE-2023-36802/): Microsoft Streaming Service Proxy Privilege Escalation (high 7.8, exploited in the wild) - [CVE-2023-36801](https://insights.sbomify.com/CVE-2023-36801/): DHCP Server Service Information Disclosure Vulnerability (medium 5.3) - [CVE-2023-36800](https://insights.sbomify.com/CVE-2023-36800/): Dynamics Finance and Operations Cross-site Scripting Vulnerability (high 7.6) - [CVE-2023-3680](https://insights.sbomify.com/CVE-2023-3680/): SourceCodester Lost and Found Information System HTTP POST Request sql injection (medium 6.3) - [CVE-2023-36799](https://insights.sbomify.com/CVE-2023-36799/): .NET Core and Visual Studio Denial of Service Vulnerability (medium 6.5) - [CVE-2023-36796](https://insights.sbomify.com/CVE-2023-36796/): Visual Studio Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-36794](https://insights.sbomify.com/CVE-2023-36794/): Visual Studio Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-36793](https://insights.sbomify.com/CVE-2023-36793/): Visual Studio Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-36792](https://insights.sbomify.com/CVE-2023-36792/): Visual Studio Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-36790](https://insights.sbomify.com/CVE-2023-36790/): Windows RDP Encoder Mirror Driver Elevation of Privilege Vulnerability (high 7.8) --- From sbomify Insights: https://insights.sbomify.com/years/2023/page/276/