# Vulnerabilities published in 2023


- [CVE-2023-3679](https://insights.sbomify.com/CVE-2023-3679/): SourceCodester Lost and Found Information System HTTP POST Request sql injection (medium 6.3)
- [CVE-2023-36789](https://insights.sbomify.com/CVE-2023-36789/): Skype for Business Remote Code Execution Vulnerability (high 7.2)
- [CVE-2023-36788](https://insights.sbomify.com/CVE-2023-36788/): .NET Framework Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-36787](https://insights.sbomify.com/CVE-2023-36787/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2023-36786](https://insights.sbomify.com/CVE-2023-36786/): Skype for Business Remote Code Execution Vulnerability (high 7.2)
- [CVE-2023-36785](https://insights.sbomify.com/CVE-2023-36785/): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-36780](https://insights.sbomify.com/CVE-2023-36780/): Skype for Business Remote Code Execution Vulnerability (high 7.2)
- [CVE-2023-3678](https://insights.sbomify.com/CVE-2023-3678/): SourceCodester AC Repair and Services System HTTP POST Request sql injection (medium 6.3)
- [CVE-2023-36778](https://insights.sbomify.com/CVE-2023-36778/): Microsoft Exchange Server Remote Code Execution Vulnerability (high 8.0)
- [CVE-2023-36777](https://insights.sbomify.com/CVE-2023-36777/): Microsoft Exchange Server Information Disclosure Vulnerability (medium 5.7)
- [CVE-2023-36776](https://insights.sbomify.com/CVE-2023-36776/): Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2023-36773](https://insights.sbomify.com/CVE-2023-36773/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-36772](https://insights.sbomify.com/CVE-2023-36772/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-36771](https://insights.sbomify.com/CVE-2023-36771/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-36770](https://insights.sbomify.com/CVE-2023-36770/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-3677](https://insights.sbomify.com/CVE-2023-3677/): WooCommerce PDF Invoice Builder <= 1.2.89 - Authenticated (Subscriber+) SQL Injection via Export (high 8.8)
- [CVE-2023-36769](https://insights.sbomify.com/CVE-2023-36769/): Microsoft OneNote Spoofing Vulnerability (medium 4.6)
- [CVE-2023-36767](https://insights.sbomify.com/CVE-2023-36767/): Microsoft Office Security Feature Bypass Vulnerability (medium 4.3)
- [CVE-2023-36766](https://insights.sbomify.com/CVE-2023-36766/): Microsoft Excel Information Disclosure Vulnerability (high 7.8)
- [CVE-2023-36765](https://insights.sbomify.com/CVE-2023-36765/): Microsoft Office Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-36764](https://insights.sbomify.com/CVE-2023-36764/): Microsoft SharePoint Server Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2023-36763](https://insights.sbomify.com/CVE-2023-36763/): Microsoft Outlook Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-36762](https://insights.sbomify.com/CVE-2023-36762/): Microsoft Word Remote Code Execution Vulnerability (high 7.3)
- [CVE-2023-36761](https://insights.sbomify.com/CVE-2023-36761/): Microsoft Word Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2023-36760](https://insights.sbomify.com/CVE-2023-36760/): 3D Viewer Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-3676](https://insights.sbomify.com/CVE-2023-3676/): Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation (high 8.8)
- [CVE-2023-36759](https://insights.sbomify.com/CVE-2023-36759/): Visual Studio Elevation of Privilege Vulnerability (medium 6.7)
- [CVE-2023-36758](https://insights.sbomify.com/CVE-2023-36758/): Visual Studio Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-36757](https://insights.sbomify.com/CVE-2023-36757/): Microsoft Exchange Server Spoofing Vulnerability (high 8.0)
- [CVE-2023-36756](https://insights.sbomify.com/CVE-2023-36756/): Microsoft Exchange Server Remote Code Execution Vulnerability (high 8.0)
- [CVE-2023-36755](https://insights.sbomify.com/CVE-2023-36755/): Command injection in RUGGEDCOM ROX MX5000 (critical 9.1)
- [CVE-2023-36754](https://insights.sbomify.com/CVE-2023-36754/): Command injection in RUGGEDCOM ROX MX5000 (critical 9.1)
- [CVE-2023-36753](https://insights.sbomify.com/CVE-2023-36753/): Command injection in RUGGEDCOM ROX MX5000 (critical 9.1)
- [CVE-2023-36752](https://insights.sbomify.com/CVE-2023-36752/): Command injection in RUGGEDCOM ROX MX5000 (critical 9.1)
- [CVE-2023-36751](https://insights.sbomify.com/CVE-2023-36751/): Command injection in RUGGEDCOM ROX MX5000 (critical 9.1)
- [CVE-2023-36750](https://insights.sbomify.com/CVE-2023-36750/): Command injection in RUGGEDCOM ROX MX5000 (critical 9.1)
- [CVE-2023-3675](https://insights.sbomify.com/CVE-2023-3675/): Insufficient input validation when downloading certain file types. (medium 6.5)
- [CVE-2023-36749](https://insights.sbomify.com/CVE-2023-36749/): Weak cryptography in RUGGEDCOM ROX MX5000 (high 7.4)
- [CVE-2023-36748](https://insights.sbomify.com/CVE-2023-36748/): Weak cryptography in RUGGEDCOM ROX MX5000 (medium 5.9)
- [CVE-2023-36747](https://insights.sbomify.com/CVE-2023-36747/): Memory corruption in GTKWave (high 7.0)
- [CVE-2023-36746](https://insights.sbomify.com/CVE-2023-36746/): Memory corruption in GTKWave (high 7.0)
- [CVE-2023-36745](https://insights.sbomify.com/CVE-2023-36745/): Microsoft Exchange Server Remote Code Execution Vulnerability (high 8.0)
- [CVE-2023-36744](https://insights.sbomify.com/CVE-2023-36744/): Microsoft Exchange Server Remote Code Execution Vulnerability (high 8.0)
- [CVE-2023-36743](https://insights.sbomify.com/CVE-2023-36743/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-36742](https://insights.sbomify.com/CVE-2023-36742/): Visual Studio Code Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-36741](https://insights.sbomify.com/CVE-2023-36741/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.3)
- [CVE-2023-36740](https://insights.sbomify.com/CVE-2023-36740/): 3D Viewer Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-3674](https://insights.sbomify.com/CVE-2023-3674/): Keylime: attestation failure when the quote's signature does not validate (low 2.3)
- [CVE-2023-36739](https://insights.sbomify.com/CVE-2023-36739/): 3D Viewer Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-36737](https://insights.sbomify.com/CVE-2023-36737/): Azure Network Watcher VM Agent Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-36736](https://insights.sbomify.com/CVE-2023-36736/): Microsoft Identity Linux Broker Remote Code Execution Vulnerability (medium 4.4)
- [CVE-2023-36735](https://insights.sbomify.com/CVE-2023-36735/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (critical 9.6)
- [CVE-2023-36732](https://insights.sbomify.com/CVE-2023-36732/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-36731](https://insights.sbomify.com/CVE-2023-36731/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-36730](https://insights.sbomify.com/CVE-2023-36730/): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-3673](https://insights.sbomify.com/CVE-2023-3673/): SQL Injection in pimcore/pimcore (high 7.2)
- [CVE-2023-36729](https://insights.sbomify.com/CVE-2023-36729/): Named Pipe File System Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-36728](https://insights.sbomify.com/CVE-2023-36728/): Microsoft SQL Server Denial of Service Vulnerability (medium 5.5)
- [CVE-2023-36727](https://insights.sbomify.com/CVE-2023-36727/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 6.1)
- [CVE-2023-36726](https://insights.sbomify.com/CVE-2023-36726/): Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-36725](https://insights.sbomify.com/CVE-2023-36725/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-36724](https://insights.sbomify.com/CVE-2023-36724/): Windows Power Management Service Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-36723](https://insights.sbomify.com/CVE-2023-36723/): Windows Container Manager Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-36722](https://insights.sbomify.com/CVE-2023-36722/): Active Directory Domain Services Information Disclosure Vulnerability (medium 4.4)
- [CVE-2023-36721](https://insights.sbomify.com/CVE-2023-36721/): Windows Error Reporting Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2023-36720](https://insights.sbomify.com/CVE-2023-36720/): Windows Mixed Reality Developer Tools Denial of Service Vulnerability (high 7.5)
- [CVE-2023-3672](https://insights.sbomify.com/CVE-2023-3672/): Cross-site Scripting (XSS) - DOM in plaidweb/webmention.js (high 7.3)
- [CVE-2023-36719](https://insights.sbomify.com/CVE-2023-36719/): Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-36718](https://insights.sbomify.com/CVE-2023-36718/): Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-36717](https://insights.sbomify.com/CVE-2023-36717/): Windows Virtual Trusted Platform Module Denial of Service Vulnerability (medium 6.5)
- [CVE-2023-36713](https://insights.sbomify.com/CVE-2023-36713/): Windows Common Log File System Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-36712](https://insights.sbomify.com/CVE-2023-36712/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-36711](https://insights.sbomify.com/CVE-2023-36711/): Windows Runtime C++ Template Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-36710](https://insights.sbomify.com/CVE-2023-36710/): Windows Media Foundation Core Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-3671](https://insights.sbomify.com/CVE-2023-3671/): MultiParcels Shipping For WooCommerce < 1.15.4 - Reflected XSS (medium 6.1)
- [CVE-2023-36709](https://insights.sbomify.com/CVE-2023-36709/): Microsoft AllJoyn API Denial of Service Vulnerability (high 7.5)
- [CVE-2023-36707](https://insights.sbomify.com/CVE-2023-36707/): Windows Deployment Services Denial of Service Vulnerability (medium 6.5)
- [CVE-2023-36706](https://insights.sbomify.com/CVE-2023-36706/): Windows Deployment Services Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-36705](https://insights.sbomify.com/CVE-2023-36705/): Windows Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-36704](https://insights.sbomify.com/CVE-2023-36704/): Windows Setup Files Cleanup Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-36703](https://insights.sbomify.com/CVE-2023-36703/): DHCP Server Service Denial of Service Vulnerability (high 7.5)
- [CVE-2023-36702](https://insights.sbomify.com/CVE-2023-36702/): Microsoft DirectMusic Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-36701](https://insights.sbomify.com/CVE-2023-36701/): Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-3670](https://insights.sbomify.com/CVE-2023-3670/): Codesys: Vulnerability in CODESYS Development System and CODESYS Scripting (high 7.3)
- [CVE-2023-36698](https://insights.sbomify.com/CVE-2023-36698/): Windows Kernel Security Feature Bypass Vulnerability (medium 4.4)
- [CVE-2023-36697](https://insights.sbomify.com/CVE-2023-36697/): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-36696](https://insights.sbomify.com/CVE-2023-36696/): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-36695](https://insights.sbomify.com/CVE-2023-36695/): WordPress Sublanguage plugin <= 2.9 - Broken Access Control vulnerability (medium 5.4)
- [CVE-2023-36694](https://insights.sbomify.com/CVE-2023-36694/): WordPress Kingkong Board plugin <= 2.1.0.2 - Broken Access Control vulnerability (medium 6.3)
- [CVE-2023-36693](https://insights.sbomify.com/CVE-2023-36693/): WordPress WP RSS Images Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-36692](https://insights.sbomify.com/CVE-2023-36692/): WordPress WP-Cirrus Plugin <= 0.6.11 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-36691](https://insights.sbomify.com/CVE-2023-36691/): WordPress WebwinkelKeur Plugin <= 3.24 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-36690](https://insights.sbomify.com/CVE-2023-36690/): WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF) (high 8.1)
- [CVE-2023-3669](https://insights.sbomify.com/CVE-2023-3669/): CODESYS: Missing Brute-Force protection in CODESYS Development System (low 3.3)
- [CVE-2023-36689](https://insights.sbomify.com/CVE-2023-36689/): WordPress WPFactory Helper Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-36688](https://insights.sbomify.com/CVE-2023-36688/): WordPress Simple Site Verify Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS) (medium 4.3)
- [CVE-2023-36687](https://insights.sbomify.com/CVE-2023-36687/): WordPress Menubar Plugin <= 5.8.2 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-36686](https://insights.sbomify.com/CVE-2023-36686/): WordPress CartFlows Pro Plugin <= 1.11.11 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-36685](https://insights.sbomify.com/CVE-2023-36685/): WordPress CartFlows Pro Plugin <= 1.11.12 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-36684](https://insights.sbomify.com/CVE-2023-36684/): WordPress Convert Pro plugin <= 1.7.5 - Broken Access Control vulnerability (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/277/