# Vulnerabilities published in 2023


- [CVE-2023-35691](https://insights.sbomify.com/CVE-2023-35691/): Memory corruption in Android (high 7.2)
- [CVE-2023-35690](https://insights.sbomify.com/CVE-2023-35690/): Memory corruption in Android (critical 9.8)
- [CVE-2023-3569](https://insights.sbomify.com/CVE-2023-3569/): PHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT (medium 4.9)
- [CVE-2023-35689](https://insights.sbomify.com/CVE-2023-35689/): Misconfiguration in Android (high 7.8)
- [CVE-2023-35687](https://insights.sbomify.com/CVE-2023-35687/): Use after free in Android (high 7.8)
- [CVE-2023-35686](https://insights.sbomify.com/CVE-2023-35686/): Memory corruption in Android (high 7.8)
- [CVE-2023-35685](https://insights.sbomify.com/CVE-2023-35685/): Use after free in Android (high 7.8)
- [CVE-2023-35684](https://insights.sbomify.com/CVE-2023-35684/): Integer overflow in Android (high 8.8)
- [CVE-2023-35683](https://insights.sbomify.com/CVE-2023-35683/): SQL injection in Android (medium 5.5)
- [CVE-2023-35682](https://insights.sbomify.com/CVE-2023-35682/): Privilege escalation in Android (high 7.8)
- [CVE-2023-35681](https://insights.sbomify.com/CVE-2023-35681/): Integer overflow in Android (critical 9.8)
- [CVE-2023-35680](https://insights.sbomify.com/CVE-2023-35680/): Information disclosure in Android (medium 5.5)
- [CVE-2023-3568](https://insights.sbomify.com/CVE-2023-3568/): Open Redirect in alextselegidis/easyappointments (medium 6.3)
- [CVE-2023-35679](https://insights.sbomify.com/CVE-2023-35679/): Information disclosure in Android (medium 5.5)
- [CVE-2023-35677](https://insights.sbomify.com/CVE-2023-35677/): Missing authorization in Android (medium 5.5)
- [CVE-2023-35676](https://insights.sbomify.com/CVE-2023-35676/): Privilege escalation in Android (high 7.8)
- [CVE-2023-35675](https://insights.sbomify.com/CVE-2023-35675/): Information disclosure in Android (medium 5.5)
- [CVE-2023-35674](https://insights.sbomify.com/CVE-2023-35674/): Android Framework Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2023-35673](https://insights.sbomify.com/CVE-2023-35673/): Integer overflow in Android (high 8.8)
- [CVE-2023-35671](https://insights.sbomify.com/CVE-2023-35671/): Information disclosure in Android (medium 5.5)
- [CVE-2023-35670](https://insights.sbomify.com/CVE-2023-35670/): Path traversal in Android (high 7.8)
- [CVE-2023-3567](https://insights.sbomify.com/CVE-2023-3567/): Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race (high 7.1)
- [CVE-2023-35669](https://insights.sbomify.com/CVE-2023-35669/): Deserialization in Android (high 7.8)
- [CVE-2023-35668](https://insights.sbomify.com/CVE-2023-35668/): Information disclosure in Android (medium 5.5)
- [CVE-2023-35667](https://insights.sbomify.com/CVE-2023-35667/): Business logic in Android (high 7.8)
- [CVE-2023-35666](https://insights.sbomify.com/CVE-2023-35666/): Use after free in Android (high 7.8)
- [CVE-2023-35665](https://insights.sbomify.com/CVE-2023-35665/): Missing authorization in Android (high 7.8)
- [CVE-2023-35664](https://insights.sbomify.com/CVE-2023-35664/): Memory corruption in Android (medium 5.5)
- [CVE-2023-35663](https://insights.sbomify.com/CVE-2023-35663/): Memory corruption in Android (high 7.5)
- [CVE-2023-35662](https://insights.sbomify.com/CVE-2023-35662/): Memory corruption in Android (critical 9.8)
- [CVE-2023-35661](https://insights.sbomify.com/CVE-2023-35661/): Memory corruption in Android (high 7.5)
- [CVE-2023-35660](https://insights.sbomify.com/CVE-2023-35660/): Use after free in Android (medium 6.7)
- [CVE-2023-3566](https://insights.sbomify.com/CVE-2023-3566/): wallabag Profile Config config allocation of resources (low 3.5)
- [CVE-2023-35659](https://insights.sbomify.com/CVE-2023-35659/): Privilege escalation in Android (high 7.8)
- [CVE-2023-35658](https://insights.sbomify.com/CVE-2023-35658/): Use after free in Android (high 8.8)
- [CVE-2023-35657](https://insights.sbomify.com/CVE-2023-35657/): Memory corruption in Android (medium 4.0)
- [CVE-2023-35656](https://insights.sbomify.com/CVE-2023-35656/): Memory corruption in Android (high 7.5)
- [CVE-2023-35655](https://insights.sbomify.com/CVE-2023-35655/): Memory corruption in Android (medium 6.7)
- [CVE-2023-35654](https://insights.sbomify.com/CVE-2023-35654/): Memory corruption in Android (medium 6.7)
- [CVE-2023-35653](https://insights.sbomify.com/CVE-2023-35653/): Security feature bypass in Android (medium 4.4)
- [CVE-2023-35652](https://insights.sbomify.com/CVE-2023-35652/): Memory corruption in Android (high 7.5)
- [CVE-2023-3565](https://insights.sbomify.com/CVE-2023-3565/): Cross-site Scripting (XSS) - Generic in nilsteampassnet/teampass (medium 5.2)
- [CVE-2023-35649](https://insights.sbomify.com/CVE-2023-35649/): Memory corruption in Android (high 7.2)
- [CVE-2023-35648](https://insights.sbomify.com/CVE-2023-35648/): Memory corruption in Android (critical 9.8)
- [CVE-2023-35647](https://insights.sbomify.com/CVE-2023-35647/): Memory corruption in Android (critical 9.8)
- [CVE-2023-35646](https://insights.sbomify.com/CVE-2023-35646/): Memory corruption in Android (critical 9.8)
- [CVE-2023-35645](https://insights.sbomify.com/CVE-2023-35645/): Race condition in Android (medium 6.4)
- [CVE-2023-35644](https://insights.sbomify.com/CVE-2023-35644/): Windows Sysmain Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35643](https://insights.sbomify.com/CVE-2023-35643/): DHCP Server Service Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-35642](https://insights.sbomify.com/CVE-2023-35642/): Internet Connection Sharing (ICS) Denial of Service Vulnerability (medium 6.5)
- [CVE-2023-35641](https://insights.sbomify.com/CVE-2023-35641/): Internet Connection Sharing (ICS) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-3564](https://insights.sbomify.com/CVE-2023-3564/): GZ Scripts GZ Multi Hotel Booking System index.php cross site scripting (low 3.5)
- [CVE-2023-35639](https://insights.sbomify.com/CVE-2023-35639/): Microsoft ODBC Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35638](https://insights.sbomify.com/CVE-2023-35638/): DHCP Server Service Denial of Service Vulnerability (high 7.5)
- [CVE-2023-35636](https://insights.sbomify.com/CVE-2023-35636/): Microsoft Outlook Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-35635](https://insights.sbomify.com/CVE-2023-35635/): Windows Kernel Denial of Service Vulnerability (medium 5.5)
- [CVE-2023-35634](https://insights.sbomify.com/CVE-2023-35634/): Windows Bluetooth Driver Remote Code Execution Vulnerability (high 8.0)
- [CVE-2023-35633](https://insights.sbomify.com/CVE-2023-35633/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35632](https://insights.sbomify.com/CVE-2023-35632/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35631](https://insights.sbomify.com/CVE-2023-35631/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35630](https://insights.sbomify.com/CVE-2023-35630/): Internet Connection Sharing (ICS) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-3563](https://insights.sbomify.com/CVE-2023-3563/): GZ Scripts GZ E Learning Platform URL Parameter cross site scripting (low 3.5)
- [CVE-2023-35629](https://insights.sbomify.com/CVE-2023-35629/): Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-35628](https://insights.sbomify.com/CVE-2023-35628/): Windows MSHTML Platform Remote Code Execution Vulnerability (high 8.1)
- [CVE-2023-35625](https://insights.sbomify.com/CVE-2023-35625/): Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability (medium 4.7)
- [CVE-2023-35624](https://insights.sbomify.com/CVE-2023-35624/): Azure Connected Machine Agent Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2023-35622](https://insights.sbomify.com/CVE-2023-35622/): Windows DNS Spoofing Vulnerability (high 7.5)
- [CVE-2023-35621](https://insights.sbomify.com/CVE-2023-35621/): Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability (high 7.5)
- [CVE-2023-3562](https://insights.sbomify.com/CVE-2023-3562/): GZ Scripts PHP CRM Platform index.php cross site scripting (low 3.5)
- [CVE-2023-35619](https://insights.sbomify.com/CVE-2023-35619/): Microsoft Outlook for Mac Spoofing Vulnerability (medium 5.3)
- [CVE-2023-35618](https://insights.sbomify.com/CVE-2023-35618/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (critical 9.6)
- [CVE-2023-3561](https://insights.sbomify.com/CVE-2023-3561/): GZ Scripts PHP GZ Hotel Booking Script load.php cross site scripting (low 3.5)
- [CVE-2023-3560](https://insights.sbomify.com/CVE-2023-3560/): GZ Scripts Ticket Booking Script load.php cross site scripting (low 3.5)
- [CVE-2023-3559](https://insights.sbomify.com/CVE-2023-3559/): GZ Scripts PHP GZ Appointment Scheduling Script load.php cross site scripting (low 3.5)
- [CVE-2023-3558](https://insights.sbomify.com/CVE-2023-3558/): GZ Scripts Event Booking Calendar load.php cross site scripting (low 3.5)
- [CVE-2023-3557](https://insights.sbomify.com/CVE-2023-3557/): GZ Scripts Property Listing Script preview.php cross site scripting (low 3.5)
- [CVE-2023-3556](https://insights.sbomify.com/CVE-2023-3556/): GZ Scripts Car Listing Script PHP preview.php cross site scripting (low 3.5)
- [CVE-2023-3555](https://insights.sbomify.com/CVE-2023-3555/): GZ Scripts PHP Vacation Rental Script preview.php cross site scripting (low 3.5)
- [CVE-2023-3554](https://insights.sbomify.com/CVE-2023-3554/): GZ Scripts GZ Forum Script preview.php cross site scripting (low 3.5)
- [CVE-2023-3553](https://insights.sbomify.com/CVE-2023-3553/): Exposure of Sensitive Information to an Unauthorized Actor in nilsteampassnet/teampass (medium 5.3)
- [CVE-2023-3552](https://insights.sbomify.com/CVE-2023-3552/): Improper Encoding or Escaping of Output in nilsteampassnet/teampass (high 7.6)
- [CVE-2023-3551](https://insights.sbomify.com/CVE-2023-3551/): Code Injection in nilsteampassnet/teampass (critical 9.1)
- [CVE-2023-3550](https://insights.sbomify.com/CVE-2023-3550/): Stored XSS leads to privilege escalation in MediaWiki v1.40.0 (high 7.3)
- [CVE-2023-3548](https://insights.sbomify.com/CVE-2023-3548/): IQ Wifi 6 (high 8.3)
- [CVE-2023-3547](https://insights.sbomify.com/CVE-2023-3547/): All in One B2B for WooCommerce <= 1.0.3 - Multiple CSRF (high 8.8)
- [CVE-2023-3545](https://insights.sbomify.com/CVE-2023-3545/): Chamilo LMS Htaccess File Upload Security Bypass (critical 9.8)
- [CVE-2023-3544](https://insights.sbomify.com/CVE-2023-3544/): GZ Scripts Time Slot Booking Calendar PHP load.php cross site scripting (low 3.5)
- [CVE-2023-3543](https://insights.sbomify.com/CVE-2023-3543/): GZ Scripts Availability Booking Calendar PHP HTTP POST Request load.php cross site scripting (low 3.5)
- [CVE-2023-3542](https://insights.sbomify.com/CVE-2023-3542/): ThinuTech ThinuCMS contact.php cross site scripting (low 3.5)
- [CVE-2023-3541](https://insights.sbomify.com/CVE-2023-3541/): ThinuTech ThinuCMS author_posts.php cross site scripting (low 3.5)
- [CVE-2023-3540](https://insights.sbomify.com/CVE-2023-3540/): SimplePHPscripts NewsLetter Script PHP URL Parameter preview.php cross site scripting (low 3.5)
- [CVE-2023-35394](https://insights.sbomify.com/CVE-2023-35394/): Azure HDInsight Jupyter Notebook Spoofing Vulnerability (medium 4.6)
- [CVE-2023-35393](https://insights.sbomify.com/CVE-2023-35393/): Azure Apache Hive Spoofing Vulnerability (medium 4.5)
- [CVE-2023-35392](https://insights.sbomify.com/CVE-2023-35392/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 4.7)
- [CVE-2023-35391](https://insights.sbomify.com/CVE-2023-35391/): ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability (medium 6.2)
- [CVE-2023-35390](https://insights.sbomify.com/CVE-2023-35390/): .NET and Visual Studio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-3539](https://insights.sbomify.com/CVE-2023-3539/): SimplePHPscripts Simple Forum PHP URL Parameter preview.php cross site scripting (low 3.5)
- [CVE-2023-35389](https://insights.sbomify.com/CVE-2023-35389/): Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability (medium 6.5)
- [CVE-2023-35388](https://insights.sbomify.com/CVE-2023-35388/): Microsoft Exchange Server Remote Code Execution Vulnerability (high 8.0)
- [CVE-2023-35387](https://insights.sbomify.com/CVE-2023-35387/): Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/286/