# Vulnerabilities published in 2023 - [CVE-2023-33144](https://insights.sbomify.com/CVE-2023-33144/): Visual Studio Code Spoofing Vulnerability (medium 6.6) - [CVE-2023-33143](https://insights.sbomify.com/CVE-2023-33143/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 7.5) - [CVE-2023-33142](https://insights.sbomify.com/CVE-2023-33142/): Microsoft SharePoint Server Elevation of Privilege Vulnerability (medium 6.5) - [CVE-2023-33141](https://insights.sbomify.com/CVE-2023-33141/): Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability (high 7.5) - [CVE-2023-33140](https://insights.sbomify.com/CVE-2023-33140/): Microsoft OneNote Spoofing Vulnerability (medium 6.5) - [CVE-2023-3314](https://insights.sbomify.com/CVE-2023-3314/): Command injection in Enterprise Security Manager (high 8.1) - [CVE-2023-33139](https://insights.sbomify.com/CVE-2023-33139/): Visual Studio Information Disclosure Vulnerability (medium 5.5) - [CVE-2023-33137](https://insights.sbomify.com/CVE-2023-33137/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-33136](https://insights.sbomify.com/CVE-2023-33136/): Azure DevOps Server Remote Code Execution Vulnerability (high 8.8) - [CVE-2023-33135](https://insights.sbomify.com/CVE-2023-33135/): .NET and Visual Studio Elevation of Privilege Vulnerability (high 7.3) - [CVE-2023-33134](https://insights.sbomify.com/CVE-2023-33134/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8) - [CVE-2023-33133](https://insights.sbomify.com/CVE-2023-33133/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-33132](https://insights.sbomify.com/CVE-2023-33132/): Microsoft SharePoint Server Spoofing Vulnerability (medium 6.3) - [CVE-2023-33131](https://insights.sbomify.com/CVE-2023-33131/): Microsoft Outlook Remote Code Execution Vulnerability (high 8.8) - [CVE-2023-33130](https://insights.sbomify.com/CVE-2023-33130/): Microsoft SharePoint Server Spoofing Vulnerability (high 7.3) - [CVE-2023-3313](https://insights.sbomify.com/CVE-2023-3313/): Command injection in Enterprise Security Manager (high 7.8) - [CVE-2023-33129](https://insights.sbomify.com/CVE-2023-33129/): Microsoft SharePoint Server Denial of Service Vulnerability (medium 6.5) - [CVE-2023-33128](https://insights.sbomify.com/CVE-2023-33128/): .NET and Visual Studio Remote Code Execution Vulnerability (high 7.3) - [CVE-2023-33127](https://insights.sbomify.com/CVE-2023-33127/): .NET and Visual Studio Elevation of Privilege Vulnerability (high 8.1) - [CVE-2023-33126](https://insights.sbomify.com/CVE-2023-33126/): .NET and Visual Studio Remote Code Execution Vulnerability (high 7.3) - [CVE-2023-33124](https://insights.sbomify.com/CVE-2023-33124/): Memory corruption in JT2Go (high 7.8) - [CVE-2023-33123](https://insights.sbomify.com/CVE-2023-33123/): Memory corruption in JT2Go (high 7.8) - [CVE-2023-33122](https://insights.sbomify.com/CVE-2023-33122/): Memory corruption in JT2Go (low 3.3) - [CVE-2023-33121](https://insights.sbomify.com/CVE-2023-33121/): Null dereference in JT2Go (low 3.3) - [CVE-2023-33120](https://insights.sbomify.com/CVE-2023-33120/): Use After Free in Audio (high 7.8) - [CVE-2023-3312](https://insights.sbomify.com/CVE-2023-3312/): Memory corruption in Kernel (high 7.5) - [CVE-2023-33119](https://insights.sbomify.com/CVE-2023-33119/): Time-of-check Time-of-use (TOCTOU) Race Condition in Hypervisor (high 8.4) - [CVE-2023-33118](https://insights.sbomify.com/CVE-2023-33118/): Use After Free in Automotive Audio (high 7.8) - [CVE-2023-33117](https://insights.sbomify.com/CVE-2023-33117/): Use After Free in Audio (high 7.8) - [CVE-2023-33116](https://insights.sbomify.com/CVE-2023-33116/): Buffer over-read without Checking Size of Input in WLAN Host (high 7.5) - [CVE-2023-33115](https://insights.sbomify.com/CVE-2023-33115/): Buffer Over-read in Trusted Execution Environment (high 7.8) - [CVE-2023-33114](https://insights.sbomify.com/CVE-2023-33114/): Use after free in Neural Processing Unit (high 8.4) - [CVE-2023-33113](https://insights.sbomify.com/CVE-2023-33113/): Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel (high 8.4) - [CVE-2023-33112](https://insights.sbomify.com/CVE-2023-33112/): Buffer Over-read in WLAN Firmware (high 7.5) - [CVE-2023-33111](https://insights.sbomify.com/CVE-2023-33111/): Improper Validation of Array Index in Audio (medium 5.5) - [CVE-2023-33110](https://insights.sbomify.com/CVE-2023-33110/): Use of Out-of-range Pointer Offset in Audio (high 7.8) - [CVE-2023-3311](https://insights.sbomify.com/CVE-2023-3311/): PuneethReddyHC online-shopping-system-advanced addsuppliers.php cross site scripting (low 2.4) - [CVE-2023-33109](https://insights.sbomify.com/CVE-2023-33109/): NULL Pointer Dereference in WLAN Firmware (high 7.5) - [CVE-2023-33108](https://insights.sbomify.com/CVE-2023-33108/): Use After Free in Graphics (high 8.4) - [CVE-2023-33107](https://insights.sbomify.com/CVE-2023-33107/): Qualcomm Multiple Chipsets Integer Overflow (high 8.4, exploited in the wild) - [CVE-2023-33106](https://insights.sbomify.com/CVE-2023-33106/): Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset (high 8.4, exploited in the wild) - [CVE-2023-33105](https://insights.sbomify.com/CVE-2023-33105/): Configuration Issue in WLAN Host and Firmware (high 7.5) - [CVE-2023-33104](https://insights.sbomify.com/CVE-2023-33104/): Improper input Validation in Multi-Mode Call Processor (high 7.5) - [CVE-2023-33103](https://insights.sbomify.com/CVE-2023-33103/): Improper Input Validation in Multi-Mode Call Processor (high 7.5) - [CVE-2023-33101](https://insights.sbomify.com/CVE-2023-33101/): Incorrect Type Conversion or Cast in Multi-Mode Call Processor (high 7.5) - [CVE-2023-33100](https://insights.sbomify.com/CVE-2023-33100/): Improper input validation in Multi-Mode Call Processor (high 7.5) - [CVE-2023-3310](https://insights.sbomify.com/CVE-2023-3310/): code-projects Agro-School Management System loaddata.php sql injection (medium 6.3) - [CVE-2023-33099](https://insights.sbomify.com/CVE-2023-33099/): Improper Input Validation in Multi-Mode Call Processor (high 7.5) - [CVE-2023-33098](https://insights.sbomify.com/CVE-2023-33098/): Buffer Over-read in WLAN Firmware (high 7.5) - [CVE-2023-33097](https://insights.sbomify.com/CVE-2023-33097/): Buffer Over-read in WLAN Firmware (high 7.5) - [CVE-2023-33096](https://insights.sbomify.com/CVE-2023-33096/): Reachable Assertion in Multi-Mode Call Processor (high 7.5) - [CVE-2023-33095](https://insights.sbomify.com/CVE-2023-33095/): Reachable Assertion in Multi-Mode Call Processor (high 7.5) - [CVE-2023-33094](https://insights.sbomify.com/CVE-2023-33094/): Use After Free in Linux Graphics (high 8.4) - [CVE-2023-33092](https://insights.sbomify.com/CVE-2023-33092/): Buffer Copy Without Checking Size of Input in Bluetooth HOST (high 8.4) - [CVE-2023-33090](https://insights.sbomify.com/CVE-2023-33090/): Buffer Over-read in Audio (medium 5.5) - [CVE-2023-3309](https://insights.sbomify.com/CVE-2023-3309/): SourceCodester Resort Reservation System Manage Room Page ?page=rooms cross site scripting (low 3.5) - [CVE-2023-33089](https://insights.sbomify.com/CVE-2023-33089/): NULL Pointer Dereference in WLAN Firmware (high 7.5) - [CVE-2023-33088](https://insights.sbomify.com/CVE-2023-33088/): NULL pointer dereference in WLAN Firmware (high 8.4) - [CVE-2023-33087](https://insights.sbomify.com/CVE-2023-33087/): Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Core (high 7.8) - [CVE-2023-33086](https://insights.sbomify.com/CVE-2023-33086/): Improper Release of Memory Before Removing Last Reference in Data Modem (high 7.5) - [CVE-2023-33085](https://insights.sbomify.com/CVE-2023-33085/): Buffer Copy Without Checking Size of Input (Classic Buffer Overflow) in Wearables (high 7.8) - [CVE-2023-33084](https://insights.sbomify.com/CVE-2023-33084/): Improper Release of Memory Before Removing Last Reference in Data Modem (high 7.5) - [CVE-2023-33083](https://insights.sbomify.com/CVE-2023-33083/): Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host (critical 9.8) - [CVE-2023-33082](https://insights.sbomify.com/CVE-2023-33082/): Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host (critical 9.8) - [CVE-2023-33081](https://insights.sbomify.com/CVE-2023-33081/): Buffer over-read in WLAN Firmware (high 7.5) - [CVE-2023-33080](https://insights.sbomify.com/CVE-2023-33080/): Buffer over-read in WLAN Firmware (high 7.5) - [CVE-2023-3308](https://insights.sbomify.com/CVE-2023-3308/): whaleal IceFrog Aviator Template Engine deserialization (medium 5.5) - [CVE-2023-33079](https://insights.sbomify.com/CVE-2023-33079/): Use of Out-of-range Pointer Offset in Audio (high 7.8) - [CVE-2023-33078](https://insights.sbomify.com/CVE-2023-33078/): Buffer Over-read in DSP Services (medium 5.1) - [CVE-2023-33077](https://insights.sbomify.com/CVE-2023-33077/): Buffer Copy Without Checking Size of Input in HLOS (medium 6.7) - [CVE-2023-33076](https://insights.sbomify.com/CVE-2023-33076/): Configuration Issue in Core (medium 5.9) - [CVE-2023-33074](https://insights.sbomify.com/CVE-2023-33074/): Use After Free in Audio (high 8.4) - [CVE-2023-33072](https://insights.sbomify.com/CVE-2023-33072/): Buffer copy without checking size of Input in Core (critical 9.3) - [CVE-2023-33071](https://insights.sbomify.com/CVE-2023-33071/): Improper Access Control in Automotive OS Platform Android (high 8.4) - [CVE-2023-33070](https://insights.sbomify.com/CVE-2023-33070/): Improper Authentication in Automotive OS (high 7.1) - [CVE-2023-3307](https://insights.sbomify.com/CVE-2023-3307/): miniCal sql injection (medium 6.3) - [CVE-2023-33069](https://insights.sbomify.com/CVE-2023-33069/): Buffer Copy Without Checking Size of Input in Audio (medium 6.7) - [CVE-2023-33068](https://insights.sbomify.com/CVE-2023-33068/): Buffer Copy Without Checking Size of Input in Audio (medium 6.7) - [CVE-2023-33067](https://insights.sbomify.com/CVE-2023-33067/): Use of Out-of-range Pointer Offset in Audio (medium 6.7) - [CVE-2023-33066](https://insights.sbomify.com/CVE-2023-33066/): Use of Out-of-range Pointer Offset in Audio (high 8.4) - [CVE-2023-33065](https://insights.sbomify.com/CVE-2023-33065/): Buffer Over-read in Audio (medium 6.1) - [CVE-2023-33064](https://insights.sbomify.com/CVE-2023-33064/): Buffer Over-read in Audio (medium 5.5) - [CVE-2023-33063](https://insights.sbomify.com/CVE-2023-33063/): Qualcomm Multiple Chipsets Use-After-Free (high 7.8, exploited in the wild) - [CVE-2023-33062](https://insights.sbomify.com/CVE-2023-33062/): Buffer Over-read in WLAN Firmware (high 7.5) - [CVE-2023-33061](https://insights.sbomify.com/CVE-2023-33061/): Buffer Over-read in WLAN Firmware (high 7.5) - [CVE-2023-33060](https://insights.sbomify.com/CVE-2023-33060/): Buffer Over-read in Core (high 7.1) - [CVE-2023-3306](https://insights.sbomify.com/CVE-2023-3306/): Ruijie RG-EW1200G Admin Password app.09df2a9e44ab48766f5f.js access control (high 7.3) - [CVE-2023-33059](https://insights.sbomify.com/CVE-2023-33059/): Buffer Copy Without Checking Size of Input in Audio (high 7.8) - [CVE-2023-33058](https://insights.sbomify.com/CVE-2023-33058/): Buffer Copy Without Checking Size of Input in Modem (high 8.2) - [CVE-2023-33057](https://insights.sbomify.com/CVE-2023-33057/): Improper Input Validation in Multi-Mode Call Processor (high 7.5) - [CVE-2023-33056](https://insights.sbomify.com/CVE-2023-33056/): NULL Pointer dereference in WLAN Firmware (high 7.5) - [CVE-2023-33055](https://insights.sbomify.com/CVE-2023-33055/): Buffer Copy Without Checking Size of Input in Audio (high 7.8) - [CVE-2023-33054](https://insights.sbomify.com/CVE-2023-33054/): Improper Authentication in GPS HLOS Driver (critical 9.1) - [CVE-2023-33053](https://insights.sbomify.com/CVE-2023-33053/): Improper Validation of Array Index in Kernel (high 8.4) - [CVE-2023-3305](https://insights.sbomify.com/CVE-2023-3305/): C-DATA Web Management System User Creation access control (high 7.3) - [CVE-2023-33049](https://insights.sbomify.com/CVE-2023-33049/): Improper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor (high 7.5) - [CVE-2023-33048](https://insights.sbomify.com/CVE-2023-33048/): Buffer over-read in WLAN Firmware (high 7.5) - [CVE-2023-33047](https://insights.sbomify.com/CVE-2023-33047/): Buffer Over-read in WLAN Firmware (high 7.5) - [CVE-2023-33046](https://insights.sbomify.com/CVE-2023-33046/): Time-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution Environment (high 7.8) - [CVE-2023-33045](https://insights.sbomify.com/CVE-2023-33045/): Buffer Copy Without Checking Size of Input in WLAN Firmware (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2023/page/303/