# Vulnerabilities published in 2023


- [CVE-2023-32496](https://insights.sbomify.com/CVE-2023-32496/): WordPress StopBadBots Plugin <= 7.31 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-32495](https://insights.sbomify.com/CVE-2023-32495/): Information disclosure in PowerScale OneFS (high 7.8)
- [CVE-2023-32494](https://insights.sbomify.com/CVE-2023-32494/): Privilege escalation in PowerScale OneFS (medium 6.7)
- [CVE-2023-32493](https://insights.sbomify.com/CVE-2023-32493/): Security feature bypass in PowerScale OneFS (high 7.3)
- [CVE-2023-32492](https://insights.sbomify.com/CVE-2023-32492/): Misconfiguration in PowerScale OneFS (medium 5.3)
- [CVE-2023-32491](https://insights.sbomify.com/CVE-2023-32491/): Information disclosure in PowerScale OneFS (medium 6.3)
- [CVE-2023-32490](https://insights.sbomify.com/CVE-2023-32490/): Privilege escalation in PowerScale OneFS (medium 6.7)
- [CVE-2023-3249](https://insights.sbomify.com/CVE-2023-3249/): Web3 – Crypto wallet Login & NFT token gating <= 2.6.0 - Authentication Bypass (critical 9.8)
- [CVE-2023-32489](https://insights.sbomify.com/CVE-2023-32489/): Privilege escalation in PowerScale OneFS (medium 6.7)
- [CVE-2023-32488](https://insights.sbomify.com/CVE-2023-32488/): Information disclosure in PowerScale OneFS (medium 5.3)
- [CVE-2023-32487](https://insights.sbomify.com/CVE-2023-32487/): Privilege escalation in PowerScale OneFS (high 7.8)
- [CVE-2023-32486](https://insights.sbomify.com/CVE-2023-32486/): Privilege escalation in PowerScale OneFS (medium 6.7)
- [CVE-2023-32485](https://insights.sbomify.com/CVE-2023-32485/): Privilege escalation in Dell SmartFabric Storage Software (critical 9.8)
- [CVE-2023-32484](https://insights.sbomify.com/CVE-2023-32484/): Privilege escalation in Enterprise SONiC OS (critical 9.8)
- [CVE-2023-32483](https://insights.sbomify.com/CVE-2023-32483/): Information disclosure in Wyse Management Suite (medium 4.4)
- [CVE-2023-32482](https://insights.sbomify.com/CVE-2023-32482/): Missing authorization in Wyse Management Suite (medium 4.9)
- [CVE-2023-32481](https://insights.sbomify.com/CVE-2023-32481/): Denial of service in Wyse Management Suite (medium 4.9)
- [CVE-2023-32480](https://insights.sbomify.com/CVE-2023-32480/): Other in CPG BIOS (medium 6.8)
- [CVE-2023-3248](https://insights.sbomify.com/CVE-2023-3248/): All-in-one Floating Contact Form < 2.1.2 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2023-32479](https://insights.sbomify.com/CVE-2023-32479/): Privilege escalation in Dell Encryption (medium 6.7)
- [CVE-2023-32478](https://insights.sbomify.com/CVE-2023-32478/): Information disclosure in PowerStore (critical 9.0)
- [CVE-2023-32477](https://insights.sbomify.com/CVE-2023-32477/): Privilege escalation in Common Event Enabler (high 7.8)
- [CVE-2023-32476](https://insights.sbomify.com/CVE-2023-32476/): Hardcoded credentials in Dell Hybrid Client (DHC) (medium 6.4)
- [CVE-2023-32475](https://insights.sbomify.com/CVE-2023-32475/): Security feature bypass in CPG BIOS (high 7.6)
- [CVE-2023-32474](https://insights.sbomify.com/CVE-2023-32474/): Path traversal in Dell Display Manager (medium 6.6)
- [CVE-2023-32472](https://insights.sbomify.com/CVE-2023-32472/): Memory corruption in PowerSwitch Z9664F-ON BIOS (medium 5.7)
- [CVE-2023-32471](https://insights.sbomify.com/CVE-2023-32471/): Memory corruption in Dell Edge Gateway 3200 (medium 6.0)
- [CVE-2023-32470](https://insights.sbomify.com/CVE-2023-32470/): Other in Dell Digital Delivery (medium 5.0)
- [CVE-2023-3247](https://insights.sbomify.com/CVE-2023-3247/): Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (low 2.6)
- [CVE-2023-32469](https://insights.sbomify.com/CVE-2023-32469/): Other in Dell Precision 5820 Tower, Dell Precision 7820 Tower, Dell Precision 7920 Tower (high 7.5)
- [CVE-2023-32468](https://insights.sbomify.com/CVE-2023-32468/): Information disclosure in ECS Streamer (medium 5.8)
- [CVE-2023-32467](https://insights.sbomify.com/CVE-2023-32467/): Memory corruption in PowerSwitch Z9664F-ON BIOS (medium 5.7)
- [CVE-2023-32466](https://insights.sbomify.com/CVE-2023-32466/): Memory corruption in Dell Edge Gateway 3200 (medium 5.7)
- [CVE-2023-32465](https://insights.sbomify.com/CVE-2023-32465/): Auth bypass in PowerProtect Cyber Recovery (high 8.8)
- [CVE-2023-32464](https://insights.sbomify.com/CVE-2023-32464/): Security feature bypass in Dell EMC VxRail Appliance (low 2.7)
- [CVE-2023-32463](https://insights.sbomify.com/CVE-2023-32463/): Denial of service in Dell EMC VxRail Appliance (low 3.4)
- [CVE-2023-32462](https://insights.sbomify.com/CVE-2023-32462/): Command injection in Dell SmartFabric OS10 (critical 9.8)
- [CVE-2023-32461](https://insights.sbomify.com/CVE-2023-32461/): Memory corruption in PowerEdge Platform (medium 5.0)
- [CVE-2023-32460](https://insights.sbomify.com/CVE-2023-32460/): Privilege escalation in PowerEdge Platform (high 8.8)
- [CVE-2023-3246](https://insights.sbomify.com/CVE-2023-3246/): Allocation of Resources Without Limits or Throttling in GitLab (medium 4.3)
- [CVE-2023-32458](https://insights.sbomify.com/CVE-2023-32458/): Privilege escalation in Dell EMC AppSync (high 7.3)
- [CVE-2023-32457](https://insights.sbomify.com/CVE-2023-32457/): Privilege escalation in PowerScale OneFS (high 7.5)
- [CVE-2023-32455](https://insights.sbomify.com/CVE-2023-32455/): Information disclosure in Wyse Proprietary OS (Modern ThinOS) (medium 5.5)
- [CVE-2023-32454](https://insights.sbomify.com/CVE-2023-32454/): Path traversal in DUP Framework (medium 6.3)
- [CVE-2023-32453](https://insights.sbomify.com/CVE-2023-32453/): Auth bypass in CPG BIOS (medium 4.6)
- [CVE-2023-32451](https://insights.sbomify.com/CVE-2023-32451/): Privilege escalation in Dell Display Manager (high 7.3)
- [CVE-2023-32450](https://insights.sbomify.com/CVE-2023-32450/): Privilege escalation in Dell Power Manager (DPM) (medium 6.1)
- [CVE-2023-3245](https://insights.sbomify.com/CVE-2023-3245/): Floating Chat Widget < 3.1.2 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2023-32449](https://insights.sbomify.com/CVE-2023-32449/): Security feature bypass in PowerStore (high 7.2)
- [CVE-2023-32448](https://insights.sbomify.com/CVE-2023-32448/): Information disclosure in PowerPath Windows (medium 5.5)
- [CVE-2023-32447](https://insights.sbomify.com/CVE-2023-32447/): Information disclosure in Wyse Proprietary OS (Modern ThinOS) (medium 5.5)
- [CVE-2023-32446](https://insights.sbomify.com/CVE-2023-32446/): Information disclosure in Wyse Proprietary OS (Modern ThinOS) (medium 5.5)
- [CVE-2023-32445](https://insights.sbomify.com/CVE-2023-32445/): Cross-site scripting in Safari (medium 6.1)
- [CVE-2023-32444](https://insights.sbomify.com/CVE-2023-32444/): Security feature bypass in macOS (high 7.5)
- [CVE-2023-32443](https://insights.sbomify.com/CVE-2023-32443/): Memory corruption in macOS (high 8.1)
- [CVE-2023-32442](https://insights.sbomify.com/CVE-2023-32442/): Missing authorization in macOS (medium 5.5)
- [CVE-2023-32441](https://insights.sbomify.com/CVE-2023-32441/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2023-3244](https://insights.sbomify.com/CVE-2023-3244/): Comments Like Dislike <= 1.2.0 - Missing Authorization to Authenticated (Subscriber+) Plugin Setting Reset (medium 4.3)
- [CVE-2023-32439](https://insights.sbomify.com/CVE-2023-32439/): Apple Multiple Products WebKit Type Confusion (high 8.8, exploited in the wild)
- [CVE-2023-32438](https://insights.sbomify.com/CVE-2023-32438/): Security feature bypass in iOS and iPadOS (medium 5.5)
- [CVE-2023-32437](https://insights.sbomify.com/CVE-2023-32437/): Security feature bypass in iOS and iPadOS (high 8.6)
- [CVE-2023-32436](https://insights.sbomify.com/CVE-2023-32436/): Memory corruption in macOS (high 7.1)
- [CVE-2023-32435](https://insights.sbomify.com/CVE-2023-32435/): Apple Multiple Products WebKit Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2023-32434](https://insights.sbomify.com/CVE-2023-32434/): Apple Multiple Products Integer Overflow (high 7.8, exploited in the wild)
- [CVE-2023-32433](https://insights.sbomify.com/CVE-2023-32433/): Use after free in iOS and iPadOS (high 7.8)
- [CVE-2023-32432](https://insights.sbomify.com/CVE-2023-32432/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2023-3243](https://insights.sbomify.com/CVE-2023-3243/): Weak cryptography in BCM-WEB (high 8.3)
- [CVE-2023-32429](https://insights.sbomify.com/CVE-2023-32429/): Security feature bypass in macOS (medium 5.5)
- [CVE-2023-32428](https://insights.sbomify.com/CVE-2023-32428/): Privilege escalation in iOS and iPadOS (high 7.8)
- [CVE-2023-32427](https://insights.sbomify.com/CVE-2023-32427/): Information disclosure in Apple Music for Android (medium 5.9)
- [CVE-2023-32426](https://insights.sbomify.com/CVE-2023-32426/): Privilege escalation in macOS (high 7.8)
- [CVE-2023-32425](https://insights.sbomify.com/CVE-2023-32425/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2023-32424](https://insights.sbomify.com/CVE-2023-32424/): Security feature bypass in iOS and iPadOS (medium 5.5)
- [CVE-2023-32423](https://insights.sbomify.com/CVE-2023-32423/): Memory corruption in Safari (medium 6.5)
- [CVE-2023-32422](https://insights.sbomify.com/CVE-2023-32422/): Security feature bypass in iOS and iPadOS (medium 5.5)
- [CVE-2023-32421](https://insights.sbomify.com/CVE-2023-32421/): Information disclosure in macOS (medium 5.5)
- [CVE-2023-32420](https://insights.sbomify.com/CVE-2023-32420/): Memory corruption in iOS and iPadOS (high 7.1)
- [CVE-2023-3242](https://insights.sbomify.com/CVE-2023-3242/): Denial of service in B&R Automation Runtime (high 8.6)
- [CVE-2023-32419](https://insights.sbomify.com/CVE-2023-32419/): Memory corruption in iOS and iPadOS (critical 9.8)
- [CVE-2023-32418](https://insights.sbomify.com/CVE-2023-32418/): Code injection in macOS (high 7.8)
- [CVE-2023-32417](https://insights.sbomify.com/CVE-2023-32417/): Security feature bypass in watchOS (low 2.4)
- [CVE-2023-32416](https://insights.sbomify.com/CVE-2023-32416/): Business logic in iOS and iPadOS (medium 5.5)
- [CVE-2023-32415](https://insights.sbomify.com/CVE-2023-32415/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2023-32414](https://insights.sbomify.com/CVE-2023-32414/): Security feature bypass in macOS (high 8.6)
- [CVE-2023-32413](https://insights.sbomify.com/CVE-2023-32413/): Race condition in iOS and iPadOS (high 7.0)
- [CVE-2023-32412](https://insights.sbomify.com/CVE-2023-32412/): Use after free in iOS and iPadOS (critical 9.8)
- [CVE-2023-32411](https://insights.sbomify.com/CVE-2023-32411/): Security feature bypass in iOS and iPadOS (medium 5.5)
- [CVE-2023-32410](https://insights.sbomify.com/CVE-2023-32410/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2023-3241](https://insights.sbomify.com/CVE-2023-3241/): OTCMS path traversal (low 3.5)
- [CVE-2023-32409](https://insights.sbomify.com/CVE-2023-32409/): Apple Multiple Products WebKit Sandbox Escape (high 8.6, exploited in the wild)
- [CVE-2023-32408](https://insights.sbomify.com/CVE-2023-32408/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2023-32407](https://insights.sbomify.com/CVE-2023-32407/): Security feature bypass in iOS and iPadOS (medium 5.5)
- [CVE-2023-32405](https://insights.sbomify.com/CVE-2023-32405/): Privilege escalation in macOS (high 7.8)
- [CVE-2023-32404](https://insights.sbomify.com/CVE-2023-32404/): Security feature bypass in iOS and iPadOS (medium 5.5)
- [CVE-2023-32403](https://insights.sbomify.com/CVE-2023-32403/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2023-32402](https://insights.sbomify.com/CVE-2023-32402/): Memory corruption in Safari (medium 6.5)
- [CVE-2023-32401](https://insights.sbomify.com/CVE-2023-32401/): Memory corruption in macOS (high 7.8)
- [CVE-2023-32400](https://insights.sbomify.com/CVE-2023-32400/): Privilege escalation in iOS and iPadOS (medium 5.5)
- [CVE-2023-3240](https://insights.sbomify.com/CVE-2023-3240/): OTCMS usersNews_deal.php path traversal (low 3.5)
- [CVE-2023-32399](https://insights.sbomify.com/CVE-2023-32399/): Information disclosure in iOS and iPadOS (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/309/