# Vulnerabilities published in 2023


- [CVE-2023-29380](https://insights.sbomify.com/CVE-2023-29380/): Path traversal in linuxmint:warpinator (high 7.5)
- [CVE-2023-2938](https://insights.sbomify.com/CVE-2023-2938/): Other in Chrome (medium 4.3)
- [CVE-2023-29377](https://insights.sbomify.com/CVE-2023-29377/): Path traversal in Secure Integration Server (medium 6.6)
- [CVE-2023-29376](https://insights.sbomify.com/CVE-2023-29376/): Cross-site scripting in progress:sitefinity (medium 5.4)
- [CVE-2023-29375](https://insights.sbomify.com/CVE-2023-29375/): File upload in progress:sitefinity (critical 9.8)
- [CVE-2023-29374](https://insights.sbomify.com/CVE-2023-29374/): LangChain vulnerable to code injection (critical 9.8)
- [CVE-2023-29373](https://insights.sbomify.com/CVE-2023-29373/): Microsoft ODBC Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-29372](https://insights.sbomify.com/CVE-2023-29372/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-29371](https://insights.sbomify.com/CVE-2023-29371/): Windows GDI Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-29370](https://insights.sbomify.com/CVE-2023-29370/): Windows Media Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-2937](https://insights.sbomify.com/CVE-2023-2937/): Other in Chrome (medium 4.3)
- [CVE-2023-29369](https://insights.sbomify.com/CVE-2023-29369/): Remote Procedure Call Runtime Denial of Service Vulnerability (medium 6.5)
- [CVE-2023-29368](https://insights.sbomify.com/CVE-2023-29368/): Windows Filtering Platform Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2023-29367](https://insights.sbomify.com/CVE-2023-29367/): iSCSI Target WMI Provider Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-29366](https://insights.sbomify.com/CVE-2023-29366/): Windows Geolocation Service Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-29365](https://insights.sbomify.com/CVE-2023-29365/): Windows Media Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-29364](https://insights.sbomify.com/CVE-2023-29364/): Windows Authentication Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2023-29363](https://insights.sbomify.com/CVE-2023-29363/): Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-29362](https://insights.sbomify.com/CVE-2023-29362/): Remote Desktop Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-29361](https://insights.sbomify.com/CVE-2023-29361/): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2023-29360](https://insights.sbomify.com/CVE-2023-29360/): Microsoft Streaming Service Untrusted Pointer Dereference (high 8.4, exploited in the wild)
- [CVE-2023-2936](https://insights.sbomify.com/CVE-2023-2936/): Memory corruption in Chrome (high 8.8)
- [CVE-2023-29359](https://insights.sbomify.com/CVE-2023-29359/): GDI Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-29358](https://insights.sbomify.com/CVE-2023-29358/): Windows GDI Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-29357](https://insights.sbomify.com/CVE-2023-29357/): Microsoft SharePoint Server Privilege Escalation (critical 9.8, exploited in the wild)
- [CVE-2023-29356](https://insights.sbomify.com/CVE-2023-29356/): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-29355](https://insights.sbomify.com/CVE-2023-29355/): DHCP Server Service Information Disclosure Vulnerability (medium 5.3)
- [CVE-2023-29354](https://insights.sbomify.com/CVE-2023-29354/): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (medium 4.7)
- [CVE-2023-29353](https://insights.sbomify.com/CVE-2023-29353/): Sysinternals Process Monitor for Windows Denial of Service Vulnerability (medium 5.5)
- [CVE-2023-29352](https://insights.sbomify.com/CVE-2023-29352/): Windows Remote Desktop Security Feature Bypass Vulnerability (medium 6.5)
- [CVE-2023-29351](https://insights.sbomify.com/CVE-2023-29351/): Windows Group Policy Elevation of Privilege Vulnerability (high 8.1)
- [CVE-2023-29350](https://insights.sbomify.com/CVE-2023-29350/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2023-2935](https://insights.sbomify.com/CVE-2023-2935/): Memory corruption in Chrome (high 8.8)
- [CVE-2023-29349](https://insights.sbomify.com/CVE-2023-29349/): Microsoft ODBC and OLE DB Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-29348](https://insights.sbomify.com/CVE-2023-29348/): Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-29347](https://insights.sbomify.com/CVE-2023-29347/): Windows Admin Center Spoofing Vulnerability (high 8.7)
- [CVE-2023-29346](https://insights.sbomify.com/CVE-2023-29346/): NTFS Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-29345](https://insights.sbomify.com/CVE-2023-29345/): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (medium 6.1)
- [CVE-2023-29344](https://insights.sbomify.com/CVE-2023-29344/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-29343](https://insights.sbomify.com/CVE-2023-29343/): SysInternals Sysmon for Windows Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-29341](https://insights.sbomify.com/CVE-2023-29341/): AV1 Video Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-29340](https://insights.sbomify.com/CVE-2023-29340/): AV1 Video Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-2934](https://insights.sbomify.com/CVE-2023-2934/): Memory corruption in Chrome (high 8.8)
- [CVE-2023-29338](https://insights.sbomify.com/CVE-2023-29338/): Visual Studio Code Spoofing Vulnerability (medium 6.6)
- [CVE-2023-29337](https://insights.sbomify.com/CVE-2023-29337/): NuGet Client Remote Code Execution Vulnerability (high 7.1)
- [CVE-2023-29336](https://insights.sbomify.com/CVE-2023-29336/): Microsoft Win32K Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2023-29335](https://insights.sbomify.com/CVE-2023-29335/): Microsoft Word Security Feature Bypass Vulnerability (high 7.5)
- [CVE-2023-29334](https://insights.sbomify.com/CVE-2023-29334/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 4.3)
- [CVE-2023-29333](https://insights.sbomify.com/CVE-2023-29333/): Microsoft Access Denial of Service Vulnerability (low 3.3)
- [CVE-2023-29332](https://insights.sbomify.com/CVE-2023-29332/): Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2023-29331](https://insights.sbomify.com/CVE-2023-29331/): .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability (high 7.5)
- [CVE-2023-29330](https://insights.sbomify.com/CVE-2023-29330/): Microsoft Teams Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-2933](https://insights.sbomify.com/CVE-2023-2933/): Use after free in Chrome (high 8.8)
- [CVE-2023-29328](https://insights.sbomify.com/CVE-2023-29328/): Microsoft Teams Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-29326](https://insights.sbomify.com/CVE-2023-29326/): .NET Framework Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-29325](https://insights.sbomify.com/CVE-2023-29325/): Windows OLE Remote Code Execution Vulnerability (high 8.1)
- [CVE-2023-29324](https://insights.sbomify.com/CVE-2023-29324/): Windows MSHTML Platform Security Feature Bypass Vulnerability (medium 6.5)
- [CVE-2023-29323](https://insights.sbomify.com/CVE-2023-29323/): Denial of service in openbsd:openbsd (high 7.8)
- [CVE-2023-29322](https://insights.sbomify.com/CVE-2023-29322/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4)
- [CVE-2023-29321](https://insights.sbomify.com/CVE-2023-29321/): Adobe Animate FLA files Use After Free Arbitrary code execution (high 7.8)
- [CVE-2023-29320](https://insights.sbomify.com/CVE-2023-29320/): ZDI-CAN-20712: Adobe Acrobat Blacklist Bypass Design flaw (high 7.8)
- [CVE-2023-2932](https://insights.sbomify.com/CVE-2023-2932/): Use after free in Chrome (high 8.8)
- [CVE-2023-29319](https://insights.sbomify.com/CVE-2023-29319/): [FG-VD-23-010] Adobe InDesign 2023 Out-of-Bound Read Vulnerability VII Notification (medium 5.5)
- [CVE-2023-29318](https://insights.sbomify.com/CVE-2023-29318/): [FG-VD-23-011] Adobe InDesign 2023 Out-of-Bound Read Vulnerability VIII Notification (medium 5.5)
- [CVE-2023-29317](https://insights.sbomify.com/CVE-2023-29317/): [FG-VD-23-005] Adobe InDesign 2023 Out-of-Bound Read Vulnerability III Notification (medium 5.5)
- [CVE-2023-29316](https://insights.sbomify.com/CVE-2023-29316/): [FG-VD-23-012] Adobe InDesign 2023 Out-of-Bound Read Vulnerability IX Notification (medium 5.5)
- [CVE-2023-29315](https://insights.sbomify.com/CVE-2023-29315/): [FG-VD-23-008] Adobe InDesign 2023 Out-of-Bound Read Vulnerability VI Notification (medium 5.5)
- [CVE-2023-29314](https://insights.sbomify.com/CVE-2023-29314/): [FG-VD-23-013] Adobe InDesign 2023 Out-of-Bound Read Vulnerability X Notification (medium 5.5)
- [CVE-2023-29313](https://insights.sbomify.com/CVE-2023-29313/): [FG-VD-23-014] Adobe InDesign 2023 Out-of-Bound Read Vulnerability XI Notification (medium 5.5)
- [CVE-2023-29312](https://insights.sbomify.com/CVE-2023-29312/): [FG-VD-23-004] Adobe InDesign 2023 Out-of-Bound Read Vulnerability II Notification (medium 5.5)
- [CVE-2023-29311](https://insights.sbomify.com/CVE-2023-29311/): [FG-VD-23-006] Adobe InDesign 2023 Out-of-Bound Read Vulnerability IV Notification (medium 5.5)
- [CVE-2023-29310](https://insights.sbomify.com/CVE-2023-29310/): [FG-VD-23-007] Adobe InDesign 2023 Out-of-Bound Read Vulnerability V Notification (medium 5.5)
- [CVE-2023-2931](https://insights.sbomify.com/CVE-2023-2931/): Use after free in Chrome (high 8.8)
- [CVE-2023-29309](https://insights.sbomify.com/CVE-2023-29309/): [FG-VD-23-003] Adobe InDesign 2023 Out-of-Bound Read Vulnerability Notification (medium 5.5)
- [CVE-2023-29308](https://insights.sbomify.com/CVE-2023-29308/): [FG-VD-23-009] Adobe InDesign 2023 Arbitrary Code Execution Vulnerability Notification (high 7.8)
- [CVE-2023-29307](https://insights.sbomify.com/CVE-2023-29307/): Open Redirect on AEM Target (medium 5.4)
- [CVE-2023-29306](https://insights.sbomify.com/CVE-2023-29306/): Adobe Connect Reflected Cross-Site Scripting (XSS) Arbitrary code execution (medium 6.1)
- [CVE-2023-29305](https://insights.sbomify.com/CVE-2023-29305/): Adobe Connect Reflected Cross-Site Scripting (XSS) Arbitrary code execution (medium 6.1)
- [CVE-2023-29304](https://insights.sbomify.com/CVE-2023-29304/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4)
- [CVE-2023-29303](https://insights.sbomify.com/CVE-2023-29303/): ZDI-CAN-20970: Adobe Acrobat Reader DC AcroForm Annotation Use-After-Free Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-29302](https://insights.sbomify.com/CVE-2023-29302/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4)
- [CVE-2023-29301](https://insights.sbomify.com/CVE-2023-29301/): Adobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypass (high 7.5)
- [CVE-2023-29300](https://insights.sbomify.com/CVE-2023-29300/): Adobe ColdFusion Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2023-2930](https://insights.sbomify.com/CVE-2023-2930/): Use after free in Chrome (high 8.8)
- [CVE-2023-29299](https://insights.sbomify.com/CVE-2023-29299/): Adobe Acrobat Reader Untrusted Search Path Application denial-of-service (medium 4.7)
- [CVE-2023-29298](https://insights.sbomify.com/CVE-2023-29298/): Adobe ColdFusion Improper Access Control (high 7.5, exploited in the wild)
- [CVE-2023-29297](https://insights.sbomify.com/CVE-2023-29297/): Admin-to-admin stored XSS via cache poisoning (critical 9.1)
- [CVE-2023-29296](https://insights.sbomify.com/CVE-2023-29296/): [Cloud] Customer suspects IDOR vulnerability (medium 4.3)
- [CVE-2023-29295](https://insights.sbomify.com/CVE-2023-29295/): Insecure Direct Object Reference (IDOR) in Create Quote Function (medium 4.3)
- [CVE-2023-29294](https://insights.sbomify.com/CVE-2023-29294/): Bypass Purchase Order Approval using Company User in Adobe Commerce B2B (medium 4.3)
- [CVE-2023-29293](https://insights.sbomify.com/CVE-2023-29293/): Adobe Commerce | Improper Input Validation (CWE-20) (low 2.7)
- [CVE-2023-29292](https://insights.sbomify.com/CVE-2023-29292/): Server Side Request Forgery (SSRF) in FedEx carrier integration configuration (medium 4.9)
- [CVE-2023-29291](https://insights.sbomify.com/CVE-2023-29291/): Server Side Request Forgery (SSRF) in USPS carrier integration configuration (medium 4.9)
- [CVE-2023-29290](https://insights.sbomify.com/CVE-2023-29290/): Adobe Commerce Guest Cart Shipping Address Overwrite IDOR (medium 5.3)
- [CVE-2023-2929](https://insights.sbomify.com/CVE-2023-2929/): Memory corruption in Chrome (high 8.8)
- [CVE-2023-29289](https://insights.sbomify.com/CVE-2023-29289/): Adobe Commerce XML Injection Security feature bypass (medium 6.5)
- [CVE-2023-29288](https://insights.sbomify.com/CVE-2023-29288/): Adobe Commerce | Incorrect Authorization (CWE-863) (medium 4.3)
- [CVE-2023-29287](https://insights.sbomify.com/CVE-2023-29287/): Adobe Commerce Information Exposure Security feature bypass (medium 5.3)
- [CVE-2023-29286](https://insights.sbomify.com/CVE-2023-29286/): ZDI-CAN-20369: Adobe Substance 3D Painter USD File Parsing Uninitialized Variable Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-29285](https://insights.sbomify.com/CVE-2023-29285/): ZDI-CAN-20360: Adobe Substance 3D Painter USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/332/