# Vulnerabilities published in 2023


- [CVE-2023-28622](https://insights.sbomify.com/CVE-2023-28622/): WordPress Easy Slider Revolution Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-28621](https://insights.sbomify.com/CVE-2023-28621/): WordPress Raise Mag Theme <= 1.0.7 and Wishful Blog theme <= 2.0.1 are vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-28620](https://insights.sbomify.com/CVE-2023-28620/): WordPress Cyberus Key Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-2862](https://insights.sbomify.com/CVE-2023-2862/): SiteServer CMS search cross site scripting (low 3.5)
- [CVE-2023-28619](https://insights.sbomify.com/CVE-2023-28619/): WordPress Resoto theme <= 1.0.8 - Broken Access Control to Arbitrary Plugin Activation (medium 4.3)
- [CVE-2023-28618](https://insights.sbomify.com/CVE-2023-28618/): WordPress Enhanced Plugin Admin Plugin <= 1.16 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-28617](https://insights.sbomify.com/CVE-2023-28617/): Command injection in gnu:org mode (high 7.8)
- [CVE-2023-28616](https://insights.sbomify.com/CVE-2023-28616/): Information disclosure in stormshield:stormshield network security (high 7.5)
- [CVE-2023-28614](https://insights.sbomify.com/CVE-2023-28614/): Command injection in freewillsolutions:smart trade (critical 9.8)
- [CVE-2023-28613](https://insights.sbomify.com/CVE-2023-28613/): Integer overflow in samsung:exynos 1280 firmware (medium 6.8)
- [CVE-2023-28611](https://insights.sbomify.com/CVE-2023-28611/): Missing authorization in omicronenergy:stationguard (critical 9.8)
- [CVE-2023-28610](https://insights.sbomify.com/CVE-2023-28610/): Security feature bypass in omicronenergy:stationguard (critical 9.8)
- [CVE-2023-2861](https://insights.sbomify.com/CVE-2023-2861/): Qemu: 9pfs: improper access control on special files (medium 6.0)
- [CVE-2023-28609](https://insights.sbomify.com/CVE-2023-28609/): Ansible Semaphore mishandles authentication (critical 9.8)
- [CVE-2023-28607](https://insights.sbomify.com/CVE-2023-28607/): Cross-site scripting in misp-project:misp (medium 6.1)
- [CVE-2023-28606](https://insights.sbomify.com/CVE-2023-28606/): Cross-site scripting in misp-project:misp (medium 6.1)
- [CVE-2023-28604](https://insights.sbomify.com/CVE-2023-28604/): Fluid Components TYPO3 extension vulnerable to Cross-Site Scripting (medium 6.1)
- [CVE-2023-28603](https://insights.sbomify.com/CVE-2023-28603/): Missing authorization in Zoom VDI Windows Meeting Client (high 7.7)
- [CVE-2023-28602](https://insights.sbomify.com/CVE-2023-28602/): Security feature bypass in Zoom for Windows Client (low 2.8)
- [CVE-2023-28601](https://insights.sbomify.com/CVE-2023-28601/): Memory corruption in Zoom for Windows Client (high 8.3)
- [CVE-2023-28600](https://insights.sbomify.com/CVE-2023-28600/): Missing authorization in Zoom for macOS Client (medium 5.2)
- [CVE-2023-2860](https://insights.sbomify.com/CVE-2023-2860/): Out-of-bounds read when setting hmac data (medium 4.4)
- [CVE-2023-28599](https://insights.sbomify.com/CVE-2023-28599/): Cross-site scripting in Zoom for Android (medium 4.3)
- [CVE-2023-28598](https://insights.sbomify.com/CVE-2023-28598/): Cross-site scripting in Zoom for Linux clients (high 7.5)
- [CVE-2023-28597](https://insights.sbomify.com/CVE-2023-28597/): Improper trust boundary implementation for SMB in Zoom Clients (high 8.3)
- [CVE-2023-28596](https://insights.sbomify.com/CVE-2023-28596/): Local Privilege Escalation in Zoom for macOS Installers (high 7.8)
- [CVE-2023-2859](https://insights.sbomify.com/CVE-2023-2859/): Code Injection in nilsteampassnet/teampass (high 7.1)
- [CVE-2023-28588](https://insights.sbomify.com/CVE-2023-28588/): Integer Overflow or Wraparound in Bluetooth Host (high 7.5)
- [CVE-2023-28587](https://insights.sbomify.com/CVE-2023-28587/): Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller (high 7.8)
- [CVE-2023-28586](https://insights.sbomify.com/CVE-2023-28586/): Improper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OS (medium 6.0)
- [CVE-2023-28585](https://insights.sbomify.com/CVE-2023-28585/): Integer Overflow to Buffer Overflow in TZ Secure OS (high 8.2)
- [CVE-2023-28584](https://insights.sbomify.com/CVE-2023-28584/): Improper Authorization in WLAN Host (high 7.5)
- [CVE-2023-28583](https://insights.sbomify.com/CVE-2023-28583/): Double Free in Data Network Stack & Connectivity (medium 6.7)
- [CVE-2023-28582](https://insights.sbomify.com/CVE-2023-28582/): Buffer Copy Without Checking Size of Input in Data Modem (critical 9.8)
- [CVE-2023-28581](https://insights.sbomify.com/CVE-2023-28581/): Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Firmware (critical 9.8)
- [CVE-2023-28580](https://insights.sbomify.com/CVE-2023-28580/): Buffer Copy Without Checking Size of Input in WLAN Host (medium 6.7)
- [CVE-2023-2858](https://insights.sbomify.com/CVE-2023-2858/): Memory corruption in Wireshark (medium 5.3)
- [CVE-2023-28579](https://insights.sbomify.com/CVE-2023-28579/): Buffer Copy Without Checking Size of Input in WLAN Host (medium 6.7)
- [CVE-2023-28578](https://insights.sbomify.com/CVE-2023-28578/): Improper Input Validation in Services (critical 9.3)
- [CVE-2023-28577](https://insights.sbomify.com/CVE-2023-28577/): Multiple Dmabuf Kernel Address UAF Vulnerability (medium 6.7)
- [CVE-2023-28576](https://insights.sbomify.com/CVE-2023-28576/): Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Kernel Driver (medium 6.4)
- [CVE-2023-28575](https://insights.sbomify.com/CVE-2023-28575/): Multiple Type Confusion Vulnerability (medium 6.7)
- [CVE-2023-28574](https://insights.sbomify.com/CVE-2023-28574/): Improper Input Validation in Core (critical 9.0)
- [CVE-2023-28573](https://insights.sbomify.com/CVE-2023-28573/): Improper Validation of Array Index in WLAN HAL (high 7.8)
- [CVE-2023-28572](https://insights.sbomify.com/CVE-2023-28572/): Buffer Over-read in WLAN HOST (medium 6.6)
- [CVE-2023-28571](https://insights.sbomify.com/CVE-2023-28571/): Buffer Over-read in WLAN HOST (medium 6.1)
- [CVE-2023-28570](https://insights.sbomify.com/CVE-2023-28570/): Buffer Copy without Checking Size of Input in Audio (medium 6.7)
- [CVE-2023-2857](https://insights.sbomify.com/CVE-2023-2857/): Memory corruption in Wireshark (medium 5.3)
- [CVE-2023-28569](https://insights.sbomify.com/CVE-2023-28569/): Buffer Over-read in WLAN HAL (medium 6.1)
- [CVE-2023-28568](https://insights.sbomify.com/CVE-2023-28568/): Buffer Over-read in WLAN HAL (medium 6.1)
- [CVE-2023-28567](https://insights.sbomify.com/CVE-2023-28567/): Improper Validation of Array Index in WLAN HAL (high 7.8)
- [CVE-2023-28566](https://insights.sbomify.com/CVE-2023-28566/): Buffer Over-read in WLAN HAL (medium 6.1)
- [CVE-2023-28565](https://insights.sbomify.com/CVE-2023-28565/): Improper Validation of Array Index in WLAN HAL (high 7.8)
- [CVE-2023-28564](https://insights.sbomify.com/CVE-2023-28564/): Use of Out-of-range Pointer Offset in WLAN HAL (high 7.8)
- [CVE-2023-28563](https://insights.sbomify.com/CVE-2023-28563/): Buffer Over-read in IOE Firmware (medium 6.1)
- [CVE-2023-28562](https://insights.sbomify.com/CVE-2023-28562/): Buffer Copy Without Checking Size of Input in QESL (critical 9.8)
- [CVE-2023-28561](https://insights.sbomify.com/CVE-2023-28561/): Buffer Copy Without Checking Size of Input in QESL (critical 9.8)
- [CVE-2023-28560](https://insights.sbomify.com/CVE-2023-28560/): Buffer Copy Without Checking Size of Input in WLAN HAL (high 7.8)
- [CVE-2023-2856](https://insights.sbomify.com/CVE-2023-2856/): Memory corruption in Wireshark (medium 5.3)
- [CVE-2023-28559](https://insights.sbomify.com/CVE-2023-28559/): Buffer Copy Without Checking Size of Input in WLAN HAL (high 7.8)
- [CVE-2023-28558](https://insights.sbomify.com/CVE-2023-28558/): Improper Validation of Array Index in WLAN HAL (high 7.8)
- [CVE-2023-28557](https://insights.sbomify.com/CVE-2023-28557/): Improper Validation of Array Index in WLAN HAL (high 7.8)
- [CVE-2023-28556](https://insights.sbomify.com/CVE-2023-28556/): Improper Authorization in HLOS (high 7.1)
- [CVE-2023-28555](https://insights.sbomify.com/CVE-2023-28555/): Buffer Over-read in Audio (high 7.5)
- [CVE-2023-28554](https://insights.sbomify.com/CVE-2023-28554/): Buffer Over-read in Qualcomm IPC (medium 6.1)
- [CVE-2023-28553](https://insights.sbomify.com/CVE-2023-28553/): Buffer Over-read in WLAN Host (medium 6.1)
- [CVE-2023-28551](https://insights.sbomify.com/CVE-2023-28551/): Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS (high 7.8)
- [CVE-2023-28550](https://insights.sbomify.com/CVE-2023-28550/): Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance (high 7.8)
- [CVE-2023-2855](https://insights.sbomify.com/CVE-2023-2855/): Memory corruption in Wireshark (medium 5.3)
- [CVE-2023-28549](https://insights.sbomify.com/CVE-2023-28549/): Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL (high 7.8)
- [CVE-2023-28548](https://insights.sbomify.com/CVE-2023-28548/): Improper Validation of Array Index in WLAN HAL (high 7.8)
- [CVE-2023-28547](https://insights.sbomify.com/CVE-2023-28547/): Buffer Copy Without Checking Size of Input in SPS Applications (high 8.4)
- [CVE-2023-28546](https://insights.sbomify.com/CVE-2023-28546/): Buffer Copy Without Checking Size of Input in SPS Applications (high 7.8)
- [CVE-2023-28545](https://insights.sbomify.com/CVE-2023-28545/): Improper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS (high 8.2)
- [CVE-2023-28544](https://insights.sbomify.com/CVE-2023-28544/): Buffer Copy without Checking the Size of Input in WLAN Firmware (high 7.8)
- [CVE-2023-28543](https://insights.sbomify.com/CVE-2023-28543/): Out of Bounds read in SNPE Library (high 8.1)
- [CVE-2023-28542](https://insights.sbomify.com/CVE-2023-28542/): Buffer Over-read in WLAN HOST (high 7.8)
- [CVE-2023-28541](https://insights.sbomify.com/CVE-2023-28541/): Buffer Over-read in WLAN Host (high 7.8)
- [CVE-2023-28540](https://insights.sbomify.com/CVE-2023-28540/): Improper Authentication in Data Modem (critical 9.1)
- [CVE-2023-2854](https://insights.sbomify.com/CVE-2023-2854/): Memory corruption in Wireshark (medium 5.3)
- [CVE-2023-28539](https://insights.sbomify.com/CVE-2023-28539/): Buffer Copy Without Checking Size of Input in WLAN Host (medium 6.6)
- [CVE-2023-28538](https://insights.sbomify.com/CVE-2023-28538/): Stack-based Buffer Overflow in WIN Product (high 8.4)
- [CVE-2023-28537](https://insights.sbomify.com/CVE-2023-28537/): Integer Overflow or Wraparound in Audio (high 8.4)
- [CVE-2023-28536](https://insights.sbomify.com/CVE-2023-28536/): WordPress Branded Social Images plugin <= 1.1.0 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2023-28535](https://insights.sbomify.com/CVE-2023-28535/): WordPress Paytm Payment Donation Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-28534](https://insights.sbomify.com/CVE-2023-28534/): WordPress WP Job Portal Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2023-28533](https://insights.sbomify.com/CVE-2023-28533/): WordPress Cab Grid Plugin <= 1.5.15 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-28532](https://insights.sbomify.com/CVE-2023-28532/): WordPress Real Estate Directory theme <= 1.0.5 - Authenticated Arbitrary Plugin Activation (medium 4.3)
- [CVE-2023-28531](https://insights.sbomify.com/CVE-2023-28531/): Security feature bypass in netapp:brocade fabric operating system (critical 9.8)
- [CVE-2023-28530](https://insights.sbomify.com/CVE-2023-28530/): IBM Cognos Analytics cross-site scripting (medium 5.4)
- [CVE-2023-2853](https://insights.sbomify.com/CVE-2023-2853/): XSS in SoftMed's SelfPatron (medium 6.1)
- [CVE-2023-28529](https://insights.sbomify.com/CVE-2023-28529/): IBM InfoSphere Information Server 11.7 (medium 5.5)
- [CVE-2023-28528](https://insights.sbomify.com/CVE-2023-28528/): IBM AIX command execution (high 8.4)
- [CVE-2023-28527](https://insights.sbomify.com/CVE-2023-28527/): IBM Informix Dynamic Server buffer overflow (medium 6.2)
- [CVE-2023-28526](https://insights.sbomify.com/CVE-2023-28526/): IBM Informix Dynamic Server buffer overflow (medium 6.2)
- [CVE-2023-28525](https://insights.sbomify.com/CVE-2023-28525/): IBM Engineering Requirements Management cross-site scripting (medium 4.8)
- [CVE-2023-28523](https://insights.sbomify.com/CVE-2023-28523/): IBM Informix Dynamic Server buffer overflow (high 8.4)
- [CVE-2023-28522](https://insights.sbomify.com/CVE-2023-28522/): IBM API Connect improper access control (medium 4.3)
- [CVE-2023-28520](https://insights.sbomify.com/CVE-2023-28520/): IBM Planning Analytics Local cross-site scripting (medium 6.4)
- [CVE-2023-2852](https://insights.sbomify.com/CVE-2023-2852/): SQLi in SoftMed's SelfPatron (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/339/