# Vulnerabilities published in 2023 - [CVE-2023-25955](https://insights.sbomify.com/CVE-2023-25955/): XML external entity in National land numerical information data conversion tool (medium 5.5) - [CVE-2023-25954](https://insights.sbomify.com/CVE-2023-25954/): Other in KYOCERA Mobile Print, UTAX/TA MobilePrint, and Olivetti Mobile Print (medium 5.5) - [CVE-2023-25953](https://insights.sbomify.com/CVE-2023-25953/): Code injection in Drive Explorer for macOS (critical 9.0) - [CVE-2023-25952](https://insights.sbomify.com/CVE-2023-25952/): Memory corruption in Intel(R) Arc(TM) Control software (medium 6.1) - [CVE-2023-25951](https://insights.sbomify.com/CVE-2023-25951/): Privilege escalation in Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software (medium 6.0) - [CVE-2023-25950](https://insights.sbomify.com/CVE-2023-25950/): Other in HAProxy (high 7.3) - [CVE-2023-2595](https://insights.sbomify.com/CVE-2023-2595/): SourceCodester Billing Management System POST Parameter ajax_service.php sql injection (medium 6.3) - [CVE-2023-25949](https://insights.sbomify.com/CVE-2023-25949/): Denial of service in Intel(R) Aptio* V UEFI Firmware Integrator Tools (medium 5.5) - [CVE-2023-25948](https://insights.sbomify.com/CVE-2023-25948/): Server Data type confusion - info leak (high 7.5) - [CVE-2023-25947](https://insights.sbomify.com/CVE-2023-25947/): The bundle management subsystem has a improper input validation when installing a HAP package. (medium 6.2) - [CVE-2023-25946](https://insights.sbomify.com/CVE-2023-25946/): Auth bypass in Qrio Lock (Q-SL2) (high 8.8) - [CVE-2023-25945](https://insights.sbomify.com/CVE-2023-25945/): Security feature bypass in Intel(R) OFU software (medium 6.7) - [CVE-2023-25944](https://insights.sbomify.com/CVE-2023-25944/): Privilege escalation in Intel(R) VCUST Tool software (medium 6.7) - [CVE-2023-25942](https://insights.sbomify.com/CVE-2023-25942/): Denial of service in PowerScale OneFS (medium 6.5) - [CVE-2023-25941](https://insights.sbomify.com/CVE-2023-25941/): Privilege escalation in PowerScale OneFS (high 7.8) - [CVE-2023-25940](https://insights.sbomify.com/CVE-2023-25940/): Path traversal in PowerScale OneFS (medium 6.7) - [CVE-2023-2594](https://insights.sbomify.com/CVE-2023-2594/): SourceCodester Food Ordering Management System Registration sql injection (high 7.3) - [CVE-2023-25938](https://insights.sbomify.com/CVE-2023-25938/): Other in CPG BIOS (medium 5.1) - [CVE-2023-25937](https://insights.sbomify.com/CVE-2023-25937/): Other in CPG BIOS (medium 5.1) - [CVE-2023-25936](https://insights.sbomify.com/CVE-2023-25936/): Other in CPG BIOS (medium 5.1) - [CVE-2023-25934](https://insights.sbomify.com/CVE-2023-25934/): Security feature bypass in ECS (medium 5.9) - [CVE-2023-25933](https://insights.sbomify.com/CVE-2023-25933/): Memory corruption in Hermes (critical 9.8) - [CVE-2023-25931](https://insights.sbomify.com/CVE-2023-25931/): Medtronic Micro Clinician & InterStim X Clinician App Password Reset Issue (medium 6.4) - [CVE-2023-25930](https://insights.sbomify.com/CVE-2023-25930/): IBM Db2 denial of service (medium 5.9) - [CVE-2023-2593](https://insights.sbomify.com/CVE-2023-2593/): Kernel: ksmbd memory exhaustion denial-of-service vulnerability (medium 5.9) - [CVE-2023-25929](https://insights.sbomify.com/CVE-2023-25929/): IBM Cognos Analytics cross-site scripting (medium 4.6) - [CVE-2023-25928](https://insights.sbomify.com/CVE-2023-25928/): IBM InfoSphere Information Server cross-site scripting (medium 4.6) - [CVE-2023-25927](https://insights.sbomify.com/CVE-2023-25927/): IBM Security Verify Access denial of service (medium 6.5) - [CVE-2023-25926](https://insights.sbomify.com/CVE-2023-25926/): IBM Security Guardium Key Lifecycle Manager XML external entity injection (medium 5.5) - [CVE-2023-25925](https://insights.sbomify.com/CVE-2023-25925/): IBM Security Guardium Key Lifecycle Manager command injection (high 8.5) - [CVE-2023-25924](https://insights.sbomify.com/CVE-2023-25924/): IBM Security Key Lifecycle Manager improper authorization (medium 5.4) - [CVE-2023-25923](https://insights.sbomify.com/CVE-2023-25923/): IBM Security Key Lifecycle Manager denial of service (low 2.7) - [CVE-2023-25922](https://insights.sbomify.com/CVE-2023-25922/): IBM Security Guardium Key Lifecycle Manager file upload (medium 4.3) - [CVE-2023-25921](https://insights.sbomify.com/CVE-2023-25921/): IBM Security Guardium Key Lifecycle Manager file upload (high 8.5) - [CVE-2023-2592](https://insights.sbomify.com/CVE-2023-2592/): FormCraft Premium < 3.9.7 - Admin+ SQLi (high 7.2) - [CVE-2023-25915](https://insights.sbomify.com/CVE-2023-25915/): Authenticated Remote Command Execution in Danfoss AK-SM800A (critical 9.9) - [CVE-2023-25914](https://insights.sbomify.com/CVE-2023-25914/): Authneticated Path Traversal in Danfoss AK-SM800A (high 8.8) - [CVE-2023-25913](https://insights.sbomify.com/CVE-2023-25913/): Authentication Bypass in Danfoss AK-SM800A (high 7.5) - [CVE-2023-25912](https://insights.sbomify.com/CVE-2023-25912/): Webreport disclosure to unauthorized actor in Danfoss AK-EM100 (medium 5.3) - [CVE-2023-25911](https://insights.sbomify.com/CVE-2023-25911/): Authenticated OS Command Injection in Danfoss AK-EM100 (critical 9.9) - [CVE-2023-25910](https://insights.sbomify.com/CVE-2023-25910/): Code injection in SIMATIC PCS 7 (critical 10.0) - [CVE-2023-2591](https://insights.sbomify.com/CVE-2023-2591/): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nilsteampassnet/teampass (high 7.1) - [CVE-2023-25909](https://insights.sbomify.com/CVE-2023-25909/): HGiga Inc. OAKlouds - Arbitrary File Upload (critical 9.8) - [CVE-2023-25908](https://insights.sbomify.com/CVE-2023-25908/): Adobe Photoshop SVG file Use After Free Arbitrary code execution (high 7.8) - [CVE-2023-25907](https://insights.sbomify.com/CVE-2023-25907/): ZDI-CAN-20216: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25906](https://insights.sbomify.com/CVE-2023-25906/): ZDI-CAN-20046: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25905](https://insights.sbomify.com/CVE-2023-25905/): ZDI-CAN-20031: Adobe Dimension OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25904](https://insights.sbomify.com/CVE-2023-25904/): Adobe Dimension Out-of-bounds Read USDZ file Arbitrary code execution (high 7.8) - [CVE-2023-25903](https://insights.sbomify.com/CVE-2023-25903/): Adobe Dimension USDZ files Integer Overflow or Wraparound Arbitrary code execution (high 7.8) - [CVE-2023-25902](https://insights.sbomify.com/CVE-2023-25902/): ZDI-CAN-19560: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25901](https://insights.sbomify.com/CVE-2023-25901/): ZDI-CAN-19508: Adobe Dimension USD File Improper Input Validation Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25900](https://insights.sbomify.com/CVE-2023-25900/): ZDI-CAN-19559: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-2590](https://insights.sbomify.com/CVE-2023-2590/): Missing Authorization in answerdev/answer (high 7.7) - [CVE-2023-25899](https://insights.sbomify.com/CVE-2023-25899/): ZDI-CAN-19522: Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25898](https://insights.sbomify.com/CVE-2023-25898/): ZDI-CAN-19521: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25897](https://insights.sbomify.com/CVE-2023-25897/): ZDI-CAN-19520: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25896](https://insights.sbomify.com/CVE-2023-25896/): ZDI-CAN-19541: Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25895](https://insights.sbomify.com/CVE-2023-25895/): ZDI-CAN-19540: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25894](https://insights.sbomify.com/CVE-2023-25894/): ZDI-CAN-19543: Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25893](https://insights.sbomify.com/CVE-2023-25893/): ZDI-CAN-19539: Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25892](https://insights.sbomify.com/CVE-2023-25892/): ZDI-CAN-19523: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25891](https://insights.sbomify.com/CVE-2023-25891/): ZDI-CAN-19542: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25890](https://insights.sbomify.com/CVE-2023-25890/): ZDI-CAN-19493: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-2589](https://insights.sbomify.com/CVE-2023-2589/): Security feature bypass in GitLab (medium 5.9) - [CVE-2023-25889](https://insights.sbomify.com/CVE-2023-25889/): ZDI-CAN-19466: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25888](https://insights.sbomify.com/CVE-2023-25888/): ZDI-CAN-19451: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25887](https://insights.sbomify.com/CVE-2023-25887/): ZDI-CAN-19450: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25886](https://insights.sbomify.com/CVE-2023-25886/): ZDI-CAN-19452: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25885](https://insights.sbomify.com/CVE-2023-25885/): ZDI-CAN-19480: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25884](https://insights.sbomify.com/CVE-2023-25884/): ZDI-CAN-19411: Adobe Dimension GLTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25883](https://insights.sbomify.com/CVE-2023-25883/): ZDI-CAN-19386: Adobe Dimension FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25882](https://insights.sbomify.com/CVE-2023-25882/): ZDI-CAN-19385: Adobe Dimension OBJ File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25881](https://insights.sbomify.com/CVE-2023-25881/): ZDI-CAN-19390: Adobe Dimension OBJ File Improper Input Validation Remote Code Execution (high 7.8) - [CVE-2023-25880](https://insights.sbomify.com/CVE-2023-25880/): ZDI-CAN-19412: Adobe Dimension GLTF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-2588](https://insights.sbomify.com/CVE-2023-2588/): Other in Remote Management System (high 8.8) - [CVE-2023-25879](https://insights.sbomify.com/CVE-2023-25879/): ZDI-CAN-19389: Adobe Dimension OBJ File Improper Input Validation Remote Code Execution (high 7.8) - [CVE-2023-25878](https://insights.sbomify.com/CVE-2023-25878/): Adobe Substance 3D Stager OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5) - [CVE-2023-25877](https://insights.sbomify.com/CVE-2023-25877/): Adobe Substance 3D Stager OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5) - [CVE-2023-25876](https://insights.sbomify.com/CVE-2023-25876/): Adobe Substance 3D Stager OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5) - [CVE-2023-25875](https://insights.sbomify.com/CVE-2023-25875/): Adobe Substance 3D Stager OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5) - [CVE-2023-25874](https://insights.sbomify.com/CVE-2023-25874/): Adobe Substance 3D Stager SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25873](https://insights.sbomify.com/CVE-2023-25873/): Adobe Substance 3D Stager SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25872](https://insights.sbomify.com/CVE-2023-25872/): Adobe Substance 3D Stager SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25871](https://insights.sbomify.com/CVE-2023-25871/): Adobe Substance 3D Stager SVG File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25870](https://insights.sbomify.com/CVE-2023-25870/): Adobe Substance 3D Stager SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-2587](https://insights.sbomify.com/CVE-2023-2587/): Cross-site scripting in Remote Management System (high 7.5) - [CVE-2023-25869](https://insights.sbomify.com/CVE-2023-25869/): Adobe Substance 3D Stager SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25868](https://insights.sbomify.com/CVE-2023-25868/): Adobe Substance 3D Stager SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25867](https://insights.sbomify.com/CVE-2023-25867/): Adobe Substance 3D Stager PCX File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25866](https://insights.sbomify.com/CVE-2023-25866/): Adobe Substance 3D Stager OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25865](https://insights.sbomify.com/CVE-2023-25865/): Adobe Substance 3D Stager OBJ File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25864](https://insights.sbomify.com/CVE-2023-25864/): Adobe Substance 3D Stager FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25863](https://insights.sbomify.com/CVE-2023-25863/): Adobe Substance 3D Stager USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25862](https://insights.sbomify.com/CVE-2023-25862/): Adobe Illustrator Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5) - [CVE-2023-25861](https://insights.sbomify.com/CVE-2023-25861/): Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-25860](https://insights.sbomify.com/CVE-2023-25860/): Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-2586](https://insights.sbomify.com/CVE-2023-2586/): Auth bypass in Remote Management System (critical 9.0) - [CVE-2023-25859](https://insights.sbomify.com/CVE-2023-25859/): Adobe Illustrator Improper Input Validation Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-2585](https://insights.sbomify.com/CVE-2023-2585/): Keycloak: client access via device auth request spoof (low 3.5) - [CVE-2023-25848](https://insights.sbomify.com/CVE-2023-25848/): BUG-000158039 - There is an information disclosure issue in ArcGIS Server. (medium 5.3) --- From sbomify Insights: https://insights.sbomify.com/years/2023/page/361/