# Vulnerabilities published in 2023


- [CVE-2023-25005](https://insights.sbomify.com/CVE-2023-25005/): Memory corruption in Autodesk InfraWorks (high 7.8)
- [CVE-2023-25004](https://insights.sbomify.com/CVE-2023-25004/): Integer overflow in Autodesk products (high 7.8)
- [CVE-2023-25003](https://insights.sbomify.com/CVE-2023-25003/): Memory corruption in AutoCAD, Maya (high 7.8)
- [CVE-2023-25002](https://insights.sbomify.com/CVE-2023-25002/): Use after free in Multiple (high 7.8)
- [CVE-2023-25001](https://insights.sbomify.com/CVE-2023-25001/): Use after free in Navisworks (high 7.8)
- [CVE-2023-25000](https://insights.sbomify.com/CVE-2023-25000/): Vault Vulnerable to Cache-Timing Attacks During Seal and Unseal Operations (medium 5.0)
- [CVE-2023-2500](https://insights.sbomify.com/CVE-2023-2500/): Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Authenticated (Subscriber+) PHP Object Injection (high 8.8)
- [CVE-2023-24999](https://insights.sbomify.com/CVE-2023-24999/): Vault Fails to Verify if the AppRole SecretID Belongs to Role During a Destroy Operation (medium 4.4)
- [CVE-2023-24998](https://insights.sbomify.com/CVE-2023-24998/): Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts (high 7.5)
- [CVE-2023-24997](https://insights.sbomify.com/CVE-2023-24997/): Apache InLong: Jdbc Connection Security Bypass (critical 9.8)
- [CVE-2023-24996](https://insights.sbomify.com/CVE-2023-24996/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-24995](https://insights.sbomify.com/CVE-2023-24995/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-24994](https://insights.sbomify.com/CVE-2023-24994/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-24993](https://insights.sbomify.com/CVE-2023-24993/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-24992](https://insights.sbomify.com/CVE-2023-24992/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-24991](https://insights.sbomify.com/CVE-2023-24991/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-24990](https://insights.sbomify.com/CVE-2023-24990/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-2499](https://insights.sbomify.com/CVE-2023-2499/): RegistrationMagic <= 5.2.1.0 - Authentication Bypass (critical 9.8)
- [CVE-2023-24989](https://insights.sbomify.com/CVE-2023-24989/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-24988](https://insights.sbomify.com/CVE-2023-24988/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-24987](https://insights.sbomify.com/CVE-2023-24987/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-24986](https://insights.sbomify.com/CVE-2023-24986/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-24985](https://insights.sbomify.com/CVE-2023-24985/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-24984](https://insights.sbomify.com/CVE-2023-24984/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-24983](https://insights.sbomify.com/CVE-2023-24983/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-24982](https://insights.sbomify.com/CVE-2023-24982/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-24981](https://insights.sbomify.com/CVE-2023-24981/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-24980](https://insights.sbomify.com/CVE-2023-24980/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-2498](https://insights.sbomify.com/CVE-2023-2498/): Cross-site scripting in Go Pricing - WordPress Responsive Pricing Tables (medium 6.4)
- [CVE-2023-24979](https://insights.sbomify.com/CVE-2023-24979/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-24978](https://insights.sbomify.com/CVE-2023-24978/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2023-24977](https://insights.sbomify.com/CVE-2023-24977/): Apache InLong: Jdbc Connection causes arbitrary file reading in InLong (high 7.5)
- [CVE-2023-24975](https://insights.sbomify.com/CVE-2023-24975/): IBM Spectrum Symphony HOST header injection (medium 5.4)
- [CVE-2023-24971](https://insights.sbomify.com/CVE-2023-24971/): IBM B2B Advanced Communication denial of service (high 7.5)
- [CVE-2023-2497](https://insights.sbomify.com/CVE-2023-2497/): UserPro <= 5.1.0 - Cross-Site Request Forgery to PHP Object Injection (high 8.8)
- [CVE-2023-24966](https://insights.sbomify.com/CVE-2023-24966/): IBM WebSphere Application Server cross-site scripting (medium 6.1)
- [CVE-2023-24965](https://insights.sbomify.com/CVE-2023-24965/): IBM Aspera Faspex improper access control (medium 5.8)
- [CVE-2023-24964](https://insights.sbomify.com/CVE-2023-24964/): IBM InfoSphere Information Server information disclosure (medium 6.2)
- [CVE-2023-24960](https://insights.sbomify.com/CVE-2023-24960/): IBM InfoSphere Information Server information disclosure (high 7.5)
- [CVE-2023-2496](https://insights.sbomify.com/CVE-2023-2496/): Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Improper Authorization to Arbitrary File Upload (high 7.1)
- [CVE-2023-24959](https://insights.sbomify.com/CVE-2023-24959/): IBM InfoSphere Information Server information disclosure (medium 5.3)
- [CVE-2023-24958](https://insights.sbomify.com/CVE-2023-24958/): IBM TS7700 Management Interface command injection (high 8.8)
- [CVE-2023-24957](https://insights.sbomify.com/CVE-2023-24957/): IBM Business Automation Workflow cross-site scripting (medium 5.4)
- [CVE-2023-24956](https://insights.sbomify.com/CVE-2023-24956/): SQL injection in forget heart message box project:forget heart message box (high 8.8)
- [CVE-2023-24955](https://insights.sbomify.com/CVE-2023-24955/): Microsoft SharePoint Server Code Injection (high 7.2, exploited in the wild)
- [CVE-2023-24954](https://insights.sbomify.com/CVE-2023-24954/): Microsoft SharePoint Server Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-24953](https://insights.sbomify.com/CVE-2023-24953/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-24950](https://insights.sbomify.com/CVE-2023-24950/): Microsoft SharePoint Server Spoofing Vulnerability (medium 6.5)
- [CVE-2023-2495](https://insights.sbomify.com/CVE-2023-2495/): Greeklish-permalink < 3.5 - Unauthenticated Post Slug Update (medium 4.3)
- [CVE-2023-24949](https://insights.sbomify.com/CVE-2023-24949/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-24948](https://insights.sbomify.com/CVE-2023-24948/): Windows Bluetooth Driver Elevation of Privilege Vulnerability (high 7.4)
- [CVE-2023-24947](https://insights.sbomify.com/CVE-2023-24947/): Windows Bluetooth Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-24946](https://insights.sbomify.com/CVE-2023-24946/): Windows Backup Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-24945](https://insights.sbomify.com/CVE-2023-24945/): Windows iSCSI Target Service Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-24944](https://insights.sbomify.com/CVE-2023-24944/): Windows Bluetooth Driver Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-24943](https://insights.sbomify.com/CVE-2023-24943/): Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-24942](https://insights.sbomify.com/CVE-2023-24942/): Remote Procedure Call Runtime Denial of Service Vulnerability (high 7.5)
- [CVE-2023-24941](https://insights.sbomify.com/CVE-2023-24941/): Windows Network File System Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-24940](https://insights.sbomify.com/CVE-2023-24940/): Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability (high 7.5)
- [CVE-2023-2494](https://insights.sbomify.com/CVE-2023-2494/): Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Missing Authorization to Limited Privilege Granting (medium 4.6)
- [CVE-2023-24939](https://insights.sbomify.com/CVE-2023-24939/): Server for NFS Denial of Service Vulnerability (high 7.5)
- [CVE-2023-24938](https://insights.sbomify.com/CVE-2023-24938/): Windows CryptoAPI Denial of Service Vulnerability (medium 6.5)
- [CVE-2023-24937](https://insights.sbomify.com/CVE-2023-24937/): Windows CryptoAPI Denial of Service Vulnerability (medium 6.5)
- [CVE-2023-24936](https://insights.sbomify.com/CVE-2023-24936/): .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2023-24935](https://insights.sbomify.com/CVE-2023-24935/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 6.1)
- [CVE-2023-24934](https://insights.sbomify.com/CVE-2023-24934/): Microsoft Defender Security Feature Bypass Vulnerability (medium 6.2)
- [CVE-2023-24932](https://insights.sbomify.com/CVE-2023-24932/): Secure Boot Security Feature Bypass Vulnerability (medium 6.7)
- [CVE-2023-24931](https://insights.sbomify.com/CVE-2023-24931/): Windows Secure Channel Denial of Service Vulnerability (high 7.5)
- [CVE-2023-24930](https://insights.sbomify.com/CVE-2023-24930/): Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-2493](https://insights.sbomify.com/CVE-2023-2493/): All In One Redirection < 2.2.0 - Admin+ SQLi (high 7.2)
- [CVE-2023-24929](https://insights.sbomify.com/CVE-2023-24929/): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-24928](https://insights.sbomify.com/CVE-2023-24928/): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-24927](https://insights.sbomify.com/CVE-2023-24927/): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-24926](https://insights.sbomify.com/CVE-2023-24926/): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-24925](https://insights.sbomify.com/CVE-2023-24925/): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-24924](https://insights.sbomify.com/CVE-2023-24924/): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-24923](https://insights.sbomify.com/CVE-2023-24923/): Microsoft OneDrive for Android Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-24922](https://insights.sbomify.com/CVE-2023-24922/): Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-24921](https://insights.sbomify.com/CVE-2023-24921/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (medium 5.4)
- [CVE-2023-24920](https://insights.sbomify.com/CVE-2023-24920/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (medium 5.4)
- [CVE-2023-2492](https://insights.sbomify.com/CVE-2023-2492/): QueryWall: Plug'n Play Firewall <= 1.1.1 - Admin+ SQLi (high 7.2)
- [CVE-2023-24919](https://insights.sbomify.com/CVE-2023-24919/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (medium 5.4)
- [CVE-2023-24914](https://insights.sbomify.com/CVE-2023-24914/): Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2023-24913](https://insights.sbomify.com/CVE-2023-24913/): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-24912](https://insights.sbomify.com/CVE-2023-24912/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-24911](https://insights.sbomify.com/CVE-2023-24911/): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (medium 4.3)
- [CVE-2023-24910](https://insights.sbomify.com/CVE-2023-24910/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-2491](https://insights.sbomify.com/CVE-2023-2491/): Command injection in emacs (high 7.8)
- [CVE-2023-24909](https://insights.sbomify.com/CVE-2023-24909/): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-24908](https://insights.sbomify.com/CVE-2023-24908/): Remote Procedure Call Runtime Remote Code Execution Vulnerability (high 8.1)
- [CVE-2023-24907](https://insights.sbomify.com/CVE-2023-24907/): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-24906](https://insights.sbomify.com/CVE-2023-24906/): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-24905](https://insights.sbomify.com/CVE-2023-24905/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-24904](https://insights.sbomify.com/CVE-2023-24904/): Windows Installer Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2023-24903](https://insights.sbomify.com/CVE-2023-24903/): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2023-24902](https://insights.sbomify.com/CVE-2023-24902/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-24901](https://insights.sbomify.com/CVE-2023-24901/): Windows NFS Portmapper Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-24900](https://insights.sbomify.com/CVE-2023-24900/): Windows NTLM Security Support Provider Information Disclosure Vulnerability (medium 5.9)
- [CVE-2023-2490](https://insights.sbomify.com/CVE-2023-2490/): WordPress UserAgent-Spy Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-24899](https://insights.sbomify.com/CVE-2023-24899/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/369/