# Vulnerabilities published in 2023


- [CVE-2023-24599](https://insights.sbomify.com/CVE-2023-24599/): Missing authorization in open-xchange:ox app suite (medium 4.3)
- [CVE-2023-24598](https://insights.sbomify.com/CVE-2023-24598/): Information disclosure in open-xchange:ox app suite (medium 4.3)
- [CVE-2023-24597](https://insights.sbomify.com/CVE-2023-24597/): Security feature bypass in open-xchange:ox app suite (medium 5.3)
- [CVE-2023-24595](https://insights.sbomify.com/CVE-2023-24595/): Command injection in UR32L (high 7.2)
- [CVE-2023-24594](https://insights.sbomify.com/CVE-2023-24594/): BIG-IP TMM SSL vulnerability (medium 5.3)
- [CVE-2023-24592](https://insights.sbomify.com/CVE-2023-24592/): Path traversal in Intel(R) oneAPI Toolkits and Component software (high 7.3)
- [CVE-2023-24591](https://insights.sbomify.com/CVE-2023-24591/): Privilege escalation in Intel(R) Binary Configuration Tool software (medium 6.7)
- [CVE-2023-24590](https://insights.sbomify.com/CVE-2023-24590/): Memory corruption in Controller 6000 (high 7.5)
- [CVE-2023-2459](https://insights.sbomify.com/CVE-2023-2459/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2023-24589](https://insights.sbomify.com/CVE-2023-24589/): Memory corruption in Intel(R) Thunderbolt(TM) DCH drivers for Windows (medium 6.1)
- [CVE-2023-24588](https://insights.sbomify.com/CVE-2023-24588/): Information disclosure in Intel(R) Optane(TM) SSD products (medium 5.9)
- [CVE-2023-24587](https://insights.sbomify.com/CVE-2023-24587/): Denial of service in Intel(R) Optane(TM) SSD products (medium 6.9)
- [CVE-2023-24586](https://insights.sbomify.com/CVE-2023-24586/): Information disclosure in SkyBridge MB-A100/110 (low 3.1)
- [CVE-2023-24585](https://insights.sbomify.com/CVE-2023-24585/): Memory corruption in Cesium NET (high 7.7)
- [CVE-2023-24584](https://insights.sbomify.com/CVE-2023-24584/): Controller 6000 buffer overflow via upload feature in web interface (high 7.5)
- [CVE-2023-24583](https://insights.sbomify.com/CVE-2023-24583/): Command injection in UR32L (high 8.8)
- [CVE-2023-24582](https://insights.sbomify.com/CVE-2023-24582/): Command injection in UR32L (high 8.8)
- [CVE-2023-24581](https://insights.sbomify.com/CVE-2023-24581/): Use after free in Solid Edge SE2022 (high 7.8)
- [CVE-2023-24580](https://insights.sbomify.com/CVE-2023-24580/): Resource exhaustion in Django (high 7.5)
- [CVE-2023-2458](https://insights.sbomify.com/CVE-2023-2458/): Use after free in Chrome (high 8.8)
- [CVE-2023-24579](https://insights.sbomify.com/CVE-2023-24579/): Other in mcafee:total protection (high 7.8)
- [CVE-2023-24578](https://insights.sbomify.com/CVE-2023-24578/): Privilege escalation in mcafee:total protection (medium 5.5)
- [CVE-2023-24577](https://insights.sbomify.com/CVE-2023-24577/): Privilege escalation in mcafee:total protection (medium 5.5)
- [CVE-2023-24576](https://insights.sbomify.com/CVE-2023-24576/): Code injection in NetWorker, NVE (high 7.5)
- [CVE-2023-24575](https://insights.sbomify.com/CVE-2023-24575/): Privilege escalation in Dell Multifunction Printer E525w Driver and Software Suite (high 7.8)
- [CVE-2023-24574](https://insights.sbomify.com/CVE-2023-24574/): Denial of service in Enterprise SONiC OS (high 7.5)
- [CVE-2023-24573](https://insights.sbomify.com/CVE-2023-24573/): Other in Dell Command Monitor (DCM) (medium 4.7)
- [CVE-2023-24572](https://insights.sbomify.com/CVE-2023-24572/): Path traversal in Dell Command Integration Suite for System Center (DCIS) (medium 4.7)
- [CVE-2023-24571](https://insights.sbomify.com/CVE-2023-24571/): Other in Embedded Box PC 3000 , CPG BIOS (high 7.5)
- [CVE-2023-2457](https://insights.sbomify.com/CVE-2023-2457/): Memory corruption in Chrome (high 8.8)
- [CVE-2023-24569](https://insights.sbomify.com/CVE-2023-24569/): Privilege escalation in Alienware Command Center (AWCC) (high 7.8)
- [CVE-2023-24568](https://insights.sbomify.com/CVE-2023-24568/): Security feature bypass in NetWorker (medium 5.0)
- [CVE-2023-24567](https://insights.sbomify.com/CVE-2023-24567/): Information disclosure in Dell NetWorker, NVE (high 7.5)
- [CVE-2023-24566](https://insights.sbomify.com/CVE-2023-24566/): Memory corruption in Solid Edge SE2022 (low 3.3)
- [CVE-2023-24565](https://insights.sbomify.com/CVE-2023-24565/): Memory corruption in Solid Edge SE2022 (low 3.3)
- [CVE-2023-24564](https://insights.sbomify.com/CVE-2023-24564/): Memory corruption in Solid Edge SE2022 (high 7.8)
- [CVE-2023-24563](https://insights.sbomify.com/CVE-2023-24563/): Memory corruption in Solid Edge SE2022 (high 7.8)
- [CVE-2023-24562](https://insights.sbomify.com/CVE-2023-24562/): Memory corruption in Solid Edge SE2022 (high 7.8)
- [CVE-2023-24561](https://insights.sbomify.com/CVE-2023-24561/): Memory corruption in Solid Edge SE2022 (high 7.8)
- [CVE-2023-24560](https://insights.sbomify.com/CVE-2023-24560/): Memory corruption in Solid Edge SE2022 (high 7.8)
- [CVE-2023-24559](https://insights.sbomify.com/CVE-2023-24559/): Memory corruption in Solid Edge SE2022 (high 7.8)
- [CVE-2023-24558](https://insights.sbomify.com/CVE-2023-24558/): Memory corruption in Solid Edge SE2022 (high 7.8)
- [CVE-2023-24557](https://insights.sbomify.com/CVE-2023-24557/): Memory corruption in Solid Edge SE2022 (high 7.8)
- [CVE-2023-24556](https://insights.sbomify.com/CVE-2023-24556/): Memory corruption in Solid Edge SE2022 (high 7.8)
- [CVE-2023-24555](https://insights.sbomify.com/CVE-2023-24555/): Memory corruption in Solid Edge SE2022 (high 7.8)
- [CVE-2023-24554](https://insights.sbomify.com/CVE-2023-24554/): Memory corruption in Solid Edge SE2022 (high 7.8)
- [CVE-2023-24553](https://insights.sbomify.com/CVE-2023-24553/): Memory corruption in Solid Edge SE2022 (high 7.8)
- [CVE-2023-24552](https://insights.sbomify.com/CVE-2023-24552/): Memory corruption in Solid Edge SE2022 (high 7.8)
- [CVE-2023-24551](https://insights.sbomify.com/CVE-2023-24551/): Memory corruption in Solid Edge SE2022 (high 7.8)
- [CVE-2023-24550](https://insights.sbomify.com/CVE-2023-24550/): Memory corruption in Solid Edge SE2022 (high 7.8)
- [CVE-2023-2455](https://insights.sbomify.com/CVE-2023-2455/): Security feature bypass in postgresql (medium 5.4)
- [CVE-2023-24549](https://insights.sbomify.com/CVE-2023-24549/): Memory corruption in Solid Edge SE2022 (high 7.8)
- [CVE-2023-24548](https://insights.sbomify.com/CVE-2023-24548/): Denial of service in EOS (medium 5.3)
- [CVE-2023-24547](https://insights.sbomify.com/CVE-2023-24547/): On Arista MOS configuration of a BGP password will cause the password to be logged in clear text. (medium 5.9)
- [CVE-2023-24546](https://insights.sbomify.com/CVE-2023-24546/): Missing authorization in CloudVision (high 8.1)
- [CVE-2023-24545](https://insights.sbomify.com/CVE-2023-24545/): Denial of service in EOS (high 7.5)
- [CVE-2023-24544](https://insights.sbomify.com/CVE-2023-24544/): Missing authorization in BS-GSL and BS-GS series (high 8.1)
- [CVE-2023-24542](https://insights.sbomify.com/CVE-2023-24542/): Privilege escalation in Intel(R) Thunderbolt(TM) DCH drivers for Windows (medium 6.7)
- [CVE-2023-24540](https://insights.sbomify.com/CVE-2023-24540/): Improper handling of JavaScript whitespace in html/template (critical 9.8)
- [CVE-2023-2454](https://insights.sbomify.com/CVE-2023-2454/): Code injection in postgresql (high 7.2)
- [CVE-2023-24539](https://insights.sbomify.com/CVE-2023-24539/): Improper sanitization of CSS values in html/template (high 7.3)
- [CVE-2023-24538](https://insights.sbomify.com/CVE-2023-24538/): Backticks not treated as string delimiters in html/template (critical 9.8)
- [CVE-2023-24537](https://insights.sbomify.com/CVE-2023-24537/): Infinite loop in parsing in go/scanner (high 7.5)
- [CVE-2023-24536](https://insights.sbomify.com/CVE-2023-24536/): Excessive resource consumption in net/http, net/textproto and mime/multipart (high 7.5)
- [CVE-2023-24535](https://insights.sbomify.com/CVE-2023-24535/): Panic when parsing invalid messages in google.golang.org/protobuf (high 7.5)
- [CVE-2023-24534](https://insights.sbomify.com/CVE-2023-24534/): Excessive memory allocation in net/http and net/textproto (high 7.5)
- [CVE-2023-24533](https://insights.sbomify.com/CVE-2023-24533/): Incorrect multiplication of unreduced P-256 scalars in filippo.io/nistec (high 7.5)
- [CVE-2023-24532](https://insights.sbomify.com/CVE-2023-24532/): Incorrect calculation on P256 curves in crypto/internal/nistec (medium 5.3)
- [CVE-2023-24531](https://insights.sbomify.com/CVE-2023-24531/): Output of "go env" does not sanitize values in cmd/go (critical 9.8)
- [CVE-2023-24530](https://insights.sbomify.com/CVE-2023-24530/): File upload in BusinessObjects Business Intelligence Platform (CMC) (high 8.4)
- [CVE-2023-2453](https://insights.sbomify.com/CVE-2023-2453/): Local file Inclusion (LFI) in Forum Infusion via Directory Traversal (high 8.8)
- [CVE-2023-24529](https://insights.sbomify.com/CVE-2023-24529/): Cross-site scripting in NetWeaver AS ABAP (Business Server Pages application) (medium 6.1)
- [CVE-2023-24528](https://insights.sbomify.com/CVE-2023-24528/): Missing authorization in Fiori apps 1.0 for travel management in SAP ERP (My Travel Requests) (medium 6.5)
- [CVE-2023-24527](https://insights.sbomify.com/CVE-2023-24527/): Improper Access Control in SAP NetWeaver AS Java for Deploy Service (medium 5.3)
- [CVE-2023-24526](https://insights.sbomify.com/CVE-2023-24526/): Improper Access Control in SAP NetWeaver AS Java (Classload Service) (medium 5.3)
- [CVE-2023-24525](https://insights.sbomify.com/CVE-2023-24525/): Cross-site scripting in CRM (WebClient UI) (medium 4.3)
- [CVE-2023-24524](https://insights.sbomify.com/CVE-2023-24524/): Missing authorization in S/4 HANA (Map Treasury Correspondence Format Data) (medium 6.5)
- [CVE-2023-24523](https://insights.sbomify.com/CVE-2023-24523/): Command injection in Host Agent Service (high 8.8)
- [CVE-2023-24522](https://insights.sbomify.com/CVE-2023-24522/): Cross-site scripting in NetWeaver AS ABAP (BSP Framework) (medium 6.1)
- [CVE-2023-24521](https://insights.sbomify.com/CVE-2023-24521/): Cross-site scripting in NetWeaver AS ABAP (BSP Framework) (medium 6.1)
- [CVE-2023-24520](https://insights.sbomify.com/CVE-2023-24520/): Command injection in UR32L (high 8.8)
- [CVE-2023-2452](https://insights.sbomify.com/CVE-2023-2452/): Advanced Woo Search <= 2.77 - Authenticated (Admin+) Stored Cross-Site Scripting (medium 4.4)
- [CVE-2023-24519](https://insights.sbomify.com/CVE-2023-24519/): Command injection in UR32L (high 8.8)
- [CVE-2023-24518](https://insights.sbomify.com/CVE-2023-24518/): Disabling the administrator's account through cross-site request forgery (medium 6.7)
- [CVE-2023-24517](https://insights.sbomify.com/CVE-2023-24517/): Remote Code Execution via Unrestricted File Upload (medium 6.4)
- [CVE-2023-24516](https://insights.sbomify.com/CVE-2023-24516/): Stored Cross Site Scripting - Special Days Module (medium 5.9)
- [CVE-2023-24515](https://insights.sbomify.com/CVE-2023-24515/): Server side request forgery in api checker (medium 5.2)
- [CVE-2023-24514](https://insights.sbomify.com/CVE-2023-24514/): Stored Cross Site Scripting Vulnerability in Visual Console Module (medium 6.3)
- [CVE-2023-24513](https://insights.sbomify.com/CVE-2023-24513/): Denial of service in EOS (medium 6.5)
- [CVE-2023-24512](https://insights.sbomify.com/CVE-2023-24512/): Missing authorization in Terminattr (high 8.8)
- [CVE-2023-24511](https://insights.sbomify.com/CVE-2023-24511/): Denial of service in EOS (medium 5.3)
- [CVE-2023-24510](https://insights.sbomify.com/CVE-2023-24510/): On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart. (high 7.5)
- [CVE-2023-2451](https://insights.sbomify.com/CVE-2023-2451/): SourceCodester Online DJ Management System GET Parameter view_details.php sql injection (medium 6.3)
- [CVE-2023-24509](https://insights.sbomify.com/CVE-2023-24509/): Privilege escalation in Arista EOS (critical 9.3)
- [CVE-2023-24508](https://insights.sbomify.com/CVE-2023-24508/): Remote Code Execution in Baicells RTS Platform (high 8.1)
- [CVE-2023-24507](https://insights.sbomify.com/CVE-2023-24507/): AgilePoint NX v8.0 SU2.2 & SU2.3 – Insecure File Upload (high 8.8)
- [CVE-2023-24506](https://insights.sbomify.com/CVE-2023-24506/): Milesight NCR/Camera CWE-522: Insufficiently Protected Credentials (high 7.5)
- [CVE-2023-24505](https://insights.sbomify.com/CVE-2023-24505/): Milesight NCR/Camera CWE-200: Exposure of Sensitive Information (medium 5.3)
- [CVE-2023-24504](https://insights.sbomify.com/CVE-2023-24504/): Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server (high 7.5)
- [CVE-2023-24503](https://insights.sbomify.com/CVE-2023-24503/): Electra Smart Kit for Split AC – Adjacent attacker may cause the unit to load unauthorized FW (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/372/