# Vulnerabilities published in 2023


- [CVE-2023-23581](https://insights.sbomify.com/CVE-2023-23581/): Denial of service in SoftEther VPN (high 7.5)
- [CVE-2023-23580](https://insights.sbomify.com/CVE-2023-23580/): Memory corruption in Intel(R) Trace Analyzer and Collector software (medium 4.8)
- [CVE-2023-2358](https://insights.sbomify.com/CVE-2023-2358/): Hitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable Format (medium 4.3)
- [CVE-2023-23579](https://insights.sbomify.com/CVE-2023-23579/): Datakit CrossCAD/Ware (high 7.8)
- [CVE-2023-23578](https://insights.sbomify.com/CVE-2023-23578/): Auth bypass in SkyBridge MB-A200 (high 7.5)
- [CVE-2023-23577](https://insights.sbomify.com/CVE-2023-23577/): Privilege escalation in ITE Tech consumer infrared drivers for Intel(R) NUC (medium 6.7)
- [CVE-2023-23576](https://insights.sbomify.com/CVE-2023-23576/): Business logic in Command Centre Server (medium 4.3)
- [CVE-2023-23575](https://insights.sbomify.com/CVE-2023-23575/): Missing authorization in CONPROSYS IoT Gateway products (medium 4.3)
- [CVE-2023-23574](https://insights.sbomify.com/CVE-2023-23574/): Authenticated Blind SQL Injection on alerts count in Guardian/CMC before 22.6.2 (high 8.7)
- [CVE-2023-23573](https://insights.sbomify.com/CVE-2023-23573/): Missing authorization in Intel(R) Unite(R) android application (medium 4.4)
- [CVE-2023-23572](https://insights.sbomify.com/CVE-2023-23572/): Cross-site scripting in SEIKO EPSON printers/network interface Web Config (medium 4.8)
- [CVE-2023-23571](https://insights.sbomify.com/CVE-2023-23571/): Denial of service in UR32L (high 7.5)
- [CVE-2023-23570](https://insights.sbomify.com/CVE-2023-23570/): Security feature bypass in Command Centre (medium 5.4)
- [CVE-2023-23569](https://insights.sbomify.com/CVE-2023-23569/): Memory corruption in Intel(R) Trace Analyzer and Collector software (high 7.8)
- [CVE-2023-23568](https://insights.sbomify.com/CVE-2023-23568/): Missing authorization in Command Centre (medium 4.3)
- [CVE-2023-23567](https://insights.sbomify.com/CVE-2023-23567/): Memory corruption in ImageGear (high 8.1)
- [CVE-2023-23566](https://insights.sbomify.com/CVE-2023-23566/): Auth bypass in axigen:axigen mail server (critical 9.8)
- [CVE-2023-23565](https://insights.sbomify.com/CVE-2023-23565/): Path traversal in geomatika:isigeo web (medium 4.9)
- [CVE-2023-23564](https://insights.sbomify.com/CVE-2023-23564/): Command injection in geomatika:isigeo web (high 8.8)
- [CVE-2023-23563](https://insights.sbomify.com/CVE-2023-23563/): SQL injection in geomatika:isigeo web (medium 6.5)
- [CVE-2023-23562](https://insights.sbomify.com/CVE-2023-23562/): Missing authorization in stormshield:endpoint security (medium 4.3)
- [CVE-2023-23561](https://insights.sbomify.com/CVE-2023-23561/): Information disclosure in stormshield:endpoint security (medium 5.5)
- [CVE-2023-23560](https://insights.sbomify.com/CVE-2023-23560/): Server-side request forgery in lexmark:b2236 firmware (critical 9.8)
- [CVE-2023-2356](https://insights.sbomify.com/CVE-2023-2356/): Relative Path Traversal in mlflow/mlflow (critical 10.0)
- [CVE-2023-23559](https://insights.sbomify.com/CVE-2023-23559/): Integer overflow in debian:debian linux (high 7.8)
- [CVE-2023-23558](https://insights.sbomify.com/CVE-2023-23558/): Other in eternal terminal project:eternal terminal (medium 6.3)
- [CVE-2023-23557](https://insights.sbomify.com/CVE-2023-23557/): Memory corruption in Hermes (critical 9.8)
- [CVE-2023-23556](https://insights.sbomify.com/CVE-2023-23556/): Memory corruption in Hermes (critical 9.8)
- [CVE-2023-23555](https://insights.sbomify.com/CVE-2023-23555/): BIG-IP Virtual Edition vulnerability (high 7.5)
- [CVE-2023-23554](https://insights.sbomify.com/CVE-2023-23554/): Privilege escalation in pg ivm (high 8.8)
- [CVE-2023-23553](https://insights.sbomify.com/CVE-2023-23553/): X-400 Cross-Site Scripting (medium 4.5)
- [CVE-2023-23552](https://insights.sbomify.com/CVE-2023-23552/): BIG-IP Advanced WAF and ASM vulnerability (high 7.5)
- [CVE-2023-23551](https://insights.sbomify.com/CVE-2023-23551/): X-600M Code Injection (critical 9.1)
- [CVE-2023-23550](https://insights.sbomify.com/CVE-2023-23550/): Command injection in UR32L (high 7.2)
- [CVE-2023-2355](https://insights.sbomify.com/CVE-2023-2355/): Privilege escalation in Acronis Snap Deploy (medium 6.7)
- [CVE-2023-23549](https://insights.sbomify.com/CVE-2023-23549/): DoS via long hostnames (low 2.7)
- [CVE-2023-23548](https://insights.sbomify.com/CVE-2023-23548/): XSS in business intelligence (medium 5.4)
- [CVE-2023-23547](https://insights.sbomify.com/CVE-2023-23547/): Path traversal in UR32L (medium 6.5)
- [CVE-2023-23546](https://insights.sbomify.com/CVE-2023-23546/): Weak cryptography in UR32L (medium 4.2)
- [CVE-2023-23545](https://insights.sbomify.com/CVE-2023-23545/): Missing authorization in T&D Corporation and ESPEC MIC CORP. data logger products (medium 5.3)
- [CVE-2023-23543](https://insights.sbomify.com/CVE-2023-23543/): Information disclosure in iOS and iPadOS (low 3.6)
- [CVE-2023-23542](https://insights.sbomify.com/CVE-2023-23542/): Information disclosure in macOS (medium 5.5)
- [CVE-2023-23541](https://insights.sbomify.com/CVE-2023-23541/): Information disclosure in iOS and iPadOS (low 3.3)
- [CVE-2023-23540](https://insights.sbomify.com/CVE-2023-23540/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2023-2354](https://insights.sbomify.com/CVE-2023-2354/): CHP Ads Block Detector <= 3.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting (medium 4.9)
- [CVE-2023-23539](https://insights.sbomify.com/CVE-2023-23539/): Memory corruption in macOS (high 7.8)
- [CVE-2023-23538](https://insights.sbomify.com/CVE-2023-23538/): Business logic in macOS (medium 5.5)
- [CVE-2023-23537](https://insights.sbomify.com/CVE-2023-23537/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2023-23536](https://insights.sbomify.com/CVE-2023-23536/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2023-23535](https://insights.sbomify.com/CVE-2023-23535/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2023-23534](https://insights.sbomify.com/CVE-2023-23534/): Information disclosure in macOS (medium 5.5)
- [CVE-2023-23533](https://insights.sbomify.com/CVE-2023-23533/): Business logic in macOS (medium 5.5)
- [CVE-2023-23532](https://insights.sbomify.com/CVE-2023-23532/): Security feature bypass in iOS and iPadOS (high 8.8)
- [CVE-2023-23531](https://insights.sbomify.com/CVE-2023-23531/): Memory corruption in iOS and iPadOS (high 8.6)
- [CVE-2023-23530](https://insights.sbomify.com/CVE-2023-23530/): Memory corruption in iOS and iPadOS (high 8.6)
- [CVE-2023-2353](https://insights.sbomify.com/CVE-2023-2353/): CHP Ads Block Detector <= 3.9.4 - Missing Authorization to Plugin Settings Update (medium 4.3)
- [CVE-2023-23529](https://insights.sbomify.com/CVE-2023-23529/): Apple Multiple Products WebKit Type Confusion (high 8.8, exploited in the wild)
- [CVE-2023-23528](https://insights.sbomify.com/CVE-2023-23528/): Memory corruption in iOS and iPadOS (medium 6.5)
- [CVE-2023-23527](https://insights.sbomify.com/CVE-2023-23527/): Security feature bypass in iOS and iPadOS (medium 5.5)
- [CVE-2023-23526](https://insights.sbomify.com/CVE-2023-23526/): Security feature bypass in iOS and iPadOS (critical 9.8)
- [CVE-2023-23525](https://insights.sbomify.com/CVE-2023-23525/): Privilege escalation in iOS and iPadOS (high 7.8)
- [CVE-2023-23524](https://insights.sbomify.com/CVE-2023-23524/): Denial of service in iOS and iPadOS (high 7.5)
- [CVE-2023-23523](https://insights.sbomify.com/CVE-2023-23523/): Business logic in iOS and iPadOS (low 3.3)
- [CVE-2023-23522](https://insights.sbomify.com/CVE-2023-23522/): Information disclosure in macOS (medium 5.5)
- [CVE-2023-23520](https://insights.sbomify.com/CVE-2023-23520/): Race condition in iOS and iPadOS (medium 5.9)
- [CVE-2023-2352](https://insights.sbomify.com/CVE-2023-2352/): CHP Ads Block Detector <= 3.9.4 - Cross-Site Request Forgery via chp_abd_action (medium 4.3)
- [CVE-2023-23519](https://insights.sbomify.com/CVE-2023-23519/): Memory corruption in iOS and iPadOS (high 7.5)
- [CVE-2023-23518](https://insights.sbomify.com/CVE-2023-23518/): Memory corruption in Safari (high 8.8)
- [CVE-2023-23517](https://insights.sbomify.com/CVE-2023-23517/): Memory corruption in Safari (high 8.8)
- [CVE-2023-23516](https://insights.sbomify.com/CVE-2023-23516/): Memory corruption in macOS (high 7.8)
- [CVE-2023-23514](https://insights.sbomify.com/CVE-2023-23514/): Use after free in iOS and iPadOS (high 7.8)
- [CVE-2023-23513](https://insights.sbomify.com/CVE-2023-23513/): Memory corruption in macOS (critical 9.8)
- [CVE-2023-23512](https://insights.sbomify.com/CVE-2023-23512/): Denial of service in iOS and iPadOS (medium 6.5)
- [CVE-2023-23511](https://insights.sbomify.com/CVE-2023-23511/): Security feature bypass in iOS and iPadOS (medium 5.5)
- [CVE-2023-23510](https://insights.sbomify.com/CVE-2023-23510/): Missing authorization in macOS (medium 5.5)
- [CVE-2023-2351](https://insights.sbomify.com/CVE-2023-2351/): Missing authorization in WP Directory Kit (medium 6.5)
- [CVE-2023-23508](https://insights.sbomify.com/CVE-2023-23508/): Security feature bypass in macOS (medium 5.5)
- [CVE-2023-23507](https://insights.sbomify.com/CVE-2023-23507/): Memory corruption in macOS (high 7.8)
- [CVE-2023-23506](https://insights.sbomify.com/CVE-2023-23506/): Missing authorization in macOS (medium 5.5)
- [CVE-2023-23505](https://insights.sbomify.com/CVE-2023-23505/): Information disclosure in iOS and iPadOS (low 3.3)
- [CVE-2023-23504](https://insights.sbomify.com/CVE-2023-23504/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2023-23503](https://insights.sbomify.com/CVE-2023-23503/): Security feature bypass in iOS and iPadOS (medium 5.5)
- [CVE-2023-23502](https://insights.sbomify.com/CVE-2023-23502/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2023-23501](https://insights.sbomify.com/CVE-2023-23501/): Information disclosure in macOS (medium 5.5)
- [CVE-2023-23500](https://insights.sbomify.com/CVE-2023-23500/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2023-2350](https://insights.sbomify.com/CVE-2023-2350/): SourceCodester Service Provider Management System Users.php cross site scripting (low 3.5)
- [CVE-2023-23499](https://insights.sbomify.com/CVE-2023-23499/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2023-23498](https://insights.sbomify.com/CVE-2023-23498/): Business logic in iOS and iPadOS (low 3.3)
- [CVE-2023-23497](https://insights.sbomify.com/CVE-2023-23497/): Privilege escalation in macOS (high 7.8)
- [CVE-2023-23496](https://insights.sbomify.com/CVE-2023-23496/): Code injection in Safari (high 8.8)
- [CVE-2023-23495](https://insights.sbomify.com/CVE-2023-23495/): Information disclosure in macOS (medium 5.5)
- [CVE-2023-23494](https://insights.sbomify.com/CVE-2023-23494/): Memory corruption in iOS and iPadOS (medium 5.3)
- [CVE-2023-23493](https://insights.sbomify.com/CVE-2023-23493/): Auth bypass in macOS (low 3.3)
- [CVE-2023-23492](https://insights.sbomify.com/CVE-2023-23492/): SQL injection in Login with Phone Number WordPress Plugin (high 8.8)
- [CVE-2023-23491](https://insights.sbomify.com/CVE-2023-23491/): Cross-site scripting in Quick Event Manager WordPress Plugin (medium 6.1)
- [CVE-2023-23490](https://insights.sbomify.com/CVE-2023-23490/): SQL injection in Survey Maker WordPress Plugin (high 8.8)
- [CVE-2023-2349](https://insights.sbomify.com/CVE-2023-2349/): SourceCodester Service Provider Management System index.php cross site scripting (low 3.5)
- [CVE-2023-23489](https://insights.sbomify.com/CVE-2023-23489/): SQL injection in Easy Digital Downloads WordPress Plugin (critical 9.8)
- [CVE-2023-23488](https://insights.sbomify.com/CVE-2023-23488/): SQL injection in Paid Memberships Pro WordPress Plugin (critical 9.8)
- [CVE-2023-23487](https://insights.sbomify.com/CVE-2023-23487/): IBM Db2 audit logging (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/381/