# Vulnerabilities published in 2023 - [CVE-2023-23482](https://insights.sbomify.com/CVE-2023-23482/): IBM Sterling Partner Engagement Manager clickjacking (medium 5.4) - [CVE-2023-23481](https://insights.sbomify.com/CVE-2023-23481/): IBM Sterling Partner Engagement Manager cross-site scripting (medium 6.4) - [CVE-2023-23480](https://insights.sbomify.com/CVE-2023-23480/): IBM Sterling Partner Engagement Manager cross-site scripting (medium 5.4) - [CVE-2023-2348](https://insights.sbomify.com/CVE-2023-2348/): SourceCodester Service Provider Management System manage_user.php sql injection (medium 6.3) - [CVE-2023-23477](https://insights.sbomify.com/CVE-2023-23477/): IBM WebSphere Application Server code execution (high 8.1) - [CVE-2023-23476](https://insights.sbomify.com/CVE-2023-23476/): IBM Robotic Process Automation information disclosure (low 3.1) - [CVE-2023-23475](https://insights.sbomify.com/CVE-2023-23475/): IBM Infosphere Information Server cross-site scripting (medium 4.6) - [CVE-2023-23474](https://insights.sbomify.com/CVE-2023-23474/): IBM Cognos Controller information disclosure (low 3.7) - [CVE-2023-23473](https://insights.sbomify.com/CVE-2023-23473/): IBM InfoSphere Information Server cross-site request forgery (medium 5.3) - [CVE-2023-23472](https://insights.sbomify.com/CVE-2023-23472/): IBM InfoSphere Information Server information disclosure (low 3.1) - [CVE-2023-23470](https://insights.sbomify.com/CVE-2023-23470/): IBM i privilege escalation (medium 6.4) - [CVE-2023-2347](https://insights.sbomify.com/CVE-2023-2347/): SourceCodester Service Provider Management System manage_service.php sql injection (medium 6.3) - [CVE-2023-23469](https://insights.sbomify.com/CVE-2023-23469/): IBM Cloud Pak for Business Automation information disclosure (medium 4.0) - [CVE-2023-23468](https://insights.sbomify.com/CVE-2023-23468/): IBM Robotic Process Automation for Cloud Pak access control (medium 5.1) - [CVE-2023-23467](https://insights.sbomify.com/CVE-2023-23467/): Media CP Media Control Panel – Reflected XSS (high 8.1) - [CVE-2023-23466](https://insights.sbomify.com/CVE-2023-23466/): Media CP Media Control Panel – insufficiently protected credential change (medium 6.5) - [CVE-2023-23465](https://insights.sbomify.com/CVE-2023-23465/): Media CP Media Control Panel – CSRF (critical 9.1) - [CVE-2023-23464](https://insights.sbomify.com/CVE-2023-23464/): Media CP Media Control Panel – Information Disclosure (high 8.1) - [CVE-2023-23463](https://insights.sbomify.com/CVE-2023-23463/): Sunell DVR – Insufficiently Protected Credentials (medium 5.3) - [CVE-2023-23462](https://insights.sbomify.com/CVE-2023-23462/): Libpeconv – integer overflow (critical 9.8) - [CVE-2023-23461](https://insights.sbomify.com/CVE-2023-23461/): Libpeconv – access violation (critical 9.8) - [CVE-2023-23460](https://insights.sbomify.com/CVE-2023-23460/): Priority Web – Authentication bypass (critical 9.1) - [CVE-2023-2346](https://insights.sbomify.com/CVE-2023-2346/): SourceCodester Service Provider Management System view_inquiry.php sql injection (medium 6.3) - [CVE-2023-23459](https://insights.sbomify.com/CVE-2023-23459/): Priority Windows – Command Execution via SQL Injection (critical 9.1) - [CVE-2023-23458](https://insights.sbomify.com/CVE-2023-23458/): Sunell DVR – Exposure of Sensitive Information (medium 6.5) - [CVE-2023-23457](https://insights.sbomify.com/CVE-2023-23457/): Upx: segv on packlinuxelf64::invert_pt_dynamic() in p_lx_elf.cpp (medium 5.3) - [CVE-2023-23456](https://insights.sbomify.com/CVE-2023-23456/): Upx: heap-buffer-overflow in packtmt::pack() (medium 5.3) - [CVE-2023-23455](https://insights.sbomify.com/CVE-2023-23455/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2023-23454](https://insights.sbomify.com/CVE-2023-23454/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2023-23453](https://insights.sbomify.com/CVE-2023-23453/): Missing authorization in FX0-GENT v3 Firmware (critical 9.8) - [CVE-2023-23452](https://insights.sbomify.com/CVE-2023-23452/): Missing authorization in FX0-GPNT v3 Firmware (critical 9.8) - [CVE-2023-23451](https://insights.sbomify.com/CVE-2023-23451/): Hardcoded credentials in SICK FX0-GENT00000, SICK FX0-GENT00030, SICK FX0-GMOD00000, SICK FX0-GMOD00010, SICK FX0-GPNT00000, SICK FX0-GPNT00030, SICK UE410-EN1, SICK UE410-EN3, SICK UE410-EN3S04, SICK UE410-EN4 (critical 9.8) - [CVE-2023-23450](https://insights.sbomify.com/CVE-2023-23450/): Auth bypass in SICK FTMG-ESD15AXX AIR FLOW SENSOR (medium 6.2) - [CVE-2023-2345](https://insights.sbomify.com/CVE-2023-2345/): SourceCodester Service Provider Management System improper authorization (medium 6.3) - [CVE-2023-23449](https://insights.sbomify.com/CVE-2023-23449/): Information disclosure in SICK FTMG-ESD15AXX AIR FLOW SENSOR (medium 5.3) - [CVE-2023-23448](https://insights.sbomify.com/CVE-2023-23448/): Information disclosure in SICK FTMG-ESD15AXX AIR FLOW SENSOR (medium 5.3) - [CVE-2023-23447](https://insights.sbomify.com/CVE-2023-23447/): Denial of service in SICK FTMG-ESD15AXX AIR FLOW SENSOR (high 7.5) - [CVE-2023-23446](https://insights.sbomify.com/CVE-2023-23446/): Missing authorization in SICK FTMG-ESD15AXX AIR FLOW SENSOR (high 7.5) - [CVE-2023-23445](https://insights.sbomify.com/CVE-2023-23445/): Missing authorization in SICK FTMG-ESD15AXX AIR FLOW SENSOR (high 7.5) - [CVE-2023-23444](https://insights.sbomify.com/CVE-2023-23444/): Missing authorization in FX0-GENT00000 FLEXISOFT EIP GATEW. (high 7.5) - [CVE-2023-23443](https://insights.sbomify.com/CVE-2023-23443/): Memory corruption in Magic OS (medium 4.6) - [CVE-2023-23442](https://insights.sbomify.com/CVE-2023-23442/): Memory corruption in Magic OS (medium 4.6) - [CVE-2023-23441](https://insights.sbomify.com/CVE-2023-23441/): Memory corruption in Magic UI (medium 6.0) - [CVE-2023-23440](https://insights.sbomify.com/CVE-2023-23440/): Information disclosure in LGE-AN00 (low 3.3) - [CVE-2023-2344](https://insights.sbomify.com/CVE-2023-2344/): SourceCodester Service Provider Management System HTTP POST Request sql injection (medium 6.3) - [CVE-2023-23439](https://insights.sbomify.com/CVE-2023-23439/): Information disclosure in LGE-AN00 (medium 4.0) - [CVE-2023-23438](https://insights.sbomify.com/CVE-2023-23438/): Privilege escalation in LGE-AN00 (medium 4.0) - [CVE-2023-23437](https://insights.sbomify.com/CVE-2023-23437/): Information disclosure in com.hihonor.vmall (low 3.3) - [CVE-2023-23436](https://insights.sbomify.com/CVE-2023-23436/): Security feature bypass in Magic OS (high 7.3) - [CVE-2023-23435](https://insights.sbomify.com/CVE-2023-23435/): Security feature bypass in Magic OS (medium 4.0) - [CVE-2023-23434](https://insights.sbomify.com/CVE-2023-23434/): Information disclosure in HonorBoardApp (medium 4.0) - [CVE-2023-23433](https://insights.sbomify.com/CVE-2023-23433/): Security feature bypass in NTH-AN00 (medium 4.0) - [CVE-2023-23432](https://insights.sbomify.com/CVE-2023-23432/): Security feature bypass in NTH-AN00 (high 7.3) - [CVE-2023-23431](https://insights.sbomify.com/CVE-2023-23431/): Security feature bypass in NTH-AN00 (high 7.3) - [CVE-2023-23430](https://insights.sbomify.com/CVE-2023-23430/): Privilege escalation in com.hihonor.magichome (low 3.3) - [CVE-2023-2343](https://insights.sbomify.com/CVE-2023-2343/): Cross-site Scripting (XSS) - DOM in pimcore/pimcore (medium 5.2) - [CVE-2023-23429](https://insights.sbomify.com/CVE-2023-23429/): Privilege escalation in Magic OS (medium 4.0) - [CVE-2023-23428](https://insights.sbomify.com/CVE-2023-23428/): Privilege escalation in Magic OS (low 3.3) - [CVE-2023-23427](https://insights.sbomify.com/CVE-2023-23427/): Privilege escalation in Magic OS (medium 4.0) - [CVE-2023-23426](https://insights.sbomify.com/CVE-2023-23426/): Other in FRI-AN00 (medium 6.6) - [CVE-2023-23424](https://insights.sbomify.com/CVE-2023-23424/): Other in NTH-AN00 (medium 6.5) - [CVE-2023-23423](https://insights.sbomify.com/CVE-2023-23423/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8) - [CVE-2023-23422](https://insights.sbomify.com/CVE-2023-23422/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8) - [CVE-2023-23421](https://insights.sbomify.com/CVE-2023-23421/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8) - [CVE-2023-23420](https://insights.sbomify.com/CVE-2023-23420/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8) - [CVE-2023-2342](https://insights.sbomify.com/CVE-2023-2342/): Cross-site Scripting (XSS) - Reflected in pimcore/pimcore (medium 4.0) - [CVE-2023-23419](https://insights.sbomify.com/CVE-2023-23419/): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (high 7.8) - [CVE-2023-23418](https://insights.sbomify.com/CVE-2023-23418/): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (high 7.8) - [CVE-2023-23417](https://insights.sbomify.com/CVE-2023-23417/): Windows Partition Management Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2023-23416](https://insights.sbomify.com/CVE-2023-23416/): Windows Cryptographic Services Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-23415](https://insights.sbomify.com/CVE-2023-23415/): Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability (critical 9.8) - [CVE-2023-23414](https://insights.sbomify.com/CVE-2023-23414/): Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability (high 7.1) - [CVE-2023-23413](https://insights.sbomify.com/CVE-2023-23413/): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (high 8.8) - [CVE-2023-23412](https://insights.sbomify.com/CVE-2023-23412/): Windows Accounts Picture Elevation of Privilege Vulnerability (high 7.8) - [CVE-2023-23411](https://insights.sbomify.com/CVE-2023-23411/): Windows Hyper-V Denial of Service Vulnerability (medium 6.5) - [CVE-2023-23410](https://insights.sbomify.com/CVE-2023-23410/): Windows HTTP.sys Elevation of Privilege Vulnerability (high 7.8) - [CVE-2023-2341](https://insights.sbomify.com/CVE-2023-2341/): Cross-site Scripting (XSS) - Generic in pimcore/pimcore (high 7.3) - [CVE-2023-23409](https://insights.sbomify.com/CVE-2023-23409/): Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability (medium 5.5) - [CVE-2023-23408](https://insights.sbomify.com/CVE-2023-23408/): Azure Apache Ambari Spoofing Vulnerability (medium 4.5) - [CVE-2023-23407](https://insights.sbomify.com/CVE-2023-23407/): Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability (high 7.1) - [CVE-2023-23406](https://insights.sbomify.com/CVE-2023-23406/): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (high 8.8) - [CVE-2023-23405](https://insights.sbomify.com/CVE-2023-23405/): Remote Procedure Call Runtime Remote Code Execution Vulnerability (high 8.1) - [CVE-2023-23404](https://insights.sbomify.com/CVE-2023-23404/): Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability (high 8.1) - [CVE-2023-23403](https://insights.sbomify.com/CVE-2023-23403/): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (high 8.8) - [CVE-2023-23402](https://insights.sbomify.com/CVE-2023-23402/): Windows Media Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-23401](https://insights.sbomify.com/CVE-2023-23401/): Windows Media Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-23400](https://insights.sbomify.com/CVE-2023-23400/): Windows DNS Server Remote Code Execution Vulnerability (high 7.2) - [CVE-2023-2340](https://insights.sbomify.com/CVE-2023-2340/): Cross-site Scripting (XSS) - Stored in pimcore/pimcore (medium 6.1) - [CVE-2023-23399](https://insights.sbomify.com/CVE-2023-23399/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-23398](https://insights.sbomify.com/CVE-2023-23398/): Microsoft Excel Spoofing Vulnerability (high 7.1) - [CVE-2023-23397](https://insights.sbomify.com/CVE-2023-23397/): Microsoft Office Outlook Privilege Escalation (critical 9.8, exploited in the wild) - [CVE-2023-23396](https://insights.sbomify.com/CVE-2023-23396/): Microsoft Excel Denial of Service Vulnerability (medium 6.5) - [CVE-2023-23395](https://insights.sbomify.com/CVE-2023-23395/): Microsoft SharePoint Server Spoofing Vulnerability (low 3.1) - [CVE-2023-23394](https://insights.sbomify.com/CVE-2023-23394/): Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability (medium 5.5) - [CVE-2023-23393](https://insights.sbomify.com/CVE-2023-23393/): Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability (high 7.0) - [CVE-2023-23392](https://insights.sbomify.com/CVE-2023-23392/): HTTP Protocol Stack Remote Code Execution Vulnerability (critical 9.8) - [CVE-2023-23391](https://insights.sbomify.com/CVE-2023-23391/): Office for Android Spoofing Vulnerability (medium 5.5) - [CVE-2023-23390](https://insights.sbomify.com/CVE-2023-23390/): 3D Builder Remote Code Execution Vulnerability (high 7.8) - [CVE-2023-2339](https://insights.sbomify.com/CVE-2023-2339/): Cross-site Scripting (XSS) - Reflected in pimcore/pimcore (medium 6.1) - [CVE-2023-23389](https://insights.sbomify.com/CVE-2023-23389/): Microsoft Defender Elevation of Privilege Vulnerability (medium 6.3) --- From sbomify Insights: https://insights.sbomify.com/years/2023/page/382/