# Vulnerabilities published in 2023


- [CVE-2023-22368](https://insights.sbomify.com/CVE-2023-22368/): Other in ELECOM Camera Assistant and QuickFileDealer (high 7.8)
- [CVE-2023-22367](https://insights.sbomify.com/CVE-2023-22367/): Weak cryptography in Ichiran App for iOS and Ichiran App for Android (medium 5.9)
- [CVE-2023-22366](https://insights.sbomify.com/CVE-2023-22366/): Memory corruption in CX-Motion-MCH (high 7.8)
- [CVE-2023-22365](https://insights.sbomify.com/CVE-2023-22365/): Command injection in UR32L (high 7.2)
- [CVE-2023-22363](https://insights.sbomify.com/CVE-2023-22363/): Access Zone stack overflow (medium 6.5)
- [CVE-2023-22362](https://insights.sbomify.com/CVE-2023-22362/): Information disclosure in SUSHIRO App for Android (high 7.5)
- [CVE-2023-22361](https://insights.sbomify.com/CVE-2023-22361/): Privilege escalation in SkyBridge MB-A100/110 (medium 4.3)
- [CVE-2023-22360](https://insights.sbomify.com/CVE-2023-22360/): Use after free in Screen Creator Advance 2 (high 7.8)
- [CVE-2023-2236](https://insights.sbomify.com/CVE-2023-2236/): Use-after-free in Linux kernel's Performance Events subsystem (high 7.8)
- [CVE-2023-22359](https://insights.sbomify.com/CVE-2023-22359/): User-enumeration in RestAPI (medium 4.3)
- [CVE-2023-22358](https://insights.sbomify.com/CVE-2023-22358/): BIG-IP Edge Client for Windows vulnerability (high 7.8)
- [CVE-2023-22357](https://insights.sbomify.com/CVE-2023-22357/): Auth bypass in CP1L-EL20DR-D (critical 9.8)
- [CVE-2023-22356](https://insights.sbomify.com/CVE-2023-22356/): Information disclosure in Intel(R) NUC BIOS firmware (medium 6.0)
- [CVE-2023-22355](https://insights.sbomify.com/CVE-2023-22355/): Privilege escalation in Intel(R) oneAPI Toolkit and component software installers (medium 6.7)
- [CVE-2023-22354](https://insights.sbomify.com/CVE-2023-22354/): Datakit CrossCAD/Ware (low 3.3)
- [CVE-2023-22353](https://insights.sbomify.com/CVE-2023-22353/): Memory corruption in Screen Creator Advance 2 (high 7.8)
- [CVE-2023-22351](https://insights.sbomify.com/CVE-2023-22351/): Memory corruption in UEFI firmware for some Intel(R) Processors (medium 6.9)
- [CVE-2023-22350](https://insights.sbomify.com/CVE-2023-22350/): Memory corruption in Screen Creator Advance 2 (high 7.8)
- [CVE-2023-2235](https://insights.sbomify.com/CVE-2023-2235/): Use-after-free in Linux kernel's Performance Events subsystem (high 7.8)
- [CVE-2023-22349](https://insights.sbomify.com/CVE-2023-22349/): Memory corruption in Screen Creator Advance 2 (high 7.8)
- [CVE-2023-22348](https://insights.sbomify.com/CVE-2023-22348/): Reading host_configs does not honour contact groups (medium 4.3)
- [CVE-2023-22347](https://insights.sbomify.com/CVE-2023-22347/): Memory corruption in Screen Creator Advance 2 (high 7.8)
- [CVE-2023-22346](https://insights.sbomify.com/CVE-2023-22346/): Memory corruption in Screen Creator Advance 2 (high 7.8)
- [CVE-2023-22345](https://insights.sbomify.com/CVE-2023-22345/): Memory corruption in Screen Creator Advance 2 (high 7.8)
- [CVE-2023-22344](https://insights.sbomify.com/CVE-2023-22344/): Hardcoded credentials in SS1 and Rakuraku PC Cloud (critical 9.8)
- [CVE-2023-22342](https://insights.sbomify.com/CVE-2023-22342/): Privilege escalation in Intel(R) Thunderbolt(TM) DCH drivers for Windows (high 7.7)
- [CVE-2023-22341](https://insights.sbomify.com/CVE-2023-22341/): BIG-IP APM OAuth vulnerability (high 7.5)
- [CVE-2023-22340](https://insights.sbomify.com/CVE-2023-22340/): BIG-IP SIP profile vulnerability (high 7.5)
- [CVE-2023-2234](https://insights.sbomify.com/CVE-2023-2234/): BT HCI host union variant confusion (medium 6.8)
- [CVE-2023-22339](https://insights.sbomify.com/CVE-2023-22339/): Missing authorization in CONPROSYS HMI System (CHS) (high 7.5)
- [CVE-2023-22338](https://insights.sbomify.com/CVE-2023-22338/): Memory corruption in Intel(R) oneVPL GPU software (medium 4.4)
- [CVE-2023-22337](https://insights.sbomify.com/CVE-2023-22337/): Denial of service in Intel Unison software (high 7.5)
- [CVE-2023-22336](https://insights.sbomify.com/CVE-2023-22336/): Path traversal in SS1 and Rakuraku PC Cloud (critical 9.8)
- [CVE-2023-22335](https://insights.sbomify.com/CVE-2023-22335/): Missing authorization in SS1 and Rakuraku PC Cloud (high 7.5)
- [CVE-2023-22334](https://insights.sbomify.com/CVE-2023-22334/): Weak cryptography in CONPROSYS HMI System (CHS) (medium 5.3)
- [CVE-2023-22333](https://insights.sbomify.com/CVE-2023-22333/): Cross-site scripting in EasyMail (medium 6.1)
- [CVE-2023-22332](https://insights.sbomify.com/CVE-2023-22332/): Information disclosure in Pgpool-II (medium 6.5)
- [CVE-2023-22331](https://insights.sbomify.com/CVE-2023-22331/): Hardcoded credentials in CONPROSYS HMI System (CHS) (high 7.5)
- [CVE-2023-22330](https://insights.sbomify.com/CVE-2023-22330/): Information disclosure in Intel(R) NUC BIOS firmware (medium 6.0)
- [CVE-2023-2233](https://insights.sbomify.com/CVE-2023-2233/): Missing Authorization in GitLab (low 3.1)
- [CVE-2023-22329](https://insights.sbomify.com/CVE-2023-22329/): Denial of service in Intel(R) Processors (low 2.6)
- [CVE-2023-22327](https://insights.sbomify.com/CVE-2023-22327/): Memory corruption in Intel(R) FPGA products (medium 6.0)
- [CVE-2023-22326](https://insights.sbomify.com/CVE-2023-22326/): iControl REST and tmsh vulnerability (medium 4.9)
- [CVE-2023-22325](https://insights.sbomify.com/CVE-2023-22325/): Denial of service in SoftEther VPN (medium 5.9)
- [CVE-2023-22324](https://insights.sbomify.com/CVE-2023-22324/): SQL injection in CONPROSYS HMI System (CHS) (medium 6.5)
- [CVE-2023-22323](https://insights.sbomify.com/CVE-2023-22323/): BIG-IP SSL OCSP Authentication profile vulnerability (high 7.5)
- [CVE-2023-22322](https://insights.sbomify.com/CVE-2023-22322/): XML external entity in CX-Motion Pro (medium 5.5)
- [CVE-2023-22321](https://insights.sbomify.com/CVE-2023-22321/): Datakit CrossCAD/Ware (low 3.3)
- [CVE-2023-22320](https://insights.sbomify.com/CVE-2023-22320/): Path traversal in OpenAM Web Policy Agent (OpenAM Consortium Edition) (high 7.5)
- [CVE-2023-2232](https://insights.sbomify.com/CVE-2023-2232/): Denial of service in GitLab (medium 6.5)
- [CVE-2023-22319](https://insights.sbomify.com/CVE-2023-22319/): SQL injection in MilesightVPN (high 7.3)
- [CVE-2023-22318](https://insights.sbomify.com/CVE-2023-22318/): Denial of service against webconf (high 7.5)
- [CVE-2023-22317](https://insights.sbomify.com/CVE-2023-22317/): Use after free in CX-Programmer (high 7.8)
- [CVE-2023-22316](https://insights.sbomify.com/CVE-2023-22316/): Hardcoded credentials in PIX-RT100 (medium 6.5)
- [CVE-2023-22315](https://insights.sbomify.com/CVE-2023-22315/): Security feature bypass in Wattbox WB-300-IP-3 (medium 6.7)
- [CVE-2023-22314](https://insights.sbomify.com/CVE-2023-22314/): Use after free in CX-Programmer (high 7.8)
- [CVE-2023-22313](https://insights.sbomify.com/CVE-2023-22313/): Memory corruption in Intel(R) QAT Library software (low 2.3)
- [CVE-2023-22312](https://insights.sbomify.com/CVE-2023-22312/): Privilege escalation in Intel(R) NUC BIOS firmware (high 7.2)
- [CVE-2023-22311](https://insights.sbomify.com/CVE-2023-22311/): Privilege escalation in Intel(R) Optane(TM) PMem 100 Series Management Software (medium 6.7)
- [CVE-2023-22310](https://insights.sbomify.com/CVE-2023-22310/): Race condition in Intel(R) Aptio* V UEFI Firmware Integrator Tools (medium 6.5)
- [CVE-2023-2231](https://insights.sbomify.com/CVE-2023-2231/): MAXTECH MAX-G866ac Remote Management missing authentication (critical 9.8)
- [CVE-2023-22309](https://insights.sbomify.com/CVE-2023-22309/): Reflected Cross Site Scripting (XSS) (medium 6.1)
- [CVE-2023-22308](https://insights.sbomify.com/CVE-2023-22308/): Integer overflow in SoftEther VPN (high 7.5)
- [CVE-2023-22307](https://insights.sbomify.com/CVE-2023-22307/): Site-Passwords in GET parameters (medium 5.5)
- [CVE-2023-22306](https://insights.sbomify.com/CVE-2023-22306/): Command injection in UR32L (high 7.2)
- [CVE-2023-22305](https://insights.sbomify.com/CVE-2023-22305/): Integer overflow in Intel(R) Aptio* V UEFI Firmware Integrator Tools (medium 6.5)
- [CVE-2023-22304](https://insights.sbomify.com/CVE-2023-22304/): Command injection in PIX-RT100 (high 8.0)
- [CVE-2023-22303](https://insights.sbomify.com/CVE-2023-22303/): Auth bypass in TP-Link SG105PE (critical 9.8)
- [CVE-2023-22302](https://insights.sbomify.com/CVE-2023-22302/): BIG-IP HTTP profile vulnerability (medium 5.9)
- [CVE-2023-22301](https://insights.sbomify.com/CVE-2023-22301/): The kernel subsystem hmdfs has a arbitrary memory accessing vulnerability. (medium 6.5)
- [CVE-2023-22300](https://insights.sbomify.com/CVE-2023-22300/): CVE-2023-22300 (medium 6.1)
- [CVE-2023-22299](https://insights.sbomify.com/CVE-2023-22299/): Command injection in UR32L (high 8.8)
- [CVE-2023-22298](https://insights.sbomify.com/CVE-2023-22298/): pgAdmin 4 Open Redirect vulnerability (medium 6.1)
- [CVE-2023-22297](https://insights.sbomify.com/CVE-2023-22297/): Memory corruption in Intel(R) Server Board BMC firmware (high 8.2)
- [CVE-2023-22296](https://insights.sbomify.com/CVE-2023-22296/): Cross-site scripting in MAHO-PBX NetDevancer series (medium 6.1)
- [CVE-2023-22295](https://insights.sbomify.com/CVE-2023-22295/): CVE-2023-22295 (low 3.3)
- [CVE-2023-22294](https://insights.sbomify.com/CVE-2023-22294/): Privilege escalation in Checkmk Appliance (high 8.8)
- [CVE-2023-22293](https://insights.sbomify.com/CVE-2023-22293/): Privilege escalation in Intel(R) Thunderbolt(TM) DCH drivers for Windows (high 8.2)
- [CVE-2023-22292](https://insights.sbomify.com/CVE-2023-22292/): Privilege escalation in Intel Unison software (high 7.3)
- [CVE-2023-22291](https://insights.sbomify.com/CVE-2023-22291/): Memory corruption in Ichitaro (high 7.0)
- [CVE-2023-22290](https://insights.sbomify.com/CVE-2023-22290/): Denial of service in Intel Unison software (medium 6.5)
- [CVE-2023-2229](https://insights.sbomify.com/CVE-2023-2229/): Quick Post Duplicator <= 2.0 - Authenticated (Contributor+) SQL Injection via post_id (high 8.8)
- [CVE-2023-22288](https://insights.sbomify.com/CVE-2023-22288/): Email HTML Injection (medium 6.8)
- [CVE-2023-22286](https://insights.sbomify.com/CVE-2023-22286/): Cross-site request forgery in MAHO-PBX NetDevancer series (high 8.1)
- [CVE-2023-22285](https://insights.sbomify.com/CVE-2023-22285/): Missing authorization in Intel Unison software (high 7.5)
- [CVE-2023-22283](https://insights.sbomify.com/CVE-2023-22283/): BIG-IP Edge Client for Windows vulnerability (medium 6.5)
- [CVE-2023-22282](https://insights.sbomify.com/CVE-2023-22282/): Privilege escalation in WAB-MAT (high 7.3)
- [CVE-2023-22281](https://insights.sbomify.com/CVE-2023-22281/): BIG-IP AFM vulnerability (high 7.5)
- [CVE-2023-22280](https://insights.sbomify.com/CVE-2023-22280/): Command injection in MAHO-PBX NetDevancer series (high 7.2)
- [CVE-2023-2228](https://insights.sbomify.com/CVE-2023-2228/): Cross-Site Request Forgery (CSRF) in modoboa/modoboa (medium 6.8)
- [CVE-2023-22279](https://insights.sbomify.com/CVE-2023-22279/): Command injection in MAHO-PBX NetDevancer series (critical 9.8)
- [CVE-2023-22278](https://insights.sbomify.com/CVE-2023-22278/): Auth bypass in m-FILTER Ver.5 Series and Ver.4 Series (medium 5.3)
- [CVE-2023-22277](https://insights.sbomify.com/CVE-2023-22277/): Use after free in CX-Programmer (high 7.8)
- [CVE-2023-22276](https://insights.sbomify.com/CVE-2023-22276/): Race condition in Intel(R) Ethernet Controllers and Adapters E810 Series (medium 6.5)
- [CVE-2023-22275](https://insights.sbomify.com/CVE-2023-22275/): ZDI-CAN-21306: Adobe RoboHelp Server GetNewUserId SQL Injection Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-22274](https://insights.sbomify.com/CVE-2023-22274/): XML external entity in RoboHelp (high 7.5)
- [CVE-2023-22273](https://insights.sbomify.com/CVE-2023-22273/): ZDI-CAN-21307: Adobe RoboHelp Server OnPublishFile Directory Traversal Remote Code Execution Vulnerability (high 7.2)
- [CVE-2023-22272](https://insights.sbomify.com/CVE-2023-22272/): ZDI-CAN-21309: Adobe RoboHelp Server resolveDistinguishedName LDAP Injection Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-22271](https://insights.sbomify.com/CVE-2023-22271/): AEM Weak Cryptography for Passwords Security feature bypass (medium 5.3)
- [CVE-2023-2227](https://insights.sbomify.com/CVE-2023-2227/): Improper Authorization in modoboa/modoboa (critical 9.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/390/