# Vulnerabilities published in 2023


- [CVE-2023-22269](https://insights.sbomify.com/CVE-2023-22269/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2023-22268](https://insights.sbomify.com/CVE-2023-22268/): ZDI-CAN-21308: Adobe RoboHelp Server getRHSGroupsForRoles SQL Injection Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-22266](https://insights.sbomify.com/CVE-2023-22266/): AEM URL Redirection to Untrusted Site Security feature bypass (medium 5.4)
- [CVE-2023-22265](https://insights.sbomify.com/CVE-2023-22265/): AEM URL Redirection to Untrusted Site Security feature bypass (medium 5.4)
- [CVE-2023-22264](https://insights.sbomify.com/CVE-2023-22264/): AEM URL Redirection to Untrusted Site Security feature bypass (medium 5.4)
- [CVE-2023-22263](https://insights.sbomify.com/CVE-2023-22263/): AEM URL Redirection to Untrusted Site Security feature bypass (medium 5.4)
- [CVE-2023-22262](https://insights.sbomify.com/CVE-2023-22262/): AEM URL Redirection to Untrusted Site Security feature bypass (medium 5.4)
- [CVE-2023-22261](https://insights.sbomify.com/CVE-2023-22261/): AEM URL Redirection to Untrusted Site Security feature bypass (medium 5.4)
- [CVE-2023-22260](https://insights.sbomify.com/CVE-2023-22260/): AEM URL Redirection to Untrusted Site Security feature bypass (medium 5.4)
- [CVE-2023-2226](https://insights.sbomify.com/CVE-2023-2226/): Velociraptor crashes while parsing some malformed PE or OLE files. (low 3.3)
- [CVE-2023-22259](https://insights.sbomify.com/CVE-2023-22259/): AEM URL Redirection to Untrusted Site Security feature bypass (medium 5.4)
- [CVE-2023-22258](https://insights.sbomify.com/CVE-2023-22258/): AEM URL Redirection to Untrusted Site Security feature bypass (medium 5.4)
- [CVE-2023-22257](https://insights.sbomify.com/CVE-2023-22257/): AEM URL Redirection to Untrusted Site Security feature bypass (medium 5.4)
- [CVE-2023-22256](https://insights.sbomify.com/CVE-2023-22256/): AEM URL Redirection to Untrusted Site Security feature bypass (medium 5.4)
- [CVE-2023-22254](https://insights.sbomify.com/CVE-2023-22254/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2023-22253](https://insights.sbomify.com/CVE-2023-22253/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2023-22252](https://insights.sbomify.com/CVE-2023-22252/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2023-22251](https://insights.sbomify.com/CVE-2023-22251/): Adobe Commerce Incorrect Authorization Security feature bypass (medium 4.3)
- [CVE-2023-22250](https://insights.sbomify.com/CVE-2023-22250/): Adobe Commerce Improper Access Control Security feature bypass (medium 5.3)
- [CVE-2023-2225](https://insights.sbomify.com/CVE-2023-2225/): SEO ALert <= 1.59 - Admin+ Stored XSS (medium 4.8)
- [CVE-2023-22249](https://insights.sbomify.com/CVE-2023-22249/): Adobe Commerce Stored XSS Arbitrary code execution (medium 4.8)
- [CVE-2023-22248](https://insights.sbomify.com/CVE-2023-22248/): Adobe Commerce Incorrect Authorization Security feature bypass (high 7.5)
- [CVE-2023-22247](https://insights.sbomify.com/CVE-2023-22247/): Adobe Commerce XML Injection Arbitrary file system read (high 7.5)
- [CVE-2023-22246](https://insights.sbomify.com/CVE-2023-22246/): Adobe Animate FLA files Use After Free Arbitrary code execution (high 7.8)
- [CVE-2023-22244](https://insights.sbomify.com/CVE-2023-22244/): Adobe Premiere Rush PSD files Use After Free Arbitrary code execution (high 7.8)
- [CVE-2023-22243](https://insights.sbomify.com/CVE-2023-22243/): Adobe Animate SVG file Stack-based Buffer Overflow Arbitrary code execution (high 7.8)
- [CVE-2023-22242](https://insights.sbomify.com/CVE-2023-22242/): ZDI-CAN-19515: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-22241](https://insights.sbomify.com/CVE-2023-22241/): ZDI-CAN-19516: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-22240](https://insights.sbomify.com/CVE-2023-22240/): ZDI-CAN-19517: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-2224](https://insights.sbomify.com/CVE-2023-2224/): Seo By 10Web < 1.2.7 - Admin+ Stored XSS (medium 4.8)
- [CVE-2023-22239](https://insights.sbomify.com/CVE-2023-22239/): Adobe After Effects Improper Input Validation Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-22238](https://insights.sbomify.com/CVE-2023-22238/): Adobe After Effects Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-22237](https://insights.sbomify.com/CVE-2023-22237/): Adobe After Effects Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-22236](https://insights.sbomify.com/CVE-2023-22236/): Adobe Animate Heap-based Buffer Overflow Arbitrary code execution (high 7.8)
- [CVE-2023-22235](https://insights.sbomify.com/CVE-2023-22235/): Adobe InCopy SVG file Use After Free Arbitrary code execution (high 7.8)
- [CVE-2023-22234](https://insights.sbomify.com/CVE-2023-22234/): Adobe Premiere Rush PSD file Stack-based Buffer Overflow Arbitrary code execution (high 7.8)
- [CVE-2023-22233](https://insights.sbomify.com/CVE-2023-22233/): Adobe After Effects Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-22232](https://insights.sbomify.com/CVE-2023-22232/): Adobe Connect Improper Access Control Security feature bypass (medium 5.3)
- [CVE-2023-22231](https://insights.sbomify.com/CVE-2023-22231/): Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-22230](https://insights.sbomify.com/CVE-2023-22230/): Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-2223](https://insights.sbomify.com/CVE-2023-2223/): Login Rebuilder < 2.8.1 - Admin+ Stored XSS (medium 4.8)
- [CVE-2023-22229](https://insights.sbomify.com/CVE-2023-22229/): Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-22228](https://insights.sbomify.com/CVE-2023-22228/): Adobe Bridge Improper Input Validation Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-22227](https://insights.sbomify.com/CVE-2023-22227/): Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-22226](https://insights.sbomify.com/CVE-2023-22226/): Adobe Bridge SVG file Stack-based Buffer Overflow Arbitrary code execution (high 7.8)
- [CVE-2023-2221](https://insights.sbomify.com/CVE-2023-2221/): WP Custom Cursors < 3.2 - Admin+ SQLi (high 7.2)
- [CVE-2023-2220](https://insights.sbomify.com/CVE-2023-2220/): Dream Technology mica Form Object cross site scripting (low 3.5)
- [CVE-2023-2219](https://insights.sbomify.com/CVE-2023-2219/): SourceCodester Task Reminder System Users.php cross site scripting (low 3.5)
- [CVE-2023-2218](https://insights.sbomify.com/CVE-2023-2218/): SourceCodester Task Reminder System manage_user.php sql injection (medium 6.3)
- [CVE-2023-2217](https://insights.sbomify.com/CVE-2023-2217/): SourceCodester Task Reminder System manage_reminder.php sql injection (medium 6.3)
- [CVE-2023-2216](https://insights.sbomify.com/CVE-2023-2216/): Campcodes Coffee Shop POS System Users.php cross site scripting (low 3.5)
- [CVE-2023-2215](https://insights.sbomify.com/CVE-2023-2215/): Campcodes Coffee Shop POS System manage_user.php sql injection (medium 6.3)
- [CVE-2023-2214](https://insights.sbomify.com/CVE-2023-2214/): Campcodes Coffee Shop POS System manage_sale.php sql injection (medium 6.3)
- [CVE-2023-22130](https://insights.sbomify.com/CVE-2023-22130/): Denial of service in Sun ZFS Storage Appliance Kit (AK) Software (medium 5.9)
- [CVE-2023-2213](https://insights.sbomify.com/CVE-2023-2213/): Campcodes Coffee Shop POS System manage_product.php sql injection (medium 6.3)
- [CVE-2023-22129](https://insights.sbomify.com/CVE-2023-22129/): Denial of service in Solaris Operating System (medium 5.5)
- [CVE-2023-22128](https://insights.sbomify.com/CVE-2023-22128/): Information disclosure in Solaris Operating System (low 3.1)
- [CVE-2023-22127](https://insights.sbomify.com/CVE-2023-22127/): Other in Outside In Technology (medium 6.3)
- [CVE-2023-22126](https://insights.sbomify.com/CVE-2023-22126/): Information disclosure in WebCenter Content (medium 5.3)
- [CVE-2023-22125](https://insights.sbomify.com/CVE-2023-22125/): Other in Banking Trade Finance (medium 5.4)
- [CVE-2023-22124](https://insights.sbomify.com/CVE-2023-22124/): Other in Banking Trade Finance (medium 5.4)
- [CVE-2023-22123](https://insights.sbomify.com/CVE-2023-22123/): Other in Banking Trade Finance (medium 5.4)
- [CVE-2023-22122](https://insights.sbomify.com/CVE-2023-22122/): Other in Banking Trade Finance (medium 5.9)
- [CVE-2023-22121](https://insights.sbomify.com/CVE-2023-22121/): Other in Banking Trade Finance (medium 5.4)
- [CVE-2023-2212](https://insights.sbomify.com/CVE-2023-2212/): Campcodes Coffee Shop POS System view_product.php sql injection (medium 6.3)
- [CVE-2023-22119](https://insights.sbomify.com/CVE-2023-22119/): Other in FLEXCUBE Universal Banking (medium 5.9)
- [CVE-2023-22118](https://insights.sbomify.com/CVE-2023-22118/): Other in FLEXCUBE Universal Banking (medium 6.5)
- [CVE-2023-22117](https://insights.sbomify.com/CVE-2023-22117/): Other in FLEXCUBE Universal Banking (medium 5.4)
- [CVE-2023-22115](https://insights.sbomify.com/CVE-2023-22115/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-22114](https://insights.sbomify.com/CVE-2023-22114/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-22113](https://insights.sbomify.com/CVE-2023-22113/): Memory corruption in MySQL Server (low 2.7)
- [CVE-2023-22112](https://insights.sbomify.com/CVE-2023-22112/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-22111](https://insights.sbomify.com/CVE-2023-22111/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-22110](https://insights.sbomify.com/CVE-2023-22110/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-2211](https://insights.sbomify.com/CVE-2023-2211/): Campcodes Coffee Shop POS System manage_category.php sql injection (medium 6.3)
- [CVE-2023-22109](https://insights.sbomify.com/CVE-2023-22109/): Other in Business Intelligence Enterprise Edition (medium 4.6)
- [CVE-2023-22108](https://insights.sbomify.com/CVE-2023-22108/): Other in WebLogic Server (high 7.5)
- [CVE-2023-22107](https://insights.sbomify.com/CVE-2023-22107/): Cross-site scripting in Enterprise Command Center Framework (medium 6.1)
- [CVE-2023-22106](https://insights.sbomify.com/CVE-2023-22106/): Other in Enterprise Command Center Framework (medium 6.5)
- [CVE-2023-22105](https://insights.sbomify.com/CVE-2023-22105/): Other in BI Publisher (formerly XML Publisher) (medium 5.4)
- [CVE-2023-22104](https://insights.sbomify.com/CVE-2023-22104/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-22103](https://insights.sbomify.com/CVE-2023-22103/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-22102](https://insights.sbomify.com/CVE-2023-22102/): MySQL Connectors takeover vulnerability (high 8.3)
- [CVE-2023-22101](https://insights.sbomify.com/CVE-2023-22101/): Auth bypass in WebLogic Server (high 8.1)
- [CVE-2023-22100](https://insights.sbomify.com/CVE-2023-22100/): Other in VM VirtualBox (high 7.9)
- [CVE-2023-2210](https://insights.sbomify.com/CVE-2023-2210/): Campcodes Coffee Shop POS System view_category.php sql injection (medium 6.3)
- [CVE-2023-22099](https://insights.sbomify.com/CVE-2023-22099/): Privilege escalation in VM VirtualBox (high 8.2)
- [CVE-2023-22098](https://insights.sbomify.com/CVE-2023-22098/): Other in VM VirtualBox (high 8.2)
- [CVE-2023-22097](https://insights.sbomify.com/CVE-2023-22097/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-22096](https://insights.sbomify.com/CVE-2023-22096/): Other in Database - Enterprise Edition (medium 4.3)
- [CVE-2023-22095](https://insights.sbomify.com/CVE-2023-22095/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2023-22094](https://insights.sbomify.com/CVE-2023-22094/): Other in MySQL Installer (high 7.9)
- [CVE-2023-22093](https://insights.sbomify.com/CVE-2023-22093/): Other in iRecruitment (medium 6.5)
- [CVE-2023-22092](https://insights.sbomify.com/CVE-2023-22092/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-22091](https://insights.sbomify.com/CVE-2023-22091/): Other in GraalVM Enterprise Edition (medium 4.8)
- [CVE-2023-22090](https://insights.sbomify.com/CVE-2023-22090/): Other in PeopleSoft Enterprise CC Common Application Objects (medium 6.5)
- [CVE-2023-2209](https://insights.sbomify.com/CVE-2023-2209/): Campcodes Coffee Shop POS System view_details.php sql injection (medium 6.3)
- [CVE-2023-22089](https://insights.sbomify.com/CVE-2023-22089/): Other in WebLogic Server (critical 9.8)
- [CVE-2023-22088](https://insights.sbomify.com/CVE-2023-22088/): Information disclosure in Communications Order and Service Management (medium 4.3)
- [CVE-2023-22087](https://insights.sbomify.com/CVE-2023-22087/): Missing authorization in Hospitality OPERA 5 Property Services (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/391/