# Vulnerabilities published in 2023


- [CVE-2023-21607](https://insights.sbomify.com/CVE-2023-21607/): Adobe Acrobat Reader Improper Input Validation Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21606](https://insights.sbomify.com/CVE-2023-21606/): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21605](https://insights.sbomify.com/CVE-2023-21605/): Adobe Acrobat Reader DC Font Parsing Heap-based Buffer Overflow Arbitrary code execution (high 7.8)
- [CVE-2023-21604](https://insights.sbomify.com/CVE-2023-21604/): Adobe Acrobat Reader Stack-based Buffer Overflow Arbitrary code execution (high 7.8)
- [CVE-2023-21603](https://insights.sbomify.com/CVE-2023-21603/): Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-21601](https://insights.sbomify.com/CVE-2023-21601/): Adobe Dimension OBJ File Parsing Use-After-Free Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-2160](https://insights.sbomify.com/CVE-2023-2160/): Weak Password Requirements in modoboa/modoboa (medium 6.3)
- [CVE-2023-21599](https://insights.sbomify.com/CVE-2023-21599/): Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-21598](https://insights.sbomify.com/CVE-2023-21598/): Adobe InCopy Font Parsing Use-After-Free Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-21597](https://insights.sbomify.com/CVE-2023-21597/): Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21596](https://insights.sbomify.com/CVE-2023-21596/): Adobe InCopy Improper Input Validation Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21595](https://insights.sbomify.com/CVE-2023-21595/): Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21594](https://insights.sbomify.com/CVE-2023-21594/): Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21593](https://insights.sbomify.com/CVE-2023-21593/): Adobe InDesign SVG file NULL Pointer Dereference Application denial-of-service (medium 5.5)
- [CVE-2023-21592](https://insights.sbomify.com/CVE-2023-21592/): Adobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-21591](https://insights.sbomify.com/CVE-2023-21591/): Adobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-21590](https://insights.sbomify.com/CVE-2023-21590/): Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-2159](https://insights.sbomify.com/CVE-2023-2159/): CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode Bypass (medium 5.3)
- [CVE-2023-21589](https://insights.sbomify.com/CVE-2023-21589/): Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21588](https://insights.sbomify.com/CVE-2023-21588/): Adobe InDesign Improper Input Validation Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21587](https://insights.sbomify.com/CVE-2023-21587/): Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21586](https://insights.sbomify.com/CVE-2023-21586/): Acrobat Reader | NULL Pointer Dereference (CWE-476) (medium 5.5)
- [CVE-2023-21585](https://insights.sbomify.com/CVE-2023-21585/): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-21584](https://insights.sbomify.com/CVE-2023-21584/): Adobe FrameMaker Font Parsing Use-After-Free Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-21583](https://insights.sbomify.com/CVE-2023-21583/): Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-21582](https://insights.sbomify.com/CVE-2023-21582/): ZDI-CAN-18255: Adobe Digital Editions PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21581](https://insights.sbomify.com/CVE-2023-21581/): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-2158](https://insights.sbomify.com/CVE-2023-2158/): Impersonation through User-Controlled Token (critical 9.8)
- [CVE-2023-21579](https://insights.sbomify.com/CVE-2023-21579/): Adobe Acrobat Reader DC Font Parsing Integer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21578](https://insights.sbomify.com/CVE-2023-21578/): Adobe Photoshop Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-21577](https://insights.sbomify.com/CVE-2023-21577/): Adobe Photoshop Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-21576](https://insights.sbomify.com/CVE-2023-21576/): Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21575](https://insights.sbomify.com/CVE-2023-21575/): Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21574](https://insights.sbomify.com/CVE-2023-21574/): Adobe Photoshop Improper Input Validation Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21573](https://insights.sbomify.com/CVE-2023-21573/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (medium 5.4)
- [CVE-2023-21572](https://insights.sbomify.com/CVE-2023-21572/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (medium 6.5)
- [CVE-2023-21571](https://insights.sbomify.com/CVE-2023-21571/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (medium 5.4)
- [CVE-2023-21570](https://insights.sbomify.com/CVE-2023-21570/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (medium 5.4)
- [CVE-2023-2157](https://insights.sbomify.com/CVE-2023-2157/): Memory corruption in ImageMagick (medium 5.5)
- [CVE-2023-21569](https://insights.sbomify.com/CVE-2023-21569/): Azure DevOps Server Spoofing Vulnerability (medium 5.5)
- [CVE-2023-21568](https://insights.sbomify.com/CVE-2023-21568/): Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability (high 7.3)
- [CVE-2023-21567](https://insights.sbomify.com/CVE-2023-21567/): Visual Studio Denial of Service Vulnerability (medium 5.6)
- [CVE-2023-21566](https://insights.sbomify.com/CVE-2023-21566/): Visual Studio Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21565](https://insights.sbomify.com/CVE-2023-21565/): Azure DevOps Server Spoofing Vulnerability (high 7.1)
- [CVE-2023-21564](https://insights.sbomify.com/CVE-2023-21564/): Azure DevOps Server Cross-Site Scripting Vulnerability (high 7.1)
- [CVE-2023-21563](https://insights.sbomify.com/CVE-2023-21563/): BitLocker Security Feature Bypass Vulnerability (medium 6.8)
- [CVE-2023-21561](https://insights.sbomify.com/CVE-2023-21561/): Microsoft Cryptographic Services Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21560](https://insights.sbomify.com/CVE-2023-21560/): Windows Boot Manager Security Feature Bypass Vulnerability (medium 6.6)
- [CVE-2023-2156](https://insights.sbomify.com/CVE-2023-2156/): Denial of service in Linux kernel (RPL protocol) (high 7.5)
- [CVE-2023-21559](https://insights.sbomify.com/CVE-2023-21559/): Windows Cryptographic Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-21558](https://insights.sbomify.com/CVE-2023-21558/): Windows Error Reporting Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21557](https://insights.sbomify.com/CVE-2023-21557/): Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability (high 7.5)
- [CVE-2023-21556](https://insights.sbomify.com/CVE-2023-21556/): Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2023-21555](https://insights.sbomify.com/CVE-2023-21555/): Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2023-21554](https://insights.sbomify.com/CVE-2023-21554/): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-21553](https://insights.sbomify.com/CVE-2023-21553/): Azure DevOps Server Remote Code Execution Vulnerability (high 7.5)
- [CVE-2023-21552](https://insights.sbomify.com/CVE-2023-21552/): Windows GDI Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21551](https://insights.sbomify.com/CVE-2023-21551/): Microsoft Cryptographic Services Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21550](https://insights.sbomify.com/CVE-2023-21550/): Windows Cryptographic Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-2155](https://insights.sbomify.com/CVE-2023-2155/): SourceCodester Air Cargo Management System cross site scripting (low 2.4)
- [CVE-2023-21549](https://insights.sbomify.com/CVE-2023-21549/): Windows SMB Witness Service Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2023-21548](https://insights.sbomify.com/CVE-2023-21548/): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2023-21547](https://insights.sbomify.com/CVE-2023-21547/): Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability (high 7.5)
- [CVE-2023-21546](https://insights.sbomify.com/CVE-2023-21546/): Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2023-21543](https://insights.sbomify.com/CVE-2023-21543/): Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2023-21542](https://insights.sbomify.com/CVE-2023-21542/): Windows Installer Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2023-21541](https://insights.sbomify.com/CVE-2023-21541/): Windows Task Scheduler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21540](https://insights.sbomify.com/CVE-2023-21540/): Windows Cryptographic Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-2154](https://insights.sbomify.com/CVE-2023-2154/): SourceCodester Task Reminder System sql injection (medium 4.7)
- [CVE-2023-21539](https://insights.sbomify.com/CVE-2023-21539/): Windows Authentication Remote Code Execution Vulnerability (high 7.5)
- [CVE-2023-21538](https://insights.sbomify.com/CVE-2023-21538/): .NET Denial of Service Vulnerability (high 7.5)
- [CVE-2023-21537](https://insights.sbomify.com/CVE-2023-21537/): Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21536](https://insights.sbomify.com/CVE-2023-21536/): Event Tracing for Windows Information Disclosure Vulnerability (medium 4.7)
- [CVE-2023-21535](https://insights.sbomify.com/CVE-2023-21535/): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2023-21532](https://insights.sbomify.com/CVE-2023-21532/): Windows GDI Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2023-21531](https://insights.sbomify.com/CVE-2023-21531/): Azure Service Fabric Container Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2023-2153](https://insights.sbomify.com/CVE-2023-2153/): SourceCodester Complaint Management System POST Parameter editable_ajax.php cross site scripting (low 3.5)
- [CVE-2023-21529](https://insights.sbomify.com/CVE-2023-21529/): Microsoft Exchange Server Deserialization of Untrusted Data (high 8.8, exploited in the wild)
- [CVE-2023-21528](https://insights.sbomify.com/CVE-2023-21528/): Microsoft SQL Server Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21527](https://insights.sbomify.com/CVE-2023-21527/): Windows iSCSI Service Denial of Service Vulnerability (high 7.5)
- [CVE-2023-21526](https://insights.sbomify.com/CVE-2023-21526/): Windows Netlogon Information Disclosure Vulnerability (high 7.4)
- [CVE-2023-21525](https://insights.sbomify.com/CVE-2023-21525/): Remote Procedure Call Runtime Denial of Service Vulnerability (medium 5.3)
- [CVE-2023-21524](https://insights.sbomify.com/CVE-2023-21524/): Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21523](https://insights.sbomify.com/CVE-2023-21523/): Cross-site scripting in AtHoc (medium 5.4)
- [CVE-2023-21522](https://insights.sbomify.com/CVE-2023-21522/): Cross-site scripting in AtHoc (medium 6.1)
- [CVE-2023-21521](https://insights.sbomify.com/CVE-2023-21521/): SQL injection in AtHoc (high 7.2)
- [CVE-2023-21520](https://insights.sbomify.com/CVE-2023-21520/): Information disclosure in AtHoc (medium 5.3)
- [CVE-2023-2152](https://insights.sbomify.com/CVE-2023-2152/): SourceCodester Student Study Center Desk Management System index.php file inclusion (medium 5.3)
- [CVE-2023-21518](https://insights.sbomify.com/CVE-2023-21518/): Missing authorization in Samsung SearchWidget (medium 4.4)
- [CVE-2023-21517](https://insights.sbomify.com/CVE-2023-21517/): Memory corruption in Samsung Mobile Devices (high 8.8)
- [CVE-2023-21516](https://insights.sbomify.com/CVE-2023-21516/): Cross-site scripting in Galaxy Store (high 7.5)
- [CVE-2023-21515](https://insights.sbomify.com/CVE-2023-21515/): Code injection in Galaxy Store (high 7.5)
- [CVE-2023-21514](https://insights.sbomify.com/CVE-2023-21514/): Security feature bypass in Galaxy Store (high 7.5)
- [CVE-2023-21513](https://insights.sbomify.com/CVE-2023-21513/): Privilege escalation in Samsung Mobile Devices (medium 6.1)
- [CVE-2023-21512](https://insights.sbomify.com/CVE-2023-21512/): Missing authorization in Samsung Mobile Devices (low 2.4)
- [CVE-2023-21511](https://insights.sbomify.com/CVE-2023-21511/): Memory corruption in Samsung Blockchain Keystore (medium 4.4)
- [CVE-2023-21510](https://insights.sbomify.com/CVE-2023-21510/): Memory corruption in Samsung Blockchain Keystore (medium 4.4)
- [CVE-2023-2151](https://insights.sbomify.com/CVE-2023-2151/): SourceCodester Student Study Center Desk Management System manage_student.php sql injection (medium 6.3)
- [CVE-2023-21509](https://insights.sbomify.com/CVE-2023-21509/): Memory corruption in Samsung Blockchain Keystore (medium 6.7)
- [CVE-2023-21508](https://insights.sbomify.com/CVE-2023-21508/): Memory corruption in Samsung Blockchain Keystore (medium 6.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/397/