# Vulnerabilities published in 2023


- [CVE-2023-21507](https://insights.sbomify.com/CVE-2023-21507/): Memory corruption in Samsung Blockchain Keystore (medium 4.4)
- [CVE-2023-21506](https://insights.sbomify.com/CVE-2023-21506/): Memory corruption in Samsung Blockchain Keystore (medium 6.7)
- [CVE-2023-21505](https://insights.sbomify.com/CVE-2023-21505/): Missing authorization in Samsung Core Service (medium 4.0)
- [CVE-2023-21504](https://insights.sbomify.com/CVE-2023-21504/): Memory corruption in Samsung Mobile Devices (medium 5.6)
- [CVE-2023-21503](https://insights.sbomify.com/CVE-2023-21503/): Memory corruption in Samsung Mobile Devices (medium 5.6)
- [CVE-2023-21502](https://insights.sbomify.com/CVE-2023-21502/): Privilege escalation in Samsung Mobile Devices (medium 5.7)
- [CVE-2023-21501](https://insights.sbomify.com/CVE-2023-21501/): Other in Samsung Mobile Devices (high 8.2)
- [CVE-2023-21500](https://insights.sbomify.com/CVE-2023-21500/): Memory corruption in Samsung Mobile Devices (medium 6.0)
- [CVE-2023-2150](https://insights.sbomify.com/CVE-2023-2150/): SourceCodester Task Reminder System Master.php sql injection (medium 4.7)
- [CVE-2023-21499](https://insights.sbomify.com/CVE-2023-21499/): Memory corruption in Samsung Mobile Devices (high 8.2)
- [CVE-2023-21498](https://insights.sbomify.com/CVE-2023-21498/): Memory corruption in Samsung Mobile Devices (medium 6.0)
- [CVE-2023-21497](https://insights.sbomify.com/CVE-2023-21497/): Memory corruption in Samsung Mobile Devices (medium 4.4)
- [CVE-2023-21496](https://insights.sbomify.com/CVE-2023-21496/): Other in Samsung Mobile Devices (medium 6.1)
- [CVE-2023-21495](https://insights.sbomify.com/CVE-2023-21495/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2023-21494](https://insights.sbomify.com/CVE-2023-21494/): Memory corruption in Samsung Mobile Devices (medium 5.6)
- [CVE-2023-21493](https://insights.sbomify.com/CVE-2023-21493/): Missing authorization in Samsung Mobile Devices (medium 6.8)
- [CVE-2023-21492](https://insights.sbomify.com/CVE-2023-21492/): Samsung Mobile Devices Insertion of Sensitive Information Into Log File (medium 4.4, exploited in the wild)
- [CVE-2023-21491](https://insights.sbomify.com/CVE-2023-21491/): Missing authorization in Samsung Mobile Devices (high 8.5)
- [CVE-2023-21490](https://insights.sbomify.com/CVE-2023-21490/): Missing authorization in Samsung Mobile Devices (medium 4.7)
- [CVE-2023-2149](https://insights.sbomify.com/CVE-2023-2149/): Campcodes Online Thesis Archiving System manage_user.php sql injection (medium 6.3)
- [CVE-2023-21489](https://insights.sbomify.com/CVE-2023-21489/): Memory corruption in Samsung Mobile Devices (high 7.1)
- [CVE-2023-21488](https://insights.sbomify.com/CVE-2023-21488/): Missing authorization in Samsung Mobile Devices (medium 4.4)
- [CVE-2023-21487](https://insights.sbomify.com/CVE-2023-21487/): Missing authorization in Samsung Mobile Devices (medium 5.1)
- [CVE-2023-21486](https://insights.sbomify.com/CVE-2023-21486/): Missing authorization in Samsung Mobile Devices (medium 5.3)
- [CVE-2023-21485](https://insights.sbomify.com/CVE-2023-21485/): Missing authorization in Samsung Mobile Devices (medium 5.3)
- [CVE-2023-21484](https://insights.sbomify.com/CVE-2023-21484/): Missing authorization in Samsung Mobile Devices (medium 5.1)
- [CVE-2023-21483](https://insights.sbomify.com/CVE-2023-21483/): Missing authorization in Galaxy Store (medium 6.4)
- [CVE-2023-21482](https://insights.sbomify.com/CVE-2023-21482/): Missing authorization in Samsung Camera (medium 6.1)
- [CVE-2023-21481](https://insights.sbomify.com/CVE-2023-21481/): Information disclosure in Samsung Account (medium 5.4)
- [CVE-2023-21480](https://insights.sbomify.com/CVE-2023-21480/): Privilege escalation in Samsung Mobile Devices (high 8.5)
- [CVE-2023-2148](https://insights.sbomify.com/CVE-2023-2148/): Campcodes Online Thesis Archiving System view_curriculum.php sql injection (medium 6.3)
- [CVE-2023-21479](https://insights.sbomify.com/CVE-2023-21479/): Missing authorization in Samsung Mobile Devices (medium 5.3)
- [CVE-2023-21478](https://insights.sbomify.com/CVE-2023-21478/): Other in Samsung Mobile Devices (medium 6.0)
- [CVE-2023-21477](https://insights.sbomify.com/CVE-2023-21477/): Memory corruption in Samsung Mobile Devices (high 7.9)
- [CVE-2023-21476](https://insights.sbomify.com/CVE-2023-21476/): Memory corruption in Samsung Mobile Devices (high 8.0)
- [CVE-2023-21475](https://insights.sbomify.com/CVE-2023-21475/): Memory corruption in Samsung Mobile Devices (high 8.0)
- [CVE-2023-21474](https://insights.sbomify.com/CVE-2023-21474/): Privilege escalation in Samsung Mobile Devices (medium 6.3)
- [CVE-2023-21473](https://insights.sbomify.com/CVE-2023-21473/): Other in Samsung Mobile Devices (medium 6.8)
- [CVE-2023-21472](https://insights.sbomify.com/CVE-2023-21472/): Other in Samsung Mobile Devices (medium 6.8)
- [CVE-2023-21471](https://insights.sbomify.com/CVE-2023-21471/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2023-21470](https://insights.sbomify.com/CVE-2023-21470/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2023-2147](https://insights.sbomify.com/CVE-2023-2147/): Campcodes Online Thesis Archiving System view_details.php sql injection (medium 6.3)
- [CVE-2023-21469](https://insights.sbomify.com/CVE-2023-21469/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2023-21468](https://insights.sbomify.com/CVE-2023-21468/): Missing authorization in Samsung Mobile Devices (medium 5.9)
- [CVE-2023-21467](https://insights.sbomify.com/CVE-2023-21467/): Auth bypass in Samsung Mobile Devices (medium 4.6)
- [CVE-2023-21466](https://insights.sbomify.com/CVE-2023-21466/): Missing authorization in Samsung Mobile Devices (medium 5.3)
- [CVE-2023-21465](https://insights.sbomify.com/CVE-2023-21465/): Missing authorization in Bixby Touch (medium 5.5)
- [CVE-2023-21464](https://insights.sbomify.com/CVE-2023-21464/): Missing authorization in Samsung Calendar (medium 4.0)
- [CVE-2023-21463](https://insights.sbomify.com/CVE-2023-21463/): Missing authorization in MyFiles (medium 4.0)
- [CVE-2023-21462](https://insights.sbomify.com/CVE-2023-21462/): Information disclosure in Quick Share Agent (medium 4.2)
- [CVE-2023-21461](https://insights.sbomify.com/CVE-2023-21461/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2023-21460](https://insights.sbomify.com/CVE-2023-21460/): Auth bypass in Samsung Mobile Devices (medium 4.4)
- [CVE-2023-2146](https://insights.sbomify.com/CVE-2023-2146/): Campcodes Online Thesis Archiving System Master.php sql injection (medium 6.3)
- [CVE-2023-21459](https://insights.sbomify.com/CVE-2023-21459/): Use after free in Samsung Mobile Devices (medium 5.0)
- [CVE-2023-21458](https://insights.sbomify.com/CVE-2023-21458/): Privilege escalation in Samsung Mobile Devices (medium 6.2)
- [CVE-2023-21457](https://insights.sbomify.com/CVE-2023-21457/): Missing authorization in Samsung Mobile Devices (medium 4.1)
- [CVE-2023-21456](https://insights.sbomify.com/CVE-2023-21456/): Path traversal in Samsung Mobile Devices (critical 9.0)
- [CVE-2023-21455](https://insights.sbomify.com/CVE-2023-21455/): Auth bypass in Samsung Mobile Devices (medium 5.9)
- [CVE-2023-21454](https://insights.sbomify.com/CVE-2023-21454/): Missing authorization in Samsung Mobile Devices (low 2.4)
- [CVE-2023-21453](https://insights.sbomify.com/CVE-2023-21453/): Information disclosure in Samsung Mobile Devices (medium 6.0)
- [CVE-2023-21452](https://insights.sbomify.com/CVE-2023-21452/): Information disclosure in Samsung Mobile Devices (low 3.3)
- [CVE-2023-21451](https://insights.sbomify.com/CVE-2023-21451/): Memory corruption in Samsung Mobile Devices (medium 6.7)
- [CVE-2023-21450](https://insights.sbomify.com/CVE-2023-21450/): Missing authorization in One Hand Operation + (low 2.3)
- [CVE-2023-2145](https://insights.sbomify.com/CVE-2023-2145/): Campcodes Online Thesis Archiving System projects_per_curriculum.php sql injection (medium 6.3)
- [CVE-2023-21449](https://insights.sbomify.com/CVE-2023-21449/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2023-21448](https://insights.sbomify.com/CVE-2023-21448/): Path traversal in Samsung Cloud (medium 5.7)
- [CVE-2023-21447](https://insights.sbomify.com/CVE-2023-21447/): Missing authorization in Samsung Cloud (medium 4.0)
- [CVE-2023-21446](https://insights.sbomify.com/CVE-2023-21446/): Other in MyFiles (medium 6.2)
- [CVE-2023-21445](https://insights.sbomify.com/CVE-2023-21445/): Missing authorization in The patch adds proper access control to use explicit intent. (medium 5.5)
- [CVE-2023-21444](https://insights.sbomify.com/CVE-2023-21444/): Weak cryptography in Samsung Flow for PC (high 7.5)
- [CVE-2023-21443](https://insights.sbomify.com/CVE-2023-21443/): Weak cryptography in Samsung Flow for Android (high 7.5)
- [CVE-2023-21442](https://insights.sbomify.com/CVE-2023-21442/): Missing authorization in Runestone (medium 4.0)
- [CVE-2023-21441](https://insights.sbomify.com/CVE-2023-21441/): Security feature bypass in Routine (high 7.4)
- [CVE-2023-21440](https://insights.sbomify.com/CVE-2023-21440/): Missing authorization in Samsung Mobile Devices (medium 6.2)
- [CVE-2023-2144](https://insights.sbomify.com/CVE-2023-2144/): Campcodes Online Thesis Archiving System view_department.php sql injection (medium 6.3)
- [CVE-2023-21439](https://insights.sbomify.com/CVE-2023-21439/): Other in Samsung Mobile Devices (high 8.5)
- [CVE-2023-21438](https://insights.sbomify.com/CVE-2023-21438/): Security feature bypass in Samsung Mobile Devices (low 2.1)
- [CVE-2023-21437](https://insights.sbomify.com/CVE-2023-21437/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2023-21436](https://insights.sbomify.com/CVE-2023-21436/): Information disclosure in Samsung Mobile Devices (low 3.3)
- [CVE-2023-21435](https://insights.sbomify.com/CVE-2023-21435/): Information disclosure in Samsung Mobile Devices (medium 4.4)
- [CVE-2023-21434](https://insights.sbomify.com/CVE-2023-21434/): Cross-site scripting in Galaxy Store (medium 6.2)
- [CVE-2023-21433](https://insights.sbomify.com/CVE-2023-21433/): Missing authorization in Galaxy Store (high 7.8)
- [CVE-2023-21432](https://insights.sbomify.com/CVE-2023-21432/): Missing authorization in Smart Things (medium 4.2)
- [CVE-2023-21431](https://insights.sbomify.com/CVE-2023-21431/): Other in Bixby Vision (low 3.3)
- [CVE-2023-21430](https://insights.sbomify.com/CVE-2023-21430/): Memory corruption in Samsung Mobile Devices (medium 4.4)
- [CVE-2023-2143](https://insights.sbomify.com/CVE-2023-2143/): Enable SVG, WebP & ICO Upload <= 1.0.3 - Author+ Stored XSS (medium 5.4)
- [CVE-2023-21429](https://insights.sbomify.com/CVE-2023-21429/): Information disclosure in Samsung Mobile Devices (medium 4.0)
- [CVE-2023-21428](https://insights.sbomify.com/CVE-2023-21428/): Other in Samsung Mobile Devices (medium 4.0)
- [CVE-2023-21427](https://insights.sbomify.com/CVE-2023-21427/): Missing authorization in Samsung Mobile Devices (medium 5.4)
- [CVE-2023-21426](https://insights.sbomify.com/CVE-2023-21426/): Hardcoded credentials in Samsung Mobile Devices (medium 4.3)
- [CVE-2023-21425](https://insights.sbomify.com/CVE-2023-21425/): Missing authorization in Samsung Mobile Devices (medium 4.3)
- [CVE-2023-21424](https://insights.sbomify.com/CVE-2023-21424/): Missing authorization in Samsung Mobile Devices (medium 5.1)
- [CVE-2023-21423](https://insights.sbomify.com/CVE-2023-21423/): Missing authorization in Samsung Mobile Devices (medium 5.1)
- [CVE-2023-21422](https://insights.sbomify.com/CVE-2023-21422/): Missing authorization in Samsung Mobile Devices (medium 5.7)
- [CVE-2023-21421](https://insights.sbomify.com/CVE-2023-21421/): Missing authorization in Samsung Mobile Devices (medium 5.9)
- [CVE-2023-21420](https://insights.sbomify.com/CVE-2023-21420/): Memory corruption in Samsung Mobile Devices (high 7.3)
- [CVE-2023-2142](https://insights.sbomify.com/CVE-2023-2142/): Nunjucks autoescape bypass leads to cross site scripting (medium 6.1)
- [CVE-2023-21419](https://insights.sbomify.com/CVE-2023-21419/): Auth bypass in Samsung Mobile Devices (medium 4.3)
- [CVE-2023-21418](https://insights.sbomify.com/CVE-2023-21418/): Path traversal in AXIS OS (high 7.1)
- [CVE-2023-21417](https://insights.sbomify.com/CVE-2023-21417/): Path traversal in AXIS OS (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/398/