# Vulnerabilities published in 2023


- [CVE-2023-21416](https://insights.sbomify.com/CVE-2023-21416/): Denial of service in AXIS OS (high 7.1)
- [CVE-2023-21415](https://insights.sbomify.com/CVE-2023-21415/): Path traversal in AXIS OS (medium 6.5)
- [CVE-2023-21414](https://insights.sbomify.com/CVE-2023-21414/): Security feature bypass in AXIS A8207-VE Mk II (high 7.1)
- [CVE-2023-21413](https://insights.sbomify.com/CVE-2023-21413/): Remote code execution vulnerability during the installation of ACAP applications on the Axis device (critical 9.1)
- [CVE-2023-21412](https://insights.sbomify.com/CVE-2023-21412/): Non-sanitized user input could lead to SQL injections in AXIS License Plate Verifier (high 7.2)
- [CVE-2023-21411](https://insights.sbomify.com/CVE-2023-21411/): Command injection in AXIS License Plate Verifier (high 7.2)
- [CVE-2023-21410](https://insights.sbomify.com/CVE-2023-21410/): Non-sanitized user input could lead to arbitrary code execution in AXIS License Plate Verifier (high 7.2)
- [CVE-2023-2141](https://insights.sbomify.com/CVE-2023-2141/): Unsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 2022 (high 8.5)
- [CVE-2023-21409](https://insights.sbomify.com/CVE-2023-21409/): Insufficient file permissions leak administrator-privileged credentials in AXIS License Verifier ACAP (high 8.4)
- [CVE-2023-21408](https://insights.sbomify.com/CVE-2023-21408/): Insufficient file permissions leak user credentials of 3rd party integration interfaces in AXIS License Verifier ACAP (high 8.4)
- [CVE-2023-21407](https://insights.sbomify.com/CVE-2023-21407/): Privilege escalation in AXIS License Plate Verifier ACAP (high 8.8)
- [CVE-2023-21406](https://insights.sbomify.com/CVE-2023-21406/): Heap-based buffer overflow in Axis A1001 Network Door Controller's OSDP communication (high 7.1)
- [CVE-2023-21405](https://insights.sbomify.com/CVE-2023-21405/): Denial-of-Service vulnerability in Axis Network Door Controller's and Axis Network Intercom's OSDP communication (medium 6.5)
- [CVE-2023-21404](https://insights.sbomify.com/CVE-2023-21404/): Hardcoded credentials in AXIS OS (medium 4.1)
- [CVE-2023-21403](https://insights.sbomify.com/CVE-2023-21403/): Memory corruption in Android (critical 9.8)
- [CVE-2023-21402](https://insights.sbomify.com/CVE-2023-21402/): Memory corruption in Android (critical 9.8)
- [CVE-2023-21401](https://insights.sbomify.com/CVE-2023-21401/): Integer overflow in Android (critical 9.8)
- [CVE-2023-21400](https://insights.sbomify.com/CVE-2023-21400/): Race condition in Android (medium 6.7)
- [CVE-2023-2140](https://insights.sbomify.com/CVE-2023-2140/): Server-Side Request Forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 2022 (high 7.5)
- [CVE-2023-21399](https://insights.sbomify.com/CVE-2023-21399/): Weak cryptography in Android (high 7.8)
- [CVE-2023-21398](https://insights.sbomify.com/CVE-2023-21398/): Privilege escalation in Android (high 7.8)
- [CVE-2023-21397](https://insights.sbomify.com/CVE-2023-21397/): Privilege escalation in Android (high 7.8)
- [CVE-2023-21396](https://insights.sbomify.com/CVE-2023-21396/): Privilege escalation in Android (high 7.8)
- [CVE-2023-21395](https://insights.sbomify.com/CVE-2023-21395/): Use after free in Android (medium 6.5)
- [CVE-2023-21394](https://insights.sbomify.com/CVE-2023-21394/): Missing authorization in Android (medium 5.5)
- [CVE-2023-21393](https://insights.sbomify.com/CVE-2023-21393/): Missing authorization in Android (high 7.8)
- [CVE-2023-21392](https://insights.sbomify.com/CVE-2023-21392/): Use after free in Android (high 8.8)
- [CVE-2023-21391](https://insights.sbomify.com/CVE-2023-21391/): Denial of service in Android (high 7.5)
- [CVE-2023-21390](https://insights.sbomify.com/CVE-2023-21390/): Privilege escalation in Android (high 7.8)
- [CVE-2023-2139](https://insights.sbomify.com/CVE-2023-2139/): Reflected Cross-site Scripting vulnerability affecting DELMIA Apriso Release 2017 through Release 2022 (medium 5.4)
- [CVE-2023-21389](https://insights.sbomify.com/CVE-2023-21389/): Missing authorization in Android (high 7.8)
- [CVE-2023-21388](https://insights.sbomify.com/CVE-2023-21388/): Missing authorization in Android (high 7.8)
- [CVE-2023-21387](https://insights.sbomify.com/CVE-2023-21387/): Information disclosure in Android (medium 4.4)
- [CVE-2023-21385](https://insights.sbomify.com/CVE-2023-21385/): Memory corruption in Android (medium 5.5)
- [CVE-2023-21384](https://insights.sbomify.com/CVE-2023-21384/): Privilege escalation in Android (medium 5.5)
- [CVE-2023-21383](https://insights.sbomify.com/CVE-2023-21383/): Information disclosure in Android (medium 5.5)
- [CVE-2023-21382](https://insights.sbomify.com/CVE-2023-21382/): Missing authorization in Android (medium 5.5)
- [CVE-2023-21381](https://insights.sbomify.com/CVE-2023-21381/): Use after free in Android (high 7.8)
- [CVE-2023-21380](https://insights.sbomify.com/CVE-2023-21380/): Memory corruption in Android (medium 6.7)
- [CVE-2023-2138](https://insights.sbomify.com/CVE-2023-2138/): Use of Hard-coded Credentials in nuxtlabs/github-module (critical 10.0)
- [CVE-2023-21379](https://insights.sbomify.com/CVE-2023-21379/): Memory corruption in Android (medium 4.4)
- [CVE-2023-21378](https://insights.sbomify.com/CVE-2023-21378/): Missing authorization in Android (high 7.8)
- [CVE-2023-21377](https://insights.sbomify.com/CVE-2023-21377/): Security feature bypass in Android (medium 5.5)
- [CVE-2023-21376](https://insights.sbomify.com/CVE-2023-21376/): Information disclosure in Android (medium 5.5)
- [CVE-2023-21375](https://insights.sbomify.com/CVE-2023-21375/): Integer overflow in Android (high 7.8)
- [CVE-2023-21374](https://insights.sbomify.com/CVE-2023-21374/): Security feature bypass in Android (high 7.8)
- [CVE-2023-21373](https://insights.sbomify.com/CVE-2023-21373/): Missing authorization in Android (high 7.8)
- [CVE-2023-21372](https://insights.sbomify.com/CVE-2023-21372/): Memory corruption in Android (high 7.8)
- [CVE-2023-21371](https://insights.sbomify.com/CVE-2023-21371/): Integer overflow in Android (medium 6.7)
- [CVE-2023-21370](https://insights.sbomify.com/CVE-2023-21370/): Integer overflow in Android (medium 6.7)
- [CVE-2023-2137](https://insights.sbomify.com/CVE-2023-2137/): Memory corruption in Chrome (high 8.8)
- [CVE-2023-21369](https://insights.sbomify.com/CVE-2023-21369/): Security feature bypass in Android (medium 5.5)
- [CVE-2023-21368](https://insights.sbomify.com/CVE-2023-21368/): Memory corruption in Android (medium 5.5)
- [CVE-2023-21367](https://insights.sbomify.com/CVE-2023-21367/): Memory corruption in Android (medium 5.5)
- [CVE-2023-21366](https://insights.sbomify.com/CVE-2023-21366/): Information disclosure in Android (medium 5.5)
- [CVE-2023-21365](https://insights.sbomify.com/CVE-2023-21365/): Denial of service in Android (medium 5.5)
- [CVE-2023-21364](https://insights.sbomify.com/CVE-2023-21364/): Denial of service in Android (medium 5.5)
- [CVE-2023-21362](https://insights.sbomify.com/CVE-2023-21362/): Denial of service in Android (medium 5.5)
- [CVE-2023-21361](https://insights.sbomify.com/CVE-2023-21361/): Use after free in Android (high 8.8)
- [CVE-2023-21360](https://insights.sbomify.com/CVE-2023-21360/): Memory corruption in Android (medium 6.7)
- [CVE-2023-2136](https://insights.sbomify.com/CVE-2023-2136/): Google Chrome Skia Integer Overflow (critical 9.6, exploited in the wild)
- [CVE-2023-21359](https://insights.sbomify.com/CVE-2023-21359/): Memory corruption in Android (medium 4.4)
- [CVE-2023-21358](https://insights.sbomify.com/CVE-2023-21358/): Weak cryptography in Android (high 7.8)
- [CVE-2023-21357](https://insights.sbomify.com/CVE-2023-21357/): Memory corruption in Android (medium 4.4)
- [CVE-2023-21356](https://insights.sbomify.com/CVE-2023-21356/): Memory corruption in Android (high 8.8)
- [CVE-2023-21355](https://insights.sbomify.com/CVE-2023-21355/): Use after free in Android (high 7.8)
- [CVE-2023-21354](https://insights.sbomify.com/CVE-2023-21354/): Information disclosure in Android (medium 5.5)
- [CVE-2023-21353](https://insights.sbomify.com/CVE-2023-21353/): Memory corruption in Android (high 7.5)
- [CVE-2023-21352](https://insights.sbomify.com/CVE-2023-21352/): Memory corruption in Android (medium 5.5)
- [CVE-2023-21351](https://insights.sbomify.com/CVE-2023-21351/): Privilege escalation in Android (high 7.7)
- [CVE-2023-21350](https://insights.sbomify.com/CVE-2023-21350/): Information disclosure in Android (medium 5.5)
- [CVE-2023-2135](https://insights.sbomify.com/CVE-2023-2135/): Use after free in Chrome (high 7.5)
- [CVE-2023-21349](https://insights.sbomify.com/CVE-2023-21349/): Information disclosure in Android (low 3.3)
- [CVE-2023-21348](https://insights.sbomify.com/CVE-2023-21348/): Information disclosure in Android (low 3.3)
- [CVE-2023-21347](https://insights.sbomify.com/CVE-2023-21347/): Memory corruption in Android (high 7.5)
- [CVE-2023-21346](https://insights.sbomify.com/CVE-2023-21346/): Information disclosure in Android (low 3.3)
- [CVE-2023-21345](https://insights.sbomify.com/CVE-2023-21345/): Information disclosure in Android (low 3.3)
- [CVE-2023-21344](https://insights.sbomify.com/CVE-2023-21344/): Information disclosure in Android (medium 5.5)
- [CVE-2023-21343](https://insights.sbomify.com/CVE-2023-21343/): Privilege escalation in Android (high 7.8)
- [CVE-2023-21342](https://insights.sbomify.com/CVE-2023-21342/): Privilege escalation in Android (high 7.8)
- [CVE-2023-21341](https://insights.sbomify.com/CVE-2023-21341/): Missing authorization in Android (high 7.8)
- [CVE-2023-21340](https://insights.sbomify.com/CVE-2023-21340/): Missing authorization in Android (medium 5.5)
- [CVE-2023-2134](https://insights.sbomify.com/CVE-2023-2134/): Memory corruption in Chrome (high 8.8)
- [CVE-2023-21339](https://insights.sbomify.com/CVE-2023-21339/): Denial of service in Android (high 7.5)
- [CVE-2023-21338](https://insights.sbomify.com/CVE-2023-21338/): Information disclosure in Android (medium 5.5)
- [CVE-2023-21337](https://insights.sbomify.com/CVE-2023-21337/): Information disclosure in Android (high 7.8)
- [CVE-2023-21336](https://insights.sbomify.com/CVE-2023-21336/): Information disclosure in Android (medium 5.5)
- [CVE-2023-21335](https://insights.sbomify.com/CVE-2023-21335/): Information disclosure in Android (medium 5.5)
- [CVE-2023-21334](https://insights.sbomify.com/CVE-2023-21334/): Information disclosure in Android (medium 5.5)
- [CVE-2023-21333](https://insights.sbomify.com/CVE-2023-21333/): Information disclosure in Android (medium 5.5)
- [CVE-2023-21332](https://insights.sbomify.com/CVE-2023-21332/): Information disclosure in Android (medium 5.5)
- [CVE-2023-21331](https://insights.sbomify.com/CVE-2023-21331/): Information disclosure in Android (medium 5.5)
- [CVE-2023-21330](https://insights.sbomify.com/CVE-2023-21330/): Information disclosure in Android (medium 5.5)
- [CVE-2023-2133](https://insights.sbomify.com/CVE-2023-2133/): Memory corruption in Chrome (high 8.8)
- [CVE-2023-21329](https://insights.sbomify.com/CVE-2023-21329/): Missing authorization in Android (medium 5.5)
- [CVE-2023-21328](https://insights.sbomify.com/CVE-2023-21328/): Missing authorization in Android (high 7.8)
- [CVE-2023-21327](https://insights.sbomify.com/CVE-2023-21327/): Information disclosure in Android (medium 5.5)
- [CVE-2023-21326](https://insights.sbomify.com/CVE-2023-21326/): Information disclosure in Android (medium 5.5)
- [CVE-2023-21325](https://insights.sbomify.com/CVE-2023-21325/): Information disclosure in Android (medium 5.5)
- [CVE-2023-21324](https://insights.sbomify.com/CVE-2023-21324/): Information disclosure in Android (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/399/