# Vulnerabilities published in 2023


- [CVE-2023-20525](https://insights.sbomify.com/CVE-2023-20525/): Memory corruption in 2nd Gen EPYC (medium 6.5)
- [CVE-2023-20524](https://insights.sbomify.com/CVE-2023-20524/): Memory corruption in 2nd Gen AMD EPYC™ (high 7.5)
- [CVE-2023-20523](https://insights.sbomify.com/CVE-2023-20523/): Race condition in 2nd Gen EPYC (medium 5.7)
- [CVE-2023-20522](https://insights.sbomify.com/CVE-2023-20522/): Denial of service in 2nd Gen EPYC (high 7.5)
- [CVE-2023-20521](https://insights.sbomify.com/CVE-2023-20521/): Race condition in 1st Gen AMD EPYC™ Processors (low 3.3)
- [CVE-2023-20520](https://insights.sbomify.com/CVE-2023-20520/): Memory corruption in 1st Gen AMD EPYC™ (critical 9.8)
- [CVE-2023-2052](https://insights.sbomify.com/CVE-2023-2052/): Campcodes Advanced Online Voting System ballot_down.php sql injection (medium 6.3)
- [CVE-2023-20519](https://insights.sbomify.com/CVE-2023-20519/): Use after free in 3rd Gen AMD EPYC™ Processors (low 3.3)
- [CVE-2023-20518](https://insights.sbomify.com/CVE-2023-20518/): Information disclosure in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics (low 1.9)
- [CVE-2023-20516](https://insights.sbomify.com/CVE-2023-20516/): Privilege escalation in AMD Instinct™ MI210 (low 3.3)
- [CVE-2023-20515](https://insights.sbomify.com/CVE-2023-20515/): Memory corruption in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics (medium 5.7)
- [CVE-2023-20514](https://insights.sbomify.com/CVE-2023-20514/): Memory corruption in AMD Radeon™ PRO V620 (high 8.7)
- [CVE-2023-20513](https://insights.sbomify.com/CVE-2023-20513/): Memory corruption in AMD Radeon™ PRO W6000 Series Graphics Cards (low 3.3)
- [CVE-2023-20512](https://insights.sbomify.com/CVE-2023-20512/): Hardcoded credentials in AMD Radeon™ PRO W6000 Series Graphics Cards (low 1.9)
- [CVE-2023-20511](https://insights.sbomify.com/CVE-2023-20511/): Memory corruption in AMD Radeon™ Instinct™ MI25 Graphics Products (medium 6.4)
- [CVE-2023-20510](https://insights.sbomify.com/CVE-2023-20510/): Memory corruption in AMD Radeon™ PRO W6000 Series Graphics Cards (medium 4.7)
- [CVE-2023-2051](https://insights.sbomify.com/CVE-2023-2051/): Campcodes Advanced Online Voting System positions_row.php sql injection (medium 6.3)
- [CVE-2023-20509](https://insights.sbomify.com/CVE-2023-20509/): Memory corruption in AMD Radeon™ PRO W6000 Series Graphics Cards (medium 5.2)
- [CVE-2023-20508](https://insights.sbomify.com/CVE-2023-20508/): Memory corruption in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics (medium 5.0)
- [CVE-2023-20507](https://insights.sbomify.com/CVE-2023-20507/): Integer overflow in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics (low 2.3)
- [CVE-2023-2050](https://insights.sbomify.com/CVE-2023-2050/): Campcodes Advanced Online Voting System positions_add.php sql injection (medium 6.3)
- [CVE-2023-2049](https://insights.sbomify.com/CVE-2023-2049/): Campcodes Advanced Online Voting System ballot_up.php sql injection (medium 6.3)
- [CVE-2023-2048](https://insights.sbomify.com/CVE-2023-2048/): Campcodes Advanced Online Voting System voters_row.php sql injection (medium 6.3)
- [CVE-2023-2047](https://insights.sbomify.com/CVE-2023-2047/): Campcodes Advanced Online Voting System login.php sql injection (medium 6.3)
- [CVE-2023-2046](https://insights.sbomify.com/CVE-2023-2046/): SQLi in Yontem Vehicle TrackingSsystem (critical 9.8)
- [CVE-2023-2045](https://insights.sbomify.com/CVE-2023-2045/): SQLi in Ipekyolu Software's Auto Damage Tracking Software (critical 9.8)
- [CVE-2023-2044](https://insights.sbomify.com/CVE-2023-2044/): Control iD iDSecure Dispositivos Page cross site scripting (low 3.5)
- [CVE-2023-2043](https://insights.sbomify.com/CVE-2023-2043/): Control iD RHiD Edit a sql injection (medium 6.3)
- [CVE-2023-2042](https://insights.sbomify.com/CVE-2023-2042/): DataGear JDBC Server deserialization (medium 5.3)
- [CVE-2023-2041](https://insights.sbomify.com/CVE-2023-2041/): novel-plus sql injection (medium 6.3)
- [CVE-2023-2040](https://insights.sbomify.com/CVE-2023-2040/): novel-plus sql injection (medium 6.3)
- [CVE-2023-2039](https://insights.sbomify.com/CVE-2023-2039/): novel-plus sql injection (medium 6.3)
- [CVE-2023-2038](https://insights.sbomify.com/CVE-2023-2038/): Campcodes Video Sharing Website admin_class.php sql injection (medium 6.3)
- [CVE-2023-2037](https://insights.sbomify.com/CVE-2023-2037/): Campcodes Video Sharing Website watch.php sql injection (medium 6.3)
- [CVE-2023-2036](https://insights.sbomify.com/CVE-2023-2036/): Campcodes Video Sharing Website upload.php sql injection (medium 6.3)
- [CVE-2023-2035](https://insights.sbomify.com/CVE-2023-2035/): Campcodes Video Sharing Website signup.php sql injection (medium 6.3)
- [CVE-2023-2034](https://insights.sbomify.com/CVE-2023-2034/): Unrestricted Upload of File with Dangerous Type in froxlor/froxlor (critical 9.1)
- [CVE-2023-2033](https://insights.sbomify.com/CVE-2023-2033/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2023-2032](https://insights.sbomify.com/CVE-2023-2032/): Custom 404 Pro < 3.8.1 - Multiple SQL Injection (critical 9.8)
- [CVE-2023-2031](https://insights.sbomify.com/CVE-2023-2031/): Locatoraid Store Locator <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 5.4)
- [CVE-2023-2030](https://insights.sbomify.com/CVE-2023-2030/): Improper Verification of Cryptographic Signature in GitLab (low 3.5)
- [CVE-2023-2029](https://insights.sbomify.com/CVE-2023-2029/): PrePost SEO <= 3.0 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2023-2028](https://insights.sbomify.com/CVE-2023-2028/): Call Now Accessibility Button < 1.1 - Admin+ Stored Cross Site Scripting (medium 4.8)
- [CVE-2023-20275](https://insights.sbomify.com/CVE-2023-20275/): Security feature bypass in Cisco Adaptive Security Appliance (ASA) Software (medium 4.1)
- [CVE-2023-20274](https://insights.sbomify.com/CVE-2023-20274/): Privilege escalation in Cisco AppDynamics (medium 6.3)
- [CVE-2023-20273](https://insights.sbomify.com/CVE-2023-20273/): Cisco IOS XE Web UI Command Injection (high 7.2, exploited in the wild)
- [CVE-2023-20272](https://insights.sbomify.com/CVE-2023-20272/): File upload in Cisco Identity Services Engine Software (medium 6.7)
- [CVE-2023-20271](https://insights.sbomify.com/CVE-2023-20271/): SQL injection in Cisco Evolved Programmable Network Manager (EPNM) (medium 6.5)
- [CVE-2023-20270](https://insights.sbomify.com/CVE-2023-20270/): Denial of service in Cisco Firepower Threat Defense Software (medium 5.8)
- [CVE-2023-2027](https://insights.sbomify.com/CVE-2023-2027/): ZM Ajax Login & Register <= 2.0.2 - Authentication Bypass (critical 9.8)
- [CVE-2023-20269](https://insights.sbomify.com/CVE-2023-20269/): Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access (medium 5.0, exploited in the wild)
- [CVE-2023-20268](https://insights.sbomify.com/CVE-2023-20268/): Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability (medium 4.7)
- [CVE-2023-20267](https://insights.sbomify.com/CVE-2023-20267/): Security feature bypass in Cisco Firepower Threat Defense Software (medium 4.0)
- [CVE-2023-20266](https://insights.sbomify.com/CVE-2023-20266/): Privilege escalation in Cisco Emergency Responder (medium 6.5)
- [CVE-2023-20265](https://insights.sbomify.com/CVE-2023-20265/): Cross-site scripting in Cisco IP Phones with Multiplatform Firmware (medium 5.5)
- [CVE-2023-20264](https://insights.sbomify.com/CVE-2023-20264/): Open redirect in Cisco Adaptive Security Appliance (ASA) Software (medium 6.1)
- [CVE-2023-20263](https://insights.sbomify.com/CVE-2023-20263/): Open redirect in Cisco HyperFlex HX Data Platform (medium 4.7)
- [CVE-2023-20262](https://insights.sbomify.com/CVE-2023-20262/): Denial of service in Cisco SD-WAN Solution (medium 5.3)
- [CVE-2023-20261](https://insights.sbomify.com/CVE-2023-20261/): Path traversal in Cisco SD-WAN vManage (medium 6.5)
- [CVE-2023-20260](https://insights.sbomify.com/CVE-2023-20260/): Command injection in Cisco Evolved Programmable Network Manager (EPNM) (medium 6.0)
- [CVE-2023-2026](https://insights.sbomify.com/CVE-2023-2026/): Image Protector <= 1.1 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2023-20259](https://insights.sbomify.com/CVE-2023-20259/): Denial of service in Cisco Emergency Responder (high 8.6)
- [CVE-2023-20258](https://insights.sbomify.com/CVE-2023-20258/): Deserialization in Cisco Prime Infrastructure (medium 6.5)
- [CVE-2023-20257](https://insights.sbomify.com/CVE-2023-20257/): Cross-site scripting in Cisco Evolved Programmable Network Manager (EPNM) (medium 4.8)
- [CVE-2023-20256](https://insights.sbomify.com/CVE-2023-20256/): Security feature bypass in Cisco Adaptive Security Appliance (ASA) Software (medium 5.0)
- [CVE-2023-20255](https://insights.sbomify.com/CVE-2023-20255/): Denial of service in Cisco Meeting Server (medium 5.3)
- [CVE-2023-20254](https://insights.sbomify.com/CVE-2023-20254/): Auth bypass in Cisco SD-WAN vManage (high 7.2)
- [CVE-2023-20253](https://insights.sbomify.com/CVE-2023-20253/): Missing authorization in Cisco SD-WAN vManage (high 7.1)
- [CVE-2023-20252](https://insights.sbomify.com/CVE-2023-20252/): Auth bypass in Cisco SD-WAN vManage (critical 9.8)
- [CVE-2023-20251](https://insights.sbomify.com/CVE-2023-20251/): Denial of service in Cisco Mobility Express (medium 6.1)
- [CVE-2023-20250](https://insights.sbomify.com/CVE-2023-20250/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 6.5)
- [CVE-2023-2025](https://insights.sbomify.com/CVE-2023-2025/): Exposure of Sensitive Information in OpenBlue Enterprise Manager Data Collector (medium 5.0)
- [CVE-2023-20249](https://insights.sbomify.com/CVE-2023-20249/): Cross-site scripting in Cisco TelePresence Management Suite (TMS) (medium 5.4)
- [CVE-2023-20248](https://insights.sbomify.com/CVE-2023-20248/): Cross-site scripting in Cisco TelePresence Management Suite (TMS) (medium 5.4)
- [CVE-2023-20247](https://insights.sbomify.com/CVE-2023-20247/): Auth bypass in Cisco Adaptive Security Appliance (ASA) Software (medium 5.0)
- [CVE-2023-20246](https://insights.sbomify.com/CVE-2023-20246/): Security feature bypass in Cisco Firepower Threat Defense Software (medium 5.8)
- [CVE-2023-20245](https://insights.sbomify.com/CVE-2023-20245/): Security feature bypass in Cisco Adaptive Security Appliance (ASA) Software (medium 5.8)
- [CVE-2023-20244](https://insights.sbomify.com/CVE-2023-20244/): Denial of service in Cisco Firepower Threat Defense Software (high 8.6)
- [CVE-2023-20243](https://insights.sbomify.com/CVE-2023-20243/): Denial of service in Cisco Identity Services Engine Software (high 8.6)
- [CVE-2023-20242](https://insights.sbomify.com/CVE-2023-20242/): Cross-site scripting in Cisco Unified Communications Manager (medium 4.8)
- [CVE-2023-20241](https://insights.sbomify.com/CVE-2023-20241/): Memory corruption in Cisco Secure Client (medium 5.5)
- [CVE-2023-20240](https://insights.sbomify.com/CVE-2023-20240/): Memory corruption in Cisco Secure Client (medium 5.5)
- [CVE-2023-2024](https://insights.sbomify.com/CVE-2023-2024/): Improper Authentication for OpenBlue Enterprise Manager Data Collector (critical 10.0)
- [CVE-2023-20238](https://insights.sbomify.com/CVE-2023-20238/): Auth bypass in Cisco BroadWorks (critical 10.0)
- [CVE-2023-20237](https://insights.sbomify.com/CVE-2023-20237/): Server-side request forgery in Cisco Intersight Virtual Appliance (medium 4.3)
- [CVE-2023-20236](https://insights.sbomify.com/CVE-2023-20236/): Security feature bypass in Cisco IOS XR Software (medium 6.7)
- [CVE-2023-20235](https://insights.sbomify.com/CVE-2023-20235/): Privilege escalation in Cisco IOS XE Software (medium 6.5)
- [CVE-2023-20234](https://insights.sbomify.com/CVE-2023-20234/): Path traversal in Cisco Adaptive Security Appliance (ASA) Software (medium 4.4)
- [CVE-2023-20233](https://insights.sbomify.com/CVE-2023-20233/): Null dereference in Cisco IOS XR Software (medium 4.3)
- [CVE-2023-20232](https://insights.sbomify.com/CVE-2023-20232/): Open redirect in Cisco Unified Contact Center Express (medium 5.3)
- [CVE-2023-20231](https://insights.sbomify.com/CVE-2023-20231/): Command injection in Cisco IOS XE Software (high 8.8)
- [CVE-2023-20230](https://insights.sbomify.com/CVE-2023-20230/): Missing authorization in Cisco Application Policy Infrastructure Controller (APIC) (medium 5.4)
- [CVE-2023-2023](https://insights.sbomify.com/CVE-2023-2023/): Custom 404 Pro < 3.7.3 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2023-20229](https://insights.sbomify.com/CVE-2023-20229/): Path traversal in Cisco Duo Device Health Application (high 7.1)
- [CVE-2023-20228](https://insights.sbomify.com/CVE-2023-20228/): Cross-site scripting in Cisco Identity Services Engine Software (medium 6.1)
- [CVE-2023-20227](https://insights.sbomify.com/CVE-2023-20227/): Denial of service in Cisco IOS XE Software (high 8.6)
- [CVE-2023-20226](https://insights.sbomify.com/CVE-2023-20226/): Denial of service in Cisco IOS XE Software (high 8.6)
- [CVE-2023-20224](https://insights.sbomify.com/CVE-2023-20224/): Command injection in Cisco ThousandEyes Recorder Application (high 7.8)
- [CVE-2023-20223](https://insights.sbomify.com/CVE-2023-20223/): Missing authorization in Cisco Digital Network Architecture Center (DNA Center) (high 8.6)
- [CVE-2023-20222](https://insights.sbomify.com/CVE-2023-20222/): Cross-site scripting in Cisco Evolved Programmable Network Manager (EPNM) (medium 4.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/408/