# Vulnerabilities published in 2023


- [CVE-2023-0225](https://insights.sbomify.com/CVE-2023-0225/): Missing authorization in Samba (medium 4.3)
- [CVE-2023-0224](https://insights.sbomify.com/CVE-2023-0224/): GiveWP < 2.24.1 - Unauthenticated SQLi (critical 9.8)
- [CVE-2023-0223](https://insights.sbomify.com/CVE-2023-0223/): Missing authorization in GitLab (medium 5.3)
- [CVE-2023-0221](https://insights.sbomify.com/CVE-2023-0221/): Privilege escalation in Application and Change Control (medium 4.4)
- [CVE-2023-0220](https://insights.sbomify.com/CVE-2023-0220/): Pinpoint Booking System < 2.9.9.2.9 - Subscriber+ SQLi (high 8.8)
- [CVE-2023-0219](https://insights.sbomify.com/CVE-2023-0219/): FluentSMTP < 2.2.3 - Stored XSS via Email Logs (medium 5.4)
- [CVE-2023-0217](https://insights.sbomify.com/CVE-2023-0217/): NULL dereference validating DSA public key (high 7.5)
- [CVE-2023-0216](https://insights.sbomify.com/CVE-2023-0216/): Invalid pointer dereference in d2i_PKCS7 functions (high 7.5)
- [CVE-2023-0215](https://insights.sbomify.com/CVE-2023-0215/): Use-after-free following BIO_new_NDEF (high 7.5)
- [CVE-2023-0214](https://insights.sbomify.com/CVE-2023-0214/): XSS in Skyhigh Security SWG (medium 6.1)
- [CVE-2023-0213](https://insights.sbomify.com/CVE-2023-0213/): Local Elevation of Privilege in M-Files (high 8.8)
- [CVE-2023-0212](https://insights.sbomify.com/CVE-2023-0212/): Advanced Recent Posts <= 0.6.14 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0210](https://insights.sbomify.com/CVE-2023-0210/): Memory corruption in Linux Kernel (high 7.5)
- [CVE-2023-0209](https://insights.sbomify.com/CVE-2023-0209/): Auth bypass in NVIDIA DGX servers (high 8.2)
- [CVE-2023-0208](https://insights.sbomify.com/CVE-2023-0208/): Memory corruption in DCGM (high 8.4)
- [CVE-2023-0207](https://insights.sbomify.com/CVE-2023-0207/): Other in NVIDIA DGX servers (high 7.5)
- [CVE-2023-0206](https://insights.sbomify.com/CVE-2023-0206/): Memory corruption in NVIDIA DGX servers (high 7.5)
- [CVE-2023-0205](https://insights.sbomify.com/CVE-2023-0205/): Missing authorization in NVIDIA ConnectX Firmware (medium 5.0)
- [CVE-2023-0204](https://insights.sbomify.com/CVE-2023-0204/): Denial of service in NVIDIA ConnectX Firmware (medium 6.5)
- [CVE-2023-0203](https://insights.sbomify.com/CVE-2023-0203/): Missing authorization in NVIDIA ConnectX Firmware (medium 5.0)
- [CVE-2023-0202](https://insights.sbomify.com/CVE-2023-0202/): Memory corruption in NVIDIA DGX servers (high 7.5)
- [CVE-2023-0201](https://insights.sbomify.com/CVE-2023-0201/): Memory corruption in NVIDIA DGX servers (medium 6.7)
- [CVE-2023-0200](https://insights.sbomify.com/CVE-2023-0200/): Memory corruption in NVIDIA DGX servers (high 7.5)
- [CVE-2023-0199](https://insights.sbomify.com/CVE-2023-0199/): Memory corruption in NVIDIA GPU Display Driver (medium 6.1)
- [CVE-2023-0198](https://insights.sbomify.com/CVE-2023-0198/): Memory corruption in vGPU software (guest driver - Linux), vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), , NVIDIA Cloud Gaming (guest driver - Linux), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM) (medium 6.6)
- [CVE-2023-0197](https://insights.sbomify.com/CVE-2023-0197/): Null dereference in vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM) (medium 5.5)
- [CVE-2023-0196](https://insights.sbomify.com/CVE-2023-0196/): Null dereference in NVIDIA CUDA Toolkit (low 3.3)
- [CVE-2023-0195](https://insights.sbomify.com/CVE-2023-0195/): Information disclosure in vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows) (low 2.0)
- [CVE-2023-0194](https://insights.sbomify.com/CVE-2023-0194/): Denial of service in vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows) (low 2.0)
- [CVE-2023-0193](https://insights.sbomify.com/CVE-2023-0193/): Memory corruption in NVIDIA CUDA Toolkit (medium 4.4)
- [CVE-2023-0192](https://insights.sbomify.com/CVE-2023-0192/): Privilege escalation in vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM) (medium 4.7)
- [CVE-2023-0191](https://insights.sbomify.com/CVE-2023-0191/): Memory corruption in vGPU software (guest driver - Windows), vGPU software (guest driver - Linux), vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Linux), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM) (high 7.1)
- [CVE-2023-0190](https://insights.sbomify.com/CVE-2023-0190/): Null dereference in NVIDIA GPU Display Driver (medium 5.5)
- [CVE-2023-0189](https://insights.sbomify.com/CVE-2023-0189/): Memory corruption in vGPU software (guest driver - Linux), NVIDIA Cloud Gaming (guest driver - Linux) (high 8.8)
- [CVE-2023-0188](https://insights.sbomify.com/CVE-2023-0188/): Memory corruption in vGPU software (guest driver - Windows), vGPU software (guest driver - Linux), vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Linux), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM) (medium 5.5)
- [CVE-2023-0187](https://insights.sbomify.com/CVE-2023-0187/): Memory corruption in vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows) (medium 6.1)
- [CVE-2023-0186](https://insights.sbomify.com/CVE-2023-0186/): Memory corruption in vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows) (medium 6.1)
- [CVE-2023-0185](https://insights.sbomify.com/CVE-2023-0185/): Integer overflow in vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM) (medium 6.7)
- [CVE-2023-0184](https://insights.sbomify.com/CVE-2023-0184/): Memory corruption in NVIDIA GPU Display Driver (high 8.8)
- [CVE-2023-0183](https://insights.sbomify.com/CVE-2023-0183/): Memory corruption in vGPU software (guest driver - Linux), vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (guest driver - Linux), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM) (high 7.1)
- [CVE-2023-0182](https://insights.sbomify.com/CVE-2023-0182/): Memory corruption in vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows) (high 7.8)
- [CVE-2023-0181](https://insights.sbomify.com/CVE-2023-0181/): Privilege escalation in vGPU software (guest driver - Windows), vGPU software (guest driver - Linux), vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Linux), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM) (high 7.1)
- [CVE-2023-0180](https://insights.sbomify.com/CVE-2023-0180/): Memory corruption in vGPU software (guest driver - Linux), vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (guest driver - Linux), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM) (high 7.1)
- [CVE-2023-0179](https://insights.sbomify.com/CVE-2023-0179/): Memory corruption in kernel (high 7.8)
- [CVE-2023-0178](https://insights.sbomify.com/CVE-2023-0178/): Annual Archive < 1.6.0 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0177](https://insights.sbomify.com/CVE-2023-0177/): Social Like Box and Page by WpDevArt < 0.8.41 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0176](https://insights.sbomify.com/CVE-2023-0176/): Giveaways and Contests by RafflePress < 1.11.3 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0175](https://insights.sbomify.com/CVE-2023-0175/): Smart Logo Showcase Lite <= 1.1.9 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0174](https://insights.sbomify.com/CVE-2023-0174/): WP VR < 8.2.7 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0173](https://insights.sbomify.com/CVE-2023-0173/): WPFunnels < 2.6.9 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0172](https://insights.sbomify.com/CVE-2023-0172/): Juicer < 1.11 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0171](https://insights.sbomify.com/CVE-2023-0171/): jQuery T(-) Countdown Widget < 2.3.24 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0170](https://insights.sbomify.com/CVE-2023-0170/): Html5 Audio Player < 2.1.12 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0169](https://insights.sbomify.com/CVE-2023-0169/): Zoho Forms < 3.0.1 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0168](https://insights.sbomify.com/CVE-2023-0168/): Olevmedia Shortcodes <= 1.1.9 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0167](https://insights.sbomify.com/CVE-2023-0167/): GetResponse for WordPress <= 5.5.31 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0166](https://insights.sbomify.com/CVE-2023-0166/): PickPlugins Product Slider for WooCommerce < 1.13.42 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0165](https://insights.sbomify.com/CVE-2023-0165/): Cost Calculator <= 1.8 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0164](https://insights.sbomify.com/CVE-2023-0164/): Command injection in OrangeScrum (high 8.8)
- [CVE-2023-0163](https://insights.sbomify.com/CVE-2023-0163/): Prototype Pollution in convict (high 8.4)
- [CVE-2023-0162](https://insights.sbomify.com/CVE-2023-0162/): CPO Companion <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting (medium 5.5)
- [CVE-2023-0160](https://insights.sbomify.com/CVE-2023-0160/): Possibility of deadlock in libbpf function sock_hash_delete_elem (medium 4.7)
- [CVE-2023-0159](https://insights.sbomify.com/CVE-2023-0159/): Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE (high 7.5)
- [CVE-2023-0158](https://insights.sbomify.com/CVE-2023-0158/): Triggered crash on direct RRDP access (high 7.5)
- [CVE-2023-0157](https://insights.sbomify.com/CVE-2023-0157/): All-In-One Security (AIOS) < 5.1.5 - Admin+ Stored XSS (medium 4.8)
- [CVE-2023-0156](https://insights.sbomify.com/CVE-2023-0156/): All-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via Traversal (medium 4.9)
- [CVE-2023-0155](https://insights.sbomify.com/CVE-2023-0155/): Open redirect in GitLab (medium 5.4)
- [CVE-2023-0154](https://insights.sbomify.com/CVE-2023-0154/): GamiPress – Vimeo integration < 1.0.9 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0153](https://insights.sbomify.com/CVE-2023-0153/): Vimeo Video Autoplay Automute <= 1.0 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0152](https://insights.sbomify.com/CVE-2023-0152/): WP Multi Store Locator <= 2.4 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0151](https://insights.sbomify.com/CVE-2023-0151/): uTubeVideo Gallery < 2.0.8 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0150](https://insights.sbomify.com/CVE-2023-0150/): Cloak Front End Email < 1.9.2 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0149](https://insights.sbomify.com/CVE-2023-0149/): WordPrezi < 0.9 - Contributor+ Strored XSS (medium 5.4)
- [CVE-2023-0148](https://insights.sbomify.com/CVE-2023-0148/): Gallery Factory Lite <= 2.0.0 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0147](https://insights.sbomify.com/CVE-2023-0147/): Flexible Captcha <= 4.1 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0146](https://insights.sbomify.com/CVE-2023-0146/): Naver Map <= 1.1.0 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0145](https://insights.sbomify.com/CVE-2023-0145/): Saan World Clock <= 1.8 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0144](https://insights.sbomify.com/CVE-2023-0144/): Event Manager and Tickets Selling Plugin for WooCommerce < 3.8.0 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-0143](https://insights.sbomify.com/CVE-2023-0143/): Send PDF for Contact Form 7 < 0.9.9.2 - Contributor+ Stored XSS via Shortcode (medium 5.4)
- [CVE-2023-0142](https://insights.sbomify.com/CVE-2023-0142/): Other in DiskStation Manager (DSM) (medium 6.5)
- [CVE-2023-0141](https://insights.sbomify.com/CVE-2023-0141/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2023-0140](https://insights.sbomify.com/CVE-2023-0140/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2023-0139](https://insights.sbomify.com/CVE-2023-0139/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2023-0138](https://insights.sbomify.com/CVE-2023-0138/): Memory corruption in Chrome (high 8.8)
- [CVE-2023-0137](https://insights.sbomify.com/CVE-2023-0137/): Memory corruption in Chrome (high 8.8)
- [CVE-2023-0136](https://insights.sbomify.com/CVE-2023-0136/): Security feature bypass in Chrome (high 8.8)
- [CVE-2023-0135](https://insights.sbomify.com/CVE-2023-0135/): Use after free in Chrome (high 8.8)
- [CVE-2023-0134](https://insights.sbomify.com/CVE-2023-0134/): Use after free in Chrome (high 8.8)
- [CVE-2023-0133](https://insights.sbomify.com/CVE-2023-0133/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2023-0132](https://insights.sbomify.com/CVE-2023-0132/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2023-0131](https://insights.sbomify.com/CVE-2023-0131/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2023-0130](https://insights.sbomify.com/CVE-2023-0130/): Other in Chrome (medium 6.5)
- [CVE-2023-0129](https://insights.sbomify.com/CVE-2023-0129/): Memory corruption in Chrome (high 8.8)
- [CVE-2023-0128](https://insights.sbomify.com/CVE-2023-0128/): Use after free in Chrome (high 8.8)
- [CVE-2023-0127](https://insights.sbomify.com/CVE-2023-0127/): Command injection in D-Link DWL-2600AP with firmware v4.2.0.17 (high 7.8)
- [CVE-2023-0126](https://insights.sbomify.com/CVE-2023-0126/): Path traversal in SonicWall SMA1000 (high 7.5)
- [CVE-2023-0125](https://insights.sbomify.com/CVE-2023-0125/): Control iD Gerencia Web Web Interface cross site scripting (low 2.4)
- [CVE-2023-0124](https://insights.sbomify.com/CVE-2023-0124/): CVE-2023-0124 (high 7.8)
- [CVE-2023-0123](https://insights.sbomify.com/CVE-2023-0123/): CVE-2023-0123 (high 7.8)
- [CVE-2023-0122](https://insights.sbomify.com/CVE-2023-0122/): Null dereference in Kernel (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/428/