Researchers identify 23 vulnerabilities, some of which can exploited with no authentication.