# Vulnerabilities published in 2023


- [CVE-2023-6037](https://insights.sbomify.com/CVE-2023-6037/): WP TripAdvisor Review Slider < 11.9 - Admin+ Stored XSS (medium 4.8)
- [CVE-2023-6036](https://insights.sbomify.com/CVE-2023-6036/): Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass (critical 9.8)
- [CVE-2023-6035](https://insights.sbomify.com/CVE-2023-6035/): EazyDocs < 2.3.4 - Subscriber + SQLi (high 8.8)
- [CVE-2023-6033](https://insights.sbomify.com/CVE-2023-6033/): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (high 8.7)
- [CVE-2023-6032](https://insights.sbomify.com/CVE-2023-6032/): Path traversal in Galaxy VL (medium 5.3)
- [CVE-2023-6030](https://insights.sbomify.com/CVE-2023-6030/): LogDash Activity Log < 1.1.4 - Unauthenticated SQLi (medium 5.4)
- [CVE-2023-6029](https://insights.sbomify.com/CVE-2023-6029/): EazyDocs < 2.3.6 - Unauthenticated Arbitrary Posts Deletion and Document Management (high 7.5)
- [CVE-2023-6028](https://insights.sbomify.com/CVE-2023-6028/): SDM Web interface vulnerable to XSS (medium 6.1)
- [CVE-2023-6027](https://insights.sbomify.com/CVE-2023-6027/): Cross-site Scripting vulnerability in PHPMemcachedAdmin (medium 6.1)
- [CVE-2023-6026](https://insights.sbomify.com/CVE-2023-6026/): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in PHPMemcachedAdmin (critical 9.8)
- [CVE-2023-6023](https://insights.sbomify.com/CVE-2023-6023/): ModelDB Local File Include (high 8.6)
- [CVE-2023-6022](https://insights.sbomify.com/CVE-2023-6022/): Cross-Site Request Forgery (CSRF) in prefecthq/prefect (high 8.8)
- [CVE-2023-6021](https://insights.sbomify.com/CVE-2023-6021/): Ray Log File Local File Include (high 7.5)
- [CVE-2023-6020](https://insights.sbomify.com/CVE-2023-6020/): Ray Static File Local File Include (high 7.5)
- [CVE-2023-6019](https://insights.sbomify.com/CVE-2023-6019/): Ray Command Injection in cpu_profile Parameter (critical 9.8)
- [CVE-2023-6018](https://insights.sbomify.com/CVE-2023-6018/): MLflow Arbitrary File Write (critical 10.0)
- [CVE-2023-6017](https://insights.sbomify.com/CVE-2023-6017/): H2O S3 Bucket Takeover (high 8.7)
- [CVE-2023-6016](https://insights.sbomify.com/CVE-2023-6016/): H2O Remote Code Execution via POJO Model Import (critical 10.0)
- [CVE-2023-6015](https://insights.sbomify.com/CVE-2023-6015/): MLflow Arbitrary File Upload (critical 10.0)
- [CVE-2023-6014](https://insights.sbomify.com/CVE-2023-6014/): MLflow Authentication Bypass (critical 9.1)
- [CVE-2023-6013](https://insights.sbomify.com/CVE-2023-6013/): H2O Local File Include (critical 9.3)
- [CVE-2023-6012](https://insights.sbomify.com/CVE-2023-6012/): Incorrect input data validation in Lanaccess ONSAFE MonitorHM Web Console (high 8.3)
- [CVE-2023-6011](https://insights.sbomify.com/CVE-2023-6011/): Stored XSS in Geodi (medium 5.4)
- [CVE-2023-6009](https://insights.sbomify.com/CVE-2023-6009/): UserPro <= 5.1.4 - Authenticated (Subscriber+) Privilege Escalation (high 8.8)
- [CVE-2023-6008](https://insights.sbomify.com/CVE-2023-6008/): UserPro <= 5.1.1 - Cross-Site Request Forgery via multiple functions (medium 6.3)
- [CVE-2023-6007](https://insights.sbomify.com/CVE-2023-6007/): UserPro <= 5.1.1 - Missing Authorization via multiple functions (high 7.3)
- [CVE-2023-6006](https://insights.sbomify.com/CVE-2023-6006/): Privilege Escalation Vulnerability (high 7.8)
- [CVE-2023-6005](https://insights.sbomify.com/CVE-2023-6005/): EventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2023-6004](https://insights.sbomify.com/CVE-2023-6004/): Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname (medium 4.8)
- [CVE-2023-6002](https://insights.sbomify.com/CVE-2023-6002/): Log Injection (medium 6.5)
- [CVE-2023-6001](https://insights.sbomify.com/CVE-2023-6001/): Prometheus Metrics Accessible Pre-Authentication (medium 5.3)
- [CVE-2023-6000](https://insights.sbomify.com/CVE-2023-6000/): Popup Builder < 4.2.3 - Unauthenticated Stored XSS (medium 6.1)
- [CVE-2023-5998](https://insights.sbomify.com/CVE-2023-5998/): Out-of-bounds Read in gpac/gpac (medium 4.0)
- [CVE-2023-5997](https://insights.sbomify.com/CVE-2023-5997/): Use after free in Chrome (high 8.8)
- [CVE-2023-5996](https://insights.sbomify.com/CVE-2023-5996/): Use after free in Chrome (high 8.8)
- [CVE-2023-5995](https://insights.sbomify.com/CVE-2023-5995/): Incorrect Authorization in GitLab (medium 4.4)
- [CVE-2023-5993](https://insights.sbomify.com/CVE-2023-5993/): Privilege Escalation in SafeNet Authentication Client Installer (high 7.8)
- [CVE-2023-5992](https://insights.sbomify.com/CVE-2023-5992/): Opensc: side-channel leaks while stripping encryption pkcs#1 padding (medium 5.6)
- [CVE-2023-5991](https://insights.sbomify.com/CVE-2023-5991/): Hotel Booking Lite < 4.8.5 - Unauthenticated Arbitrary File Download & Deletion (critical 9.8)
- [CVE-2023-5990](https://insights.sbomify.com/CVE-2023-5990/): Funnelforms Free < 3.4.2 - Form Deletion/Duplication via CSRF (medium 6.5)
- [CVE-2023-5989](https://insights.sbomify.com/CVE-2023-5989/): Stored XSS in Uyumsoft ERP (medium 6.1)
- [CVE-2023-5988](https://insights.sbomify.com/CVE-2023-5988/): Reflected XSS in Uyumsoft ERP (medium 6.1)
- [CVE-2023-5987](https://insights.sbomify.com/CVE-2023-5987/): Cross-site scripting in EcoStruxure Power Monitoring Expert (PME) (medium 6.1)
- [CVE-2023-5986](https://insights.sbomify.com/CVE-2023-5986/): Open redirect in EcoStruxure Power Monitoring Expert (PME) (high 8.2)
- [CVE-2023-5985](https://insights.sbomify.com/CVE-2023-5985/): Cross-site scripting in ION8650 (medium 4.8)
- [CVE-2023-5984](https://insights.sbomify.com/CVE-2023-5984/): Security feature bypass in ION8650 (high 7.2)
- [CVE-2023-5983](https://insights.sbomify.com/CVE-2023-5983/): Information Disclosure in Botanik Software Pharmacy Automation (high 7.5)
- [CVE-2023-5982](https://insights.sbomify.com/CVE-2023-5982/): UpdraftPlus <= 1.23.10 - Cross-Site Request Forgery to Google Drive Storage Update (medium 5.4)
- [CVE-2023-5981](https://insights.sbomify.com/CVE-2023-5981/): Gnutls: timing side-channel in the rsa-psk authentication (medium 5.9)
- [CVE-2023-5980](https://insights.sbomify.com/CVE-2023-5980/): BSK Forms Blacklist < 3.7 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2023-5979](https://insights.sbomify.com/CVE-2023-5979/): eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF (medium 6.5)
- [CVE-2023-5978](https://insights.sbomify.com/CVE-2023-5978/): Incorrect libcap_net limitation list manipulation (high 7.5)
- [CVE-2023-5976](https://insights.sbomify.com/CVE-2023-5976/): Improper Access Control in microweber/microweber (medium 4.6)
- [CVE-2023-5975](https://insights.sbomify.com/CVE-2023-5975/): ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Plugin Settings Change via ajax (medium 4.3)
- [CVE-2023-5974](https://insights.sbomify.com/CVE-2023-5974/): WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery (critical 9.8)
- [CVE-2023-5973](https://insights.sbomify.com/CVE-2023-5973/): Truncated port name (medium 4.3)
- [CVE-2023-5972](https://insights.sbomify.com/CVE-2023-5972/): Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c (high 7.0)
- [CVE-2023-5971](https://insights.sbomify.com/CVE-2023-5971/): Save as PDF < 3.2.0 - Admin+ Stored XSS (medium 4.8)
- [CVE-2023-5970](https://insights.sbomify.com/CVE-2023-5970/): Auth bypass in SMA100 (high 8.8)
- [CVE-2023-5969](https://insights.sbomify.com/CVE-2023-5969/): Denial of Service via Link Preview in /api/v4/redirect_location (medium 5.3)
- [CVE-2023-5968](https://insights.sbomify.com/CVE-2023-5968/): Password hash in response body after username update (medium 4.9)
- [CVE-2023-5967](https://insights.sbomify.com/CVE-2023-5967/): Denial of Service via crashing the Calls Plugin (medium 4.3)
- [CVE-2023-5966](https://insights.sbomify.com/CVE-2023-5966/): Unrestricted Upload of File with Dangerous Type in EspoCRM (medium 4.7)
- [CVE-2023-5965](https://insights.sbomify.com/CVE-2023-5965/): Unrestricted Upload of File with Dangerous Type in EspoCRM (medium 4.7)
- [CVE-2023-5964](https://insights.sbomify.com/CVE-2023-5964/): 1E-Exchange-DisplayMessage instruction allows for arbitrary code execution (critical 9.9)
- [CVE-2023-5963](https://insights.sbomify.com/CVE-2023-5963/): Allocation of Resources Without Limits or Throttling in GitLab (low 3.1)
- [CVE-2023-5962](https://insights.sbomify.com/CVE-2023-5962/): ioLogik E1200 Series: Weak Cryptographic Algorithm Vulnerability (medium 6.5)
- [CVE-2023-5961](https://insights.sbomify.com/CVE-2023-5961/): ioLogik E1200 Series: Cross-Site Request Forgery (CSRF) Vulnerability (high 8.8)
- [CVE-2023-5960](https://insights.sbomify.com/CVE-2023-5960/): Privilege escalation in USG FLEX series firmware (medium 5.5)
- [CVE-2023-5959](https://insights.sbomify.com/CVE-2023-5959/): Byzoro Smart S85F Management Platform login.php password recovery (medium 4.3)
- [CVE-2023-5958](https://insights.sbomify.com/CVE-2023-5958/): POST SMTP Mailer < 2.7.1 - Unauthenticated Cross-site Scripting (medium 6.1)
- [CVE-2023-5957](https://insights.sbomify.com/CVE-2023-5957/): Ni Purchase Order(PO) For WooCommerce <= 1.2.1 - Admin+ File Upload to Remote Code Execution (high 7.2)
- [CVE-2023-5956](https://insights.sbomify.com/CVE-2023-5956/): Wp-Adv-Quiz <= 1.0.2 - Admin+ Stored XSS in Quiz Overview (medium 4.8)
- [CVE-2023-5955](https://insights.sbomify.com/CVE-2023-5955/): Contact Form Email < 1.3.44 - Editor+ Stored Cross-Site Scripting (medium 6.1)
- [CVE-2023-5954](https://insights.sbomify.com/CVE-2023-5954/): Vault Requests Triggering Policy Checks May Lead To Unbounded Memory Consumption (medium 5.9)
- [CVE-2023-5953](https://insights.sbomify.com/CVE-2023-5953/): Welcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File Upload (high 8.8)
- [CVE-2023-5952](https://insights.sbomify.com/CVE-2023-5952/): Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object Injection (critical 9.8)
- [CVE-2023-5951](https://insights.sbomify.com/CVE-2023-5951/): Welcart e-Commerce < 2.9.5 - Reflected XSS (medium 6.1)
- [CVE-2023-5950](https://insights.sbomify.com/CVE-2023-5950/): Rapid7 Velociraptor Reflected XSS (high 8.6)
- [CVE-2023-5949](https://insights.sbomify.com/CVE-2023-5949/): SmartCrawl WordPress SEO checker < 3.8.3 - Unauthenticated Password Protected Post Disclosure (high 7.5)
- [CVE-2023-5948](https://insights.sbomify.com/CVE-2023-5948/): Improper Authorization in teamamaze/amazefileutilities (high 8.2)
- [CVE-2023-5946](https://insights.sbomify.com/CVE-2023-5946/): Cross-site scripting in Digirisk (medium 6.1)
- [CVE-2023-5945](https://insights.sbomify.com/CVE-2023-5945/): Cross-site request forgery in video carousel slider with lightbox (medium 4.3)
- [CVE-2023-5944](https://insights.sbomify.com/CVE-2023-5944/): Delta Electronics DOPSoft Stack-based Buffer Overflow (high 7.8)
- [CVE-2023-5943](https://insights.sbomify.com/CVE-2023-5943/): Wp-Adv-Quiz < 1.0.3 - Admin+ Stored XSS (medium 4.8)
- [CVE-2023-5942](https://insights.sbomify.com/CVE-2023-5942/): Medialist < 1.4.1 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-5941](https://insights.sbomify.com/CVE-2023-5941/): libc stdio buffer overflow (critical 9.8)
- [CVE-2023-5940](https://insights.sbomify.com/CVE-2023-5940/): WP Not Login Hide <= 1.0 - Admin+ Stored XSS (medium 4.8)
- [CVE-2023-5939](https://insights.sbomify.com/CVE-2023-5939/): rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE (high 7.2)
- [CVE-2023-5938](https://insights.sbomify.com/CVE-2023-5938/): Path traversal via 'zip slip' in Arc before v1.6.0 (high 8.9)
- [CVE-2023-5937](https://insights.sbomify.com/CVE-2023-5937/): Sensitive data exfiltration via unsafe permissions on Windows systems in Arc before v1.6.0 (medium 5.2)
- [CVE-2023-5936](https://insights.sbomify.com/CVE-2023-5936/): Unsafe temporary data privileges on Unix systems in Arc before v1.6.0 (high 7.3)
- [CVE-2023-5935](https://insights.sbomify.com/CVE-2023-5935/): Missing authentication for local web interface in Arc before v1.6.0 (high 7.3)
- [CVE-2023-5934](https://insights.sbomify.com/CVE-2023-5934/): Travelpayouts < 1.1.13 - Settings Update via CSRF (high 7.3)
- [CVE-2023-5933](https://insights.sbomify.com/CVE-2023-5933/): Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab (medium 6.4)
- [CVE-2023-5932](https://insights.sbomify.com/CVE-2023-5932/): Travelpayouts < 1.1.14 - Reflected XSS (medium 4.8)
- [CVE-2023-5931](https://insights.sbomify.com/CVE-2023-5931/): rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE (high 8.8)
- [CVE-2023-5930](https://insights.sbomify.com/CVE-2023-5930/): Campcodes Simple Student Information System manage_academic.php cross site scripting (low 3.5)
- [CVE-2023-5929](https://insights.sbomify.com/CVE-2023-5929/): Campcodes Simple Student Information System manage_academic.php sql injection (medium 5.5)
- [CVE-2023-5928](https://insights.sbomify.com/CVE-2023-5928/): Campcodes Simple Student Information System manage_department.php sql injection (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/135/