# Vulnerabilities published in 2023 - [CVE-2023-51885](https://insights.sbomify.com/CVE-2023-51885/): Memory corruption in ctan:mathtex (critical 9.8) - [CVE-2023-5188](https://insights.sbomify.com/CVE-2023-5188/): WAGO Improper Input Validation in IEC61850 Server / Telecontrol (high 7.5) - [CVE-2023-5187](https://insights.sbomify.com/CVE-2023-5187/): Use after free in Chrome (high 8.8) - [CVE-2023-5186](https://insights.sbomify.com/CVE-2023-5186/): Use after free in Chrome (high 8.8) - [CVE-2023-5185](https://insights.sbomify.com/CVE-2023-5185/): Gym Management System Project v1.0 - Insecure File Upload (critical 9.1) - [CVE-2023-51847](https://insights.sbomify.com/CVE-2023-51847/): An issue in obgm and Libcoap v.a3ed466 allows a remote attacker to cause a denial of service via thecoap_context_t function in the src/coap_ (high 7.5) - [CVE-2023-51843](https://insights.sbomify.com/CVE-2023-51843/): Cross-site scripting in flatlogic:react dashboard (high 8.2) - [CVE-2023-51842](https://insights.sbomify.com/CVE-2023-51842/): MeshCentral algorithm-downgrade issue (high 7.5) - [CVE-2023-51840](https://insights.sbomify.com/CVE-2023-51840/): Hardcoded credentials in html-js:doracms (critical 9.8) - [CVE-2023-5184](https://insights.sbomify.com/CVE-2023-5184/): Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver (high 7.0) - [CVE-2023-51839](https://insights.sbomify.com/CVE-2023-51839/): DeviceFarmer stf uses DES-ECB (critical 9.1) - [CVE-2023-51838](https://insights.sbomify.com/CVE-2023-51838/): Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm. (high 7.5) - [CVE-2023-51837](https://insights.sbomify.com/CVE-2023-51837/): Ylianst MeshCentral Missing SSL Certificate Validation (critical 9.8) - [CVE-2023-51835](https://insights.sbomify.com/CVE-2023-51835/): Command injection in trendnet:tew-822dre firmware (medium 6.8) - [CVE-2023-51833](https://insights.sbomify.com/CVE-2023-51833/): Command injection in trendnet:tew-411brpplus firmware (high 8.1) - [CVE-2023-5183](https://insights.sbomify.com/CVE-2023-5183/): Authenticated RCE due to unsafe JSON deserialization (critical 9.9) - [CVE-2023-51828](https://insights.sbomify.com/CVE-2023-51828/): SQL injection in sigb:pmb (critical 9.8) - [CVE-2023-51820](https://insights.sbomify.com/CVE-2023-51820/): Code injection in blurams:lumi security camera a31c firmware (medium 6.8) - [CVE-2023-5182](https://insights.sbomify.com/CVE-2023-5182/): Information disclosure in subiquity (medium 5.5) - [CVE-2023-51813](https://insights.sbomify.com/CVE-2023-51813/): Cross-site request forgery in free and open source inventory management system project:free and open source inventory management system (medium 6.5) - [CVE-2023-51812](https://insights.sbomify.com/CVE-2023-51812/): Command injection in tenda:ax3 firmware (critical 9.8) - [CVE-2023-51810](https://insights.sbomify.com/CVE-2023-51810/): SQL injection in stackideas:easydiscuss (high 7.5) - [CVE-2023-5181](https://insights.sbomify.com/CVE-2023-5181/): WP Discord Invite < 2.5.2 - Admin+ Stored Cross Site Scripting (medium 4.8) - [CVE-2023-51807](https://insights.sbomify.com/CVE-2023-51807/): Cross-site scripting in ofcms project:ofcms (medium 5.4) - [CVE-2023-51806](https://insights.sbomify.com/CVE-2023-51806/): File upload in ujcms:ujcms (high 7.8) - [CVE-2023-51805](https://insights.sbomify.com/CVE-2023-51805/): SQL injection in tduckcloud:tduck-platform (high 8.1) - [CVE-2023-51804](https://insights.sbomify.com/CVE-2023-51804/): Server-side request forgery in rymcu:forest (high 7.5) - [CVE-2023-51803](https://insights.sbomify.com/CVE-2023-51803/): LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the "" substring. (critical 9.8) - [CVE-2023-51802](https://insights.sbomify.com/CVE-2023-51802/): Cross-site scripting in oretnom23:simple student attendance system (medium 6.1) - [CVE-2023-51801](https://insights.sbomify.com/CVE-2023-51801/): SQL injection in oretnom23:simple student attendance system (critical 9.8) - [CVE-2023-51800](https://insights.sbomify.com/CVE-2023-51800/): Cross-site scripting in school fees management system project:school fees management system1.0 (medium 6.1) - [CVE-2023-5180](https://insights.sbomify.com/CVE-2023-5180/): Out-of-bounds Write vulnerability exists in ODA Drawings SDK before 2024.12 (high 7.8) - [CVE-2023-51798](https://insights.sbomify.com/CVE-2023-51798/): Memory corruption in fedoraproject:fedora (high 7.8) - [CVE-2023-51797](https://insights.sbomify.com/CVE-2023-51797/): Memory corruption in fedoraproject:fedora (medium 6.7) - [CVE-2023-51796](https://insights.sbomify.com/CVE-2023-51796/): Memory corruption in fedoraproject:fedora (low 3.6) - [CVE-2023-51795](https://insights.sbomify.com/CVE-2023-51795/): Memory corruption in fedoraproject:fedora (high 8.0) - [CVE-2023-51794](https://insights.sbomify.com/CVE-2023-51794/): Memory corruption in ffmpeg:ffmpeg (high 7.8) - [CVE-2023-51793](https://insights.sbomify.com/CVE-2023-51793/): Memory corruption in ffmpeg:ffmpeg (high 7.8) - [CVE-2023-51792](https://insights.sbomify.com/CVE-2023-51792/): Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the (low 3.3) - [CVE-2023-51791](https://insights.sbomify.com/CVE-2023-51791/): Memory corruption in fedoraproject:fedora (high 7.8) - [CVE-2023-51790](https://insights.sbomify.com/CVE-2023-51790/): Cross-site scripting in piwigo:piwigo (medium 6.1) - [CVE-2023-5179](https://insights.sbomify.com/CVE-2023-5179/): Memory corruption in ODA Drawings SDK - All Versions < 2024.10 (high 7.8) - [CVE-2023-51787](https://insights.sbomify.com/CVE-2023-51787/): Denial of service in windriver:vxworks (high 7.5) - [CVE-2023-51786](https://insights.sbomify.com/CVE-2023-51786/): An issue was discovered in Lustre versions 2.13.x, 2.14.x, and 2.15.x before 2.15.4, allows attackers to escalate privileges and obtain sens (critical 9.1) - [CVE-2023-51785](https://insights.sbomify.com/CVE-2023-51785/): Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager (high 7.5) - [CVE-2023-51784](https://insights.sbomify.com/CVE-2023-51784/): Apache InLong: Remote Code Execution vulnerability in Apache InLong Manager (critical 9.8) - [CVE-2023-51782](https://insights.sbomify.com/CVE-2023-51782/): Use after free in debian:debian linux (high 7.0) - [CVE-2023-51781](https://insights.sbomify.com/CVE-2023-51781/): Use after free in debian:debian linux (high 7.0) - [CVE-2023-51780](https://insights.sbomify.com/CVE-2023-51780/): Use after free in debian:debian linux (high 7.0) - [CVE-2023-5178](https://insights.sbomify.com/CVE-2023-5178/): Kernel: use after free in nvmet_tcp_free_crypto in nvme (high 8.8) - [CVE-2023-51779](https://insights.sbomify.com/CVE-2023-51779/): bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_sock_ioctl race condition. (high 7.0) - [CVE-2023-51778](https://insights.sbomify.com/CVE-2023-51778/): Memory corruption in jungo:windriver (medium 5.5) - [CVE-2023-51777](https://insights.sbomify.com/CVE-2023-51777/): Denial of service in jungo:windriver (medium 5.5) - [CVE-2023-51776](https://insights.sbomify.com/CVE-2023-51776/): Privilege escalation in jungo:windriver (high 7.8) - [CVE-2023-51775](https://insights.sbomify.com/CVE-2023-51775/): jose4j denial of service via specifically crafted JWE (medium 6.5) - [CVE-2023-51774](https://insights.sbomify.com/CVE-2023-51774/): json-jwt allows bypass of identity checks via a sign/encryption confusion attack (high 8.4) - [CVE-2023-51773](https://insights.sbomify.com/CVE-2023-51773/): Memory corruption in bacnetstack:bacnet stack (critical 9.1) - [CVE-2023-51772](https://insights.sbomify.com/CVE-2023-51772/): Security feature bypass in oneidentity:password manager (high 8.8) - [CVE-2023-51771](https://insights.sbomify.com/CVE-2023-51771/): Memory corruption in starnight:micro http server (critical 9.8) - [CVE-2023-51770](https://insights.sbomify.com/CVE-2023-51770/): Apache DolphinScheduler: Arbitrary File Read Vulnerability (high 7.5) - [CVE-2023-5177](https://insights.sbomify.com/CVE-2023-5177/): Vrm 360 3D Model Viewer <= 1.2.1 - Full Path Disclosure (medium 5.3) - [CVE-2023-51769](https://insights.sbomify.com/CVE-2023-51769/): Cross-site scripting in Frappe (medium 6.1) - [CVE-2023-51767](https://insights.sbomify.com/CVE-2023-51767/): Auth bypass in fedoraproject:fedora (high 7.0) - [CVE-2023-51766](https://insights.sbomify.com/CVE-2023-51766/): Security feature bypass in debian:debian linux (medium 5.3) - [CVE-2023-51765](https://insights.sbomify.com/CVE-2023-51765/): Security feature bypass in freebsd:freebsd (medium 5.3) - [CVE-2023-51764](https://insights.sbomify.com/CVE-2023-51764/): Security feature bypass in fedoraproject:fedora (medium 5.3) - [CVE-2023-51763](https://insights.sbomify.com/CVE-2023-51763/): ActiveAdmin CSV Injection leading to sensitive information disclosure (critical 9.8) - [CVE-2023-51761](https://insights.sbomify.com/CVE-2023-51761/): Emerson Rosemount GC370XA, GC700XA, GC1500XA Improper Authentication (high 8.3) - [CVE-2023-5176](https://insights.sbomify.com/CVE-2023-5176/): Memory corruption in Firefox (critical 9.8) - [CVE-2023-51751](https://insights.sbomify.com/CVE-2023-51751/): Security feature bypass in scalefusion:scalefusion (high 7.3) - [CVE-2023-51750](https://insights.sbomify.com/CVE-2023-51750/): Security feature bypass in scalefusion:scalefusion (medium 4.6) - [CVE-2023-5175](https://insights.sbomify.com/CVE-2023-5175/): Use after free in Firefox (critical 9.8) - [CVE-2023-51749](https://insights.sbomify.com/CVE-2023-51749/): Security feature bypass in scalefusion:scalefusion (high 8.8) - [CVE-2023-51748](https://insights.sbomify.com/CVE-2023-51748/): Security feature bypass in scalefusion:scalefusion (high 8.8) - [CVE-2023-51747](https://insights.sbomify.com/CVE-2023-51747/): SMTP smuggling in Apache James (high 7.1) - [CVE-2023-51746](https://insights.sbomify.com/CVE-2023-51746/): Memory corruption in JT2Go (high 7.8) - [CVE-2023-51745](https://insights.sbomify.com/CVE-2023-51745/): Memory corruption in JT2Go (high 7.8) - [CVE-2023-51744](https://insights.sbomify.com/CVE-2023-51744/): Null dereference in JT2Go (low 3.3) - [CVE-2023-51743](https://insights.sbomify.com/CVE-2023-51743/): Buffer Overflow vulnerability in Skyworth Router (medium 6.5) - [CVE-2023-51742](https://insights.sbomify.com/CVE-2023-51742/): Buffer Overflow vulnerability in Skyworth Router (medium 6.5) - [CVE-2023-51741](https://insights.sbomify.com/CVE-2023-51741/): Cleartext Submission of Password vulnerability in Skyworth Router (high 7.5) - [CVE-2023-51740](https://insights.sbomify.com/CVE-2023-51740/): Cleartext Submission of Password vulnerability in Skyworth Router (high 7.5) - [CVE-2023-5174](https://insights.sbomify.com/CVE-2023-5174/): Use after free in Firefox (critical 9.8) - [CVE-2023-51739](https://insights.sbomify.com/CVE-2023-51739/): Stored Cross Site Scripting Vulnerability in Skyworth Router (medium 6.9) - [CVE-2023-51738](https://insights.sbomify.com/CVE-2023-51738/): Stored Cross Site Scripting Vulnerability in Skyworth Router (medium 6.9) - [CVE-2023-51737](https://insights.sbomify.com/CVE-2023-51737/): Stored Cross Site Scripting Vulnerability in Skyworth Router (medium 6.9) - [CVE-2023-51736](https://insights.sbomify.com/CVE-2023-51736/): Stored Cross Site Scripting Vulnerability in Skyworth Router (medium 6.9) - [CVE-2023-51735](https://insights.sbomify.com/CVE-2023-51735/): Stored Cross Site Scripting Vulnerability in Skyworth Router (medium 6.9) - [CVE-2023-51734](https://insights.sbomify.com/CVE-2023-51734/): Stored Cross Site Scripting Vulnerability in Skyworth Router (medium 6.9) - [CVE-2023-51733](https://insights.sbomify.com/CVE-2023-51733/): Stored Cross Site Scripting Vulnerability in Skyworth Router (medium 6.9) - [CVE-2023-51732](https://insights.sbomify.com/CVE-2023-51732/): Stored Cross Site Scripting Vulnerability in Skyworth Router (medium 6.9) - [CVE-2023-51731](https://insights.sbomify.com/CVE-2023-51731/): Stored Cross Site Scripting Vulnerability in Skyworth Router (medium 6.9) - [CVE-2023-51730](https://insights.sbomify.com/CVE-2023-51730/): Stored Cross Site Scripting Vulnerability in Skyworth Router (medium 6.9) - [CVE-2023-5173](https://insights.sbomify.com/CVE-2023-5173/): Integer overflow in Firefox (high 7.5) - [CVE-2023-51729](https://insights.sbomify.com/CVE-2023-51729/): Stored Cross Site Scripting Vulnerability in Skyworth Router (medium 6.9) - [CVE-2023-51728](https://insights.sbomify.com/CVE-2023-51728/): Stored Cross Site Scripting Vulnerability in Skyworth Router (medium 6.9) - [CVE-2023-51727](https://insights.sbomify.com/CVE-2023-51727/): Stored Cross Site Scripting Vulnerability in Skyworth Router (medium 6.9) - [CVE-2023-51726](https://insights.sbomify.com/CVE-2023-51726/): Stored Cross Site Scripting Vulnerability in Skyworth Router (medium 6.9) - [CVE-2023-51725](https://insights.sbomify.com/CVE-2023-51725/): Stored Cross Site Scripting Vulnerability in Skyworth Router (medium 6.9) - [CVE-2023-51724](https://insights.sbomify.com/CVE-2023-51724/): Stored Cross Site Scripting Vulnerability in Skyworth Router (medium 6.9) --- From sbomify Insights: https://insights.sbomify.com/years/2023/page/165/