# Vulnerabilities published in 2023


- [CVE-2023-51620](https://insights.sbomify.com/CVE-2023-51620/): D-Link DIR-X3260 prog.cgi SetIPv6PppoeSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-5162](https://insights.sbomify.com/CVE-2023-5162/): Options for Twenty Seventeen <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-51619](https://insights.sbomify.com/CVE-2023-51619/): D-Link DIR-X3260 prog.cgi SetMyDLinkRegistration Stack-based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-51618](https://insights.sbomify.com/CVE-2023-51618/): D-Link DIR-X3260 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-51617](https://insights.sbomify.com/CVE-2023-51617/): D-Link DIR-X3260 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-51616](https://insights.sbomify.com/CVE-2023-51616/): D-Link DIR-X3260 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-51615](https://insights.sbomify.com/CVE-2023-51615/): D-Link DIR-X3260 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-51614](https://insights.sbomify.com/CVE-2023-51614/): D-Link DIR-X3260 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-51613](https://insights.sbomify.com/CVE-2023-51613/): D-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-51612](https://insights.sbomify.com/CVE-2023-51612/): Kofax Power PDF JP2 File Parsing Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-51611](https://insights.sbomify.com/CVE-2023-51611/): Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-51610](https://insights.sbomify.com/CVE-2023-51610/): Kofax Power PDF JP2 File Parsing Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-5161](https://insights.sbomify.com/CVE-2023-5161/): Modal Window <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-51609](https://insights.sbomify.com/CVE-2023-51609/): Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-51608](https://insights.sbomify.com/CVE-2023-51608/): Kofax Power PDF J2K File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-51607](https://insights.sbomify.com/CVE-2023-51607/): Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-51606](https://insights.sbomify.com/CVE-2023-51606/): Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-51605](https://insights.sbomify.com/CVE-2023-51605/): Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-51604](https://insights.sbomify.com/CVE-2023-51604/): Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-51603](https://insights.sbomify.com/CVE-2023-51603/): Honeywell Saia PG5 Controls Suite CAB File Parsing Directory Traversal Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-51602](https://insights.sbomify.com/CVE-2023-51602/): Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-51601](https://insights.sbomify.com/CVE-2023-51601/): Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-51600](https://insights.sbomify.com/CVE-2023-51600/): Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-5160](https://insights.sbomify.com/CVE-2023-5160/): Full name disclosure via team top membership with Show Full Name option disabled (medium 4.3)
- [CVE-2023-51599](https://insights.sbomify.com/CVE-2023-51599/): Honeywell Saia PG5 Controls Suite Directory Traversal Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-51598](https://insights.sbomify.com/CVE-2023-51598/): Hancom Office Word DOC File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.0)
- [CVE-2023-51597](https://insights.sbomify.com/CVE-2023-51597/): Kofax Power PDF U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-51596](https://insights.sbomify.com/CVE-2023-51596/): BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.1)
- [CVE-2023-51595](https://insights.sbomify.com/CVE-2023-51595/): Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-51594](https://insights.sbomify.com/CVE-2023-51594/): BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability (low 2.6)
- [CVE-2023-51593](https://insights.sbomify.com/CVE-2023-51593/): Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-51592](https://insights.sbomify.com/CVE-2023-51592/): BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.4)
- [CVE-2023-51591](https://insights.sbomify.com/CVE-2023-51591/): Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-51590](https://insights.sbomify.com/CVE-2023-51590/): Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-5159](https://insights.sbomify.com/CVE-2023-5159/): A User Manager role with user edit permissions could manage/update bots (low 3.8)
- [CVE-2023-51589](https://insights.sbomify.com/CVE-2023-51589/): BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.4)
- [CVE-2023-51588](https://insights.sbomify.com/CVE-2023-51588/): Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability (high 7.8)
- [CVE-2023-51587](https://insights.sbomify.com/CVE-2023-51587/): Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-51586](https://insights.sbomify.com/CVE-2023-51586/): Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-51585](https://insights.sbomify.com/CVE-2023-51585/): Voltronic Power ViewPower USBCommEx shutdown Command Injection Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-51584](https://insights.sbomify.com/CVE-2023-51584/): Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-51583](https://insights.sbomify.com/CVE-2023-51583/): Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-51582](https://insights.sbomify.com/CVE-2023-51582/): Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-51581](https://insights.sbomify.com/CVE-2023-51581/): Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-51580](https://insights.sbomify.com/CVE-2023-51580/): BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.4)
- [CVE-2023-5158](https://insights.sbomify.com/CVE-2023-5158/): Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c (medium 6.5)
- [CVE-2023-51579](https://insights.sbomify.com/CVE-2023-51579/): Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability (high 7.8)
- [CVE-2023-51578](https://insights.sbomify.com/CVE-2023-51578/): Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Denial-of-Service Vulnerability (high 7.5)
- [CVE-2023-51577](https://insights.sbomify.com/CVE-2023-51577/): Voltronic Power ViewPower setShutdown Exposed Dangerous Method Local Privilege Escalation Vulnerability (high 7.8)
- [CVE-2023-51576](https://insights.sbomify.com/CVE-2023-51576/): Voltronic Power ViewPower Deserialization of Untrusted Data Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-51575](https://insights.sbomify.com/CVE-2023-51575/): Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-51574](https://insights.sbomify.com/CVE-2023-51574/): Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2023-51573](https://insights.sbomify.com/CVE-2023-51573/): Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2023-51572](https://insights.sbomify.com/CVE-2023-51572/): Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-51571](https://insights.sbomify.com/CVE-2023-51571/): Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability (high 7.5)
- [CVE-2023-51570](https://insights.sbomify.com/CVE-2023-51570/): Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-5157](https://insights.sbomify.com/CVE-2023-5157/): Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6 (high 7.5)
- [CVE-2023-51569](https://insights.sbomify.com/CVE-2023-51569/): Kofax Power PDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-51568](https://insights.sbomify.com/CVE-2023-51568/): Kofax Power PDF OXPS File Parsing Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-51567](https://insights.sbomify.com/CVE-2023-51567/): Kofax Power PDF OXPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-51566](https://insights.sbomify.com/CVE-2023-51566/): Kofax Power PDF OXPS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-51565](https://insights.sbomify.com/CVE-2023-51565/): Kofax Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-51564](https://insights.sbomify.com/CVE-2023-51564/): Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-51563](https://insights.sbomify.com/CVE-2023-51563/): Kofax Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-51562](https://insights.sbomify.com/CVE-2023-51562/): Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-51561](https://insights.sbomify.com/CVE-2023-51561/): Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-51560](https://insights.sbomify.com/CVE-2023-51560/): Foxit PDF Reader Annotation Type Confusion Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-5156](https://insights.sbomify.com/CVE-2023-5156/): Glibc: dos due to memory leak in getaddrinfo.c (high 7.5)
- [CVE-2023-51559](https://insights.sbomify.com/CVE-2023-51559/): Foxit PDF Reader Doc Out-Of-Bounds Read Remote Code Execution Vulnerability (low 3.3)
- [CVE-2023-51558](https://insights.sbomify.com/CVE-2023-51558/): Foxit PDF Reader AcroForm Doc Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-51557](https://insights.sbomify.com/CVE-2023-51557/): Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-51556](https://insights.sbomify.com/CVE-2023-51556/): Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-51555](https://insights.sbomify.com/CVE-2023-51555/): Foxit PDF Reader Doc Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-51554](https://insights.sbomify.com/CVE-2023-51554/): Foxit PDF Reader Signature Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-51553](https://insights.sbomify.com/CVE-2023-51553/): Foxit PDF Reader Bookmark Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-51552](https://insights.sbomify.com/CVE-2023-51552/): Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-51551](https://insights.sbomify.com/CVE-2023-51551/): Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-51550](https://insights.sbomify.com/CVE-2023-51550/): Foxit PDF Reader combobox Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-5155](https://insights.sbomify.com/CVE-2023-5155/): SQLi in Utarit's Smart Deposit System (critical 9.8)
- [CVE-2023-51549](https://insights.sbomify.com/CVE-2023-51549/): Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-51548](https://insights.sbomify.com/CVE-2023-51548/): WordPress SlickNav Mobile Menu Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-51547](https://insights.sbomify.com/CVE-2023-51547/): WordPress Fluent Support Plugin <= 1.7.6 is vulnerable to SQL Injection (high 7.6)
- [CVE-2023-51546](https://insights.sbomify.com/CVE-2023-51546/): Privilege escalation in WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels (high 7.2)
- [CVE-2023-51545](https://insights.sbomify.com/CVE-2023-51545/): Deserialization in Job Manager & Career – Manage job board listings, and recruitments (critical 9.6)
- [CVE-2023-51544](https://insights.sbomify.com/CVE-2023-51544/): WordPress RegistrationMagic plugin <= 5.2.5.0 - Form Submission Limit Bypass vulnerability (medium 5.3)
- [CVE-2023-51543](https://insights.sbomify.com/CVE-2023-51543/): WordPress RegistrationMagic plugin <= 5.2.5.0 - IP Limit Bypass vulnerability (medium 5.3)
- [CVE-2023-51542](https://insights.sbomify.com/CVE-2023-51542/): WordPress Branda plugin <= 3.4.14 - IP Restriction Bypass vulnerability (medium 5.3)
- [CVE-2023-51541](https://insights.sbomify.com/CVE-2023-51541/): WordPress Stock Ticker Plugin <= 3.23.4 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2023-51540](https://insights.sbomify.com/CVE-2023-51540/): WordPress Custom 404 Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-5154](https://insights.sbomify.com/CVE-2023-5154/): D-Link DAR-8000 changelogo.php unrestricted upload (medium 6.3)
- [CVE-2023-51539](https://insights.sbomify.com/CVE-2023-51539/): WordPress Apollo13 Framework Extensions Plugin <= 1.9.1 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-51538](https://insights.sbomify.com/CVE-2023-51538/): WordPress Awesome Support Plugin <= 6.1.5 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-51537](https://insights.sbomify.com/CVE-2023-51537/): WordPress Awesome Support plugin <= 6.1.5 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2023-51536](https://insights.sbomify.com/CVE-2023-51536/): WordPress CRM Perks Forms Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-51535](https://insights.sbomify.com/CVE-2023-51535/): Cross-site request forgery in Spam protection, Anti-Spam, FireWall by CleanTalk (medium 4.3)
- [CVE-2023-51534](https://insights.sbomify.com/CVE-2023-51534/): WordPress Brave Popup Builder Plugin <= 0.6.2 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-51533](https://insights.sbomify.com/CVE-2023-51533/): WordPress Ecwid Shopping Cart Plugin <= 6.12.4 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-51532](https://insights.sbomify.com/CVE-2023-51532/): WordPress Icegram Plugin <= 3.1.19 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2023-51531](https://insights.sbomify.com/CVE-2023-51531/): WordPress Thrive Automator Plugin <= 1.17 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-51530](https://insights.sbomify.com/CVE-2023-51530/): WordPress GS Logo Slider Plugin <= 3.5.1 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/167/