# Vulnerabilities published in 2023


- [CVE-2023-51084](https://insights.sbomify.com/CVE-2023-51084/): hyavijava stack overflow vulnerability (critical 9.8)
- [CVE-2023-51080](https://insights.sbomify.com/CVE-2023-51080/): hutool-core was discovered to contain a stack overflow via NumberUtil.toBigDecimal method (high 7.5)
- [CVE-2023-5108](https://insights.sbomify.com/CVE-2023-5108/): Easy Newsletter Signups <= 1.0.4 - Admin+ SQLi (high 7.2)
- [CVE-2023-51079](https://insights.sbomify.com/CVE-2023-51079/): mvel2 TimeOut error exists in the ParseTools.subCompileExpression method (medium 5.3)
- [CVE-2023-51075](https://insights.sbomify.com/CVE-2023-51075/): hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function (high 7.5)
- [CVE-2023-51074](https://insights.sbomify.com/CVE-2023-51074/): json-path Out-of-bounds Write vulnerability (medium 5.3)
- [CVE-2023-51073](https://insights.sbomify.com/CVE-2023-51073/): Command injection in buffalo:ls210d firmware (high 8.1)
- [CVE-2023-51072](https://insights.sbomify.com/CVE-2023-51072/): Cross-site scripting in nagios:nagios xi (medium 5.4)
- [CVE-2023-51071](https://insights.sbomify.com/CVE-2023-51071/): Missing authorization in qstar:archive storage manager (medium 6.5)
- [CVE-2023-51070](https://insights.sbomify.com/CVE-2023-51070/): Missing authorization in qstar:archive storage manager (high 7.5)
- [CVE-2023-51068](https://insights.sbomify.com/CVE-2023-51068/): Cross-site scripting in qstar:archive storage manager (medium 5.4)
- [CVE-2023-51067](https://insights.sbomify.com/CVE-2023-51067/): Cross-site scripting in qstar:archive storage manager (medium 6.1)
- [CVE-2023-51066](https://insights.sbomify.com/CVE-2023-51066/): Code injection in qstar:archive storage manager (high 8.8)
- [CVE-2023-51065](https://insights.sbomify.com/CVE-2023-51065/): Missing authorization in qstar:archive storage manager (high 7.5)
- [CVE-2023-51064](https://insights.sbomify.com/CVE-2023-51064/): Cross-site scripting in qstar:archive storage manager (medium 6.1)
- [CVE-2023-51063](https://insights.sbomify.com/CVE-2023-51063/): Cross-site scripting in qstar:archive storage manager (high 8.8)
- [CVE-2023-51062](https://insights.sbomify.com/CVE-2023-51062/): Missing authorization in qstar:archive storage manager (medium 5.3)
- [CVE-2023-5106](https://insights.sbomify.com/CVE-2023-5106/): Incorrect Authorization in GitLab (high 8.2)
- [CVE-2023-51059](https://insights.sbomify.com/CVE-2023-51059/): Privilege escalation in mokosmart:mkgw1 gateway firmware (high 8.8)
- [CVE-2023-51052](https://insights.sbomify.com/CVE-2023-51052/): SQL injection in s-cms:s-cms (critical 9.8)
- [CVE-2023-51051](https://insights.sbomify.com/CVE-2023-51051/): SQL injection in s-cms:s-cms (critical 9.8)
- [CVE-2023-51050](https://insights.sbomify.com/CVE-2023-51050/): SQL injection in s-cms:s-cms (critical 9.8)
- [CVE-2023-5105](https://insights.sbomify.com/CVE-2023-5105/): Frontend File Manager < 22.6 - Editor+ Arbitrary File Download (medium 6.5)
- [CVE-2023-51049](https://insights.sbomify.com/CVE-2023-51049/): SQL injection in s-cms:s-cms (critical 9.8)
- [CVE-2023-51048](https://insights.sbomify.com/CVE-2023-51048/): SQL injection in s-cms:s-cms (critical 9.8)
- [CVE-2023-51043](https://insights.sbomify.com/CVE-2023-51043/): Use after free in linux:linux kernel (high 7.0)
- [CVE-2023-51042](https://insights.sbomify.com/CVE-2023-51042/): Use after free in linux:linux kernel (high 7.8)
- [CVE-2023-5104](https://insights.sbomify.com/CVE-2023-5104/): Improper Input Validation in nocodb/nocodb (medium 5.7)
- [CVE-2023-51035](https://insights.sbomify.com/CVE-2023-51035/): Command injection in totolink:ex1200l firmware (critical 9.8)
- [CVE-2023-51034](https://insights.sbomify.com/CVE-2023-51034/): File upload in totolink:ex1200l firmware (high 8.8)
- [CVE-2023-51033](https://insights.sbomify.com/CVE-2023-51033/): Command injection in totolink:ex1200l firmware (critical 9.8)
- [CVE-2023-5103](https://insights.sbomify.com/CVE-2023-5103/): Other in APU0200 (medium 4.3)
- [CVE-2023-51028](https://insights.sbomify.com/CVE-2023-51028/): Command injection in totolink:ex1800t firmware (critical 9.8)
- [CVE-2023-51027](https://insights.sbomify.com/CVE-2023-51027/): Command injection in totolink:ex1800t firmware (critical 9.8)
- [CVE-2023-51026](https://insights.sbomify.com/CVE-2023-51026/): Command injection in totolink:ex1800t firmware (critical 9.8)
- [CVE-2023-51025](https://insights.sbomify.com/CVE-2023-51025/): Command injection in totolink:ex1800t firmware (high 8.8)
- [CVE-2023-51024](https://insights.sbomify.com/CVE-2023-51024/): Command injection in totolink:ex1800t firmware (critical 9.8)
- [CVE-2023-51023](https://insights.sbomify.com/CVE-2023-51023/): Command injection in totolink:ex1800t firmware (critical 9.8)
- [CVE-2023-51022](https://insights.sbomify.com/CVE-2023-51022/): Command injection in totolink:ex1800t firmware (critical 9.8)
- [CVE-2023-51021](https://insights.sbomify.com/CVE-2023-51021/): Command injection in totolink:ex1800t firmware (critical 9.8)
- [CVE-2023-51020](https://insights.sbomify.com/CVE-2023-51020/): Command injection in totolink:ex1800t firmware (critical 9.8)
- [CVE-2023-5102](https://insights.sbomify.com/CVE-2023-5102/): Security feature bypass in APU0200 (medium 5.3)
- [CVE-2023-51019](https://insights.sbomify.com/CVE-2023-51019/): Command injection in totolink:ex1800t firmware (critical 9.8)
- [CVE-2023-51018](https://insights.sbomify.com/CVE-2023-51018/): Command injection in totolink:ex1800t firmware (critical 9.8)
- [CVE-2023-51017](https://insights.sbomify.com/CVE-2023-51017/): Command injection in totolink:ex1800t firmware (critical 9.8)
- [CVE-2023-51016](https://insights.sbomify.com/CVE-2023-51016/): Command injection in totolink:ex1800t firmware (critical 9.8)
- [CVE-2023-51015](https://insights.sbomify.com/CVE-2023-51015/): Command injection in totolink:ex1800t firmware (critical 9.8)
- [CVE-2023-51014](https://insights.sbomify.com/CVE-2023-51014/): Command injection in totolink:ex1800t firmware (high 8.8)
- [CVE-2023-51013](https://insights.sbomify.com/CVE-2023-51013/): Command injection in totolink:ex1800t firmware (critical 9.8)
- [CVE-2023-51012](https://insights.sbomify.com/CVE-2023-51012/): Command injection in totolink:ex1800t firmware (critical 9.8)
- [CVE-2023-51011](https://insights.sbomify.com/CVE-2023-51011/): Command injection in totolink:ex1800t firmware (critical 9.8)
- [CVE-2023-51010](https://insights.sbomify.com/CVE-2023-51010/): Open redirect in qd-metro:qingdao metro (medium 5.3)
- [CVE-2023-5101](https://insights.sbomify.com/CVE-2023-5101/): Information disclosure in APU0200 (medium 5.3)
- [CVE-2023-51006](https://insights.sbomify.com/CVE-2023-51006/): Path traversal in zhwnl:chinese perpetual calendar (high 7.5)
- [CVE-2023-5100](https://insights.sbomify.com/CVE-2023-5100/): Information disclosure in APU0200 (medium 5.9)
- [CVE-2023-50993](https://insights.sbomify.com/CVE-2023-50993/): Command injection in ruijie:rg-ws6008 firmware (critical 9.8)
- [CVE-2023-50992](https://insights.sbomify.com/CVE-2023-50992/): Memory corruption in tenda:i29 firmware (critical 9.8)
- [CVE-2023-50991](https://insights.sbomify.com/CVE-2023-50991/): Memory corruption in tenda:i29 firmware (high 7.5)
- [CVE-2023-50990](https://insights.sbomify.com/CVE-2023-50990/): Memory corruption in tenda:i29 firmware (critical 9.8)
- [CVE-2023-5099](https://insights.sbomify.com/CVE-2023-5099/): HTML filter and csv-file search <= 2.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode (high 8.8)
- [CVE-2023-50989](https://insights.sbomify.com/CVE-2023-50989/): Command injection in tenda:i29 firmware (critical 9.8)
- [CVE-2023-50988](https://insights.sbomify.com/CVE-2023-50988/): Memory corruption in tenda:i29 firmware (critical 9.8)
- [CVE-2023-50987](https://insights.sbomify.com/CVE-2023-50987/): Memory corruption in tenda:i29 firmware (critical 9.8)
- [CVE-2023-50986](https://insights.sbomify.com/CVE-2023-50986/): Memory corruption in tenda:i29 firmware (high 8.8)
- [CVE-2023-50985](https://insights.sbomify.com/CVE-2023-50985/): Memory corruption in tenda:i29 firmware (critical 9.8)
- [CVE-2023-50984](https://insights.sbomify.com/CVE-2023-50984/): Memory corruption in tenda:i29 firmware (critical 9.8)
- [CVE-2023-50983](https://insights.sbomify.com/CVE-2023-50983/): Command injection in tenda:i29 firmware (critical 9.8)
- [CVE-2023-50982](https://insights.sbomify.com/CVE-2023-50982/): File upload in studip:stud.ip (critical 9.0)
- [CVE-2023-50981](https://insights.sbomify.com/CVE-2023-50981/): Denial of service in cryptopp:crypto\+\+ (high 7.5)
- [CVE-2023-50980](https://insights.sbomify.com/CVE-2023-50980/): Denial of service in cryptopp:crypto\+\+ (high 7.5)
- [CVE-2023-5098](https://insights.sbomify.com/CVE-2023-5098/): Campaign Monitor Forms < 2.5.6 - Subscriber+ Arbitrary Options Update (high 8.1)
- [CVE-2023-50979](https://insights.sbomify.com/CVE-2023-50979/): Weak cryptography in cryptopp:crypto\+\+ (medium 5.9)
- [CVE-2023-50976](https://insights.sbomify.com/CVE-2023-50976/): Missing authorization in redpanda:redpanda (critical 9.8)
- [CVE-2023-50975](https://insights.sbomify.com/CVE-2023-50975/): Misconfiguration in td:advanced dashboard (high 8.4)
- [CVE-2023-50974](https://insights.sbomify.com/CVE-2023-50974/): Apprite CLI makes Use of Hard-coded Credentials (medium 5.5)
- [CVE-2023-5097](https://insights.sbomify.com/CVE-2023-5097/): Path traversal in Workforce Access (high 7.0)
- [CVE-2023-50969](https://insights.sbomify.com/CVE-2023-50969/): Thales Imperva SecureSphere WAF 14.7.0.40 allows remote attackers to bypass WAF rules via a crafted POST request, a different vulnerability than CVE-2021-45468. (critical 9.8)
- [CVE-2023-50968](https://insights.sbomify.com/CVE-2023-50968/): Apache OFBiz: Arbitrary file properties reading and SSRF attack (high 7.5)
- [CVE-2023-50967](https://insights.sbomify.com/CVE-2023-50967/): Denial of service in fedoraproject:fedora (high 7.5)
- [CVE-2023-50966](https://insights.sbomify.com/CVE-2023-50966/): erlang-jose vulnerable to denial of service via large p2c value (medium 5.3)
- [CVE-2023-50965](https://insights.sbomify.com/CVE-2023-50965/): Memory corruption in starnight:micro http server (critical 9.8)
- [CVE-2023-50964](https://insights.sbomify.com/CVE-2023-50964/): IBM InfoSphere Information Server cross-site scripting (medium 5.4)
- [CVE-2023-50963](https://insights.sbomify.com/CVE-2023-50963/): IBM Storage Defender HTTP HOST header injection (medium 6.5)
- [CVE-2023-50962](https://insights.sbomify.com/CVE-2023-50962/): IBM PowerSC information disclosure (medium 5.9)
- [CVE-2023-50961](https://insights.sbomify.com/CVE-2023-50961/): IBM QRadar cross-site scripting (medium 4.8)
- [CVE-2023-5096](https://insights.sbomify.com/CVE-2023-5096/): HTML filter and csv-file search <= 2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-50959](https://insights.sbomify.com/CVE-2023-50959/): IBM Cloud Pak for Business Automation information disclosure (medium 5.3)
- [CVE-2023-50957](https://insights.sbomify.com/CVE-2023-50957/): IBM Storage Defender - Resiliency Service privilege escalation (high 8.0)
- [CVE-2023-50956](https://insights.sbomify.com/CVE-2023-50956/): IBM Storage Defender - Resiliency Service information disclosure (medium 4.4)
- [CVE-2023-50955](https://insights.sbomify.com/CVE-2023-50955/): IBM InfoSphere Information Server information disclosure (low 2.4)
- [CVE-2023-50954](https://insights.sbomify.com/CVE-2023-50954/): IBM InfoSphere Information Server information disclosure (medium 4.3)
- [CVE-2023-50953](https://insights.sbomify.com/CVE-2023-50953/): IBM InfoSphere Information Server information disclosure (medium 5.4)
- [CVE-2023-50952](https://insights.sbomify.com/CVE-2023-50952/): IBM InfoSphere Information Server server-side request forgery (medium 5.4)
- [CVE-2023-50951](https://insights.sbomify.com/CVE-2023-50951/): IBM QRadar Suite information disclosure (medium 4.0)
- [CVE-2023-50950](https://insights.sbomify.com/CVE-2023-50950/): IBM QRadar information disclosure (low 3.7)
- [CVE-2023-50949](https://insights.sbomify.com/CVE-2023-50949/): IBM QRadar improper certificate validation (medium 5.9)
- [CVE-2023-50948](https://insights.sbomify.com/CVE-2023-50948/): IBM Storage Fusion HCI information disclosure (medium 6.5)
- [CVE-2023-50947](https://insights.sbomify.com/CVE-2023-50947/): IBM Business Automation Workflow cross-site scripting (medium 5.4)
- [CVE-2023-50946](https://insights.sbomify.com/CVE-2023-50946/): IBM Common Licensing information disclosure (medium 6.5)
- [CVE-2023-50945](https://insights.sbomify.com/CVE-2023-50945/): IBM Common Licensing information disclosure (medium 6.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/171/