# Vulnerabilities published in 2023 - [CVE-2023-48312](https://insights.sbomify.com/CVE-2023-48312/): Authentication bypass using an empty token in capsule-proxy (critical 9.8) - [CVE-2023-48311](https://insights.sbomify.com/CVE-2023-48311/): Any image allowed by default (high 8.0) - [CVE-2023-48310](https://insights.sbomify.com/CVE-2023-48310/): Ability to DoS the testing infrastructure by overwriting files (critical 9.1) - [CVE-2023-4831](https://insights.sbomify.com/CVE-2023-4831/): SQLi in nCep (critical 9.8) - [CVE-2023-48309](https://insights.sbomify.com/CVE-2023-48309/): next-auth vulnerable to possible user mocking that bypasses basic authentication (medium 5.3) - [CVE-2023-48308](https://insights.sbomify.com/CVE-2023-48308/): Calendar app returns full stacktrace when an error happens while editing appointment (low 3.5) - [CVE-2023-48307](https://insights.sbomify.com/CVE-2023-48307/): Nextcloud Mail app vulnerable to Server-Side Request Forgery (low 3.5) - [CVE-2023-48306](https://insights.sbomify.com/CVE-2023-48306/): Nextcloud Server DNS pin middleware can be tricked into DNS rebinding allowing SSRF (medium 5.0) - [CVE-2023-48305](https://insights.sbomify.com/CVE-2023-48305/): Nextcloud Server user_ldap app logs user passwords in the log file on level debug (medium 4.2) - [CVE-2023-48304](https://insights.sbomify.com/CVE-2023-48304/): Nextcloud Server vulnerable to attacker enabling/disabling birthday calendar for any user (medium 4.3) - [CVE-2023-48303](https://insights.sbomify.com/CVE-2023-48303/): Nextcloud Server admins can change authentication details of user configured external storage (low 2.4) - [CVE-2023-48302](https://insights.sbomify.com/CVE-2023-48302/): Nextcloud Server vulnerable to Self XSS when pasting HTML into Text app with Ctrl+Shift+V (low 3.5) - [CVE-2023-48301](https://insights.sbomify.com/CVE-2023-48301/): Nextcloud Server HTML injection in search UI when selecting a circle with HTML in the display name (low 3.5) - [CVE-2023-48300](https://insights.sbomify.com/CVE-2023-48300/): Embed Privacy missing escaping for show_all attribute in opt-out shortcode (medium 6.3) - [CVE-2023-4830](https://insights.sbomify.com/CVE-2023-4830/): SQLi in Tura's Signalix (critical 9.8) - [CVE-2023-48299](https://insights.sbomify.com/CVE-2023-48299/): TorchServe ZipSlip (medium 5.3) - [CVE-2023-48298](https://insights.sbomify.com/CVE-2023-48298/): Integer underflow leading to stack overflow in FPC codec decompression (medium 5.9) - [CVE-2023-48297](https://insights.sbomify.com/CVE-2023-48297/): Discourse vulnerable to unlimited mentioned users in message serializer (high 8.6) - [CVE-2023-48296](https://insights.sbomify.com/CVE-2023-48296/): OroPlatform's storefront user can access history and most viewed data from matching back-office user with the same ID (medium 4.3) - [CVE-2023-48295](https://insights.sbomify.com/CVE-2023-48295/): Cross-site Scripting at Device groups Deletion feature in LibreNMS (medium 6.3) - [CVE-2023-48294](https://insights.sbomify.com/CVE-2023-48294/): Broken Access control on Graphs Feature in LibreNMS (medium 4.3) - [CVE-2023-48293](https://insights.sbomify.com/CVE-2023-48293/): XWiki Admin Tools Application CSRF with QueryOnXWiki allows arbitrary database queries (high 8.8) - [CVE-2023-48292](https://insights.sbomify.com/CVE-2023-48292/): XWiki Admin Tools Application Run Shell Command allows CSRF RCE attacks (critical 9.7) - [CVE-2023-48291](https://insights.sbomify.com/CVE-2023-48291/): Apache Airflow: Improper access control to DAG resources (medium 4.3) - [CVE-2023-48290](https://insights.sbomify.com/CVE-2023-48290/): WordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerability (medium 5.3) - [CVE-2023-4829](https://insights.sbomify.com/CVE-2023-4829/): Cross-site Scripting (XSS) - Stored in froxlor/froxlor (medium 4.3) - [CVE-2023-48289](https://insights.sbomify.com/CVE-2023-48289/): WordPress Import Spreadsheets from Microsoft Excel Plugin <= 10.1.3 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-48288](https://insights.sbomify.com/CVE-2023-48288/): WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.1 is vulnerable to Sensitive Data Exposure (high 7.5) - [CVE-2023-48287](https://insights.sbomify.com/CVE-2023-48287/): WordPress TextMe SMS plugin <= 1.9.0 - Broken Access Control vulnerability (medium 5.4) - [CVE-2023-48286](https://insights.sbomify.com/CVE-2023-48286/): WordPress Accept Stripe Payments plugin <= 2.0.79 - Broken Access Control vulnerability (high 8.2) - [CVE-2023-48285](https://insights.sbomify.com/CVE-2023-48285/): WordPress Accept Stripe Payments plugin <= 2.0.79 - Content Injection vulnerability (medium 5.3) - [CVE-2023-48284](https://insights.sbomify.com/CVE-2023-48284/): WordPress Decorator – WooCommerce Email Customizer Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3) - [CVE-2023-48283](https://insights.sbomify.com/CVE-2023-48283/): WordPress Simple Testimonials Showcase Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3) - [CVE-2023-48282](https://insights.sbomify.com/CVE-2023-48282/): WordPress Taxonomy filter Plugin <= 2.2.9 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4) - [CVE-2023-48281](https://insights.sbomify.com/CVE-2023-48281/): WordPress Broken Link Checker for YouTube Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3) - [CVE-2023-48280](https://insights.sbomify.com/CVE-2023-48280/): WordPress Consensu.io plugin <= 1.0.1 - Broken Access Control vulnerability (high 7.5) - [CVE-2023-4828](https://insights.sbomify.com/CVE-2023-4828/): ITM Server Communications Hijack (medium 6.4) - [CVE-2023-48279](https://insights.sbomify.com/CVE-2023-48279/): WordPress Seraphinite Post .DOCX Source Plugin <= 2.16.6 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3) - [CVE-2023-48278](https://insights.sbomify.com/CVE-2023-48278/): WordPress WP Forms Puzzle Captcha Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF) leading to XSS (high 7.1) - [CVE-2023-48277](https://insights.sbomify.com/CVE-2023-48277/): WordPress Super Progressive Web Apps plugin <= 2.2.21 - Broken Access Control vulnerability (medium 4.3) - [CVE-2023-48276](https://insights.sbomify.com/CVE-2023-48276/): WordPress WP Forms Puzzle Captcha plugin <= 4.1 - Captcha Bypass vulnerability (medium 5.3) - [CVE-2023-48275](https://insights.sbomify.com/CVE-2023-48275/): WordPress Widgets for Google Reviews plugin <= 11.0.2 - Arbitrary File Upload vulnerability (high 8.0) - [CVE-2023-48274](https://insights.sbomify.com/CVE-2023-48274/): WordPress WCMultiShipping plugin <= 2.3.5 - Broken Access Control vulnerability (medium 6.5) - [CVE-2023-48273](https://insights.sbomify.com/CVE-2023-48273/): WordPress Preloader for Website plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerability (medium 5.3) - [CVE-2023-48272](https://insights.sbomify.com/CVE-2023-48272/): WordPress Maspik – Spam blacklist Plugin <= 0.9.2 is vulnerable to Cross Site Scripting (XSS) (high 7.1) - [CVE-2023-48271](https://insights.sbomify.com/CVE-2023-48271/): WordPress Maspik – Spam Blacklist plugin <= 0.10.3 - IP Filtering Bypass vulnerability (medium 5.3) - [CVE-2023-48270](https://insights.sbomify.com/CVE-2023-48270/): Memory corruption in WBR-6013 (high 7.2) - [CVE-2023-4827](https://insights.sbomify.com/CVE-2023-4827/): File Manager Pro < 1.8 - Remote Code Execution via CSRF (high 8.8) - [CVE-2023-48268](https://insights.sbomify.com/CVE-2023-48268/): Denial of Service via Board Import Zip Bomb (medium 4.3) - [CVE-2023-48267](https://insights.sbomify.com/CVE-2023-48267/): Memory corruption in Intel(R) System Security Report and System Resources Defense firmware (high 8.6) - [CVE-2023-48266](https://insights.sbomify.com/CVE-2023-48266/): Memory corruption in Nexo cordless nutrunner NXA011S-36V (0608842011) (high 8.1) - [CVE-2023-48265](https://insights.sbomify.com/CVE-2023-48265/): Memory corruption in Nexo cordless nutrunner NXA011S-36V (0608842011) (high 8.1) - [CVE-2023-48264](https://insights.sbomify.com/CVE-2023-48264/): Memory corruption in Nexo cordless nutrunner NXA011S-36V (0608842011) (high 8.1) - [CVE-2023-48263](https://insights.sbomify.com/CVE-2023-48263/): Memory corruption in Nexo cordless nutrunner NXA011S-36V (0608842011) (high 8.1) - [CVE-2023-48262](https://insights.sbomify.com/CVE-2023-48262/): Memory corruption in Nexo cordless nutrunner NXA011S-36V (0608842011) (high 8.1) - [CVE-2023-48261](https://insights.sbomify.com/CVE-2023-48261/): SQL injection in Nexo cordless nutrunner NXA011S-36V (0608842011) (medium 5.3) - [CVE-2023-48260](https://insights.sbomify.com/CVE-2023-48260/): SQL injection in Nexo cordless nutrunner NXA011S-36V (0608842011) (medium 5.3) - [CVE-2023-4826](https://insights.sbomify.com/CVE-2023-4826/): Socialdriver < 2024 - Prototype Pollution to XSS (medium 6.1) - [CVE-2023-48259](https://insights.sbomify.com/CVE-2023-48259/): SQL injection in Nexo cordless nutrunner NXA011S-36V (0608842011) (medium 5.3) - [CVE-2023-48258](https://insights.sbomify.com/CVE-2023-48258/): Cross-site request forgery in Nexo cordless nutrunner NXA011S-36V (0608842011) (medium 5.5) - [CVE-2023-48257](https://insights.sbomify.com/CVE-2023-48257/): Auth bypass in Nexo cordless nutrunner NXA011S-36V (0608842011) (high 7.8) - [CVE-2023-48256](https://insights.sbomify.com/CVE-2023-48256/): Other in Nexo cordless nutrunner NXA011S-36V (0608842011) (medium 5.3) - [CVE-2023-48255](https://insights.sbomify.com/CVE-2023-48255/): Cross-site scripting in Nexo cordless nutrunner NXA011S-36V (0608842011) (medium 6.3) - [CVE-2023-48254](https://insights.sbomify.com/CVE-2023-48254/): Cross-site scripting in Nexo cordless nutrunner NXA011S-36V (0608842011) (medium 5.3) - [CVE-2023-48253](https://insights.sbomify.com/CVE-2023-48253/): SQL injection in Nexo cordless nutrunner NXA011S-36V (0608842011) (high 8.8) - [CVE-2023-48252](https://insights.sbomify.com/CVE-2023-48252/): Missing authorization in Nexo cordless nutrunner NXA011S-36V (0608842011) (high 8.8) - [CVE-2023-48251](https://insights.sbomify.com/CVE-2023-48251/): Hardcoded credentials in Nexo cordless nutrunner NXA011S-36V (0608842011) (high 8.1) - [CVE-2023-48250](https://insights.sbomify.com/CVE-2023-48250/): Hardcoded credentials in Nexo cordless nutrunner NXA011S-36V (0608842011) (high 8.1) - [CVE-2023-48249](https://insights.sbomify.com/CVE-2023-48249/): Path traversal in Nexo cordless nutrunner NXA011S-36V (0608842011) (medium 6.5) - [CVE-2023-48248](https://insights.sbomify.com/CVE-2023-48248/): Cross-site scripting in Nexo cordless nutrunner NXA011S-36V (0608842011) (medium 5.5) - [CVE-2023-48247](https://insights.sbomify.com/CVE-2023-48247/): Missing authorization in Nexo cordless nutrunner NXA011S-36V (0608842011) (medium 5.3) - [CVE-2023-48246](https://insights.sbomify.com/CVE-2023-48246/): Path traversal in Nexo cordless nutrunner NXA011S-36V (0608842011) (medium 6.5) - [CVE-2023-48245](https://insights.sbomify.com/CVE-2023-48245/): File upload in Nexo cordless nutrunner NXA011S-36V (0608842011) (medium 6.5) - [CVE-2023-48244](https://insights.sbomify.com/CVE-2023-48244/): Cross-site scripting in Nexo cordless nutrunner NXA011S-36V (0608842011) (medium 5.3) - [CVE-2023-48243](https://insights.sbomify.com/CVE-2023-48243/): Path traversal in Nexo cordless nutrunner NXA011S-36V (0608842011) (high 8.1) - [CVE-2023-48242](https://insights.sbomify.com/CVE-2023-48242/): Path traversal in Nexo cordless nutrunner NXA011S-36V (0608842011) (medium 6.5) - [CVE-2023-48241](https://insights.sbomify.com/CVE-2023-48241/): XWiki exposed whole content of all documents of all wikis to anybody with view right on Solr suggest service (high 7.5) - [CVE-2023-48240](https://insights.sbomify.com/CVE-2023-48240/): XWiki Platform sends cookies to external images in rendered diff and is vulnerable to server side request forgery (critical 9.1) - [CVE-2023-4824](https://insights.sbomify.com/CVE-2023-4824/): WooHoo Newspaper Magazine Theme <= 2.5.3 - Settings Update via CSRF (high 8.8) - [CVE-2023-48239](https://insights.sbomify.com/CVE-2023-48239/): Nextcloud Server users can make external storage mount points inaccessible for other users (high 8.5) - [CVE-2023-48238](https://insights.sbomify.com/CVE-2023-48238/): JWT Algorithm Confusion in json-web-token library (high 7.5) - [CVE-2023-48237](https://insights.sbomify.com/CVE-2023-48237/): overflow in shift_line in vim (low 2.8) - [CVE-2023-48236](https://insights.sbomify.com/CVE-2023-48236/): overflow in get_number in vim (low 2.8) - [CVE-2023-48235](https://insights.sbomify.com/CVE-2023-48235/): overflow in ex address parsing in vim (low 2.8) - [CVE-2023-48234](https://insights.sbomify.com/CVE-2023-48234/): overflow in nv_z_get_count in vim (low 2.8) - [CVE-2023-48233](https://insights.sbomify.com/CVE-2023-48233/): overflow with count for :s command in vim (low 2.8) - [CVE-2023-48232](https://insights.sbomify.com/CVE-2023-48232/): Floating point Exception in adjust_plines_for_skipcol() in vim (low 3.9) - [CVE-2023-48231](https://insights.sbomify.com/CVE-2023-48231/): Use-After-Free in win_close() in vim (low 3.9) - [CVE-2023-48230](https://insights.sbomify.com/CVE-2023-48230/): Cap'n Proto WebSocket message can cause crash (medium 5.9) - [CVE-2023-4823](https://insights.sbomify.com/CVE-2023-4823/): WP Meta and Date Remover < 2.2.0 - Subscriber+ Stored XSS (medium 5.4) - [CVE-2023-48229](https://insights.sbomify.com/CVE-2023-48229/): Out-of-bounds write in the radio driver for Contiki-NG nRF platforms (high 7.0) - [CVE-2023-48228](https://insights.sbomify.com/CVE-2023-48228/): OAuth2: PKCE can be fully circumvented (high 7.5) - [CVE-2023-48227](https://insights.sbomify.com/CVE-2023-48227/): Umbraco CMS Backoffice User can bypass "Publish" restriction (medium 4.3) - [CVE-2023-48226](https://insights.sbomify.com/CVE-2023-48226/): OpenReplay HTML Injection vulnerability (medium 6.5) - [CVE-2023-48225](https://insights.sbomify.com/CVE-2023-48225/): Laf env causes sensitive information disclosure (high 8.9) - [CVE-2023-48224](https://insights.sbomify.com/CVE-2023-48224/): Cryptographically Weak Generation of One-Time Codes for Identity Verification in ethyca-fides (high 8.2) - [CVE-2023-48223](https://insights.sbomify.com/CVE-2023-48223/): fast-jwt JWT Algorithm Confusion (medium 5.9) - [CVE-2023-48222](https://insights.sbomify.com/CVE-2023-48222/): Authenticated users can view or delete jobs they do not have authorization for in Rundeck (high 8.1) - [CVE-2023-48221](https://insights.sbomify.com/CVE-2023-48221/): wire-avs remote format string vulnerability (high 7.3) - [CVE-2023-48220](https://insights.sbomify.com/CVE-2023-48220/): Decidim's devise_invitable gem vulnerable to circumvention of invitation token expiry period (medium 5.7) --- From sbomify Insights: https://insights.sbomify.com/years/2023/page/191/