# Vulnerabilities published in 2023


- [CVE-2023-41451](https://insights.sbomify.com/CVE-2023-41451/): Cross-site scripting in phpkobo:ajaxnewsticker (medium 6.1)
- [CVE-2023-41450](https://insights.sbomify.com/CVE-2023-41450/): Code injection in phpkobo:ajaxnewsticker (high 8.8)
- [CVE-2023-4145](https://insights.sbomify.com/CVE-2023-4145/): Cross-site Scripting (XSS) - Stored in pimcore/customer-data-framework (medium 6.5)
- [CVE-2023-41449](https://insights.sbomify.com/CVE-2023-41449/): Server-side request forgery in phpkobo:ajaxnewsticker (critical 9.8)
- [CVE-2023-41448](https://insights.sbomify.com/CVE-2023-41448/): Cross-site scripting in phpkobo:ajaxnewsticker (medium 6.1)
- [CVE-2023-41447](https://insights.sbomify.com/CVE-2023-41447/): Cross-site scripting in phpkobo:ajaxnewsticker (medium 6.1)
- [CVE-2023-41446](https://insights.sbomify.com/CVE-2023-41446/): Cross-site scripting in phpkobo:ajaxnewsticker (medium 6.1)
- [CVE-2023-41445](https://insights.sbomify.com/CVE-2023-41445/): Cross-site scripting in phpkobo:ajaxnewsticker (medium 6.1)
- [CVE-2023-41444](https://insights.sbomify.com/CVE-2023-41444/): Code injection in binalyze:irec (high 7.8)
- [CVE-2023-41443](https://insights.sbomify.com/CVE-2023-41443/): SQL injection in xxyopen:novel-plus (high 7.2)
- [CVE-2023-41442](https://insights.sbomify.com/CVE-2023-41442/): Auth bypass in kloudq:tor equip gateway (critical 9.8)
- [CVE-2023-41436](https://insights.sbomify.com/CVE-2023-41436/): Cross-site scripting in cskaza:cszcms (medium 5.4)
- [CVE-2023-41425](https://insights.sbomify.com/CVE-2023-41425/): Cross-site scripting in wondercms:wondercms (medium 6.1)
- [CVE-2023-41423](https://insights.sbomify.com/CVE-2023-41423/): Cross-site scripting in terryl:wp githuber md (medium 5.4)
- [CVE-2023-4142](https://insights.sbomify.com/CVE-2023-4142/): WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) Remote Code Execution (high 8.0)
- [CVE-2023-41419](https://insights.sbomify.com/CVE-2023-41419/): Gevent allows remote attacker to escalate privileges (critical 9.8)
- [CVE-2023-4141](https://insights.sbomify.com/CVE-2023-4141/): WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Execution (high 8.0)
- [CVE-2023-4140](https://insights.sbomify.com/CVE-2023-4140/): WP Ultimate CSV Importer <= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalation (medium 6.6)
- [CVE-2023-4139](https://insights.sbomify.com/CVE-2023-4139/): WP Ultimate CSV Importer <= 7.9.8 - Sensitive Information Exposure via Directory Listing (high 7.5)
- [CVE-2023-41387](https://insights.sbomify.com/CVE-2023-41387/): SQL injection in patreon:flutter downloader (critical 9.1)
- [CVE-2023-4138](https://insights.sbomify.com/CVE-2023-4138/): Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb (medium 4.2)
- [CVE-2023-41378](https://insights.sbomify.com/CVE-2023-41378/): Calico Typha hangs during unclean TLS handshake (high 7.5)
- [CVE-2023-41376](https://insights.sbomify.com/CVE-2023-41376/): Other in nokia:service router linux (high 7.5)
- [CVE-2023-41375](https://insights.sbomify.com/CVE-2023-41375/): Use after free in Kostac PLC Programming Software (high 7.8)
- [CVE-2023-41374](https://insights.sbomify.com/CVE-2023-41374/): Memory corruption in Kostac PLC Programming Software (high 7.8)
- [CVE-2023-41373](https://insights.sbomify.com/CVE-2023-41373/): BIG-IP Configuration Utility vulnerability (high 8.8)
- [CVE-2023-41372](https://insights.sbomify.com/CVE-2023-41372/): Hardcoded credentials in ctrlX HMI Web Panel - WR21 (WR2107) (high 7.8)
- [CVE-2023-41369](https://insights.sbomify.com/CVE-2023-41369/): External Entity Loop vulnerability in SAP S/4HANA (Create Single Payment application) (low 3.5)
- [CVE-2023-41368](https://insights.sbomify.com/CVE-2023-41368/): Insecure Direct Object Reference (IDOR) vulnerability in S4 HANA (Manage checkbook apps) (low 2.7)
- [CVE-2023-41367](https://insights.sbomify.com/CVE-2023-41367/): Missing Authentication check in SAP NetWeaver (Guided Procedures) (medium 5.3)
- [CVE-2023-41366](https://insights.sbomify.com/CVE-2023-41366/): Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform (medium 5.3)
- [CVE-2023-41365](https://insights.sbomify.com/CVE-2023-41365/): Information Disclosure vulnerability in SAP Business One (B1i) (medium 4.3)
- [CVE-2023-41364](https://insights.sbomify.com/CVE-2023-41364/): SQL injection in metaways:tine (critical 9.8)
- [CVE-2023-41363](https://insights.sbomify.com/CVE-2023-41363/): Missing authorization in cerebrate-project:cerebrate (medium 4.3)
- [CVE-2023-41362](https://insights.sbomify.com/CVE-2023-41362/): Code injection in mybb:mybb (high 7.2)
- [CVE-2023-41361](https://insights.sbomify.com/CVE-2023-41361/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2023-41360](https://insights.sbomify.com/CVE-2023-41360/): Memory corruption in debian:debian linux (critical 9.1)
- [CVE-2023-4136](https://insights.sbomify.com/CVE-2023-4136/): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafter Engine (high 7.4)
- [CVE-2023-41359](https://insights.sbomify.com/CVE-2023-41359/): Memory corruption in fedoraproject:fedora (critical 9.1)
- [CVE-2023-41358](https://insights.sbomify.com/CVE-2023-41358/): Null dereference in debian:debian linux (high 7.5)
- [CVE-2023-41357](https://insights.sbomify.com/CVE-2023-41357/): Galaxy Software Services Vitals ESP - Arbitrary File Upload (high 8.8)
- [CVE-2023-41356](https://insights.sbomify.com/CVE-2023-41356/): WisdomGarden Tronclass ilearn - Path Traversal (medium 6.5)
- [CVE-2023-41355](https://insights.sbomify.com/CVE-2023-41355/): Chunghwa Telecom NOKIA G-040W-Q - Improper Input Validation (critical 9.8)
- [CVE-2023-41354](https://insights.sbomify.com/CVE-2023-41354/): Chunghwa Telecom NOKIA G-040W-Q - Exposure of Sensitive Information (medium 4.0)
- [CVE-2023-41353](https://insights.sbomify.com/CVE-2023-41353/): Chunghwa Telecom NOKIA G-040W-Q - Weak Password Requirements (high 8.8)
- [CVE-2023-41352](https://insights.sbomify.com/CVE-2023-41352/): Chunghwa Telecom NOKIA G-040W-Q - Command Injection (high 7.2)
- [CVE-2023-41351](https://insights.sbomify.com/CVE-2023-41351/): Chunghwa Telecom NOKIA G-040W-Q - Broken Access Control (critical 9.8)
- [CVE-2023-41350](https://insights.sbomify.com/CVE-2023-41350/): Chunghwa Telecom NOKIA G-040W-Q - Excessive Authentication Attempts (high 7.5)
- [CVE-2023-4135](https://insights.sbomify.com/CVE-2023-4135/): Out-of-bounds read information disclosure vulnerability (medium 6.0)
- [CVE-2023-41349](https://insights.sbomify.com/CVE-2023-41349/): ASUS RT-AX88U - externally-controlled format string (high 8.8)
- [CVE-2023-41348](https://insights.sbomify.com/CVE-2023-41348/): ASUS RT-AX55 - command injection - 4 (high 8.8)
- [CVE-2023-41347](https://insights.sbomify.com/CVE-2023-41347/): ASUS RT-AX55 - command injection - 3 (high 8.8)
- [CVE-2023-41346](https://insights.sbomify.com/CVE-2023-41346/): ASUS RT-AX55 - command injection - 2 (high 8.8)
- [CVE-2023-41345](https://insights.sbomify.com/CVE-2023-41345/): ASUS RT-AX55 - command injection - 1 (high 8.8)
- [CVE-2023-41344](https://insights.sbomify.com/CVE-2023-41344/): NCSIST ManageEngine MDM - Path Traversal (high 7.5)
- [CVE-2023-41343](https://insights.sbomify.com/CVE-2023-41343/): Ragic No-Code Database Builder - Stored XSS (medium 5.4)
- [CVE-2023-4134](https://insights.sbomify.com/CVE-2023-4134/): Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work() (medium 5.5)
- [CVE-2023-41339](https://insights.sbomify.com/CVE-2023-41339/): Unsecured WMS dynamic styling sld=<url> parameter affords blind unauthenticated SSRF in GeoServer (high 8.6)
- [CVE-2023-41338](https://insights.sbomify.com/CVE-2023-41338/): Vulnerability in Ctx.IsFromLocal() in gofiber (medium 5.3)
- [CVE-2023-41337](https://insights.sbomify.com/CVE-2023-41337/): h2o vulnerable to TLS session resumption misdirection (medium 6.1)
- [CVE-2023-41336](https://insights.sbomify.com/CVE-2023-41336/): Prevent injection of invalid entity ids for "autocomplete" fields in symfony ux-autocomplete (medium 6.5)
- [CVE-2023-41335](https://insights.sbomify.com/CVE-2023-41335/): Temporary storage of plaintext passwords during password changes in matrix synapse (low 3.7)
- [CVE-2023-41334](https://insights.sbomify.com/CVE-2023-41334/): astropy vulnerable to RCE in TranformGraph().to_dot_graph function (high 8.4)
- [CVE-2023-41333](https://insights.sbomify.com/CVE-2023-41333/): Bypass of namespace restrictions in CiliumNetworkPolicy (medium 6.9)
- [CVE-2023-41332](https://insights.sbomify.com/CVE-2023-41332/): Denial of service via Kubernetes annotations in specific Cilium configurations (low 3.5)
- [CVE-2023-41331](https://insights.sbomify.com/CVE-2023-41331/): SOFARPC Remote Command Execution (RCE) Vulnerability (critical 9.8)
- [CVE-2023-41330](https://insights.sbomify.com/CVE-2023-41330/): Unsafe deserialization in knplabs/knp-snappy (critical 9.8)
- [CVE-2023-4133](https://insights.sbomify.com/CVE-2023-4133/): Kernel: cxgb4: use-after-free in ch_flower_stats_cb() (medium 5.5)
- [CVE-2023-41329](https://insights.sbomify.com/CVE-2023-41329/): Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio (low 3.9)
- [CVE-2023-41328](https://insights.sbomify.com/CVE-2023-41328/): Possibility limited SQL injection due to insufficient validation in Frappe (medium 4.2)
- [CVE-2023-41327](https://insights.sbomify.com/CVE-2023-41327/): Controlled SSRF through URL in the WireMock (medium 4.6)
- [CVE-2023-41326](https://insights.sbomify.com/CVE-2023-41326/): Account takeover via Kanban feature in GLPI (high 8.1)
- [CVE-2023-41325](https://insights.sbomify.com/CVE-2023-41325/): OP-TEE double free in shdr_verify_signature (high 7.4)
- [CVE-2023-41324](https://insights.sbomify.com/CVE-2023-41324/): Account takeover through API in GLPI (high 8.1)
- [CVE-2023-41323](https://insights.sbomify.com/CVE-2023-41323/): Users login enumeration by unauthenticated user in GLPI (medium 5.3)
- [CVE-2023-41322](https://insights.sbomify.com/CVE-2023-41322/): Privilege Escalation from technician to super-admin in GLPI (medium 4.9)
- [CVE-2023-41321](https://insights.sbomify.com/CVE-2023-41321/): Sensitive fields enumeration through API in GLPI (medium 4.9)
- [CVE-2023-41320](https://insights.sbomify.com/CVE-2023-41320/): Account takeover via SQL Injection in UI layout preferences in GLPI (high 8.1)
- [CVE-2023-4132](https://insights.sbomify.com/CVE-2023-4132/): Kernel: smsusb: use-after-free caused by do_submit_urb() (medium 5.5)
- [CVE-2023-41319](https://insights.sbomify.com/CVE-2023-41319/): Remote Code Execution in Custom Integration Upload in Fides (high 8.8)
- [CVE-2023-41318](https://insights.sbomify.com/CVE-2023-41318/): Unsafe media served inline on download endpoints in matrix-media-repo (medium 4.1)
- [CVE-2023-41317](https://insights.sbomify.com/CVE-2023-41317/): Unnamed "Subscription" operation results in Denial-of-Service in apollographql/router (high 7.5)
- [CVE-2023-41316](https://insights.sbomify.com/CVE-2023-41316/): HTML Injection with email in Tolgee (medium 5.5)
- [CVE-2023-41314](https://insights.sbomify.com/CVE-2023-41314/): Apache Doris: Missing API authentication allowed DoS (high 8.2)
- [CVE-2023-41313](https://insights.sbomify.com/CVE-2023-41313/): Apache Doris: Timing Attack weakness (critical 9.8)
- [CVE-2023-41312](https://insights.sbomify.com/CVE-2023-41312/): Missing authorization in EMUI (medium 5.3)
- [CVE-2023-41311](https://insights.sbomify.com/CVE-2023-41311/): Missing authorization in EMUI (medium 5.3)
- [CVE-2023-41310](https://insights.sbomify.com/CVE-2023-41310/): Denial of service in EMUI (low 3.3)
- [CVE-2023-41309](https://insights.sbomify.com/CVE-2023-41309/): Missing authorization in EMUI (high 7.5)
- [CVE-2023-41308](https://insights.sbomify.com/CVE-2023-41308/): Information disclosure in EMUI (high 7.5)
- [CVE-2023-41307](https://insights.sbomify.com/CVE-2023-41307/): Memory corruption in EMUI (high 7.5)
- [CVE-2023-41306](https://insights.sbomify.com/CVE-2023-41306/): Race condition in EMUI (low 3.7)
- [CVE-2023-41305](https://insights.sbomify.com/CVE-2023-41305/): Weak cryptography in EMUI (high 7.5)
- [CVE-2023-41304](https://insights.sbomify.com/CVE-2023-41304/): Other in EMUI (medium 5.3)
- [CVE-2023-41303](https://insights.sbomify.com/CVE-2023-41303/): Command injection in EMUI (high 7.5)
- [CVE-2023-41302](https://insights.sbomify.com/CVE-2023-41302/): Path traversal in EMUI (high 7.5)
- [CVE-2023-41301](https://insights.sbomify.com/CVE-2023-41301/): Missing authorization in EMUI (high 7.5)
- [CVE-2023-41300](https://insights.sbomify.com/CVE-2023-41300/): Denial of service in EMUI (high 7.5)
- [CVE-2023-4130](https://insights.sbomify.com/CVE-2023-4130/): ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() (high 8.1)
- [CVE-2023-41299](https://insights.sbomify.com/CVE-2023-41299/): Memory corruption in EMUI (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/239/