# Vulnerabilities published in 2023


- [CVE-2023-40958](https://insights.sbomify.com/CVE-2023-40958/): SQL injection in didotech:engineering \& lifecycle management (high 8.8)
- [CVE-2023-40957](https://insights.sbomify.com/CVE-2023-40957/): SQL injection in didotech:engineering \& lifecycle management (high 8.8)
- [CVE-2023-40956](https://insights.sbomify.com/CVE-2023-40956/): SQL injection in cloudroits:wesite job search (high 8.8)
- [CVE-2023-40955](https://insights.sbomify.com/CVE-2023-40955/): SQL injection in didotech:engineering \& lifecycle management (high 8.8)
- [CVE-2023-40954](https://insights.sbomify.com/CVE-2023-40954/): SQL injection in gmarczynski:dynamic progress bar (critical 9.8)
- [CVE-2023-40953](https://insights.sbomify.com/CVE-2023-40953/): Cross-site request forgery in idreamsoft:icms (high 8.8)
- [CVE-2023-4095](https://insights.sbomify.com/CVE-2023-4095/): User enumeration vulnerability in Fujitsu Arconte Áurea (medium 5.3)
- [CVE-2023-40946](https://insights.sbomify.com/CVE-2023-40946/): SQL injection in schoolmate project:schoolmate (critical 9.8)
- [CVE-2023-40945](https://insights.sbomify.com/CVE-2023-40945/): SQL injection in doctor appointment system project:doctor appointment system (critical 9.8)
- [CVE-2023-40944](https://insights.sbomify.com/CVE-2023-40944/): SQL injection in schoolmate project:schoolmate (critical 9.8)
- [CVE-2023-40942](https://insights.sbomify.com/CVE-2023-40942/): Memory corruption in tendacn:ac9 firmware (critical 9.8)
- [CVE-2023-4094](https://insights.sbomify.com/CVE-2023-4094/): Weak authentication vulnerability in Fujitsu Arconte Áurea (medium 6.5)
- [CVE-2023-40934](https://insights.sbomify.com/CVE-2023-40934/): SQL injection in nagios:nagios xi (high 7.2)
- [CVE-2023-40933](https://insights.sbomify.com/CVE-2023-40933/): SQL injection in nagios:nagios xi (high 8.8)
- [CVE-2023-40932](https://insights.sbomify.com/CVE-2023-40932/): Cross-site scripting in nagios:nagios xi (medium 5.4)
- [CVE-2023-40931](https://insights.sbomify.com/CVE-2023-40931/): SQL injection in nagios:nagios xi (medium 6.5)
- [CVE-2023-40930](https://insights.sbomify.com/CVE-2023-40930/): Path traversal in skyworth:skyworth os (medium 6.8)
- [CVE-2023-4093](https://insights.sbomify.com/CVE-2023-4093/): Reflected and persistent XSS vulnerability in Fujitsu Arconte Áurea (medium 5.5)
- [CVE-2023-40924](https://insights.sbomify.com/CVE-2023-40924/): Path traversal in contec:solarview compact firmware (high 7.5)
- [CVE-2023-40923](https://insights.sbomify.com/CVE-2023-40923/): SQL injection in myprestamodules:orders \(csv\, excel\) export pro (high 8.8)
- [CVE-2023-40922](https://insights.sbomify.com/CVE-2023-40922/): SQL injection in kerawen:kerawen (critical 9.8)
- [CVE-2023-40921](https://insights.sbomify.com/CVE-2023-40921/): SQL injection in common-services:soliberte (critical 9.8)
- [CVE-2023-40920](https://insights.sbomify.com/CVE-2023-40920/): SQL injection in prixan:prixanconnect (critical 9.8)
- [CVE-2023-4092](https://insights.sbomify.com/CVE-2023-4092/): SQL injection vulnerability in Fujitsu Arconte Áurea (high 8.8)
- [CVE-2023-40918](https://insights.sbomify.com/CVE-2023-40918/): Privilege escalation in knowstreaming project:knowstreaming (high 8.8)
- [CVE-2023-40915](https://insights.sbomify.com/CVE-2023-40915/): Memory corruption in tenda:ax3 firmware (high 7.5)
- [CVE-2023-4091](https://insights.sbomify.com/CVE-2023-4091/): Samba: smb clients can truncate files with read-only permissions (medium 6.5)
- [CVE-2023-40904](https://insights.sbomify.com/CVE-2023-40904/): Memory corruption in tenda:ac10v4 firmware (critical 9.8)
- [CVE-2023-40902](https://insights.sbomify.com/CVE-2023-40902/): Memory corruption in tenda:ac10v4 firmware (critical 9.8)
- [CVE-2023-40901](https://insights.sbomify.com/CVE-2023-40901/): Memory corruption in tenda:ac10v4 firmware (critical 9.8)
- [CVE-2023-40900](https://insights.sbomify.com/CVE-2023-40900/): Memory corruption in tenda:ac8 firmware (critical 9.8)
- [CVE-2023-4090](https://insights.sbomify.com/CVE-2023-4090/): Cross-Site Scripting (XSS) vulnerability on WideStand CMS of Acilia (medium 5.4)
- [CVE-2023-40899](https://insights.sbomify.com/CVE-2023-40899/): Memory corruption in tenda:ac8 firmware (critical 9.8)
- [CVE-2023-40898](https://insights.sbomify.com/CVE-2023-40898/): Memory corruption in tenda:ac8 firmware (critical 9.8)
- [CVE-2023-40897](https://insights.sbomify.com/CVE-2023-40897/): Memory corruption in tenda:ac8 firmware (critical 9.8)
- [CVE-2023-40896](https://insights.sbomify.com/CVE-2023-40896/): Memory corruption in tenda:ac8 firmware (critical 9.8)
- [CVE-2023-40895](https://insights.sbomify.com/CVE-2023-40895/): Memory corruption in tenda:ac8 firmware (critical 9.8)
- [CVE-2023-40894](https://insights.sbomify.com/CVE-2023-40894/): Memory corruption in tenda:ac8 firmware (critical 9.8)
- [CVE-2023-40893](https://insights.sbomify.com/CVE-2023-40893/): Memory corruption in tenda:ac8 firmware (critical 9.8)
- [CVE-2023-40892](https://insights.sbomify.com/CVE-2023-40892/): Memory corruption in tenda:ac8 firmware (critical 9.8)
- [CVE-2023-40891](https://insights.sbomify.com/CVE-2023-40891/): Memory corruption in tenda:ac8 firmware (critical 9.8)
- [CVE-2023-40890](https://insights.sbomify.com/CVE-2023-40890/): Memory corruption in zbar project:zbar (critical 9.8)
- [CVE-2023-4089](https://insights.sbomify.com/CVE-2023-4089/): WAGO: Multiple products vulnerable to local file inclusion (low 2.7)
- [CVE-2023-40889](https://insights.sbomify.com/CVE-2023-40889/): Heap-based buffer overflow in ZBar (critical 9.8)
- [CVE-2023-4088](https://insights.sbomify.com/CVE-2023-4088/): Malicious Code Execution Vulnerability in FA Engineering Software Products (critical 9.3)
- [CVE-2023-40877](https://insights.sbomify.com/CVE-2023-40877/): Cross-site scripting in dedecms:dedecms (medium 5.4)
- [CVE-2023-40876](https://insights.sbomify.com/CVE-2023-40876/): Cross-site scripting in dedecms:dedecms (medium 5.4)
- [CVE-2023-40875](https://insights.sbomify.com/CVE-2023-40875/): Cross-site scripting in dedecms:dedecms (medium 5.4)
- [CVE-2023-40874](https://insights.sbomify.com/CVE-2023-40874/): Cross-site scripting in dedecms:dedecms (medium 5.4)
- [CVE-2023-40869](https://insights.sbomify.com/CVE-2023-40869/): Cross-site scripting in moosocial:moosocial (medium 6.1)
- [CVE-2023-40868](https://insights.sbomify.com/CVE-2023-40868/): Cross-site request forgery in moosocial:moosocial (high 8.8)
- [CVE-2023-40857](https://insights.sbomify.com/CVE-2023-40857/): Memory corruption in virustotal:yara (high 8.8)
- [CVE-2023-40852](https://insights.sbomify.com/CVE-2023-40852/): SQL injection in user registration \& login and user management system with admin panel project:user registration \& login and user management system with admin panel (critical 9.8)
- [CVE-2023-40851](https://insights.sbomify.com/CVE-2023-40851/): Cross-site scripting in user registration \& login and user management system with admin panel project:user registration \& login and user management system with admin panel (medium 5.4)
- [CVE-2023-40850](https://insights.sbomify.com/CVE-2023-40850/): Information disclosure in netentsec:ns-asg firmware (high 7.5)
- [CVE-2023-40848](https://insights.sbomify.com/CVE-2023-40848/): Memory corruption in tenda:ac6 firmware (critical 9.8)
- [CVE-2023-40847](https://insights.sbomify.com/CVE-2023-40847/): Memory corruption in tenda:ac6 firmware (critical 9.8)
- [CVE-2023-40846](https://insights.sbomify.com/CVE-2023-40846/): Memory corruption in tenda:ac6 firmware (critical 9.8)
- [CVE-2023-40845](https://insights.sbomify.com/CVE-2023-40845/): Memory corruption in tenda:ac6 firmware (critical 9.8)
- [CVE-2023-40844](https://insights.sbomify.com/CVE-2023-40844/): Memory corruption in tenda:ac6 firmware (critical 9.8)
- [CVE-2023-40843](https://insights.sbomify.com/CVE-2023-40843/): Memory corruption in tenda:ac6 firmware (critical 9.8)
- [CVE-2023-40842](https://insights.sbomify.com/CVE-2023-40842/): Memory corruption in tenda:ac6 firmware (critical 9.8)
- [CVE-2023-40841](https://insights.sbomify.com/CVE-2023-40841/): Memory corruption in tenda:ac6 firmware (critical 9.8)
- [CVE-2023-40840](https://insights.sbomify.com/CVE-2023-40840/): Memory corruption in tenda:ac6 firmware (critical 9.8)
- [CVE-2023-40839](https://insights.sbomify.com/CVE-2023-40839/): Command injection in tenda:ac6 firmware (critical 9.8)
- [CVE-2023-40838](https://insights.sbomify.com/CVE-2023-40838/): Command injection in tenda:ac6 firmware (critical 9.8)
- [CVE-2023-40837](https://insights.sbomify.com/CVE-2023-40837/): Command injection in tenda:ac6 firmware (critical 9.8)
- [CVE-2023-40834](https://insights.sbomify.com/CVE-2023-40834/): Auth bypass in opencart:opencart (critical 9.8)
- [CVE-2023-40833](https://insights.sbomify.com/CVE-2023-40833/): Privilege escalation in thecosy:icecms (critical 9.8)
- [CVE-2023-40830](https://insights.sbomify.com/CVE-2023-40830/): Memory corruption in tenda:ac6 firmware (critical 9.8)
- [CVE-2023-40829](https://insights.sbomify.com/CVE-2023-40829/): Missing authorization in tencent:enterprise wechat privatization (high 7.5)
- [CVE-2023-40828](https://insights.sbomify.com/CVE-2023-40828/): pf4j vulnerable to remote code execution via expandIfZip method in the extract function (high 7.5)
- [CVE-2023-40827](https://insights.sbomify.com/CVE-2023-40827/): pf4j vulnerable to remote code execution via loadpluginPath parameter (high 7.5)
- [CVE-2023-40826](https://insights.sbomify.com/CVE-2023-40826/): pf4j vulnerable to remote code execution via the zippluginPath parameter (high 7.5)
- [CVE-2023-40825](https://insights.sbomify.com/CVE-2023-40825/): File upload in perfree:perfreeblog (high 7.2)
- [CVE-2023-40819](https://insights.sbomify.com/CVE-2023-40819/): Cross-site scripting in devlop.systems:id4portais (medium 6.1)
- [CVE-2023-40817](https://insights.sbomify.com/CVE-2023-40817/): Cross-site Scripting in OpenCRX (medium 6.1)
- [CVE-2023-40816](https://insights.sbomify.com/CVE-2023-40816/): Cross-site Scripting in OpenCRX (medium 6.1)
- [CVE-2023-40815](https://insights.sbomify.com/CVE-2023-40815/): Cross-site Scripting in OpenCRX (medium 6.1)
- [CVE-2023-40814](https://insights.sbomify.com/CVE-2023-40814/): Cross-site Scripting in OpenCRX (medium 6.1)
- [CVE-2023-40813](https://insights.sbomify.com/CVE-2023-40813/): Cross-site Scripting in OpenCRX (medium 6.1)
- [CVE-2023-40812](https://insights.sbomify.com/CVE-2023-40812/): Cross-site Scripting in OpenCRX (medium 6.1)
- [CVE-2023-40810](https://insights.sbomify.com/CVE-2023-40810/): Cross-site Scripting in OpenCRX (medium 6.1)
- [CVE-2023-40809](https://insights.sbomify.com/CVE-2023-40809/): Cross-site Scripting in OpenCRX (medium 6.1)
- [CVE-2023-40802](https://insights.sbomify.com/CVE-2023-40802/): Memory corruption in tenda:ac23 firmware (medium 6.5)
- [CVE-2023-40801](https://insights.sbomify.com/CVE-2023-40801/): Memory corruption in tenda:ac23 (high 8.8)
- [CVE-2023-40800](https://insights.sbomify.com/CVE-2023-40800/): Memory corruption in tenda:ac23 firmware (high 8.8)
- [CVE-2023-40799](https://insights.sbomify.com/CVE-2023-40799/): Memory corruption in tenda:ac23 firmware (critical 9.8)
- [CVE-2023-40798](https://insights.sbomify.com/CVE-2023-40798/): Memory corruption in tenda:ac23 firmware (high 8.8)
- [CVE-2023-40797](https://insights.sbomify.com/CVE-2023-40797/): Memory corruption in tenda:ac23 firmware (high 8.8)
- [CVE-2023-40796](https://insights.sbomify.com/CVE-2023-40796/): Command injection in phicomm:k2 firmware (high 7.8)
- [CVE-2023-40791](https://insights.sbomify.com/CVE-2023-40791/): Other in linux:linux kernel (medium 6.3)
- [CVE-2023-40788](https://insights.sbomify.com/CVE-2023-40788/): Misconfiguration in bladex:springblade (medium 5.3)
- [CVE-2023-40787](https://insights.sbomify.com/CVE-2023-40787/): SpringBlade vulnerable to SQL injection (critical 9.8)
- [CVE-2023-40786](https://insights.sbomify.com/CVE-2023-40786/): Cross-site scripting in hkcms:hkcms (medium 5.4)
- [CVE-2023-40784](https://insights.sbomify.com/CVE-2023-40784/): File upload in dedecms:dedecms (critical 9.8)
- [CVE-2023-40781](https://insights.sbomify.com/CVE-2023-40781/): Memory corruption in libming:libming (medium 6.5)
- [CVE-2023-4078](https://insights.sbomify.com/CVE-2023-4078/): Cross-site scripting in Chrome (high 8.8)
- [CVE-2023-40779](https://insights.sbomify.com/CVE-2023-40779/): Open redirect in icewarp:deep castle g2 (medium 6.1)
- [CVE-2023-40772](https://insights.sbomify.com/CVE-2023-40772/): Path traversal in DataEase (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/243/