# Vulnerabilities published in 2023


- [CVE-2023-37836](https://insights.sbomify.com/CVE-2023-37836/): Denial of service in jpeg:libjpeg (medium 6.5)
- [CVE-2023-37833](https://insights.sbomify.com/CVE-2023-37833/): Missing authorization in elenos:etg150 firmware (low 2.7)
- [CVE-2023-37832](https://insights.sbomify.com/CVE-2023-37832/): Auth bypass in elenos:etg150 firmware (high 7.5)
- [CVE-2023-37831](https://insights.sbomify.com/CVE-2023-37831/): Information disclosure in elenos:etg150 firmware (medium 5.3)
- [CVE-2023-37830](https://insights.sbomify.com/CVE-2023-37830/): Cross-site scripting in general-solutions:contwise case2 (medium 6.1)
- [CVE-2023-3783](https://insights.sbomify.com/CVE-2023-3783/): Webile HTTP POST Request cross site scripting (low 3.5)
- [CVE-2023-37829](https://insights.sbomify.com/CVE-2023-37829/): Cross-site scripting in general-solutions:contwise case2 (medium 6.1)
- [CVE-2023-37828](https://insights.sbomify.com/CVE-2023-37828/): Cross-site scripting in general-solutions:contwise case2 (medium 6.1)
- [CVE-2023-37827](https://insights.sbomify.com/CVE-2023-37827/): Cross-site scripting in general-solutions:contwise case2 (medium 6.1)
- [CVE-2023-37826](https://insights.sbomify.com/CVE-2023-37826/): Cross-site scripting in general-solutions:contwise case2 (medium 6.1)
- [CVE-2023-37824](https://insights.sbomify.com/CVE-2023-37824/): SQL injection in sitolog:sitolog application connect (critical 9.8)
- [CVE-2023-37822](https://insights.sbomify.com/CVE-2023-37822/): Weak cryptography in eufy:homebase 2 firmware (high 8.2)
- [CVE-2023-3782](https://insights.sbomify.com/CVE-2023-3782/): Denial of service in squareup:okhttp-brotli (medium 5.9)
- [CVE-2023-3781](https://insights.sbomify.com/CVE-2023-3781/): Use after free in Android (high 7.8)
- [CVE-2023-37798](https://insights.sbomify.com/CVE-2023-37798/): Cross-site scripting in vanderbilt:redcap (medium 5.4)
- [CVE-2023-37794](https://insights.sbomify.com/CVE-2023-37794/): Command injection in wayos:fbm-291w firmware (critical 9.8)
- [CVE-2023-37793](https://insights.sbomify.com/CVE-2023-37793/): Memory corruption in wayos:fbm-291w firmware (critical 9.8)
- [CVE-2023-37791](https://insights.sbomify.com/CVE-2023-37791/): Memory corruption in dlink:dir-619l firmware (critical 9.8)
- [CVE-2023-37790](https://insights.sbomify.com/CVE-2023-37790/): File upload in broadcom:clarity (medium 5.4)
- [CVE-2023-3779](https://insights.sbomify.com/CVE-2023-3779/): Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure (medium 5.3)
- [CVE-2023-37788](https://insights.sbomify.com/CVE-2023-37788/): goproxy Denial of Service vulnerability (high 7.5)
- [CVE-2023-37787](https://insights.sbomify.com/CVE-2023-37787/): Cross-site scripting in geeklog:geeklog (medium 4.8)
- [CVE-2023-37786](https://insights.sbomify.com/CVE-2023-37786/): Cross-site scripting in geeklog:geeklog (medium 4.8)
- [CVE-2023-37785](https://insights.sbomify.com/CVE-2023-37785/): ImpressCMS Cross-site Scripting vulnerability (medium 4.8)
- [CVE-2023-37781](https://insights.sbomify.com/CVE-2023-37781/): Path traversal in emqx:emqx (medium 6.5)
- [CVE-2023-37777](https://insights.sbomify.com/CVE-2023-37777/): A SQL injection vulnerability exists in Synnefo Internet Management Software (IMS) version 2023 and earlier. (critical 9.8)
- [CVE-2023-37772](https://insights.sbomify.com/CVE-2023-37772/): SQL injection in phpgurukul:online shopping portal (high 8.8)
- [CVE-2023-37771](https://insights.sbomify.com/CVE-2023-37771/): SQL injection in phpgurukul:art gallery management system (critical 9.8)
- [CVE-2023-37770](https://insights.sbomify.com/CVE-2023-37770/): Memory corruption in grame:faust (medium 5.5)
- [CVE-2023-3777](https://insights.sbomify.com/CVE-2023-3777/): Use-after-free in Linux kernel's netfilter: nf_tables component (high 7.8)
- [CVE-2023-37769](https://insights.sbomify.com/CVE-2023-37769/): Denial of service in pixman:pixman (medium 6.5)
- [CVE-2023-37767](https://insights.sbomify.com/CVE-2023-37767/): Memory corruption in gpac:gpac (medium 5.5)
- [CVE-2023-37766](https://insights.sbomify.com/CVE-2023-37766/): Memory corruption in gpac:gpac (medium 5.5)
- [CVE-2023-37765](https://insights.sbomify.com/CVE-2023-37765/): Memory corruption in gpac:gpac (medium 5.5)
- [CVE-2023-3776](https://insights.sbomify.com/CVE-2023-3776/): Use-after-free in Linux kernel's net/sched: cls_fw component (high 7.8)
- [CVE-2023-37759](https://insights.sbomify.com/CVE-2023-37759/): Missing authorization in trendylogics:crypto currency tracker (critical 9.8)
- [CVE-2023-37758](https://insights.sbomify.com/CVE-2023-37758/): Memory corruption in dlink:dir-815 firmware (high 7.5)
- [CVE-2023-37756](https://insights.sbomify.com/CVE-2023-37756/): Weak cryptography in i-doit:i-doit (critical 9.8)
- [CVE-2023-37755](https://insights.sbomify.com/CVE-2023-37755/): Hardcoded credentials in i-doit:i-doit (critical 9.8)
- [CVE-2023-37754](https://insights.sbomify.com/CVE-2023-37754/): Code injection in PowerJob (critical 9.8)
- [CVE-2023-3775](https://insights.sbomify.com/CVE-2023-3775/): Vault Enterprise's Sentinel RGP Policies Allowed For Cross-Namespace Denial of Service (medium 4.2)
- [CVE-2023-37749](https://insights.sbomify.com/CVE-2023-37749/): Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attackers to view users' data without proper authorization. (medium 5.3)
- [CVE-2023-37748](https://insights.sbomify.com/CVE-2023-37748/): Denial of service in miniupnp project:ngiflib (medium 5.5)
- [CVE-2023-37746](https://insights.sbomify.com/CVE-2023-37746/): Cross-site scripting in phpgurukul:maid hiring management system (medium 6.1)
- [CVE-2023-37745](https://insights.sbomify.com/CVE-2023-37745/): Cross-site scripting in phpgurukul:maid hiring management system (medium 6.1)
- [CVE-2023-37744](https://insights.sbomify.com/CVE-2023-37744/): Cross-site scripting in phpgurukul:maid hiring management system (medium 6.1)
- [CVE-2023-37743](https://insights.sbomify.com/CVE-2023-37743/): Cross-site scripting in phpgurukul:teacher subject allocation system (medium 6.1)
- [CVE-2023-37742](https://insights.sbomify.com/CVE-2023-37742/): Cross-site scripting in webboss:webboss.io cms (medium 6.1)
- [CVE-2023-3774](https://insights.sbomify.com/CVE-2023-3774/): Vault Enterprise Namespace Creation May Lead to Denial of Service (medium 4.9)
- [CVE-2023-37739](https://insights.sbomify.com/CVE-2023-37739/): Path traversal in i-doit:i-doit (medium 6.5)
- [CVE-2023-37734](https://insights.sbomify.com/CVE-2023-37734/): Memory corruption in ezsoftmagic:mp3 audio converter (critical 9.8)
- [CVE-2023-37733](https://insights.sbomify.com/CVE-2023-37733/): File upload in tduckcloud:tduck-platform (medium 6.1)
- [CVE-2023-37732](https://insights.sbomify.com/CVE-2023-37732/): Null dereference in yasm project:yasm (medium 5.5)
- [CVE-2023-3773](https://insights.sbomify.com/CVE-2023-3773/): Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr (medium 5.5)
- [CVE-2023-37728](https://insights.sbomify.com/CVE-2023-37728/): Cross-site scripting in icewarp:icewarp (medium 6.1)
- [CVE-2023-37723](https://insights.sbomify.com/CVE-2023-37723/): Memory corruption in tenda:4g300 firmware (critical 9.8)
- [CVE-2023-37722](https://insights.sbomify.com/CVE-2023-37722/): Memory corruption in tenda:4g300 firmware (critical 9.8)
- [CVE-2023-37721](https://insights.sbomify.com/CVE-2023-37721/): Memory corruption in tenda:4g300 firmware (critical 9.8)
- [CVE-2023-3772](https://insights.sbomify.com/CVE-2023-3772/): Kernel: xfrm: null pointer dereference in xfrm_update_ae_params() (medium 5.5)
- [CVE-2023-37719](https://insights.sbomify.com/CVE-2023-37719/): Memory corruption in tenda:f1202 firmware (critical 9.8)
- [CVE-2023-37718](https://insights.sbomify.com/CVE-2023-37718/): Memory corruption in tenda:4g300 firmware (critical 9.8)
- [CVE-2023-37717](https://insights.sbomify.com/CVE-2023-37717/): Memory corruption in tenda:ac10 firmware (critical 9.8)
- [CVE-2023-37716](https://insights.sbomify.com/CVE-2023-37716/): Memory corruption in tenda:ac10 firmware (critical 9.8)
- [CVE-2023-37715](https://insights.sbomify.com/CVE-2023-37715/): Memory corruption in tenda:f1202 firmware (critical 9.8)
- [CVE-2023-37714](https://insights.sbomify.com/CVE-2023-37714/): Memory corruption in tenda:ac7 firmware (critical 9.8)
- [CVE-2023-37712](https://insights.sbomify.com/CVE-2023-37712/): Memory corruption in tenda:ac1206 firmware (critical 9.8)
- [CVE-2023-37711](https://insights.sbomify.com/CVE-2023-37711/): Memory corruption in tenda:ac10 firmware (critical 9.8)
- [CVE-2023-37710](https://insights.sbomify.com/CVE-2023-37710/): Memory corruption in tenda:ac10 firmware (critical 9.8)
- [CVE-2023-3771](https://insights.sbomify.com/CVE-2023-3771/): T1 theme <= 19.0 - Open Redirect (medium 6.1)
- [CVE-2023-37707](https://insights.sbomify.com/CVE-2023-37707/): Memory corruption in tenda:fh1203 firmware (critical 9.8)
- [CVE-2023-37706](https://insights.sbomify.com/CVE-2023-37706/): Memory corruption in tenda:fh1203 firmware (critical 9.8)
- [CVE-2023-37705](https://insights.sbomify.com/CVE-2023-37705/): Memory corruption in tenda:fh1203 firmware (critical 9.8)
- [CVE-2023-37704](https://insights.sbomify.com/CVE-2023-37704/): Memory corruption in tenda:fh1203 firmware (critical 9.8)
- [CVE-2023-37703](https://insights.sbomify.com/CVE-2023-37703/): Memory corruption in tenda:fh1203 firmware (critical 9.8)
- [CVE-2023-37702](https://insights.sbomify.com/CVE-2023-37702/): Memory corruption in tenda:fh1203 firmware (critical 9.8)
- [CVE-2023-37701](https://insights.sbomify.com/CVE-2023-37701/): Memory corruption in tenda:fh1203 firmware (critical 9.8)
- [CVE-2023-37700](https://insights.sbomify.com/CVE-2023-37700/): Memory corruption in tenda:fh1203 firmware (critical 9.8)
- [CVE-2023-3770](https://insights.sbomify.com/CVE-2023-3770/): Vulnerability in Ingeteam's INGEPAC DA (medium 5.3)
- [CVE-2023-37692](https://insights.sbomify.com/CVE-2023-37692/): Stored Cross-Site Scripting October CMS (medium 5.4)
- [CVE-2023-37690](https://insights.sbomify.com/CVE-2023-37690/): SQL injection in phpgurukul:maid hiring management system (medium 4.8)
- [CVE-2023-3769](https://insights.sbomify.com/CVE-2023-3769/): Vulnerability in Ingeteam's INGEPAC EF (high 8.6)
- [CVE-2023-37689](https://insights.sbomify.com/CVE-2023-37689/): SQL injection in phpgurukul:maid hiring management system (medium 4.8)
- [CVE-2023-37688](https://insights.sbomify.com/CVE-2023-37688/): SQL injection in phpgurukul:maid hiring management system (medium 4.8)
- [CVE-2023-37687](https://insights.sbomify.com/CVE-2023-37687/): Cross-site scripting in phpgurukul:online nurse hiring system (high 7.2)
- [CVE-2023-37686](https://insights.sbomify.com/CVE-2023-37686/): Cross-site scripting in phpgurukul:online nurse hiring system (medium 4.8)
- [CVE-2023-37685](https://insights.sbomify.com/CVE-2023-37685/): Cross-site scripting in phpgurukul:online nurse hiring system (medium 4.8)
- [CVE-2023-37684](https://insights.sbomify.com/CVE-2023-37684/): Cross-site scripting in phpgurukul:online nurse hiring system (medium 4.8)
- [CVE-2023-37683](https://insights.sbomify.com/CVE-2023-37683/): Cross-site scripting in phpgurukul:online nurse hiring system (medium 4.8)
- [CVE-2023-37682](https://insights.sbomify.com/CVE-2023-37682/): SQL injection in judging management system project:judging management system (critical 9.8)
- [CVE-2023-3768](https://insights.sbomify.com/CVE-2023-3768/): Vulnerability in Ingeteam's INGEPAC EF/DA (high 8.6)
- [CVE-2023-37679](https://insights.sbomify.com/CVE-2023-37679/): Command injection in nextgen:mirth connect (critical 9.8)
- [CVE-2023-37677](https://insights.sbomify.com/CVE-2023-37677/): File upload in pligg:pligg cms (critical 9.8)
- [CVE-2023-3767](https://insights.sbomify.com/CVE-2023-3767/): OS command injection on EasyPHP Webserver (critical 9.8)
- [CVE-2023-3766](https://insights.sbomify.com/CVE-2023-3766/): Invalid Slice Split Results in Server Panic (medium 5.9)
- [CVE-2023-37659](https://insights.sbomify.com/CVE-2023-37659/): xalpha vulnerable to Remote Code Execution (critical 9.8)
- [CVE-2023-37658](https://insights.sbomify.com/CVE-2023-37658/): Cross-site scripting in fastposter:fast-poster (medium 5.4)
- [CVE-2023-37657](https://insights.sbomify.com/CVE-2023-37657/): Cross-site scripting in lm21:twonav (medium 5.4)
- [CVE-2023-37656](https://insights.sbomify.com/CVE-2023-37656/): File upload in websiteguide project:websiteguide (critical 9.8)
- [CVE-2023-37650](https://insights.sbomify.com/CVE-2023-37650/): Cockpit CMS Cross-Site Request Forgery vulnerability (high 8.8)
- [CVE-2023-3765](https://insights.sbomify.com/CVE-2023-3765/): Absolute Path Traversal in mlflow/mlflow (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/269/