# Vulnerabilities published in 2023


- [CVE-2023-37030](https://insights.sbomify.com/CVE-2023-37030/): Null dereference in linuxfoundation:magma (medium 6.5)
- [CVE-2023-3703](https://insights.sbomify.com/CVE-2023-3703/): Proscend Advice ICR Series routers fw version 1.76 (critical 10.0)
- [CVE-2023-37029](https://insights.sbomify.com/CVE-2023-37029/): Denial of service in linuxfoundation:magma (high 7.5)
- [CVE-2023-37028](https://insights.sbomify.com/CVE-2023-37028/): Null dereference in linuxfoundation:magma (medium 6.5)
- [CVE-2023-37027](https://insights.sbomify.com/CVE-2023-37027/): Null dereference in linuxfoundation:magma (medium 5.7)
- [CVE-2023-37026](https://insights.sbomify.com/CVE-2023-37026/): Null dereference in linuxfoundation:magma (medium 6.5)
- [CVE-2023-37025](https://insights.sbomify.com/CVE-2023-37025/): Null dereference in linuxfoundation:magma (medium 6.5)
- [CVE-2023-37024](https://insights.sbomify.com/CVE-2023-37024/): Denial of service in linuxfoundation:magma (high 7.5)
- [CVE-2023-37023](https://insights.sbomify.com/CVE-2023-37023/): Denial of service in open5gs:open5gs (high 8.6)
- [CVE-2023-37022](https://insights.sbomify.com/CVE-2023-37022/): Denial of service in open5gs:open5gs (high 7.5)
- [CVE-2023-37021](https://insights.sbomify.com/CVE-2023-37021/): Denial of service in open5gs:open5gs (high 8.6)
- [CVE-2023-37020](https://insights.sbomify.com/CVE-2023-37020/): Denial of service in open5gs:open5gs (high 8.6)
- [CVE-2023-37019](https://insights.sbomify.com/CVE-2023-37019/): Denial of service in open5gs:open5gs (high 8.6)
- [CVE-2023-37018](https://insights.sbomify.com/CVE-2023-37018/): Denial of service in open5gs:open5gs (high 8.6)
- [CVE-2023-37017](https://insights.sbomify.com/CVE-2023-37017/): Denial of service in open5gs:open5gs (high 8.6)
- [CVE-2023-37016](https://insights.sbomify.com/CVE-2023-37016/): Denial of service in open5gs:open5gs (high 8.6)
- [CVE-2023-37015](https://insights.sbomify.com/CVE-2023-37015/): Denial of service in open5gs:open5gs (high 8.6)
- [CVE-2023-37014](https://insights.sbomify.com/CVE-2023-37014/): Denial of service in open5gs:open5gs (high 7.5)
- [CVE-2023-37013](https://insights.sbomify.com/CVE-2023-37013/): Denial of service in open5gs:open5gs (high 7.3)
- [CVE-2023-37012](https://insights.sbomify.com/CVE-2023-37012/): Denial of service in open5gs:open5gs (medium 5.3)
- [CVE-2023-37011](https://insights.sbomify.com/CVE-2023-37011/): Denial of service in open5gs:open5gs (medium 6.3)
- [CVE-2023-37010](https://insights.sbomify.com/CVE-2023-37010/): Denial of service in open5gs:open5gs (medium 6.3)
- [CVE-2023-3701](https://insights.sbomify.com/CVE-2023-3701/): Relative path traversal in Aqua eSolutions (critical 9.9)
- [CVE-2023-37009](https://insights.sbomify.com/CVE-2023-37009/): Denial of service in open5gs:open5gs (medium 6.3)
- [CVE-2023-37008](https://insights.sbomify.com/CVE-2023-37008/): Memory corruption in open5gs:open5gs (medium 5.3)
- [CVE-2023-37007](https://insights.sbomify.com/CVE-2023-37007/): Denial of service in open5gs:open5gs (medium 5.3)
- [CVE-2023-37006](https://insights.sbomify.com/CVE-2023-37006/): Denial of service in open5gs:open5gs (medium 5.3)
- [CVE-2023-37005](https://insights.sbomify.com/CVE-2023-37005/): Denial of service in open5gs:open5gs (medium 5.3)
- [CVE-2023-37004](https://insights.sbomify.com/CVE-2023-37004/): Denial of service in open5gs:open5gs (medium 5.3)
- [CVE-2023-37003](https://insights.sbomify.com/CVE-2023-37003/): Denial of service in open5gs:open5gs (medium 5.3)
- [CVE-2023-37002](https://insights.sbomify.com/CVE-2023-37002/): Denial of service in open5gs:open5gs (medium 5.3)
- [CVE-2023-3700](https://insights.sbomify.com/CVE-2023-3700/): Authorization Bypass Through User-Controlled Key in alextselegidis/easyappointments (medium 6.3)
- [CVE-2023-36998](https://insights.sbomify.com/CVE-2023-36998/): The NextEPC MME <= 1.0.1 (fixed in commit a8492c9c5bc0a66c6999cb5a263545b32a4109df) contains a stack-based buffer overflow vulnerability in (high 8.9)
- [CVE-2023-36995](https://insights.sbomify.com/CVE-2023-36995/): Cross-site scripting in travianz project:travianz (medium 6.1)
- [CVE-2023-36994](https://insights.sbomify.com/CVE-2023-36994/): Missing authorization in travianz project:travianz (critical 9.8)
- [CVE-2023-36993](https://insights.sbomify.com/CVE-2023-36993/): Weak cryptography in travianz project:travianz (critical 9.8)
- [CVE-2023-36992](https://insights.sbomify.com/CVE-2023-36992/): Code injection in travianz project:travianz (high 7.2)
- [CVE-2023-3699](https://insights.sbomify.com/CVE-2023-3699/): An Improper Privilege Management vulnerability was found on the ADM (high 8.7)
- [CVE-2023-36984](https://insights.sbomify.com/CVE-2023-36984/): Information disclosure in lavalite:lavalite (high 7.5)
- [CVE-2023-36983](https://insights.sbomify.com/CVE-2023-36983/): Information disclosure in lavalite:lavalite (high 7.5)
- [CVE-2023-36980](https://insights.sbomify.com/CVE-2023-36980/): Business logic in ethereum:blockchain (medium 5.3)
- [CVE-2023-3698](https://insights.sbomify.com/CVE-2023-3698/): A Command injection vulnerability was found on Printer service of ADM (high 8.5)
- [CVE-2023-36970](https://insights.sbomify.com/CVE-2023-36970/): Cross-site scripting in cmsmadesimple:cms made simple (medium 5.4)
- [CVE-2023-3697](https://insights.sbomify.com/CVE-2023-3697/): A Command injection vulnerability was found on Printer service of ADM (high 8.5)
- [CVE-2023-36969](https://insights.sbomify.com/CVE-2023-36969/): File upload in cmsmadesimple:cms made simple (high 8.8)
- [CVE-2023-36968](https://insights.sbomify.com/CVE-2023-36968/): SQL injection in food ordering system project:food ordering system (high 7.2)
- [CVE-2023-3696](https://insights.sbomify.com/CVE-2023-3696/): Prototype Pollution in automattic/mongoose (critical 10.0)
- [CVE-2023-36955](https://insights.sbomify.com/CVE-2023-36955/): Memory corruption in totolink:cp300\+ firmware (critical 9.8)
- [CVE-2023-36954](https://insights.sbomify.com/CVE-2023-36954/): Command injection in totolink:cp300\+ firmware (critical 9.8)
- [CVE-2023-36953](https://insights.sbomify.com/CVE-2023-36953/): Command injection in totolink:cp300\+ firmware (critical 9.8)
- [CVE-2023-36952](https://insights.sbomify.com/CVE-2023-36952/): Memory corruption in totolink:cp300\+ firmware (critical 9.8)
- [CVE-2023-36950](https://insights.sbomify.com/CVE-2023-36950/): Memory corruption in totolink:a7000r firmware (high 8.8)
- [CVE-2023-3695](https://insights.sbomify.com/CVE-2023-3695/): Campcodes Beauty Salon Management System add-product.php sql injection (medium 6.3)
- [CVE-2023-36947](https://insights.sbomify.com/CVE-2023-36947/): Memory corruption in totolink:a7000r firmware (high 8.8)
- [CVE-2023-36942](https://insights.sbomify.com/CVE-2023-36942/): Cross-site scripting in phpgurukul:online fire reporting system (medium 6.1)
- [CVE-2023-36941](https://insights.sbomify.com/CVE-2023-36941/): Cross-site scripting in phpgurukul:online fire reporting system (medium 6.1)
- [CVE-2023-36940](https://insights.sbomify.com/CVE-2023-36940/): Cross-site scripting in phpgurukul:online fire reporting system (medium 4.8)
- [CVE-2023-3694](https://insights.sbomify.com/CVE-2023-3694/): SourceCodester/projectworlds House Rental and Property Listing index.php sql injection (medium 5.3)
- [CVE-2023-36939](https://insights.sbomify.com/CVE-2023-36939/): Cross-site scripting in phpgurukul:hostel management system (medium 6.1)
- [CVE-2023-36936](https://insights.sbomify.com/CVE-2023-36936/): Cross-site scripting in phpgurukul:online security guards hiring system (medium 6.1)
- [CVE-2023-36934](https://insights.sbomify.com/CVE-2023-36934/): SQL injection in progress:moveit transfer (critical 9.1)
- [CVE-2023-36933](https://insights.sbomify.com/CVE-2023-36933/): Denial of service in progress:moveit transfer (high 7.5)
- [CVE-2023-36932](https://insights.sbomify.com/CVE-2023-36932/): SQL injection in progress:moveit transfer (high 8.1)
- [CVE-2023-3693](https://insights.sbomify.com/CVE-2023-3693/): SourceCodester Life Insurance Management System login.php sql injection (high 7.3)
- [CVE-2023-36926](https://insights.sbomify.com/CVE-2023-36926/): Information disclosure vulnerability in SAP Host Agent (low 3.7)
- [CVE-2023-36925](https://insights.sbomify.com/CVE-2023-36925/): Unauthenticated blind SSRF in SAP Solution Manager (Diagnostics agent) (high 7.2)
- [CVE-2023-36924](https://insights.sbomify.com/CVE-2023-36924/): Log Injection vulnerability in SAP ERP Defense Forces and Public Security (medium 4.9)
- [CVE-2023-36923](https://insights.sbomify.com/CVE-2023-36923/): Code Injection vulnerability in SAP PowerDesigner (high 7.8)
- [CVE-2023-36922](https://insights.sbomify.com/CVE-2023-36922/): OS command injection vulnerability in SAP ECC and SAP S/4HANA (IS-OIL) (critical 9.1)
- [CVE-2023-36921](https://insights.sbomify.com/CVE-2023-36921/): Header Injection in SAP Solution Manager (Diagnostic Agent) (high 7.2)
- [CVE-2023-36920](https://insights.sbomify.com/CVE-2023-36920/): Clickjacking vulnerability in SAP Enable Now (medium 6.1)
- [CVE-2023-3692](https://insights.sbomify.com/CVE-2023-3692/): Unrestricted Upload of File with Dangerous Type in admidio/admidio (medium 6.7)
- [CVE-2023-36919](https://insights.sbomify.com/CVE-2023-36919/): Information Disclosure in SAP Enable Now (medium 5.3)
- [CVE-2023-36918](https://insights.sbomify.com/CVE-2023-36918/): Cross-Site Scripting vulnerability in SAP Enable Now (medium 6.1)
- [CVE-2023-36917](https://insights.sbomify.com/CVE-2023-36917/): Password Change rate limit bypass in SAP BusinessObjects Business Intelligence Platform (medium 5.9)
- [CVE-2023-36916](https://insights.sbomify.com/CVE-2023-36916/): Integer overflow in GTKWave (high 7.8)
- [CVE-2023-36915](https://insights.sbomify.com/CVE-2023-36915/): Integer overflow in GTKWave (high 7.8)
- [CVE-2023-36914](https://insights.sbomify.com/CVE-2023-36914/): Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability (medium 5.5)
- [CVE-2023-36913](https://insights.sbomify.com/CVE-2023-36913/): Microsoft Message Queuing Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-36912](https://insights.sbomify.com/CVE-2023-36912/): Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability (high 7.5)
- [CVE-2023-36911](https://insights.sbomify.com/CVE-2023-36911/): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-36910](https://insights.sbomify.com/CVE-2023-36910/): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-3691](https://insights.sbomify.com/CVE-2023-3691/): layui HTML Attribute cross site scripting (low 3.5)
- [CVE-2023-36909](https://insights.sbomify.com/CVE-2023-36909/): Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability (medium 6.5)
- [CVE-2023-36908](https://insights.sbomify.com/CVE-2023-36908/): Windows Hyper-V Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-36907](https://insights.sbomify.com/CVE-2023-36907/): Windows Cryptographic Services Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-36906](https://insights.sbomify.com/CVE-2023-36906/): Windows Cryptographic Services Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-36905](https://insights.sbomify.com/CVE-2023-36905/): Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-36904](https://insights.sbomify.com/CVE-2023-36904/): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-36903](https://insights.sbomify.com/CVE-2023-36903/): Windows System Assessment Tool Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-36902](https://insights.sbomify.com/CVE-2023-36902/): Windows Runtime Remote Code Execution Vulnerability (high 7.0)
- [CVE-2023-36900](https://insights.sbomify.com/CVE-2023-36900/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-3690](https://insights.sbomify.com/CVE-2023-3690/): Bylancer QuickOrder GET Parameter blog sql injection (medium 6.3)
- [CVE-2023-36899](https://insights.sbomify.com/CVE-2023-36899/): ASP.NET Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2023-36898](https://insights.sbomify.com/CVE-2023-36898/): Tablet Windows User Interface Application Core Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-36897](https://insights.sbomify.com/CVE-2023-36897/): Visual Studio Tools for Office Runtime Spoofing Vulnerability (high 8.1)
- [CVE-2023-36896](https://insights.sbomify.com/CVE-2023-36896/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-36895](https://insights.sbomify.com/CVE-2023-36895/): Microsoft Outlook Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-36894](https://insights.sbomify.com/CVE-2023-36894/): Microsoft SharePoint Server Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-36893](https://insights.sbomify.com/CVE-2023-36893/): Microsoft Outlook Spoofing Vulnerability (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/275/