# Vulnerabilities published in 2023


- [CVE-2023-35793](https://insights.sbomify.com/CVE-2023-35793/): Cross-site request forgery in cassianetworks:access controller (high 8.8)
- [CVE-2023-35792](https://insights.sbomify.com/CVE-2023-35792/): Cross-site scripting in vound-software:intella connect (medium 5.4)
- [CVE-2023-35791](https://insights.sbomify.com/CVE-2023-35791/): Open redirect in vound-software:intella connect (medium 6.1)
- [CVE-2023-35790](https://insights.sbomify.com/CVE-2023-35790/): Integer overflow in libjxl project:libjxl (high 7.5)
- [CVE-2023-3579](https://insights.sbomify.com/CVE-2023-3579/): HadSky User cross-site request forgery (medium 4.3)
- [CVE-2023-35789](https://insights.sbomify.com/CVE-2023-35789/): Information disclosure in rabbitmq-c project:rabbitmq-c (medium 5.5)
- [CVE-2023-35788](https://insights.sbomify.com/CVE-2023-35788/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2023-35786](https://insights.sbomify.com/CVE-2023-35786/): XML external entity in zohocorp:manageengine admanager plus (medium 4.9)
- [CVE-2023-35785](https://insights.sbomify.com/CVE-2023-35785/): Auth bypass in zohocorp:manageengine ad360 (high 8.1)
- [CVE-2023-35784](https://insights.sbomify.com/CVE-2023-35784/): Use after free in openbsd:libressl (critical 9.8)
- [CVE-2023-35783](https://insights.sbomify.com/CVE-2023-35783/): ke_search (aka Faceted Search) vulnerable to Cross-Site Scripting (medium 6.3)
- [CVE-2023-35782](https://insights.sbomify.com/CVE-2023-35782/): ipandlanguageredirect extension vulnerable to SQL Injection (high 8.2)
- [CVE-2023-35781](https://insights.sbomify.com/CVE-2023-35781/): WordPress LWS Cleaner Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-35780](https://insights.sbomify.com/CVE-2023-35780/): WordPress Galleria Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-3578](https://insights.sbomify.com/CVE-2023-3578/): DedeCMS co_do.php server-side request forgery (medium 5.5)
- [CVE-2023-35779](https://insights.sbomify.com/CVE-2023-35779/): WordPress Seed Fonts Plugin 2.3.1 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-35778](https://insights.sbomify.com/CVE-2023-35778/): WordPress Recent Posts Slider Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-35777](https://insights.sbomify.com/CVE-2023-35777/): WordPress The Events Calendar plugin <= 6.1.2.2 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2023-35776](https://insights.sbomify.com/CVE-2023-35776/): WordPress Sermon'e – Sermons Online Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2023-35775](https://insights.sbomify.com/CVE-2023-35775/): WordPress WP Backup Manager Plugin <= 1.13.1 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-35774](https://insights.sbomify.com/CVE-2023-35774/): WordPress LWS Tools Plugin <= 2.4.1 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-35773](https://insights.sbomify.com/CVE-2023-35773/): WordPress Template Debugger Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-35772](https://insights.sbomify.com/CVE-2023-35772/): WordPress Google Map Shortcode Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-3577](https://insights.sbomify.com/CVE-2023-3577/): Limited blind SSRF to localhost/intranet in interactive dialog implementation (low 3.5)
- [CVE-2023-35769](https://insights.sbomify.com/CVE-2023-35769/): Privilege escalation in Intel(R) CIP software (medium 6.7)
- [CVE-2023-35767](https://insights.sbomify.com/CVE-2023-35767/): Unauthenticated Remote Denial-of-Service via Shutdown Function in Helix Core (high 7.5)
- [CVE-2023-35765](https://insights.sbomify.com/CVE-2023-35765/): PiiGAB M-Bus Plaintext Storage of a Password (medium 6.5)
- [CVE-2023-35764](https://insights.sbomify.com/CVE-2023-35764/): Security feature bypass in Survey Maker (medium 5.3)
- [CVE-2023-35763](https://insights.sbomify.com/CVE-2023-35763/): Iagona ScrutisWeb Use of Hard-coded Cryptographic Key (medium 5.5)
- [CVE-2023-35762](https://insights.sbomify.com/CVE-2023-35762/): OS Command Injection in INEA ME RTU (critical 9.9)
- [CVE-2023-3576](https://insights.sbomify.com/CVE-2023-3576/): Libtiff: memory leak in tiffcrop.c (medium 5.5)
- [CVE-2023-35759](https://insights.sbomify.com/CVE-2023-35759/): Cross-site scripting in progress:whatsup gold (medium 6.1)
- [CVE-2023-35757](https://insights.sbomify.com/CVE-2023-35757/): D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35756](https://insights.sbomify.com/CVE-2023-35756/): D-Link DAP-2622 DDP Set Date-Time Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35755](https://insights.sbomify.com/CVE-2023-35755/): D-Link DAP-2622 DDP Set Date-Time Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35754](https://insights.sbomify.com/CVE-2023-35754/): D-Link DAP-2622 DDP Set AG Profile NMS URL Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35753](https://insights.sbomify.com/CVE-2023-35753/): D-Link DAP-2622 DDP Set AG Profile UUID Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35752](https://insights.sbomify.com/CVE-2023-35752/): D-Link DAP-2622 DDP Set AG Profile Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35751](https://insights.sbomify.com/CVE-2023-35751/): D-Link DAP-2622 DDP Set AG Profile Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35750](https://insights.sbomify.com/CVE-2023-35750/): D-Link DAP-2622 DDP Get SSID List WPA PSK Information Disclosure Vulnerability (high 7.4)
- [CVE-2023-3575](https://insights.sbomify.com/CVE-2023-3575/): Quiz And Survey Master < 8.1.11 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-35749](https://insights.sbomify.com/CVE-2023-35749/): D-Link DAP-2622 DDP Firmware Upgrade Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35748](https://insights.sbomify.com/CVE-2023-35748/): Memory corruption in DAP-2622 (high 8.8)
- [CVE-2023-35747](https://insights.sbomify.com/CVE-2023-35747/): D-Link DAP-2622 DDP Firmware Upgrade Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35746](https://insights.sbomify.com/CVE-2023-35746/): D-Link DAP-2622 DDP Firmware Upgrade Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35745](https://insights.sbomify.com/CVE-2023-35745/): D-Link DAP-2622 DDP Configuration Restore Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35744](https://insights.sbomify.com/CVE-2023-35744/): Memory corruption in DAP-2622 (high 8.8)
- [CVE-2023-35743](https://insights.sbomify.com/CVE-2023-35743/): D-Link DAP-2622 DDP Configuration Restore Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35742](https://insights.sbomify.com/CVE-2023-35742/): D-Link DAP-2622 DDP Configuration Restore Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35741](https://insights.sbomify.com/CVE-2023-35741/): D-Link DAP-2622 DDP Configuration Backup Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35740](https://insights.sbomify.com/CVE-2023-35740/): D-Link DAP-2622 DDP Configuration Backup Server Address Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-3574](https://insights.sbomify.com/CVE-2023-3574/): Improper Authorization in pimcore/customer-data-framework (medium 6.3)
- [CVE-2023-35739](https://insights.sbomify.com/CVE-2023-35739/): Memory corruption in DAP-2622 (high 8.8)
- [CVE-2023-35738](https://insights.sbomify.com/CVE-2023-35738/): D-Link DAP-2622 DDP Configuration Backup Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35737](https://insights.sbomify.com/CVE-2023-35737/): D-Link DAP-2622 DDP Configuration Backup Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35736](https://insights.sbomify.com/CVE-2023-35736/): D-Link DAP-2622 DDP Change ID Password New Password Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35735](https://insights.sbomify.com/CVE-2023-35735/): D-Link DAP-2622 DDP Change ID Password New Username Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35734](https://insights.sbomify.com/CVE-2023-35734/): Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2023-35733](https://insights.sbomify.com/CVE-2023-35733/): D-Link DAP-2622 DDP Change ID Password Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35732](https://insights.sbomify.com/CVE-2023-35732/): D-Link DAP-2622 DDP Reset Factory Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35731](https://insights.sbomify.com/CVE-2023-35731/): D-Link DAP-2622 DDP Reset Factory Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35730](https://insights.sbomify.com/CVE-2023-35730/): D-Link DAP-2622 DDP Reset Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-3573](https://insights.sbomify.com/CVE-2023-3573/): PHOENIX CONTACT: Command Injection in WP 6xxx Web panels (high 8.8)
- [CVE-2023-35729](https://insights.sbomify.com/CVE-2023-35729/): D-Link DAP-2622 DDP Reset Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35728](https://insights.sbomify.com/CVE-2023-35728/): D-Link DAP-2622 DDP Reboot Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35727](https://insights.sbomify.com/CVE-2023-35727/): D-Link DAP-2622 DDP Reboot Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35726](https://insights.sbomify.com/CVE-2023-35726/): D-Link DAP-2622 DDP User Verification Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35725](https://insights.sbomify.com/CVE-2023-35725/): D-Link DAP-2622 DDP User Verification Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35724](https://insights.sbomify.com/CVE-2023-35724/): D-Link DAP-2622 Telnet CLI Use of Hardcoded Credentials Authentication Bypass Vulnerability (high 8.8)
- [CVE-2023-35723](https://insights.sbomify.com/CVE-2023-35723/): D-Link DIR-X3260 prog.cgi SOAPAction Command Injection Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35722](https://insights.sbomify.com/CVE-2023-35722/): NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35721](https://insights.sbomify.com/CVE-2023-35721/): NETGEAR Multiple Routers curl_post Improper Certificate Validation Remote Code Execution Vulnerability (high 8.1)
- [CVE-2023-35720](https://insights.sbomify.com/CVE-2023-35720/): ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-3572](https://insights.sbomify.com/CVE-2023-3572/): PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels (critical 10.0)
- [CVE-2023-35719](https://insights.sbomify.com/CVE-2023-35719/): Auth bypass in ADSelfService Plus (medium 6.8)
- [CVE-2023-35718](https://insights.sbomify.com/CVE-2023-35718/): D-Link DAP-2622 DDP Change ID Password Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35717](https://insights.sbomify.com/CVE-2023-35717/): TP-Link Tapo C210 Password Recovery Authentication Bypass Vulnerability (high 8.8)
- [CVE-2023-35716](https://insights.sbomify.com/CVE-2023-35716/): Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-35715](https://insights.sbomify.com/CVE-2023-35715/): Ashlar-Vellum Cobalt AR File Parsing Uninitialized Memory Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-35714](https://insights.sbomify.com/CVE-2023-35714/): Ashlar-Vellum Cobalt IGS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-35713](https://insights.sbomify.com/CVE-2023-35713/): Ashlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-35712](https://insights.sbomify.com/CVE-2023-35712/): Ashlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-35711](https://insights.sbomify.com/CVE-2023-35711/): Ashlar-Vellum Cobalt XE File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability (high 7.0)
- [CVE-2023-35710](https://insights.sbomify.com/CVE-2023-35710/): Ashlar-Vellum Cobalt Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-3571](https://insights.sbomify.com/CVE-2023-3571/): PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels (high 8.8)
- [CVE-2023-35709](https://insights.sbomify.com/CVE-2023-35709/): Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-35708](https://insights.sbomify.com/CVE-2023-35708/): SQL injection in progress:moveit transfer (critical 9.8)
- [CVE-2023-35704](https://insights.sbomify.com/CVE-2023-35704/): Memory corruption in GTKWave (high 7.8)
- [CVE-2023-35703](https://insights.sbomify.com/CVE-2023-35703/): Memory corruption in GTKWave (high 7.8)
- [CVE-2023-35702](https://insights.sbomify.com/CVE-2023-35702/): Memory corruption in GTKWave (high 7.8)
- [CVE-2023-35701](https://insights.sbomify.com/CVE-2023-35701/): Apache Hive: Arbitrary command execution via JDBC driver (medium 6.6)
- [CVE-2023-3570](https://insights.sbomify.com/CVE-2023-3570/): PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels (high 8.8)
- [CVE-2023-35699](https://insights.sbomify.com/CVE-2023-35699/): Information disclosure in ICR890-4 (medium 5.3)
- [CVE-2023-35698](https://insights.sbomify.com/CVE-2023-35698/): Information disclosure in ICR890-4 (medium 5.3)
- [CVE-2023-35697](https://insights.sbomify.com/CVE-2023-35697/): Auth bypass in ICR890-4 (medium 5.3)
- [CVE-2023-35696](https://insights.sbomify.com/CVE-2023-35696/): Information disclosure in ICR890-4 (high 7.5)
- [CVE-2023-35695](https://insights.sbomify.com/CVE-2023-35695/): Information disclosure in Trend Micro Moibile Security for Enterprise (high 7.5)
- [CVE-2023-35694](https://insights.sbomify.com/CVE-2023-35694/): Memory corruption in Android (high 7.5)
- [CVE-2023-35693](https://insights.sbomify.com/CVE-2023-35693/): Use after free in Android (medium 6.7)
- [CVE-2023-35692](https://insights.sbomify.com/CVE-2023-35692/): Privilege escalation in Android (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/285/