# Vulnerabilities published in 2023


- [CVE-2023-34735](https://insights.sbomify.com/CVE-2023-34735/): SQL injection in property cloud platform management center project:property cloud platform management center (critical 9.8)
- [CVE-2023-34734](https://insights.sbomify.com/CVE-2023-34734/): Cross-site scripting in secnet:annet ac centralized management platform (medium 4.8)
- [CVE-2023-34733](https://insights.sbomify.com/CVE-2023-34733/): Denial of service in vw:discover media infotainment system (medium 6.8)
- [CVE-2023-34732](https://insights.sbomify.com/CVE-2023-34732/): Auth bypass in flytxt:neon-dx (medium 5.4)
- [CVE-2023-3473](https://insights.sbomify.com/CVE-2023-3473/): Campcodes Retro Cellphone Online Store edit_product.php sql injection (medium 4.7)
- [CVE-2023-34725](https://insights.sbomify.com/CVE-2023-34725/): Privilege escalation in jaycar:la5570 firmware (medium 6.8)
- [CVE-2023-34724](https://insights.sbomify.com/CVE-2023-34724/): Privilege escalation in jaycar:la5570 firmware (medium 6.8)
- [CVE-2023-34723](https://insights.sbomify.com/CVE-2023-34723/): Information disclosure in jaycar:la5570 firmware (high 7.5)
- [CVE-2023-3472](https://insights.sbomify.com/CVE-2023-3472/): Use after free in KW Watcher on Windows (high 8.6)
- [CVE-2023-3471](https://insights.sbomify.com/CVE-2023-3471/): Memory corruption in KW Watcher (high 8.6)
- [CVE-2023-3470](https://insights.sbomify.com/CVE-2023-3470/): BIG-IP FIPS HSM password vulnerability CVE-2023-3470 (medium 6.0)
- [CVE-2023-3469](https://insights.sbomify.com/CVE-2023-3469/): Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq (medium 5.2)
- [CVE-2023-34673](https://insights.sbomify.com/CVE-2023-34673/): Information disclosure in elenos:etg150 firmware (medium 6.5)
- [CVE-2023-34672](https://insights.sbomify.com/CVE-2023-34672/): Privilege escalation in elenos:etg150 firmware (high 8.8)
- [CVE-2023-34671](https://insights.sbomify.com/CVE-2023-34671/): Privilege escalation in elenos:etg150 fm firmware (high 8.8)
- [CVE-2023-3467](https://insights.sbomify.com/CVE-2023-3467/): Privilege escalation in NetScaler ADC (high 8.0)
- [CVE-2023-34669](https://insights.sbomify.com/CVE-2023-34669/): Denial of service in totolink:cp300\+ firmware (high 7.5)
- [CVE-2023-34666](https://insights.sbomify.com/CVE-2023-34666/): Cross-site scripting in phpgurukul:cyber cafe management system (medium 6.1)
- [CVE-2023-34660](https://insights.sbomify.com/CVE-2023-34660/): jeecg-boot unrestricted file upload vulnerability (medium 6.5)
- [CVE-2023-3466](https://insights.sbomify.com/CVE-2023-3466/): Reflected Cross-Site Scripting (XSS) (high 8.3)
- [CVE-2023-34659](https://insights.sbomify.com/CVE-2023-34659/): jeecg-boot SQL injection vulnerability (critical 9.8)
- [CVE-2023-34658](https://insights.sbomify.com/CVE-2023-34658/): Other in telegram:telegram (medium 5.3)
- [CVE-2023-34657](https://insights.sbomify.com/CVE-2023-34657/): Cross-site scripting in eyoucms:eyoucms (medium 4.8)
- [CVE-2023-34656](https://insights.sbomify.com/CVE-2023-34656/): Auth bypass in video management system project:video management system (high 8.8)
- [CVE-2023-34654](https://insights.sbomify.com/CVE-2023-34654/): Cross-site scripting in taogogo:taocms (medium 6.1)
- [CVE-2023-34652](https://insights.sbomify.com/CVE-2023-34652/): Cross-site scripting in phpgurukul:hostel management system (medium 6.1)
- [CVE-2023-34651](https://insights.sbomify.com/CVE-2023-34651/): Cross-site scripting in hospital management system project:hospital management system (medium 6.1)
- [CVE-2023-34650](https://insights.sbomify.com/CVE-2023-34650/): Cross-site scripting in small crm project:small crm (medium 6.1)
- [CVE-2023-3465](https://insights.sbomify.com/CVE-2023-3465/): SimplePHPscripts Classified Ads Script HTTP POST Request user.php cross site scripting (low 3.5)
- [CVE-2023-34648](https://insights.sbomify.com/CVE-2023-34648/): Cross-site scripting in user registration \& login and user management system with admin panel project:user registration \& login and user management system with admin panel (medium 6.1)
- [CVE-2023-34647](https://insights.sbomify.com/CVE-2023-34647/): Cross-site scripting in phpgurukul:hostel management system (medium 6.1)
- [CVE-2023-34645](https://insights.sbomify.com/CVE-2023-34645/): Path traversal in jflyfox:jfinal cms (high 7.5)
- [CVE-2023-34644](https://insights.sbomify.com/CVE-2023-34644/): Code injection in ruijie:re-eg1000m firmware (critical 9.8)
- [CVE-2023-34642](https://insights.sbomify.com/CVE-2023-34642/): Security feature bypass in kioware:kioware (high 7.8)
- [CVE-2023-34641](https://insights.sbomify.com/CVE-2023-34641/): Security feature bypass in kioware:kioware (high 7.8)
- [CVE-2023-3464](https://insights.sbomify.com/CVE-2023-3464/): SimplePHPscripts Classified Ads Script URL Parameter preview.php cross site scripting (low 3.5)
- [CVE-2023-34637](https://insights.sbomify.com/CVE-2023-34637/): Cross-site scripting in isarnet:isarflow (medium 5.4)
- [CVE-2023-34635](https://insights.sbomify.com/CVE-2023-34635/): SQL injection in wifi-soft:unibox administration (critical 9.8)
- [CVE-2023-34634](https://insights.sbomify.com/CVE-2023-34634/): Deserialization in getgreenshot:greenshot (high 7.8)
- [CVE-2023-3463](https://insights.sbomify.com/CVE-2023-3463/): GE Digital CIMPLICITY Heap-based Buffer Overflow (medium 6.6)
- [CVE-2023-34626](https://insights.sbomify.com/CVE-2023-34626/): SQL injection in piwigo:piwigo (medium 4.3)
- [CVE-2023-34625](https://insights.sbomify.com/CVE-2023-34625/): Auth bypass in showmojo:mojobox firmware (high 8.1)
- [CVE-2023-34624](https://insights.sbomify.com/CVE-2023-34624/): htmlcleaner vulnerable to stack exhaustion (high 7.5)
- [CVE-2023-34623](https://insights.sbomify.com/CVE-2023-34623/): Memory corruption in jtidy project:jtidy (high 7.5)
- [CVE-2023-34620](https://insights.sbomify.com/CVE-2023-34620/): hjson stack exhaustion vulnerability (high 7.5)
- [CVE-2023-3462](https://insights.sbomify.com/CVE-2023-3462/): Vault's LDAP Auth Method Allows for User Enumeration (medium 5.3)
- [CVE-2023-34617](https://insights.sbomify.com/CVE-2023-34617/): genson vulnerable to stack exhaustion (high 7.5)
- [CVE-2023-34616](https://insights.sbomify.com/CVE-2023-34616/): pbjson vulnerable to stack exhaustion (high 7.5)
- [CVE-2023-34615](https://insights.sbomify.com/CVE-2023-34615/): JSONUtil vulnerable to stack exhaustion (high 7.5)
- [CVE-2023-34614](https://insights.sbomify.com/CVE-2023-34614/): jsonij vulnerable to stack exhaustion (high 7.5)
- [CVE-2023-34613](https://insights.sbomify.com/CVE-2023-34613/): sojo vulnerable to stack exhaustion (high 7.5)
- [CVE-2023-34612](https://insights.sbomify.com/CVE-2023-34612/): ph-json vulnerable to stack exhaustion (high 7.5)
- [CVE-2023-34611](https://insights.sbomify.com/CVE-2023-34611/): Memory corruption in mjson project:mjson (high 7.5)
- [CVE-2023-34610](https://insights.sbomify.com/CVE-2023-34610/): json-io vulnerable to stack exhaustion (high 7.5)
- [CVE-2023-34609](https://insights.sbomify.com/CVE-2023-34609/): Memory corruption in flexjson project:flexjson (high 7.5)
- [CVE-2023-34603](https://insights.sbomify.com/CVE-2023-34603/): JeecgBoot vulnerable to SQL injection in queryFilterTableDictInfo (high 7.5)
- [CVE-2023-34602](https://insights.sbomify.com/CVE-2023-34602/): JeecgBoot vulnerable to SQL injection in queryTableDictItemsByCode (high 7.5)
- [CVE-2023-34601](https://insights.sbomify.com/CVE-2023-34601/): SQL injection in jeesite:jeesite (critical 9.8)
- [CVE-2023-34600](https://insights.sbomify.com/CVE-2023-34600/): SQL injection in adiscon:loganalyzer (critical 9.8)
- [CVE-2023-3460](https://insights.sbomify.com/CVE-2023-3460/): Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation (critical 9.8)
- [CVE-2023-34599](https://insights.sbomify.com/CVE-2023-34599/): Cross-site scripting in gibbonedu:gibbon (medium 6.1)
- [CVE-2023-34598](https://insights.sbomify.com/CVE-2023-34598/): Path traversal in gibbonedu:gibbon (critical 9.8)
- [CVE-2023-34597](https://insights.sbomify.com/CVE-2023-34597/): Denial of service in fibaro:fgms-001 firmware (medium 6.5)
- [CVE-2023-34596](https://insights.sbomify.com/CVE-2023-34596/): Denial of service in aeotech:zw130-a firmware (medium 6.5)
- [CVE-2023-3459](https://insights.sbomify.com/CVE-2023-3459/): Missing authorization in Export and Import Users and Customers (high 7.2)
- [CVE-2023-34581](https://insights.sbomify.com/CVE-2023-34581/): SQL injection in oretnom23:service provider management system (critical 9.8)
- [CVE-2023-3458](https://insights.sbomify.com/CVE-2023-3458/): SourceCodester Shopping Website forgot-password.php sql injection (medium 6.3)
- [CVE-2023-34577](https://insights.sbomify.com/CVE-2023-34577/): SQL injection in planned popup project:planned popup (critical 9.8)
- [CVE-2023-34576](https://insights.sbomify.com/CVE-2023-34576/): SQL injection in store-opart:op\'art product faq (critical 9.8)
- [CVE-2023-34575](https://insights.sbomify.com/CVE-2023-34575/): SQL injection in store-opart:op\'art save cart (critical 9.8)
- [CVE-2023-34571](https://insights.sbomify.com/CVE-2023-34571/): Memory corruption in tenda:ac10 firmware (medium 6.7)
- [CVE-2023-34570](https://insights.sbomify.com/CVE-2023-34570/): Memory corruption in tenda:ac10 firmware (medium 6.7)
- [CVE-2023-3457](https://insights.sbomify.com/CVE-2023-3457/): SourceCodester Shopping Website index.php sql injection (medium 6.3)
- [CVE-2023-34569](https://insights.sbomify.com/CVE-2023-34569/): Memory corruption in tenda:ac10 firmware (medium 6.7)
- [CVE-2023-34568](https://insights.sbomify.com/CVE-2023-34568/): Memory corruption in tenda:ac10 firmware (medium 6.7)
- [CVE-2023-34567](https://insights.sbomify.com/CVE-2023-34567/): Memory corruption in tenda:ac10 firmware (medium 6.7)
- [CVE-2023-34566](https://insights.sbomify.com/CVE-2023-34566/): Memory corruption in tenda:ac10 firmware (critical 9.8)
- [CVE-2023-34565](https://insights.sbomify.com/CVE-2023-34565/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2023-34563](https://insights.sbomify.com/CVE-2023-34563/): Memory corruption in netgear:r6250 firmware (critical 9.8)
- [CVE-2023-34561](https://insights.sbomify.com/CVE-2023-34561/): Memory corruption in robtopgames:geometry dash (critical 9.8)
- [CVE-2023-3456](https://insights.sbomify.com/CVE-2023-3456/): Information disclosure in EMUI (medium 5.3)
- [CVE-2023-34553](https://insights.sbomify.com/CVE-2023-34553/): Auth bypass in wafucn:wafu keyless smart lock firmware (medium 6.5)
- [CVE-2023-34552](https://insights.sbomify.com/CVE-2023-34552/): Memory corruption in ezviz:cs-c6n-a0-1c2wfr-mul firmware (medium 4.0)
- [CVE-2023-34551](https://insights.sbomify.com/CVE-2023-34551/): Memory corruption in ezviz:cs-c6n-a0-1c2wfr-mul firmware (high 8.0)
- [CVE-2023-3455](https://insights.sbomify.com/CVE-2023-3455/): Other in EMUI (critical 9.1)
- [CVE-2023-34548](https://insights.sbomify.com/CVE-2023-34548/): SQL injection in simple customer relationship management project:simple customer relationship management (critical 9.8)
- [CVE-2023-34545](https://insights.sbomify.com/CVE-2023-34545/): SQL injection in cskaza:cszcms (critical 9.8)
- [CVE-2023-34541](https://insights.sbomify.com/CVE-2023-34541/): Langchain vulnerable to arbitrary code execution (critical 9.8)
- [CVE-2023-34540](https://insights.sbomify.com/CVE-2023-34540/): Langchain OS Command Injection vulnerability (critical 9.8)
- [CVE-2023-3454](https://insights.sbomify.com/CVE-2023-3454/): Command injection in Fabric OS (high 8.6)
- [CVE-2023-34537](https://insights.sbomify.com/CVE-2023-34537/): Cross-site scripting in digitaldruid:hoteldruid (medium 5.4)
- [CVE-2023-3453](https://insights.sbomify.com/CVE-2023-3453/): ETIC Telecom Insecure Default Initialization of Resource (high 7.1)
- [CVE-2023-3452](https://insights.sbomify.com/CVE-2023-3452/): Canto <= 3.0.4 - Unauthenticated Remote File Inclusion (critical 9.8)
- [CVE-2023-3450](https://insights.sbomify.com/CVE-2023-3450/): Ruijie RG-BCR860 Network Diagnostic Page os command injection (medium 4.7)
- [CVE-2023-34494](https://insights.sbomify.com/CVE-2023-34494/): Use after free in emqx:nanomq (high 7.5)
- [CVE-2023-3449](https://insights.sbomify.com/CVE-2023-3449/): IBOS OA Interview Management Export export&interviews=x actionExport sql injection (medium 5.5)
- [CVE-2023-34488](https://insights.sbomify.com/CVE-2023-34488/): Memory corruption in emqx:nanomq (high 8.0)
- [CVE-2023-34487](https://insights.sbomify.com/CVE-2023-34487/): SQL injection in online hotel management system project:online hotel management system (critical 9.8)
- [CVE-2023-34486](https://insights.sbomify.com/CVE-2023-34486/): Cross-site scripting in online hotel management system project:online hotel management system (medium 6.1)
- [CVE-2023-34478](https://insights.sbomify.com/CVE-2023-34478/): Path Traversal in Apache Shiro (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/291/