# Vulnerabilities published in 2023


- [CVE-2023-33883](https://insights.sbomify.com/CVE-2023-33883/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-33882](https://insights.sbomify.com/CVE-2023-33882/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-33881](https://insights.sbomify.com/CVE-2023-33881/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2023-33880](https://insights.sbomify.com/CVE-2023-33880/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (low 3.3)
- [CVE-2023-3388](https://insights.sbomify.com/CVE-2023-3388/): Beautiful Cookie Consent Banner <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting (high 7.2)
- [CVE-2023-33879](https://insights.sbomify.com/CVE-2023-33879/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (low 3.3)
- [CVE-2023-33878](https://insights.sbomify.com/CVE-2023-33878/): Path traversal in Intel(R) NUC P14E Laptop Element Audio Install Package software (medium 6.7)
- [CVE-2023-33877](https://insights.sbomify.com/CVE-2023-33877/): Memory corruption in Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA (low 3.3)
- [CVE-2023-33876](https://insights.sbomify.com/CVE-2023-33876/): Use after free in Foxit Reader (high 8.8)
- [CVE-2023-33875](https://insights.sbomify.com/CVE-2023-33875/): Missing authorization in Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software (high 7.1)
- [CVE-2023-33874](https://insights.sbomify.com/CVE-2023-33874/): Privilege escalation in Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event Filter Driver installation software (medium 6.7)
- [CVE-2023-33873](https://insights.sbomify.com/CVE-2023-33873/): AVEVA Operations Control Logger Execution with Unnecessary Privileges (high 7.8)
- [CVE-2023-33872](https://insights.sbomify.com/CVE-2023-33872/): Missing authorization in Intel Support android application (medium 5.5)
- [CVE-2023-33871](https://insights.sbomify.com/CVE-2023-33871/): Iagona ScrutisWeb Absolute Path Traversal (high 7.5)
- [CVE-2023-33870](https://insights.sbomify.com/CVE-2023-33870/): Privilege escalation in Intel(R) Ethernet tools and driver install software (medium 6.7)
- [CVE-2023-3387](https://insights.sbomify.com/CVE-2023-3387/): Lana Text to Image <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-33869](https://insights.sbomify.com/CVE-2023-33869/): Enphase Envoy OS Command Injection (medium 6.3)
- [CVE-2023-33868](https://insights.sbomify.com/CVE-2023-33868/): PiiGAB M-Bus Improper Restriction of Excessive Authentication Attempts (medium 5.9)
- [CVE-2023-33867](https://insights.sbomify.com/CVE-2023-33867/): Memory corruption in Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA (medium 4.4)
- [CVE-2023-33866](https://insights.sbomify.com/CVE-2023-33866/): Use after free in Foxit Reader (high 8.8)
- [CVE-2023-33865](https://insights.sbomify.com/CVE-2023-33865/): Privilege escalation in renderdoc:renderdoc (high 7.8)
- [CVE-2023-33864](https://insights.sbomify.com/CVE-2023-33864/): Integer overflow in renderdoc:renderdoc (critical 9.8)
- [CVE-2023-33863](https://insights.sbomify.com/CVE-2023-33863/): Integer overflow in renderdoc:renderdoc (critical 9.8)
- [CVE-2023-33861](https://insights.sbomify.com/CVE-2023-33861/): IBM Security ReaQta improper certificate validation (medium 6.5)
- [CVE-2023-33860](https://insights.sbomify.com/CVE-2023-33860/): IBM Security ReaQta information disclosure (medium 5.3)
- [CVE-2023-3386](https://insights.sbomify.com/CVE-2023-3386/): SQLi in a2 Camera Trap Tracking System (critical 9.8)
- [CVE-2023-33859](https://insights.sbomify.com/CVE-2023-33859/): IBM Security ReaQta information disclosure (medium 5.3)
- [CVE-2023-33857](https://insights.sbomify.com/CVE-2023-33857/): IBM InfoSphere Information Server information disclosure (medium 5.3)
- [CVE-2023-33855](https://insights.sbomify.com/CVE-2023-33855/): IBM Common Cryptographic Architecture information disclosure (low 3.7)
- [CVE-2023-33854](https://insights.sbomify.com/CVE-2023-33854/): Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data. (medium 5.3)
- [CVE-2023-33852](https://insights.sbomify.com/CVE-2023-33852/): IBM Security Guardium SQL injection (high 7.6)
- [CVE-2023-33851](https://insights.sbomify.com/CVE-2023-33851/): IBM PowerVM Hypervisor information disclosure (medium 5.3)
- [CVE-2023-33850](https://insights.sbomify.com/CVE-2023-33850/): IBM GSKit-Crypto information disclosure (high 7.5)
- [CVE-2023-3385](https://insights.sbomify.com/CVE-2023-3385/): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab (medium 6.3)
- [CVE-2023-33849](https://insights.sbomify.com/CVE-2023-33849/): IBM CICS TX information disclosure (low 3.7)
- [CVE-2023-33848](https://insights.sbomify.com/CVE-2023-33848/): IBM CICS TX information disclosure (medium 4.9)
- [CVE-2023-33847](https://insights.sbomify.com/CVE-2023-33847/): IBM CICS TX information disclosure (low 3.7)
- [CVE-2023-33846](https://insights.sbomify.com/CVE-2023-33846/): IBM CICS TX cross-site scripting (medium 5.4)
- [CVE-2023-33844](https://insights.sbomify.com/CVE-2023-33844/): IBM Security Verify Governance cross-site scripting (medium 5.4)
- [CVE-2023-33843](https://insights.sbomify.com/CVE-2023-33843/): IBM InfoSphere Information Server cross-site scripting (medium 5.4)
- [CVE-2023-33842](https://insights.sbomify.com/CVE-2023-33842/): IBM SPSS Modeler information disclosure (medium 6.2)
- [CVE-2023-33840](https://insights.sbomify.com/CVE-2023-33840/): IBM Security Verify Governance cross-site scripting (medium 4.8)
- [CVE-2023-3384](https://insights.sbomify.com/CVE-2023-3384/): Quay: stored cross site scripting (medium 5.4)
- [CVE-2023-33839](https://insights.sbomify.com/CVE-2023-33839/): IBM Security Verify Governance command execution (high 7.2)
- [CVE-2023-33838](https://insights.sbomify.com/CVE-2023-33838/): IBM Security Verify Governance information disclosure (medium 4.4)
- [CVE-2023-33837](https://insights.sbomify.com/CVE-2023-33837/): IBM Security Verify Governance information disclosure (medium 4.1)
- [CVE-2023-33836](https://insights.sbomify.com/CVE-2023-33836/): IBM Security Verify Governance information disclosure (medium 5.3)
- [CVE-2023-33835](https://insights.sbomify.com/CVE-2023-33835/): IBM Security Verify Information Queue information disclosure (medium 4.3)
- [CVE-2023-33834](https://insights.sbomify.com/CVE-2023-33834/): IBM Security Verify Information Queue information disclosure (medium 4.3)
- [CVE-2023-33833](https://insights.sbomify.com/CVE-2023-33833/): IBM Security Verify Information Queue information disclosure (low 2.9)
- [CVE-2023-33832](https://insights.sbomify.com/CVE-2023-33832/): IBM Storage Protect denial of service (medium 6.2)
- [CVE-2023-33831](https://insights.sbomify.com/CVE-2023-33831/): A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA (critical 9.8)
- [CVE-2023-3383](https://insights.sbomify.com/CVE-2023-3383/): SourceCodester Game Result Matrix System GET Parameter athlete-profile.php sql injection (medium 6.3)
- [CVE-2023-33829](https://insights.sbomify.com/CVE-2023-33829/): Cross-site scripting in cloudogu:scm manager (medium 5.4)
- [CVE-2023-3382](https://insights.sbomify.com/CVE-2023-3382/): SourceCodester Game Result Matrix System GET Parameter save-delegates.php cross site scripting (low 3.5)
- [CVE-2023-33817](https://insights.sbomify.com/CVE-2023-33817/): SQL injection in digitaldruid:hoteldruid (high 8.8)
- [CVE-2023-3381](https://insights.sbomify.com/CVE-2023-3381/): SourceCodester Online School Fees System GET Parameter datatable.php cross site scripting (low 3.5)
- [CVE-2023-33806](https://insights.sbomify.com/CVE-2023-33806/): Command injection in hikvision:ds-d5b86rb\/b firmware (high 7.8)
- [CVE-2023-33802](https://insights.sbomify.com/CVE-2023-33802/): Memory corruption in sumatrapdfreader:sumatrapdf (medium 5.5)
- [CVE-2023-33800](https://insights.sbomify.com/CVE-2023-33800/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2023-3380](https://insights.sbomify.com/CVE-2023-3380/): Wavlink WN579X3 Ping Test adm.cgi injection (medium 4.7)
- [CVE-2023-33799](https://insights.sbomify.com/CVE-2023-33799/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2023-33798](https://insights.sbomify.com/CVE-2023-33798/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2023-33797](https://insights.sbomify.com/CVE-2023-33797/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2023-33796](https://insights.sbomify.com/CVE-2023-33796/): Missing authorization in netbox:netbox (critical 9.1)
- [CVE-2023-33795](https://insights.sbomify.com/CVE-2023-33795/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2023-33794](https://insights.sbomify.com/CVE-2023-33794/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2023-33793](https://insights.sbomify.com/CVE-2023-33793/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2023-33792](https://insights.sbomify.com/CVE-2023-33792/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2023-33791](https://insights.sbomify.com/CVE-2023-33791/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2023-33790](https://insights.sbomify.com/CVE-2023-33790/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2023-3379](https://insights.sbomify.com/CVE-2023-3379/): WAGO: Improper Privilege Management in web-based management (medium 5.3)
- [CVE-2023-33789](https://insights.sbomify.com/CVE-2023-33789/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2023-33788](https://insights.sbomify.com/CVE-2023-33788/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2023-33787](https://insights.sbomify.com/CVE-2023-33787/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2023-33786](https://insights.sbomify.com/CVE-2023-33786/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2023-33785](https://insights.sbomify.com/CVE-2023-33785/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2023-33782](https://insights.sbomify.com/CVE-2023-33782/): Command injection in dlink:dir-842v2 firmware (high 8.8)
- [CVE-2023-33781](https://insights.sbomify.com/CVE-2023-33781/): Command injection in dlink:dir-842v2 firmware (high 8.8)
- [CVE-2023-33780](https://insights.sbomify.com/CVE-2023-33780/): Cross-site scripting in invernyx:smartcars 3 (medium 5.4)
- [CVE-2023-33779](https://insights.sbomify.com/CVE-2023-33779/): Privilege escalation in XXL-Job (high 8.8)
- [CVE-2023-33778](https://insights.sbomify.com/CVE-2023-33778/): Hardcoded credentials in draytek:myvigor (critical 9.8)
- [CVE-2023-33777](https://insights.sbomify.com/CVE-2023-33777/): Path traversal in prestashop:amazon (medium 5.3)
- [CVE-2023-33770](https://insights.sbomify.com/CVE-2023-33770/): Real Estate Management System v1.0 was discovered to contain a SQL injection vulnerability via the message parameter at /contact.php. (medium 5.1)
- [CVE-2023-3377](https://insights.sbomify.com/CVE-2023-3377/): SQLi in Veribilim's Veribase (critical 9.8)
- [CVE-2023-33768](https://insights.sbomify.com/CVE-2023-33768/): Security feature bypass in belkin:wemo smart plug wsp080 firmware (medium 6.5)
- [CVE-2023-33764](https://insights.sbomify.com/CVE-2023-33764/): Cross-site scripting in simpleredak:simpleredak (medium 5.4)
- [CVE-2023-33763](https://insights.sbomify.com/CVE-2023-33763/): Cross-site scripting in simpleredak:simpleredak (medium 6.1)
- [CVE-2023-33762](https://insights.sbomify.com/CVE-2023-33762/): SQL injection in simpleredak:simpleredak (critical 9.8)
- [CVE-2023-33761](https://insights.sbomify.com/CVE-2023-33761/): Cross-site scripting in simpleredak:simpleredak (medium 6.1)
- [CVE-2023-33760](https://insights.sbomify.com/CVE-2023-33760/): Weak cryptography in splicecom:maximiser soft pbx (medium 5.3)
- [CVE-2023-3376](https://insights.sbomify.com/CVE-2023-3376/): SQLi in Digital Strategys Zekiweb (critical 9.8)
- [CVE-2023-33759](https://insights.sbomify.com/CVE-2023-33759/): Auth bypass in splicecom:maximiser soft pbx (critical 9.8)
- [CVE-2023-33758](https://insights.sbomify.com/CVE-2023-33758/): Cross-site scripting in splicecom:maximiser soft pbx (medium 6.1)
- [CVE-2023-33757](https://insights.sbomify.com/CVE-2023-33757/): Security feature bypass in splicecom:ipcs (medium 5.9)
- [CVE-2023-33756](https://insights.sbomify.com/CVE-2023-33756/): Path traversal in foswiki:foswiki (high 7.5)
- [CVE-2023-33754](https://insights.sbomify.com/CVE-2023-33754/): Auth bypass in inpiazza:cloud wifi (medium 6.5)
- [CVE-2023-33751](https://insights.sbomify.com/CVE-2023-33751/): Cross-site scripting in mipjz project:mipjz (medium 5.4)
- [CVE-2023-33750](https://insights.sbomify.com/CVE-2023-33750/): Cross-site scripting in mipjz project:mipjz (medium 5.4)
- [CVE-2023-3375](https://insights.sbomify.com/CVE-2023-3375/): Unrestricted File Upload in Bookreen (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/298/