# Vulnerabilities published in 2023


- [CVE-2023-33747](https://insights.sbomify.com/CVE-2023-33747/): Path traversal in mgt-commerce:cloudpanel (high 7.8)
- [CVE-2023-33745](https://insights.sbomify.com/CVE-2023-33745/): Privilege escalation in teleadapt:roomcast ta-2400 firmware (critical 9.8)
- [CVE-2023-33744](https://insights.sbomify.com/CVE-2023-33744/): Hardcoded credentials in teleadapt:roomcast ta-2400 firmware (critical 9.8)
- [CVE-2023-33743](https://insights.sbomify.com/CVE-2023-33743/): Misconfiguration in teleadapt:roomcast ta-2400 firmware (critical 9.8)
- [CVE-2023-33742](https://insights.sbomify.com/CVE-2023-33742/): Information disclosure in teleadapt:roomcast ta-2400 firmware (high 7.5)
- [CVE-2023-33741](https://insights.sbomify.com/CVE-2023-33741/): Information disclosure in macro-video:v380 pro (high 7.5)
- [CVE-2023-33740](https://insights.sbomify.com/CVE-2023-33740/): Information disclosure in luowice:luowice (high 7.5)
- [CVE-2023-3374](https://insights.sbomify.com/CVE-2023-3374/): Privilege Escalation in Bookreen (critical 9.8)
- [CVE-2023-33736](https://insights.sbomify.com/CVE-2023-33736/): Dcat-Admin vulnerable to Stored Cross-site Scripting (medium 5.4)
- [CVE-2023-33735](https://insights.sbomify.com/CVE-2023-33735/): Command injection in dlink:dir-846 firmware (critical 9.8)
- [CVE-2023-33734](https://insights.sbomify.com/CVE-2023-33734/): SQL injection in bluecms project:bluecms (critical 9.8)
- [CVE-2023-33733](https://insights.sbomify.com/CVE-2023-33733/): Reportlab vulnerable to remote code execution (high 7.8)
- [CVE-2023-33732](https://insights.sbomify.com/CVE-2023-33732/): Cross-site scripting in escanav:escan management console (medium 6.1)
- [CVE-2023-33731](https://insights.sbomify.com/CVE-2023-33731/): Cross-site scripting in escanav:escan management console (medium 6.1)
- [CVE-2023-33730](https://insights.sbomify.com/CVE-2023-33730/): Information disclosure in escanav:escan management console (critical 9.8)
- [CVE-2023-3373](https://insights.sbomify.com/CVE-2023-3373/): Weak cryptography in GOT SIMPLE Series GS21 model (medium 5.9)
- [CVE-2023-33725](https://insights.sbomify.com/CVE-2023-33725/): Broadleaf vulnerable to Cross-site Scripting (medium 6.1)
- [CVE-2023-33722](https://insights.sbomify.com/CVE-2023-33722/): Command injection in edimax:br-6288acl firmware (high 8.8)
- [CVE-2023-33720](https://insights.sbomify.com/CVE-2023-33720/): Denial of service in mp4v2 project:mp4v2 (medium 6.5)
- [CVE-2023-3372](https://insights.sbomify.com/CVE-2023-3372/): Lana Shortcodes < 1.2.0 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-33719](https://insights.sbomify.com/CVE-2023-33719/): Denial of service in mp4v2:mp4v2 (medium 5.5)
- [CVE-2023-33718](https://insights.sbomify.com/CVE-2023-33718/): Denial of service in mp4v2 project:mp4v2 (high 8.8)
- [CVE-2023-33717](https://insights.sbomify.com/CVE-2023-33717/): Denial of service in mp4v2 project:mp4v2 (medium 5.5)
- [CVE-2023-33716](https://insights.sbomify.com/CVE-2023-33716/): Denial of service in mp4v2:mp4v2 (medium 5.5)
- [CVE-2023-3371](https://insights.sbomify.com/CVE-2023-3371/): EmbedPress <= 3.7.3 - Sensitive Information Exposure (medium 5.3)
- [CVE-2023-33706](https://insights.sbomify.com/CVE-2023-33706/): Missing authorization in sysaid:sysaid (medium 6.5)
- [CVE-2023-33695](https://insights.sbomify.com/CVE-2023-33695/): Insecure Temporary File in HuTool (high 7.1)
- [CVE-2023-33693](https://insights.sbomify.com/CVE-2023-33693/): Memory corruption in tsingsee:easyplayerpro (high 7.8)
- [CVE-2023-33690](https://insights.sbomify.com/CVE-2023-33690/): Path traversal in sonicjs:sonicjs (medium 6.5)
- [CVE-2023-3369](https://insights.sbomify.com/CVE-2023-3369/): About Me 3000 widget <= 2.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting (medium 4.4)
- [CVE-2023-33684](https://insights.sbomify.com/CVE-2023-33684/): Auth bypass in dbbroadcast:sft dab 600\/c bios (medium 5.7)
- [CVE-2023-3368](https://insights.sbomify.com/CVE-2023-3368/): Chamilo LMS Unauthenticated Command Injection (critical 9.8)
- [CVE-2023-33677](https://insights.sbomify.com/CVE-2023-33677/): SQL injection in oretnom23:lost and found information system (medium 5.4)
- [CVE-2023-33676](https://insights.sbomify.com/CVE-2023-33676/): SQL injection in oretnom23:lost and found information system (high 8.4)
- [CVE-2023-33675](https://insights.sbomify.com/CVE-2023-33675/): Memory corruption in tenda:ac8 firmware (critical 9.8)
- [CVE-2023-33673](https://insights.sbomify.com/CVE-2023-33673/): Memory corruption in tenda:ac8 firmware (critical 9.8)
- [CVE-2023-33672](https://insights.sbomify.com/CVE-2023-33672/): Memory corruption in tenda:ac8 firmware (high 7.5)
- [CVE-2023-33671](https://insights.sbomify.com/CVE-2023-33671/): Memory corruption in tenda:ac8 firmware (critical 9.8)
- [CVE-2023-33670](https://insights.sbomify.com/CVE-2023-33670/): Memory corruption in tenda:ac8 firmware (critical 9.8)
- [CVE-2023-33669](https://insights.sbomify.com/CVE-2023-33669/): Memory corruption in tenda:ac8 firmware (critical 9.8)
- [CVE-2023-33668](https://insights.sbomify.com/CVE-2023-33668/): Security feature bypass in digiexam:digiexam (critical 9.8)
- [CVE-2023-33666](https://insights.sbomify.com/CVE-2023-33666/): SQL injection in ai-dev:aioptimizedcombinations (critical 9.8)
- [CVE-2023-33665](https://insights.sbomify.com/CVE-2023-33665/): SQL injection in ai-dev:ai-table (critical 9.8)
- [CVE-2023-33664](https://insights.sbomify.com/CVE-2023-33664/): SQL injection in ai-dev:declinaisons a la volee (high 8.8)
- [CVE-2023-33663](https://insights.sbomify.com/CVE-2023-33663/): SQL injection in ai-dev:aicustomfee (critical 9.8)
- [CVE-2023-33661](https://insights.sbomify.com/CVE-2023-33661/): Cross-site scripting in churchcrm:churchcrm (medium 6.1)
- [CVE-2023-33660](https://insights.sbomify.com/CVE-2023-33660/): Memory corruption in emqx:nanomq (high 7.5)
- [CVE-2023-3366](https://insights.sbomify.com/CVE-2023-3366/): MultiParcels Shipping For WooCommerce < 1.15.2 - Arbitrary Shipment Deletion via CSRF (medium 4.3)
- [CVE-2023-33659](https://insights.sbomify.com/CVE-2023-33659/): Memory corruption in emqx:nanomq (high 7.5)
- [CVE-2023-33658](https://insights.sbomify.com/CVE-2023-33658/): Memory corruption in emqx:nanomq (high 7.5)
- [CVE-2023-33657](https://insights.sbomify.com/CVE-2023-33657/): Use after free in emqx:nanomq (high 7.5)
- [CVE-2023-33656](https://insights.sbomify.com/CVE-2023-33656/): Denial of service in emqx:nanomq (medium 5.5)
- [CVE-2023-33653](https://insights.sbomify.com/CVE-2023-33653/): Code injection in sitecore:experience platform (high 8.8)
- [CVE-2023-33652](https://insights.sbomify.com/CVE-2023-33652/): Code injection in sitecore:experience platform (high 8.8)
- [CVE-2023-33651](https://insights.sbomify.com/CVE-2023-33651/): Missing authorization in sitecore:experience commerce (high 7.5)
- [CVE-2023-3365](https://insights.sbomify.com/CVE-2023-3365/): MultiParcels Shipping For WooCommerce < 1.14.14 - Subscriber+ Arbitrary Shipment Deletion (high 8.1)
- [CVE-2023-33643](https://insights.sbomify.com/CVE-2023-33643/): Memory corruption in h3c:magic r300-2100m firmware (high 7.2)
- [CVE-2023-33642](https://insights.sbomify.com/CVE-2023-33642/): Memory corruption in h3c:magic r300-2100m firmware (high 7.2)
- [CVE-2023-33641](https://insights.sbomify.com/CVE-2023-33641/): Memory corruption in h3c:magic r300-2100m firmware (high 7.2)
- [CVE-2023-33640](https://insights.sbomify.com/CVE-2023-33640/): Memory corruption in h3c:magic r300-2100m firmware (high 7.2)
- [CVE-2023-3364](https://insights.sbomify.com/CVE-2023-3364/): Inefficient Regular Expression Complexity in GitLab (high 7.5)
- [CVE-2023-33639](https://insights.sbomify.com/CVE-2023-33639/): Memory corruption in h3c:magic r300-2100m firmware (high 7.2)
- [CVE-2023-33638](https://insights.sbomify.com/CVE-2023-33638/): Memory corruption in h3c:magic r300-2100m firmware (high 7.2)
- [CVE-2023-33637](https://insights.sbomify.com/CVE-2023-33637/): Memory corruption in h3c:magic r300-2100m firmware (high 7.2)
- [CVE-2023-33636](https://insights.sbomify.com/CVE-2023-33636/): Memory corruption in h3c:magic r300-2100m firmware (high 7.2)
- [CVE-2023-33635](https://insights.sbomify.com/CVE-2023-33635/): Memory corruption in h3c:magic r300-2100m firmware (high 7.2)
- [CVE-2023-33634](https://insights.sbomify.com/CVE-2023-33634/): Memory corruption in h3c:magic r300-2100m firmware (high 7.2)
- [CVE-2023-33633](https://insights.sbomify.com/CVE-2023-33633/): Memory corruption in h3c:magic r300-2100m firmware (high 7.2)
- [CVE-2023-33632](https://insights.sbomify.com/CVE-2023-33632/): Memory corruption in h3c:magic r300-2100m firmware (high 7.2)
- [CVE-2023-33631](https://insights.sbomify.com/CVE-2023-33631/): Memory corruption in h3c:magic r300-2100m firmware (high 7.2)
- [CVE-2023-33630](https://insights.sbomify.com/CVE-2023-33630/): Memory corruption in h3c:magic r300-2100m firmware (high 7.2)
- [CVE-2023-3363](https://insights.sbomify.com/CVE-2023-3363/): Insertion of Sensitive Information into Log File in GitLab (low 3.9)
- [CVE-2023-33629](https://insights.sbomify.com/CVE-2023-33629/): Memory corruption in h3c:magic r300-2100m firmware (high 7.2)
- [CVE-2023-33628](https://insights.sbomify.com/CVE-2023-33628/): Memory corruption in h3c:magic r300-2100m firmware (high 7.2)
- [CVE-2023-33627](https://insights.sbomify.com/CVE-2023-33627/): Memory corruption in h3c:magic r300-2100m firmware (high 7.2)
- [CVE-2023-33626](https://insights.sbomify.com/CVE-2023-33626/): Memory corruption in dlink:dir-600 firmware (critical 9.8)
- [CVE-2023-33625](https://insights.sbomify.com/CVE-2023-33625/): Command injection in dlink:dir-600 firmware (critical 9.8)
- [CVE-2023-33621](https://insights.sbomify.com/CVE-2023-33621/): Information disclosure in gl-inet:gl-ar750s firmware (medium 5.9)
- [CVE-2023-33620](https://insights.sbomify.com/CVE-2023-33620/): Weak cryptography in gl-inet:gl-ar750s firmware (medium 5.9)
- [CVE-2023-3362](https://insights.sbomify.com/CVE-2023-3362/): Generation of Error Message Containing Sensitive Information in GitLab (medium 5.3)
- [CVE-2023-33617](https://insights.sbomify.com/CVE-2023-33617/): Command injection in eparks:fiberlink 210 firmware (high 7.2)
- [CVE-2023-33613](https://insights.sbomify.com/CVE-2023-33613/): Memory corruption in axtls project:axtls (medium 5.5)
- [CVE-2023-3361](https://insights.sbomify.com/CVE-2023-3361/): S3 credentials included when exporting elyra notebook (high 7.7)
- [CVE-2023-33604](https://insights.sbomify.com/CVE-2023-33604/): Path traversal in imperial cms project:imperial cms (critical 9.1)
- [CVE-2023-33601](https://insights.sbomify.com/CVE-2023-33601/): File upload in phpok:phpok (high 8.8)
- [CVE-2023-3360](https://insights.sbomify.com/CVE-2023-3360/): Weaver Show Posts < 1.8.1 - Admin+ PHP Object Injection (low 3.3)
- [CVE-2023-33599](https://insights.sbomify.com/CVE-2023-33599/): Cross-site scripting in easyimages2.0 project:easyimages2.0 (medium 6.1)
- [CVE-2023-33595](https://insights.sbomify.com/CVE-2023-33595/): Use after free in python:python (medium 5.5)
- [CVE-2023-33592](https://insights.sbomify.com/CVE-2023-33592/): SQL injection in oretnom23:lost and found information system (critical 9.8)
- [CVE-2023-33591](https://insights.sbomify.com/CVE-2023-33591/): Cross-site scripting in user registration \& login and user management system project:user registration \& login and user management system (medium 6.1)
- [CVE-2023-3359](https://insights.sbomify.com/CVE-2023-3359/): Null dereference in Kernel (medium 5.5)
- [CVE-2023-33584](https://insights.sbomify.com/CVE-2023-33584/): SQL injection in enrollment system project:enrollment system (critical 9.8)
- [CVE-2023-33580](https://insights.sbomify.com/CVE-2023-33580/): Cross-site scripting in phpgurukul:student study center management system (medium 4.8)
- [CVE-2023-3358](https://insights.sbomify.com/CVE-2023-3358/): Null dereference in Kernel (medium 5.5)
- [CVE-2023-33570](https://insights.sbomify.com/CVE-2023-33570/): Code injection in webkul:bagisto (high 8.8)
- [CVE-2023-3357](https://insights.sbomify.com/CVE-2023-3357/): Null dereference in Kernel (medium 5.5)
- [CVE-2023-33569](https://insights.sbomify.com/CVE-2023-33569/): File upload in faculty evaluation system project:faculty evaluation system (high 7.2)
- [CVE-2023-33568](https://insights.sbomify.com/CVE-2023-33568/): Dolibarr vulnerable to unauthenticated database access (high 7.5)
- [CVE-2023-33564](https://insights.sbomify.com/CVE-2023-33564/): Cross-site scripting in phpjabbers:time slots booking calendar (medium 6.1)
- [CVE-2023-33563](https://insights.sbomify.com/CVE-2023-33563/): Auth bypass in phpjabbers:time slots booking calendar (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/299/