# Vulnerabilities published in 2023


- [CVE-2023-3164](https://insights.sbomify.com/CVE-2023-3164/): Heap-buffer-overflow in extractimagesection() (medium 5.5)
- [CVE-2023-31634](https://insights.sbomify.com/CVE-2023-31634/): Auth bypass in teslamate:teslamate (critical 9.8)
- [CVE-2023-31631](https://insights.sbomify.com/CVE-2023-31631/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31630](https://insights.sbomify.com/CVE-2023-31630/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-3163](https://insights.sbomify.com/CVE-2023-3163/): y_project RuoYi filterKeyword resource consumption (low 3.5)
- [CVE-2023-31629](https://insights.sbomify.com/CVE-2023-31629/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31628](https://insights.sbomify.com/CVE-2023-31628/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31627](https://insights.sbomify.com/CVE-2023-31627/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31626](https://insights.sbomify.com/CVE-2023-31626/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31625](https://insights.sbomify.com/CVE-2023-31625/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31624](https://insights.sbomify.com/CVE-2023-31624/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31623](https://insights.sbomify.com/CVE-2023-31623/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31622](https://insights.sbomify.com/CVE-2023-31622/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31621](https://insights.sbomify.com/CVE-2023-31621/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31620](https://insights.sbomify.com/CVE-2023-31620/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-3162](https://insights.sbomify.com/CVE-2023-3162/): Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass (critical 9.8)
- [CVE-2023-31619](https://insights.sbomify.com/CVE-2023-31619/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31618](https://insights.sbomify.com/CVE-2023-31618/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31617](https://insights.sbomify.com/CVE-2023-31617/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31616](https://insights.sbomify.com/CVE-2023-31616/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31615](https://insights.sbomify.com/CVE-2023-31615/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31614](https://insights.sbomify.com/CVE-2023-31614/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31613](https://insights.sbomify.com/CVE-2023-31613/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31612](https://insights.sbomify.com/CVE-2023-31612/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31611](https://insights.sbomify.com/CVE-2023-31611/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31610](https://insights.sbomify.com/CVE-2023-31610/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-3161](https://insights.sbomify.com/CVE-2023-3161/): Memory corruption in Linux Kernel (fbcon) (medium 5.5)
- [CVE-2023-31609](https://insights.sbomify.com/CVE-2023-31609/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31608](https://insights.sbomify.com/CVE-2023-31608/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31607](https://insights.sbomify.com/CVE-2023-31607/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2023-31606](https://insights.sbomify.com/CVE-2023-31606/): RedCloth Regular Expression Denial of Service issue (high 7.5)
- [CVE-2023-3160](https://insights.sbomify.com/CVE-2023-3160/): Local privilege escalation in security products for Windows (high 7.8)
- [CVE-2023-31597](https://insights.sbomify.com/CVE-2023-31597/): Auth bypass in zammad:zammad (medium 6.5)
- [CVE-2023-31595](https://insights.sbomify.com/CVE-2023-31595/): Missing authorization in icrealtime:icip-p2012t firmware (high 7.5)
- [CVE-2023-31594](https://insights.sbomify.com/CVE-2023-31594/): Missing authorization in icrealtime:icip-p2012t firmware (high 7.5)
- [CVE-2023-3159](https://insights.sbomify.com/CVE-2023-3159/): Use after free in Kernel (medium 6.7)
- [CVE-2023-31587](https://insights.sbomify.com/CVE-2023-31587/): Command injection in tenda:ac5 firmware (critical 9.8)
- [CVE-2023-31585](https://insights.sbomify.com/CVE-2023-31585/): Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php. (critical 9.8)
- [CVE-2023-31584](https://insights.sbomify.com/CVE-2023-31584/): Cross-site scripting in silicon project:silicon (medium 6.1)
- [CVE-2023-31582](https://insights.sbomify.com/CVE-2023-31582/): jose4j uses weak cryptographic algorithm (high 7.5)
- [CVE-2023-31581](https://insights.sbomify.com/CVE-2023-31581/): Sureness uses hardcoded key (critical 9.8)
- [CVE-2023-31580](https://insights.sbomify.com/CVE-2023-31580/): light-oauth2 missing public key verification (medium 5.9)
- [CVE-2023-3158](https://insights.sbomify.com/CVE-2023-3158/): Mail Control <= 0.2.8 - Unauthenticated Stored Cross-Site Scripting via Email Subject (high 7.2)
- [CVE-2023-31579](https://insights.sbomify.com/CVE-2023-31579/): Dromara Lamp-Cloud Use of Hard-coded Cryptographic Key (critical 9.8)
- [CVE-2023-31576](https://insights.sbomify.com/CVE-2023-31576/): File upload in s9y:serendipity (high 8.8)
- [CVE-2023-31572](https://insights.sbomify.com/CVE-2023-31572/): Privilege escalation in bludit:bludit (high 8.8)
- [CVE-2023-31569](https://insights.sbomify.com/CVE-2023-31569/): Command injection in totolink:x5000r firmware (critical 9.8)
- [CVE-2023-31568](https://insights.sbomify.com/CVE-2023-31568/): Memory corruption in podofo project:podofo (high 8.8)
- [CVE-2023-31567](https://insights.sbomify.com/CVE-2023-31567/): Memory corruption in podofo project:podofo (high 8.8)
- [CVE-2023-31566](https://insights.sbomify.com/CVE-2023-31566/): Use after free in podofo project:podofo (high 8.8)
- [CVE-2023-31556](https://insights.sbomify.com/CVE-2023-31556/): Memory corruption in podofo project:podofo (high 8.8)
- [CVE-2023-31555](https://insights.sbomify.com/CVE-2023-31555/): Memory corruption in podofo project:podofo (medium 6.5)
- [CVE-2023-3155](https://insights.sbomify.com/CVE-2023-3155/): NextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and Delete (high 7.2)
- [CVE-2023-31548](https://insights.sbomify.com/CVE-2023-31548/): Cross-site scripting in churchcrm:churchcrm (medium 5.4)
- [CVE-2023-31546](https://insights.sbomify.com/CVE-2023-31546/): Cross-site scripting in dedebiz:dedebiz (critical 9.6)
- [CVE-2023-31544](https://insights.sbomify.com/CVE-2023-31544/): alkacon-OpenCMS vulnerable to stored Cross-site Scripting (medium 5.4)
- [CVE-2023-31543](https://insights.sbomify.com/CVE-2023-31543/): pipreqs vulnerable to Dependency Confusion (critical 9.8)
- [CVE-2023-31541](https://insights.sbomify.com/CVE-2023-31541/): File upload in ckeditor:ckeditor (critical 9.8)
- [CVE-2023-3154](https://insights.sbomify.com/CVE-2023-3154/): NextGEN Gallery < 3.39 - Admin+ PHAR Deserialization (high 7.5)
- [CVE-2023-31531](https://insights.sbomify.com/CVE-2023-31531/): Command injection in motorola:cx2l firmware (high 8.8)
- [CVE-2023-31530](https://insights.sbomify.com/CVE-2023-31530/): Command injection in motorola:cx2l firmware (high 8.8)
- [CVE-2023-3153](https://insights.sbomify.com/CVE-2023-3153/): Service monitor mac flow is not rate limited (medium 5.3)
- [CVE-2023-31529](https://insights.sbomify.com/CVE-2023-31529/): Command injection in motorola:cx2l firmware (high 8.8)
- [CVE-2023-31528](https://insights.sbomify.com/CVE-2023-31528/): Command injection in motorola:cx2l firmware (high 8.8)
- [CVE-2023-3152](https://insights.sbomify.com/CVE-2023-3152/): SourceCodester Online Discussion Forum Site view_post.php sql injection (medium 6.3)
- [CVE-2023-31519](https://insights.sbomify.com/CVE-2023-31519/): SQL injection in pharmacy management system project:pharmacy management system (critical 9.8)
- [CVE-2023-31518](https://insights.sbomify.com/CVE-2023-31518/): Use after free in teeworlds:teeworlds (medium 5.5)
- [CVE-2023-31517](https://insights.sbomify.com/CVE-2023-31517/): Denial of service in teeworlds:teeworlds (high 7.5)
- [CVE-2023-3151](https://insights.sbomify.com/CVE-2023-3151/): SourceCodester Online Discussion Forum Site manage_user.php sql injection (medium 6.3)
- [CVE-2023-31506](https://insights.sbomify.com/CVE-2023-31506/): Cross-site scripting (XSS) vulnerability in Grav (medium 5.4)
- [CVE-2023-31505](https://insights.sbomify.com/CVE-2023-31505/): File upload in schlix:cms (high 7.2)
- [CVE-2023-31502](https://insights.sbomify.com/CVE-2023-31502/): Code injection in apsystems:alternergy power control software (high 7.2)
- [CVE-2023-3150](https://insights.sbomify.com/CVE-2023-3150/): SourceCodester Online Discussion Forum Site manage_post.php sql injection (medium 6.3)
- [CVE-2023-31498](https://insights.sbomify.com/CVE-2023-31498/): Auth bypass in phpgurukul:hospital management system (critical 9.8)
- [CVE-2023-31497](https://insights.sbomify.com/CVE-2023-31497/): Privilege escalation in seqrite:end point security (high 7.8)
- [CVE-2023-31493](https://insights.sbomify.com/CVE-2023-31493/): Code injection in zoneminder:zoneminder (medium 6.6)
- [CVE-2023-31492](https://insights.sbomify.com/CVE-2023-31492/): Information disclosure in zohocorp:manageengine admanager plus (medium 6.5)
- [CVE-2023-31490](https://insights.sbomify.com/CVE-2023-31490/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2023-3149](https://insights.sbomify.com/CVE-2023-3149/): SourceCodester Online Discussion Forum Site manage_user.php sql injection (medium 6.3)
- [CVE-2023-31489](https://insights.sbomify.com/CVE-2023-31489/): Denial of service in fedoraproject:fedora (medium 5.5)
- [CVE-2023-31488](https://insights.sbomify.com/CVE-2023-31488/): Memory corruption in cisco:ironport email security appliance (critical 9.8)
- [CVE-2023-31486](https://insights.sbomify.com/CVE-2023-31486/): Security feature bypass in http\:\ (high 8.1)
- [CVE-2023-31485](https://insights.sbomify.com/CVE-2023-31485/): Security feature bypass in gitlab\:\ (medium 5.9)
- [CVE-2023-31484](https://insights.sbomify.com/CVE-2023-31484/): Security feature bypass in cpanpm project:cpanpm (high 8.1)
- [CVE-2023-31483](https://insights.sbomify.com/CVE-2023-31483/): Path traversal in cauldrondevelopment:cbang (high 7.5)
- [CVE-2023-3148](https://insights.sbomify.com/CVE-2023-3148/): SourceCodester Online Discussion Forum Site manage_post.php sql injection (medium 6.3)
- [CVE-2023-31478](https://insights.sbomify.com/CVE-2023-31478/): Information disclosure in gl-inet:gl-a1300 firmware (high 7.5)
- [CVE-2023-31477](https://insights.sbomify.com/CVE-2023-31477/): Path traversal in gl-inet:gl-a1300 firmware (high 7.5)
- [CVE-2023-31476](https://insights.sbomify.com/CVE-2023-31476/): Path traversal in gl-inet:gl-mv1000 firmware (high 7.5)
- [CVE-2023-31475](https://insights.sbomify.com/CVE-2023-31475/): Memory corruption in gl-inet:gl-a1300 firmware (critical 9.0)
- [CVE-2023-31474](https://insights.sbomify.com/CVE-2023-31474/): Path traversal in gl-inet:gl-a1300 firmware (high 7.5)
- [CVE-2023-31473](https://insights.sbomify.com/CVE-2023-31473/): Command injection in gl-inet:gl-a1300 firmware (medium 4.9)
- [CVE-2023-31472](https://insights.sbomify.com/CVE-2023-31472/): Command injection in gl-inet:gl-a1300 firmware (high 7.5)
- [CVE-2023-31471](https://insights.sbomify.com/CVE-2023-31471/): Security feature bypass in gl-inet:gl-a1300 firmware (critical 9.8)
- [CVE-2023-31470](https://insights.sbomify.com/CVE-2023-31470/): Memory corruption in pymumu:smartdns (critical 9.8)
- [CVE-2023-3147](https://insights.sbomify.com/CVE-2023-3147/): SourceCodester Online Discussion Forum Site view_category.php sql injection (medium 6.3)
- [CVE-2023-31469](https://insights.sbomify.com/CVE-2023-31469/): Apache StreamPipes: Privilege escalation through non-admin user (high 8.8)
- [CVE-2023-31468](https://insights.sbomify.com/CVE-2023-31468/): Misconfiguration in inosoft:visiwin 7 (high 7.8)
- [CVE-2023-31466](https://insights.sbomify.com/CVE-2023-31466/): Cross-site scripting in fsmlabs:timekeeper (medium 5.4)
- [CVE-2023-31465](https://insights.sbomify.com/CVE-2023-31465/): Command injection in fsmlabs:timekeeper (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/316/