# Vulnerabilities published in 2023


- [CVE-2023-31462](https://insights.sbomify.com/CVE-2023-31462/): Misconfiguration in steelseries:gg (high 8.8)
- [CVE-2023-31461](https://insights.sbomify.com/CVE-2023-31461/): Path traversal in steelseries:gg (high 7.5)
- [CVE-2023-31460](https://insights.sbomify.com/CVE-2023-31460/): Command injection in mitel:mivoice connect (high 7.2)
- [CVE-2023-3146](https://insights.sbomify.com/CVE-2023-3146/): SourceCodester Online Discussion Forum Site manage_category.php sql injection (medium 6.3)
- [CVE-2023-31459](https://insights.sbomify.com/CVE-2023-31459/): Auth bypass in mitel:mivoice connect (high 8.8)
- [CVE-2023-31458](https://insights.sbomify.com/CVE-2023-31458/): Auth bypass in mitel:mivoice connect (critical 9.8)
- [CVE-2023-31457](https://insights.sbomify.com/CVE-2023-31457/): Missing authorization in mitel:mivoice connect (critical 9.8)
- [CVE-2023-31456](https://insights.sbomify.com/CVE-2023-31456/): There is an SSRF vulnerability in the Fluid Topics platform that affects versions prior to 4.3, where the server can be forced to make arbit (medium 5.4)
- [CVE-2023-31455](https://insights.sbomify.com/CVE-2023-31455/): Denial of service in pexip:pexip infinity (high 7.5)
- [CVE-2023-31454](https://insights.sbomify.com/CVE-2023-31454/): Apache InLong: IDOR make users can bind any cluster (high 7.5)
- [CVE-2023-31453](https://insights.sbomify.com/CVE-2023-31453/): Apache InLong: IDOR make users can delete others' subscription (high 7.5)
- [CVE-2023-31452](https://insights.sbomify.com/CVE-2023-31452/): Cross-site request forgery in paessler:prtg network monitor (high 8.8)
- [CVE-2023-31450](https://insights.sbomify.com/CVE-2023-31450/): Path traversal in paessler:prtg network monitor (medium 4.7)
- [CVE-2023-3145](https://insights.sbomify.com/CVE-2023-3145/): SourceCodester Online Discussion Forum Site sql injection (medium 6.3)
- [CVE-2023-31449](https://insights.sbomify.com/CVE-2023-31449/): Path traversal in paessler:prtg network monitor (medium 4.7)
- [CVE-2023-31448](https://insights.sbomify.com/CVE-2023-31448/): Path traversal in paessler:prtg network monitor (medium 4.7)
- [CVE-2023-31447](https://insights.sbomify.com/CVE-2023-31447/): Code injection in draytek:vigor2620 firmware (critical 9.8)
- [CVE-2023-31446](https://insights.sbomify.com/CVE-2023-31446/): Command injection in cassianetworks:xc1000 firmware (critical 9.8)
- [CVE-2023-31445](https://insights.sbomify.com/CVE-2023-31445/): Information disclosure in cassianetworks:access controller (medium 5.3)
- [CVE-2023-31444](https://insights.sbomify.com/CVE-2023-31444/): Missing authorization in talend:studio (high 7.5)
- [CVE-2023-31442](https://insights.sbomify.com/CVE-2023-31442/): Weak cryptography in lightbend:akka actor (high 7.5)
- [CVE-2023-31441](https://insights.sbomify.com/CVE-2023-31441/): Denial of service in ncia:advisor network (medium 5.5)
- [CVE-2023-3144](https://insights.sbomify.com/CVE-2023-3144/): SourceCodester Online Discussion Forum Site manage_post.php cross site scripting (low 3.5)
- [CVE-2023-31439](https://insights.sbomify.com/CVE-2023-31439/): Security feature bypass in systemd project:systemd (medium 5.3)
- [CVE-2023-31438](https://insights.sbomify.com/CVE-2023-31438/): Security feature bypass in systemd project:systemd (medium 5.3)
- [CVE-2023-31437](https://insights.sbomify.com/CVE-2023-31437/): Other in systemd project:systemd (medium 5.3)
- [CVE-2023-31436](https://insights.sbomify.com/CVE-2023-31436/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2023-31435](https://insights.sbomify.com/CVE-2023-31435/): Missing authorization in evasys:evasys (high 8.1)
- [CVE-2023-31434](https://insights.sbomify.com/CVE-2023-31434/): Cross-site scripting in evasys:evasys (medium 5.4)
- [CVE-2023-31433](https://insights.sbomify.com/CVE-2023-31433/): SQL injection in evasys:evasys (high 8.8)
- [CVE-2023-31432](https://insights.sbomify.com/CVE-2023-31432/): Privilege issues in multiple commands (high 7.8)
- [CVE-2023-31431](https://insights.sbomify.com/CVE-2023-31431/): A buffer overflow vulnerability in “diagstatus” command (medium 5.5)
- [CVE-2023-31430](https://insights.sbomify.com/CVE-2023-31430/): buffer overflow vulnerability in “secpolicydelete” command (medium 5.5)
- [CVE-2023-3143](https://insights.sbomify.com/CVE-2023-3143/): SourceCodester Online Discussion Forum Site manage_post.php cross site scripting (low 3.5)
- [CVE-2023-31429](https://insights.sbomify.com/CVE-2023-31429/): Multiple commands print sensitive information in the terminal (medium 5.5)
- [CVE-2023-31428](https://insights.sbomify.com/CVE-2023-31428/): CLI allows upload or transfer files of dangerous types (medium 5.5)
- [CVE-2023-31427](https://insights.sbomify.com/CVE-2023-31427/): Knowledge of full path name (high 7.8)
- [CVE-2023-31426](https://insights.sbomify.com/CVE-2023-31426/): scp, sftp, ftp servers passwords in supportsave (medium 6.8)
- [CVE-2023-31425](https://insights.sbomify.com/CVE-2023-31425/): Privilege escalation via the fosexec command (high 7.8)
- [CVE-2023-31424](https://insights.sbomify.com/CVE-2023-31424/): Web authentication and authorization bypass (high 8.1)
- [CVE-2023-31423](https://insights.sbomify.com/CVE-2023-31423/): Possible information exposure through log file vulnerability (medium 5.7)
- [CVE-2023-31422](https://insights.sbomify.com/CVE-2023-31422/): Kibana Insertion of Sensitive Information into Log File (critical 9.0)
- [CVE-2023-31421](https://insights.sbomify.com/CVE-2023-31421/): Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue (medium 5.9)
- [CVE-2023-3142](https://insights.sbomify.com/CVE-2023-3142/): Cross-site Scripting (XSS) - Stored in microweber/microweber (low 3.8)
- [CVE-2023-31419](https://insights.sbomify.com/CVE-2023-31419/): Elasticsearch StackOverflow vulnerability (medium 6.5)
- [CVE-2023-31418](https://insights.sbomify.com/CVE-2023-31418/): Elasticsearch uncontrolled resource consumption (high 7.5)
- [CVE-2023-31417](https://insights.sbomify.com/CVE-2023-31417/): Elasticsearch Insertion of sensitive information in audit logs (medium 4.1)
- [CVE-2023-31416](https://insights.sbomify.com/CVE-2023-31416/): Elastic Cloud on Kubernetes (ECK) secret token configuration issue (medium 5.3)
- [CVE-2023-31415](https://insights.sbomify.com/CVE-2023-31415/): Code injection in Kibana (critical 9.9)
- [CVE-2023-31414](https://insights.sbomify.com/CVE-2023-31414/): Code injection in Kibana (high 8.2)
- [CVE-2023-31413](https://insights.sbomify.com/CVE-2023-31413/): Information disclosure in Filebeat (medium 5.5)
- [CVE-2023-31412](https://insights.sbomify.com/CVE-2023-31412/): Weak cryptography in LMS5xx (high 7.5)
- [CVE-2023-31411](https://insights.sbomify.com/CVE-2023-31411/): Missing authorization in EventCam App (critical 9.8)
- [CVE-2023-31410](https://insights.sbomify.com/CVE-2023-31410/): Weak cryptography in EventCam App (critical 9.8)
- [CVE-2023-3141](https://insights.sbomify.com/CVE-2023-3141/): Use after free in Kernel (high 7.1)
- [CVE-2023-31409](https://insights.sbomify.com/CVE-2023-31409/): Denial of service in SICK FTMG-ESD15AXX AIR FLOW SENSOR (medium 5.3)
- [CVE-2023-31408](https://insights.sbomify.com/CVE-2023-31408/): Information disclosure in SICK FTMG-ESD15AXX AIR FLOW SENSOR (medium 5.3)
- [CVE-2023-31407](https://insights.sbomify.com/CVE-2023-31407/): Cross-Site Scripting (XSS) vulnerability in SAP Business Planning and Consolidation (medium 5.4)
- [CVE-2023-31406](https://insights.sbomify.com/CVE-2023-31406/): Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (medium 6.1)
- [CVE-2023-31405](https://insights.sbomify.com/CVE-2023-31405/): Log Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer) (medium 5.3)
- [CVE-2023-31404](https://insights.sbomify.com/CVE-2023-31404/): Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service) (medium 5.0)
- [CVE-2023-31403](https://insights.sbomify.com/CVE-2023-31403/): Improper Access Control vulnerability in SAP Business One product installation (critical 9.6)
- [CVE-2023-3140](https://insights.sbomify.com/CVE-2023-3140/): KNIME Hub Web Application is vulnerable to clickjacking (medium 4.3)
- [CVE-2023-3139](https://insights.sbomify.com/CVE-2023-3139/): Protect WP Admin < 4.0 - Unauthenticated Protection Bypass (medium 6.1)
- [CVE-2023-3138](https://insights.sbomify.com/CVE-2023-3138/): Memory corruption in libX11 (high 7.5)
- [CVE-2023-31366](https://insights.sbomify.com/CVE-2023-31366/): Memory corruption in μProf Tool (low 3.3)
- [CVE-2023-31365](https://insights.sbomify.com/CVE-2023-31365/): Integer overflow in AMD Radeon™ PRO V710 Graphics Products (low 3.9)
- [CVE-2023-31364](https://insights.sbomify.com/CVE-2023-31364/): Memory corruption in AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (high 8.3)
- [CVE-2023-31361](https://insights.sbomify.com/CVE-2023-31361/): Privilege escalation in AIM-T (AMD Integrated Management Technology) software (high 7.3)
- [CVE-2023-31360](https://insights.sbomify.com/CVE-2023-31360/): Misconfiguration in AIM-T(AMD Integrated Management Technology) software (high 7.3)
- [CVE-2023-3136](https://insights.sbomify.com/CVE-2023-3136/): MailArchiver <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting via Email Subject (high 7.2)
- [CVE-2023-31359](https://insights.sbomify.com/CVE-2023-31359/): Misconfiguration in AIM-T Manageability API (high 7.3)
- [CVE-2023-31358](https://insights.sbomify.com/CVE-2023-31358/): Privilege escalation in AIM-T Manageability API (high 7.3)
- [CVE-2023-31356](https://insights.sbomify.com/CVE-2023-31356/): Other in AMD EPYC™ 7003 Processors (medium 4.4)
- [CVE-2023-31355](https://insights.sbomify.com/CVE-2023-31355/): Memory corruption in 3rd Gen AMD EPYC™ Processors (medium 6.0)
- [CVE-2023-31352](https://insights.sbomify.com/CVE-2023-31352/): Memory corruption in AMD EPYC™ 9004 Processors (medium 6.0)
- [CVE-2023-31351](https://insights.sbomify.com/CVE-2023-31351/): Memory corruption in AMD EPYC™ 7003 Series Processors (medium 5.3)
- [CVE-2023-3135](https://insights.sbomify.com/CVE-2023-3135/): Mailtree Log Mail <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting via Email Subject (high 7.2)
- [CVE-2023-31349](https://insights.sbomify.com/CVE-2023-31349/): Misconfiguration in μProf Tool (high 7.3)
- [CVE-2023-31348](https://insights.sbomify.com/CVE-2023-31348/): Privilege escalation in μProf Tool (high 7.3)
- [CVE-2023-31347](https://insights.sbomify.com/CVE-2023-31347/): Security feature bypass in 3rd Gen AMD EPYC™ Processors (medium 4.9)
- [CVE-2023-31346](https://insights.sbomify.com/CVE-2023-31346/): Information disclosure in 3rd Gen AMD EPYC™ Processors (medium 6.0)
- [CVE-2023-31345](https://insights.sbomify.com/CVE-2023-31345/): Memory corruption in AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (high 7.5)
- [CVE-2023-31343](https://insights.sbomify.com/CVE-2023-31343/): Memory corruption in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics (high 7.5)
- [CVE-2023-31342](https://insights.sbomify.com/CVE-2023-31342/): Memory corruption in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics (high 7.5)
- [CVE-2023-31341](https://insights.sbomify.com/CVE-2023-31341/): Memory corruption in μProf Tool (high 7.3)
- [CVE-2023-3134](https://insights.sbomify.com/CVE-2023-3134/): Forminator < 1.24.4 - Reflected XSS (medium 6.1)
- [CVE-2023-31339](https://insights.sbomify.com/CVE-2023-31339/): Memory corruption in Zynq™ UltraScale+™ MPSoC/RFSoC (medium 4.8)
- [CVE-2023-31331](https://insights.sbomify.com/CVE-2023-31331/): Memory corruption in AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics (low 3.0)
- [CVE-2023-31330](https://insights.sbomify.com/CVE-2023-31330/): Memory corruption in AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (low 2.5)
- [CVE-2023-3133](https://insights.sbomify.com/CVE-2023-3133/): Tutor LMS < 2.2.1 - Unauthenticated Access to Tutor LMS Lesson Resources via REST API (high 7.5)
- [CVE-2023-31326](https://insights.sbomify.com/CVE-2023-31326/): Information disclosure in AMD Instinct™ MI210 (low 2.8)
- [CVE-2023-31325](https://insights.sbomify.com/CVE-2023-31325/): Security feature bypass in AMD Radeon™ PRO W7000 Series Graphics Products (high 7.2)
- [CVE-2023-31324](https://insights.sbomify.com/CVE-2023-31324/): Race condition in AMD Instinct™ MI210 (high 7.1)
- [CVE-2023-31323](https://insights.sbomify.com/CVE-2023-31323/): Memory corruption in AMD Instinct™ MI210 (high 8.4)
- [CVE-2023-31322](https://insights.sbomify.com/CVE-2023-31322/): Memory corruption in -AMD Radeon™ PRO W7000 Series Graphics Products (high 8.7)
- [CVE-2023-31320](https://insights.sbomify.com/CVE-2023-31320/): Other in Radeon™ PRO W5000/W6000/W7000 Series Graphics Cards (high 7.5)
- [CVE-2023-3132](https://insights.sbomify.com/CVE-2023-3132/): MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files (medium 5.9)
- [CVE-2023-31317](https://insights.sbomify.com/CVE-2023-31317/): Memory corruption in AMD Instinct™ MI210 (high 8.8)
- [CVE-2023-31316](https://insights.sbomify.com/CVE-2023-31316/): Security feature bypass in AMD Instinct™ MI210 (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/317/