# Vulnerabilities published in 2023


- [CVE-2023-31085](https://insights.sbomify.com/CVE-2023-31085/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2023-31084](https://insights.sbomify.com/CVE-2023-31084/): Denial of service in debian:debian linux (medium 5.5)
- [CVE-2023-31083](https://insights.sbomify.com/CVE-2023-31083/): Race condition in linux:linux kernel (medium 4.7)
- [CVE-2023-31082](https://insights.sbomify.com/CVE-2023-31082/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2023-31081](https://insights.sbomify.com/CVE-2023-31081/): Null dereference in linux:linux kernel (medium 5.5)
- [CVE-2023-31080](https://insights.sbomify.com/CVE-2023-31080/): WordPress Unlimited Elements For Elementor plugin <= 1.5.65 - Multiple Broken Access Control vulnerability (high 8.3)
- [CVE-2023-3108](https://insights.sbomify.com/CVE-2023-3108/): Kernel: a race condition in crypto module in the function skcipher_recvmsg (medium 6.2)
- [CVE-2023-31079](https://insights.sbomify.com/CVE-2023-31079/): WordPress Tippy Plugin <= 6.2.1 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2023-31078](https://insights.sbomify.com/CVE-2023-31078/): WordPress WP BrowserUpdate Plugin <= 4.4.1 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-31077](https://insights.sbomify.com/CVE-2023-31077/): WordPress Export WP Page to Static HTML/CSS Plugin <= 2.1.9 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-31076](https://insights.sbomify.com/CVE-2023-31076/): WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.6 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-31075](https://insights.sbomify.com/CVE-2023-31075/): WordPress Easy Hide Login Plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-31074](https://insights.sbomify.com/CVE-2023-31074/): WordPress Extensions for Leaflet Map Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-31073](https://insights.sbomify.com/CVE-2023-31073/): WordPress Shortcode to display post and user data plugin <= 1.2.0 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2023-31072](https://insights.sbomify.com/CVE-2023-31072/): WordPress Advanced Category Template Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-31071](https://insights.sbomify.com/CVE-2023-31071/): WordPress Modal Dialog Plugin <= 3.5.14 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-3107](https://insights.sbomify.com/CVE-2023-3107/): Remote denial of service in IPv6 fragment reassembly (high 7.5)
- [CVE-2023-31069](https://insights.sbomify.com/CVE-2023-31069/): Information disclosure in tsplus:tsplus remote work (critical 9.8)
- [CVE-2023-31068](https://insights.sbomify.com/CVE-2023-31068/): Misconfiguration in tsplus:tsplus remote work (critical 9.8)
- [CVE-2023-31067](https://insights.sbomify.com/CVE-2023-31067/): Misconfiguration in tsplus:tsplus remote access (critical 9.8)
- [CVE-2023-31066](https://insights.sbomify.com/CVE-2023-31066/): Apache InLong: Insecure direct object references for inlong sources (critical 9.1)
- [CVE-2023-31065](https://insights.sbomify.com/CVE-2023-31065/): Apache InLong: Insufficient Session Expiration in InLong (critical 9.1)
- [CVE-2023-31064](https://insights.sbomify.com/CVE-2023-31064/): Apache InLong: Insecurity direct object references cancelling applications (high 7.5)
- [CVE-2023-31062](https://insights.sbomify.com/CVE-2023-31062/): Apache InLong: Privilege escalation vulnerability for InLong (critical 9.8)
- [CVE-2023-31061](https://insights.sbomify.com/CVE-2023-31061/): Cross-site request forgery in repetier-server:repetier-server (high 8.8)
- [CVE-2023-31060](https://insights.sbomify.com/CVE-2023-31060/): Privilege escalation in repetier-server:repetier-server (critical 9.8)
- [CVE-2023-3106](https://insights.sbomify.com/CVE-2023-3106/): Kernel: netlink socket crash (null pointer deref) in netlink_dump function (medium 6.6)
- [CVE-2023-31059](https://insights.sbomify.com/CVE-2023-31059/): Path traversal in repetier-server:repetier-server (high 7.5)
- [CVE-2023-31058](https://insights.sbomify.com/CVE-2023-31058/): Apache InLong: JDBC URL bypassing by adding blanks (high 7.5)
- [CVE-2023-31056](https://insights.sbomify.com/CVE-2023-31056/): Information disclosure in cloverdx:cloverdx (critical 9.1)
- [CVE-2023-3105](https://insights.sbomify.com/CVE-2023-3105/): LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change (high 8.8)
- [CVE-2023-31048](https://insights.sbomify.com/CVE-2023-31048/): Exposure of Sensitive Information in OPC UA .NET Standard Reference Server (medium 5.3)
- [CVE-2023-31047](https://insights.sbomify.com/CVE-2023-31047/): Django bypasses validation when using one form field to upload multiple files (critical 9.8)
- [CVE-2023-31046](https://insights.sbomify.com/CVE-2023-31046/): Path traversal in papercut:papercut mf (medium 6.5)
- [CVE-2023-31045](https://insights.sbomify.com/CVE-2023-31045/): Cross-site Scripting in Backdrop CMS (medium 4.8)
- [CVE-2023-31044](https://insights.sbomify.com/CVE-2023-31044/): Code injection in nokia:impact mobile (low 2.0)
- [CVE-2023-31043](https://insights.sbomify.com/CVE-2023-31043/): Information disclosure in enterprisedb:postgres advanced server (high 7.5)
- [CVE-2023-31042](https://insights.sbomify.com/CVE-2023-31042/): FlashBlade Object Store Protocol (high 7.7)
- [CVE-2023-31041](https://insights.sbomify.com/CVE-2023-31041/): Information disclosure in insyde:insydeh2o (high 7.5)
- [CVE-2023-3104](https://insights.sbomify.com/CVE-2023-3104/): Missing Authentication for Critical Function in Unitree Robotics A1 (medium 5.7)
- [CVE-2023-31039](https://insights.sbomify.com/CVE-2023-31039/): Apache bRPC: ServerOptions.pid_file may cause arbitrary code execution (critical 9.8)
- [CVE-2023-31038](https://insights.sbomify.com/CVE-2023-31038/): Apache Log4cxx: SQL injection when using ODBC appender (high 8.8)
- [CVE-2023-31037](https://insights.sbomify.com/CVE-2023-31037/): Command injection in Bluefield 2 DPU BMC, BlueField 3 DPU BMC (high 7.2)
- [CVE-2023-31036](https://insights.sbomify.com/CVE-2023-31036/): CVE (high 7.5)
- [CVE-2023-31035](https://insights.sbomify.com/CVE-2023-31035/): CVE (high 7.5)
- [CVE-2023-31034](https://insights.sbomify.com/CVE-2023-31034/): CVE (medium 6.6)
- [CVE-2023-31033](https://insights.sbomify.com/CVE-2023-31033/): CVE (medium 6.8)
- [CVE-2023-31032](https://insights.sbomify.com/CVE-2023-31032/): CVE (high 7.5)
- [CVE-2023-31031](https://insights.sbomify.com/CVE-2023-31031/): CVE (medium 4.2)
- [CVE-2023-31030](https://insights.sbomify.com/CVE-2023-31030/): CVE (critical 9.3)
- [CVE-2023-3103](https://insights.sbomify.com/CVE-2023-3103/): Authentication Bypass by Spoofing in Unitree Robotics A1 (high 8.0)
- [CVE-2023-31029](https://insights.sbomify.com/CVE-2023-31029/): CVE (critical 9.3)
- [CVE-2023-31028](https://insights.sbomify.com/CVE-2023-31028/): Denial of service in nvJPEG2000 Library (low 2.8)
- [CVE-2023-31027](https://insights.sbomify.com/CVE-2023-31027/): CVE (high 8.2)
- [CVE-2023-31026](https://insights.sbomify.com/CVE-2023-31026/): CVE (medium 6.0)
- [CVE-2023-31025](https://insights.sbomify.com/CVE-2023-31025/): CVE (medium 6.5)
- [CVE-2023-31024](https://insights.sbomify.com/CVE-2023-31024/): CVE (critical 9.0)
- [CVE-2023-31023](https://insights.sbomify.com/CVE-2023-31023/): CVE (medium 5.5)
- [CVE-2023-31022](https://insights.sbomify.com/CVE-2023-31022/): CVE (medium 5.5)
- [CVE-2023-31021](https://insights.sbomify.com/CVE-2023-31021/): CVE (medium 5.5)
- [CVE-2023-31020](https://insights.sbomify.com/CVE-2023-31020/): CVE (medium 6.1)
- [CVE-2023-3102](https://insights.sbomify.com/CVE-2023-3102/): Insertion of Sensitive Information Into Sent Data in GitLab (medium 5.3)
- [CVE-2023-31019](https://insights.sbomify.com/CVE-2023-31019/): CVE (high 7.8)
- [CVE-2023-31018](https://insights.sbomify.com/CVE-2023-31018/): CVE (medium 6.5)
- [CVE-2023-31017](https://insights.sbomify.com/CVE-2023-31017/): CVE (high 7.8)
- [CVE-2023-31016](https://insights.sbomify.com/CVE-2023-31016/): CVE (high 7.3)
- [CVE-2023-31015](https://insights.sbomify.com/CVE-2023-31015/): Auth bypass in DGX H100 BMC (medium 6.6)
- [CVE-2023-31014](https://insights.sbomify.com/CVE-2023-31014/): Other in GeForce NOW for Android mobile and TV app (medium 4.2)
- [CVE-2023-31013](https://insights.sbomify.com/CVE-2023-31013/): Other in DGX H100 BMC (medium 6.1)
- [CVE-2023-31012](https://insights.sbomify.com/CVE-2023-31012/): Other in DGX H100 BMC (medium 6.1)
- [CVE-2023-31011](https://insights.sbomify.com/CVE-2023-31011/): Other in DGX H100 BMC (medium 5.2)
- [CVE-2023-31010](https://insights.sbomify.com/CVE-2023-31010/): Other in DGX H100 BMC (medium 6.8)
- [CVE-2023-31009](https://insights.sbomify.com/CVE-2023-31009/): Other in DGX H100 BMC (high 8.3)
- [CVE-2023-31008](https://insights.sbomify.com/CVE-2023-31008/): Other in DGX H100 BMC (high 7.3)
- [CVE-2023-31007](https://insights.sbomify.com/CVE-2023-31007/): Apache Pulsar: Broker does not always disconnect client when authentication data expires (not scored)
- [CVE-2023-31006](https://insights.sbomify.com/CVE-2023-31006/): IBM Security Access Manager Container denial of service (medium 6.5)
- [CVE-2023-31005](https://insights.sbomify.com/CVE-2023-31005/): IBM Security Access Manager Container privilege escalation (medium 6.2)
- [CVE-2023-31004](https://insights.sbomify.com/CVE-2023-31004/): IBM Security Access Manager Container gain access (high 8.3)
- [CVE-2023-31003](https://insights.sbomify.com/CVE-2023-31003/): IBM Security Access Manager Container privilege escalation (high 8.4)
- [CVE-2023-31002](https://insights.sbomify.com/CVE-2023-31002/): IBM Security Access Manager Container information disclosure (medium 5.1)
- [CVE-2023-31001](https://insights.sbomify.com/CVE-2023-31001/): IBM Security Access Manager Container information disclosure (medium 5.1)
- [CVE-2023-3100](https://insights.sbomify.com/CVE-2023-3100/): IBOS del actionDel sql injection (medium 5.5)
- [CVE-2023-30999](https://insights.sbomify.com/CVE-2023-30999/): IBM Security Access Manager denial of service (high 7.5)
- [CVE-2023-30998](https://insights.sbomify.com/CVE-2023-30998/): IBM Security Access Manager Docker privilege escalation (high 7.8)
- [CVE-2023-30997](https://insights.sbomify.com/CVE-2023-30997/): IBM Security Access Manager Docker privilege escalation (high 7.8)
- [CVE-2023-30996](https://insights.sbomify.com/CVE-2023-30996/): IBM Cognos Analytics cross-origin resource sharing (medium 5.3)
- [CVE-2023-30995](https://insights.sbomify.com/CVE-2023-30995/): IBM Aspera Faspex improper access control (high 7.5)
- [CVE-2023-30994](https://insights.sbomify.com/CVE-2023-30994/): IBM QRadar SIEM information disclosure (medium 5.4)
- [CVE-2023-30993](https://insights.sbomify.com/CVE-2023-30993/): IBM Cloud Pak for Security information disclosure (medium 6.8)
- [CVE-2023-30991](https://insights.sbomify.com/CVE-2023-30991/): IBM Db2 denial of service (high 7.5)
- [CVE-2023-30990](https://insights.sbomify.com/CVE-2023-30990/): IBM i command execution (high 8.6)
- [CVE-2023-3099](https://insights.sbomify.com/CVE-2023-3099/): KylinSoft youker-assistant Arbitrary File dbus.SystemBus delete_file access control (medium 4.4)
- [CVE-2023-30989](https://insights.sbomify.com/CVE-2023-30989/): IBM i privilege escalation (high 8.4)
- [CVE-2023-30988](https://insights.sbomify.com/CVE-2023-30988/): IBM i privilege escalation (high 8.4)
- [CVE-2023-30987](https://insights.sbomify.com/CVE-2023-30987/): IBM Db2 denial of service (medium 5.3)
- [CVE-2023-30986](https://insights.sbomify.com/CVE-2023-30986/): Memory corruption in Solid Edge SE2023 (high 7.8)
- [CVE-2023-30985](https://insights.sbomify.com/CVE-2023-30985/): Memory corruption in Solid Edge SE2023 (low 3.3)
- [CVE-2023-3098](https://insights.sbomify.com/CVE-2023-3098/): KylinSoft youker-assistant restore_all_sound_file path traversal (medium 4.4)
- [CVE-2023-30971](https://insights.sbomify.com/CVE-2023-30971/): Gaia unauthenticated endpoints (medium 6.8)
- [CVE-2023-30970](https://insights.sbomify.com/CVE-2023-30970/): Gotham table and Forward App Path traversal (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/320/