# Vulnerabilities published in 2023


- [CVE-2023-29051](https://insights.sbomify.com/CVE-2023-29051/): Missing authorization in OX App Suite (high 8.1)
- [CVE-2023-29050](https://insights.sbomify.com/CVE-2023-29050/): Other in OX App Suite (high 7.6)
- [CVE-2023-2905](https://insights.sbomify.com/CVE-2023-2905/): Cesanta Mongoose MQTT Message Parsing Heap Overflow (high 8.8)
- [CVE-2023-29049](https://insights.sbomify.com/CVE-2023-29049/): Cross-site scripting in OX App Suite (medium 5.4)
- [CVE-2023-29048](https://insights.sbomify.com/CVE-2023-29048/): Command injection in OX App Suite (high 8.8)
- [CVE-2023-29047](https://insights.sbomify.com/CVE-2023-29047/): SQL injection in OX App Suite (medium 5.3)
- [CVE-2023-29046](https://insights.sbomify.com/CVE-2023-29046/): Denial of service in OX App Suite (medium 4.3)
- [CVE-2023-29045](https://insights.sbomify.com/CVE-2023-29045/): Cross-site scripting in OX App Suite (medium 5.4)
- [CVE-2023-29044](https://insights.sbomify.com/CVE-2023-29044/): Cross-site scripting in OX App Suite (medium 5.4)
- [CVE-2023-29043](https://insights.sbomify.com/CVE-2023-29043/): Cross-site scripting in OX App Suite (medium 6.1)
- [CVE-2023-2904](https://insights.sbomify.com/CVE-2023-2904/): CVE-2023-2904 (high 7.3)
- [CVE-2023-29032](https://insights.sbomify.com/CVE-2023-29032/): Apache OpenMeetings: allows bypass authentication (high 8.1)
- [CVE-2023-29031](https://insights.sbomify.com/CVE-2023-29031/): Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack (high 7.0)
- [CVE-2023-29030](https://insights.sbomify.com/CVE-2023-29030/): Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack (high 7.0)
- [CVE-2023-2903](https://insights.sbomify.com/CVE-2023-2903/): NFine Rapid Development Platform access control (medium 4.3)
- [CVE-2023-29029](https://insights.sbomify.com/CVE-2023-29029/): Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack (medium 4.7)
- [CVE-2023-29028](https://insights.sbomify.com/CVE-2023-29028/): Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack (medium 4.7)
- [CVE-2023-29027](https://insights.sbomify.com/CVE-2023-29027/): Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack (medium 4.7)
- [CVE-2023-29026](https://insights.sbomify.com/CVE-2023-29026/): Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack (medium 4.7)
- [CVE-2023-29025](https://insights.sbomify.com/CVE-2023-29025/): Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack (medium 4.7)
- [CVE-2023-29024](https://insights.sbomify.com/CVE-2023-29024/): Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack (medium 5.5)
- [CVE-2023-29023](https://insights.sbomify.com/CVE-2023-29023/): Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack (high 7.0)
- [CVE-2023-29022](https://insights.sbomify.com/CVE-2023-29022/): Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack (medium 4.7)
- [CVE-2023-29020](https://insights.sbomify.com/CVE-2023-29020/): Cross site request forgery token fixation in fastify-passport (medium 6.5)
- [CVE-2023-2902](https://insights.sbomify.com/CVE-2023-2902/): NFine Rapid Development Platform access control (medium 4.3)
- [CVE-2023-29019](https://insights.sbomify.com/CVE-2023-29019/): Session fixation in fastify-passport (high 8.1)
- [CVE-2023-29018](https://insights.sbomify.com/CVE-2023-29018/): OpenFeature Operator vulnerable to Cluster-level Privilege Escalation (high 8.1)
- [CVE-2023-29017](https://insights.sbomify.com/CVE-2023-29017/): vm2 Sandbox Escape vulnerability (critical 10.0)
- [CVE-2023-29016](https://insights.sbomify.com/CVE-2023-29016/): Goobi viewer Core has Cross-Site Scripting Vulnerability in User Nicknames (medium 6.1)
- [CVE-2023-29015](https://insights.sbomify.com/CVE-2023-29015/): Goobi viewer Core has Cross-Site Scripting Vulnerability in User Comments (medium 6.1)
- [CVE-2023-29014](https://insights.sbomify.com/CVE-2023-29014/): Goobi viewer Core Reflected Cross-Site Scripting Vulnerability Using LOGID Parameter (medium 6.1)
- [CVE-2023-29013](https://insights.sbomify.com/CVE-2023-29013/): HTTP header parsing could cause a deny of service (high 7.5)
- [CVE-2023-29012](https://insights.sbomify.com/CVE-2023-29012/): Git CMD erroneously executes `doskey.exe` in the current directory, if it exists (high 7.3)
- [CVE-2023-29011](https://insights.sbomify.com/CVE-2023-29011/): Git for Windows's config file of `connect.exe` is susceptible to malicious placing (high 7.6)
- [CVE-2023-29010](https://insights.sbomify.com/CVE-2023-29010/): BudiBase Server-Side Request Forgery vulnerability (medium 6.5)
- [CVE-2023-2901](https://insights.sbomify.com/CVE-2023-2901/): NFine Rapid Development Platform access control (medium 4.3)
- [CVE-2023-29009](https://insights.sbomify.com/CVE-2023-29009/): basercms XSS Vulnerability via Favorites Feature (medium 6.1)
- [CVE-2023-29008](https://insights.sbomify.com/CVE-2023-29008/): SvelteKit framework has Insufficient CSRF protection for CORS requests (high 8.8)
- [CVE-2023-29007](https://insights.sbomify.com/CVE-2023-29007/): Arbitrary configuration injection via `git submodule deinit` (high 7.0)
- [CVE-2023-29006](https://insights.sbomify.com/CVE-2023-29006/): Order GLPI plugin vulnerable to remote code execution from authenticated user (high 8.8)
- [CVE-2023-29005](https://insights.sbomify.com/CVE-2023-29005/): No Rate Limiting on Login AUTH DB (high 7.5)
- [CVE-2023-29004](https://insights.sbomify.com/CVE-2023-29004/): Path Traversal Vulnerability in hap-wi/roxy-wi (medium 6.5)
- [CVE-2023-29003](https://insights.sbomify.com/CVE-2023-29003/): SvelteKit has Insufficient Cross-Site Request Forgery Protection (high 8.8)
- [CVE-2023-29002](https://insights.sbomify.com/CVE-2023-29002/): Debug mode leaks confidential data in Cilium (high 7.2)
- [CVE-2023-29001](https://insights.sbomify.com/CVE-2023-29001/): Uncontrolled recursion due to insufficient validation of the IPv6 source routing header in Contiki-NG (high 8.7)
- [CVE-2023-29000](https://insights.sbomify.com/CVE-2023-29000/): Nextcloud Desktop client does not verify received singed certificate in end-to-end encryption (medium 5.4)
- [CVE-2023-2900](https://insights.sbomify.com/CVE-2023-2900/): NFine Rapid Development Platform CheckLogin weak hash (low 3.7)
- [CVE-2023-28999](https://insights.sbomify.com/CVE-2023-28999/): Nextcloud: Lack of authenticity of metadata keys allows a malicious server to gain access to E2EE folders (medium 6.9)
- [CVE-2023-28998](https://insights.sbomify.com/CVE-2023-28998/): Nextcloud Desktop client misbehaves with E2EE when the server returns empty list of metadata keys (medium 6.7)
- [CVE-2023-28997](https://insights.sbomify.com/CVE-2023-28997/): Nextcloud Desktop: Initialization vector reuse in E2EE allows malicious server admin to break, manipulate, access files (medium 6.7)
- [CVE-2023-28995](https://insights.sbomify.com/CVE-2023-28995/): WordPress Configurable Tag Cloud Plugin <= 5.2 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-28994](https://insights.sbomify.com/CVE-2023-28994/): WordPress Flatsome Theme <= 3.16.8 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-28993](https://insights.sbomify.com/CVE-2023-28993/): WordPress Albo Pretorio Online Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-28992](https://insights.sbomify.com/CVE-2023-28992/): WordPress Coupon Affiliates Plugin <= 5.4.3 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-28991](https://insights.sbomify.com/CVE-2023-28991/): WordPress Order date time for WooCommerce Plugin <= 3.0.19 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-28990](https://insights.sbomify.com/CVE-2023-28990/): WordPress Viral Mag theme <= 1.0.9 - Authenticated Arbitrary Plugin Activation Vulnerability (medium 4.3)
- [CVE-2023-2899](https://insights.sbomify.com/CVE-2023-2899/): Google Map Shortcode <= 3.1.2 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2023-28989](https://insights.sbomify.com/CVE-2023-28989/): WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-28988](https://insights.sbomify.com/CVE-2023-28988/): Cross-site scripting in Direct checkout, Add to cart redirect, Quick purchase button, Buy now button, Quick View button for WooCommerce (medium 5.9)
- [CVE-2023-28987](https://insights.sbomify.com/CVE-2023-28987/): WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-28986](https://insights.sbomify.com/CVE-2023-28986/): WordPress Affiliates Manager Plugin <= 2.9.20 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-28985](https://insights.sbomify.com/CVE-2023-28985/): Denial of service in Junos OS (high 7.5)
- [CVE-2023-28984](https://insights.sbomify.com/CVE-2023-28984/): Junos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and aged (medium 5.3)
- [CVE-2023-28983](https://insights.sbomify.com/CVE-2023-28983/): Junos OS Evolved: Shell Injection vulnerability in the gNOI server (high 8.8)
- [CVE-2023-28982](https://insights.sbomify.com/CVE-2023-28982/): Denial of service in Junos OS (high 7.5)
- [CVE-2023-28981](https://insights.sbomify.com/CVE-2023-28981/): Memory corruption in Junos OS (medium 6.5)
- [CVE-2023-28980](https://insights.sbomify.com/CVE-2023-28980/): Use after free in Junos OS (medium 5.5)
- [CVE-2023-2898](https://insights.sbomify.com/CVE-2023-2898/): Null dereference in Kernel (medium 4.7)
- [CVE-2023-28979](https://insights.sbomify.com/CVE-2023-28979/): Junos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check fails (medium 4.7)
- [CVE-2023-28978](https://insights.sbomify.com/CVE-2023-28978/): Junos OS Evolved: Read access to some confidential user information is possible (medium 5.3)
- [CVE-2023-28976](https://insights.sbomify.com/CVE-2023-28976/): Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash (high 7.5)
- [CVE-2023-28975](https://insights.sbomify.com/CVE-2023-28975/): Junos OS: The kernel will crash when certain USB devices are inserted (medium 4.6)
- [CVE-2023-28974](https://insights.sbomify.com/CVE-2023-28974/): Denial of service in Junos OS (high 7.4)
- [CVE-2023-28973](https://insights.sbomify.com/CVE-2023-28973/): Junos OS Evolved: The 'sysmanctl' shell command allows a local user to gain access to some administrative actions (high 7.1)
- [CVE-2023-28972](https://insights.sbomify.com/CVE-2023-28972/): Junos OS: NFX Series: 'set system ports console insecure' allows root password recovery (medium 6.8)
- [CVE-2023-28971](https://insights.sbomify.com/CVE-2023-28971/): Paragon Active Assurance: Enabling the timescaledb enables IP forwarding (high 7.2)
- [CVE-2023-28970](https://insights.sbomify.com/CVE-2023-28970/): Junos OS: JRR200: Kernel crash upon receipt of a specific packet (medium 6.5)
- [CVE-2023-2897](https://insights.sbomify.com/CVE-2023-2897/): Brizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass (low 3.7)
- [CVE-2023-28968](https://insights.sbomify.com/CVE-2023-28968/): Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open (medium 5.3)
- [CVE-2023-28967](https://insights.sbomify.com/CVE-2023-28967/): Junos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash (high 7.5)
- [CVE-2023-28966](https://insights.sbomify.com/CVE-2023-28966/): Junos OS Evolved: Local low-privileged user with shell access can execute CLI commands as root (high 7.8)
- [CVE-2023-28965](https://insights.sbomify.com/CVE-2023-28965/): Junos OS: QFX10002: Failure of storm control feature may lead to Denial of Service (medium 6.5)
- [CVE-2023-28964](https://insights.sbomify.com/CVE-2023-28964/): Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash (high 7.5)
- [CVE-2023-28963](https://insights.sbomify.com/CVE-2023-28963/): Junos OS: User-controlled input vulnerability in J-Web (medium 5.3)
- [CVE-2023-28962](https://insights.sbomify.com/CVE-2023-28962/): Junos OS: Unauthenticated access vulnerability in J-Web (medium 5.3)
- [CVE-2023-28961](https://insights.sbomify.com/CVE-2023-28961/): Junos OS: ACX Series: IPv6 firewall filter is not installed in PFE when "from next-header ah" is used (medium 5.8)
- [CVE-2023-28960](https://insights.sbomify.com/CVE-2023-28960/): Misconfiguration in Junos OS Evolved (high 8.2)
- [CVE-2023-2896](https://insights.sbomify.com/CVE-2023-2896/): WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_product (medium 4.3)
- [CVE-2023-28959](https://insights.sbomify.com/CVE-2023-28959/): Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets (medium 6.5)
- [CVE-2023-28958](https://insights.sbomify.com/CVE-2023-28958/): IBM Watson Knowledge Catalog CSV injection (high 7.0)
- [CVE-2023-28956](https://insights.sbomify.com/CVE-2023-28956/): IBM Spectrum Protect Backup-Archive Client privilege escalation (high 8.4)
- [CVE-2023-28955](https://insights.sbomify.com/CVE-2023-28955/): IBM Watson Knowledge Catalog denial of service (medium 6.5)
- [CVE-2023-28953](https://insights.sbomify.com/CVE-2023-28953/): IBM Cognos Analytics on Cloud Pak for Data improper access control (low 3.1)
- [CVE-2023-28952](https://insights.sbomify.com/CVE-2023-28952/): IBM Cognos Controller log injection (medium 5.3)
- [CVE-2023-28950](https://insights.sbomify.com/CVE-2023-28950/): IBM MQ information disclosure (medium 5.1)
- [CVE-2023-2895](https://insights.sbomify.com/CVE-2023-2895/): WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_product (medium 4.3)
- [CVE-2023-28949](https://insights.sbomify.com/CVE-2023-28949/): IBM Engineering Requirements Management cross-site request forgery (medium 6.5)
- [CVE-2023-2894](https://insights.sbomify.com/CVE-2023-2894/): WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_product (medium 4.3)
- [CVE-2023-28938](https://insights.sbomify.com/CVE-2023-28938/): Denial of service in Intel(R) SSD Tools software (low 3.4)
- [CVE-2023-28937](https://insights.sbomify.com/CVE-2023-28937/): Hardcoded credentials in DataSpider Servista (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/335/