# Vulnerabilities published in 2023


- [CVE-2023-27793](https://insights.sbomify.com/CVE-2023-27793/): Privilege escalation in ixpdata:easyinstall (high 7.8)
- [CVE-2023-27792](https://insights.sbomify.com/CVE-2023-27792/): Privilege escalation in ixpdata:easyinstall (high 7.8)
- [CVE-2023-27791](https://insights.sbomify.com/CVE-2023-27791/): Weak cryptography in ixpdata:easyinstall (high 8.1)
- [CVE-2023-2779](https://insights.sbomify.com/CVE-2023-2779/): Super Socializer < 7.13.52 - Reflected XSS (medium 6.1)
- [CVE-2023-27789](https://insights.sbomify.com/CVE-2023-27789/): Denial of service in broadcom:tcpreplay (high 7.5)
- [CVE-2023-27788](https://insights.sbomify.com/CVE-2023-27788/): Denial of service in broadcom:tcpreplay (high 7.5)
- [CVE-2023-27787](https://insights.sbomify.com/CVE-2023-27787/): Null dereference in broadcom:tcpreplay (high 7.5)
- [CVE-2023-27786](https://insights.sbomify.com/CVE-2023-27786/): Null dereference in broadcom:tcpreplay (high 7.5)
- [CVE-2023-27785](https://insights.sbomify.com/CVE-2023-27785/): Null dereference in broadcom:tcpreplay (high 7.5)
- [CVE-2023-27784](https://insights.sbomify.com/CVE-2023-27784/): Null dereference in broadcom:tcpreplay (high 7.5)
- [CVE-2023-27783](https://insights.sbomify.com/CVE-2023-27783/): Denial of service in broadcom:tcpreplay (high 7.5)
- [CVE-2023-27781](https://insights.sbomify.com/CVE-2023-27781/): Memory corruption in jpegoptim project:jpegoptim (high 7.8)
- [CVE-2023-2778](https://insights.sbomify.com/CVE-2023-2778/): Rockwell Automation FactoryTalk Transaction Manager Vulnerable to Denial-Of-Service (high 7.5)
- [CVE-2023-27779](https://insights.sbomify.com/CVE-2023-27779/): SQL injection in amsystem:am presencia (critical 9.8)
- [CVE-2023-27777](https://insights.sbomify.com/CVE-2023-27777/): Cross-site scripting in online jewelry shop project:online jewelry shop (medium 5.4)
- [CVE-2023-27776](https://insights.sbomify.com/CVE-2023-27776/): Cross-site scripting in online jewelry shop project:online jewelry shop (medium 5.4)
- [CVE-2023-27775](https://insights.sbomify.com/CVE-2023-27775/): Cross-site scripting in liveaction:livesp (medium 5.4)
- [CVE-2023-27772](https://insights.sbomify.com/CVE-2023-27772/): Memory corruption in mz-automation:libiec61850 (high 7.5)
- [CVE-2023-27771](https://insights.sbomify.com/CVE-2023-27771/): Other in wondershare:creative centerr (high 7.8)
- [CVE-2023-27770](https://insights.sbomify.com/CVE-2023-27770/): Code injection in wondershare:edraw-max (high 7.8)
- [CVE-2023-27769](https://insights.sbomify.com/CVE-2023-27769/): Other in wondershare:pdf reader (high 7.8)
- [CVE-2023-27768](https://insights.sbomify.com/CVE-2023-27768/): Other in wondershare:pdfelement (high 7.8)
- [CVE-2023-27767](https://insights.sbomify.com/CVE-2023-27767/): Code injection in wondershare:dr.fone (high 7.8)
- [CVE-2023-27766](https://insights.sbomify.com/CVE-2023-27766/): Other in wondershare:anireel (high 7.8)
- [CVE-2023-27765](https://insights.sbomify.com/CVE-2023-27765/): Other in wondershare:recoverit (high 7.8)
- [CVE-2023-27764](https://insights.sbomify.com/CVE-2023-27764/): Code injection in wondershare:repairit (high 7.8)
- [CVE-2023-27763](https://insights.sbomify.com/CVE-2023-27763/): Other in wondershare:mobiletrans (high 7.8)
- [CVE-2023-27762](https://insights.sbomify.com/CVE-2023-27762/): Other in wondershare:democreator (high 7.8)
- [CVE-2023-27761](https://insights.sbomify.com/CVE-2023-27761/): Other in wondershare:uniconverter (high 7.8)
- [CVE-2023-27760](https://insights.sbomify.com/CVE-2023-27760/): Other in wondershare:filmora (high 7.8)
- [CVE-2023-2776](https://insights.sbomify.com/CVE-2023-2776/): code-projects Simple Photo Gallery unrestricted upload (medium 6.3)
- [CVE-2023-27759](https://insights.sbomify.com/CVE-2023-27759/): Code injection in wondershare:edrawmind (high 7.8)
- [CVE-2023-27757](https://insights.sbomify.com/CVE-2023-27757/): File upload in perfree:perfreeblog (critical 9.8)
- [CVE-2023-27755](https://insights.sbomify.com/CVE-2023-27755/): Path traversal in 71note:go-bbs (high 8.8)
- [CVE-2023-27754](https://insights.sbomify.com/CVE-2023-27754/): Memory corruption in vox2mesh project:vox2mesh (medium 5.5)
- [CVE-2023-27753](https://insights.sbomify.com/CVE-2023-27753/): An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file. (high 8.0)
- [CVE-2023-2775](https://insights.sbomify.com/CVE-2023-2775/): code-projects Bus Dispatch and Information System adminHome.php sql injection (medium 6.3)
- [CVE-2023-27748](https://insights.sbomify.com/CVE-2023-27748/): Security feature bypass in blackvue:dr750-2ch ir lte firmware (critical 9.8)
- [CVE-2023-27747](https://insights.sbomify.com/CVE-2023-27747/): Missing authorization in blackvue:dr750-2ch ir lte firmware (high 7.5)
- [CVE-2023-27746](https://insights.sbomify.com/CVE-2023-27746/): Weak cryptography in blackvue:dr750-2ch ir lte firmware (critical 9.8)
- [CVE-2023-27745](https://insights.sbomify.com/CVE-2023-27745/): Privilege escalation in southrivertech:titan ftp server nextgen (high 8.8)
- [CVE-2023-27744](https://insights.sbomify.com/CVE-2023-27744/): Code injection in southrivertech:titan ftp server nextgen (high 7.8)
- [CVE-2023-27742](https://insights.sbomify.com/CVE-2023-27742/): SQL injection in idurarapp:idurar (critical 9.8)
- [CVE-2023-2774](https://insights.sbomify.com/CVE-2023-2774/): code-projects Bus Dispatch and Information System view_branch.php sql injection (medium 6.3)
- [CVE-2023-27739](https://insights.sbomify.com/CVE-2023-27739/): Cross-site scripting in easyxdm:easyxdm (medium 6.1)
- [CVE-2023-27734](https://insights.sbomify.com/CVE-2023-27734/): Denial of service in edb-debugger project:edb-debugger (medium 5.5)
- [CVE-2023-27733](https://insights.sbomify.com/CVE-2023-27733/): SQL injection in dedecms:dedecms (high 7.2)
- [CVE-2023-27730](https://insights.sbomify.com/CVE-2023-27730/): Memory corruption in f5:njs (high 7.5)
- [CVE-2023-2773](https://insights.sbomify.com/CVE-2023-2773/): code-projects Bus Dispatch and Information System view_admin.php sql injection (medium 6.3)
- [CVE-2023-27729](https://insights.sbomify.com/CVE-2023-27729/): Memory corruption in f5:njs (high 7.5)
- [CVE-2023-27728](https://insights.sbomify.com/CVE-2023-27728/): Memory corruption in f5:njs (high 7.5)
- [CVE-2023-27727](https://insights.sbomify.com/CVE-2023-27727/): Memory corruption in f5:njs (high 7.5)
- [CVE-2023-27720](https://insights.sbomify.com/CVE-2023-27720/): Memory corruption in dlink:dir-878 firmware (critical 9.8)
- [CVE-2023-2772](https://insights.sbomify.com/CVE-2023-2772/): SourceCodester Budget and Expense Tracker System GET Parameter manage_budget.php sql injection (medium 6.3)
- [CVE-2023-27719](https://insights.sbomify.com/CVE-2023-27719/): Memory corruption in dlink:dir878 firmware (critical 9.8)
- [CVE-2023-27718](https://insights.sbomify.com/CVE-2023-27718/): Memory corruption in dlink:dir878 firmware (critical 9.8)
- [CVE-2023-27716](https://insights.sbomify.com/CVE-2023-27716/): Privilege escalation in kafkaui-lite project:kafkaui-lite (critical 9.8)
- [CVE-2023-27711](https://insights.sbomify.com/CVE-2023-27711/): Cross-site scripting in typecho:typecho (medium 4.8)
- [CVE-2023-2771](https://insights.sbomify.com/CVE-2023-2771/): SourceCodester Online Exam System data sql injection (medium 6.3)
- [CVE-2023-27709](https://insights.sbomify.com/CVE-2023-27709/): SQL injection in dedecms:dedecms (high 7.2)
- [CVE-2023-27707](https://insights.sbomify.com/CVE-2023-27707/): SQL injection in dedecms:dedecms (high 7.2)
- [CVE-2023-27706](https://insights.sbomify.com/CVE-2023-27706/): Information disclosure in bitwarden:bitwarden (high 7.1)
- [CVE-2023-27705](https://insights.sbomify.com/CVE-2023-27705/): Memory corruption in apng optimizer project:apng optimizer (high 7.5)
- [CVE-2023-27704](https://insights.sbomify.com/CVE-2023-27704/): Denial of service in voidtools:everything (medium 5.5)
- [CVE-2023-27703](https://insights.sbomify.com/CVE-2023-27703/): Information disclosure in mypikpak:pikpak (low 3.3)
- [CVE-2023-27701](https://insights.sbomify.com/CVE-2023-27701/): Missing authorization in muyucms:muyucms (high 8.1)
- [CVE-2023-27700](https://insights.sbomify.com/CVE-2023-27700/): Path traversal in muyucms project:muyucms (high 8.1)
- [CVE-2023-2770](https://insights.sbomify.com/CVE-2023-2770/): SourceCodester Online Exam System data sql injection (medium 6.3)
- [CVE-2023-2769](https://insights.sbomify.com/CVE-2023-2769/): SourceCodester Service Provider Management System sql injection (medium 6.3)
- [CVE-2023-2768](https://insights.sbomify.com/CVE-2023-2768/): Sucms cross site scripting (low 3.5)
- [CVE-2023-2767](https://insights.sbomify.com/CVE-2023-2767/): Cross-site scripting in Iptanus File Upload (medium 4.4)
- [CVE-2023-27667](https://insights.sbomify.com/CVE-2023-27667/): SQL injection in auto dealer management system project:auto dealer management system (critical 9.8)
- [CVE-2023-27666](https://insights.sbomify.com/CVE-2023-27666/): Cross-site scripting in auto dealer management system project:auto dealer management system (medium 6.1)
- [CVE-2023-2766](https://insights.sbomify.com/CVE-2023-2766/): Weaver OA jx2_config.ini file access (medium 5.3)
- [CVE-2023-27654](https://insights.sbomify.com/CVE-2023-27654/): Privilege escalation in whoapp:who (critical 9.8)
- [CVE-2023-27653](https://insights.sbomify.com/CVE-2023-27653/): Denial of service in whoapp:who (high 7.5)
- [CVE-2023-27652](https://insights.sbomify.com/CVE-2023-27652/): XML external entity in egostudiogroup:super clean (medium 5.5)
- [CVE-2023-27651](https://insights.sbomify.com/CVE-2023-27651/): Privilege escalation in egostudiogroup:super clean (high 7.8)
- [CVE-2023-27650](https://insights.sbomify.com/CVE-2023-27650/): Code injection in apusapps:launcher (critical 9.8)
- [CVE-2023-2765](https://insights.sbomify.com/CVE-2023-2765/): Weaver OA downfile.php absolute path traversal (medium 4.3)
- [CVE-2023-27649](https://insights.sbomify.com/CVE-2023-27649/): SQL injection in bestools:trusted tools free music (high 7.5)
- [CVE-2023-27648](https://insights.sbomify.com/CVE-2023-27648/): Path traversal in timmystudios:change color of keypad (critical 9.8)
- [CVE-2023-27647](https://insights.sbomify.com/CVE-2023-27647/): Information disclosure in dualspace:lock master (high 7.1)
- [CVE-2023-27645](https://insights.sbomify.com/CVE-2023-27645/): Privilege escalation in powerampapp:poweramp (critical 9.8)
- [CVE-2023-27643](https://insights.sbomify.com/CVE-2023-27643/): Denial of service in powerampapp:poweramp (high 7.5)
- [CVE-2023-27641](https://insights.sbomify.com/CVE-2023-27641/): Cross-site scripting in lsoft:listserv (medium 6.1)
- [CVE-2023-27640](https://insights.sbomify.com/CVE-2023-27640/): Path traversal in tshirtecommerce:custom product designer (high 7.5)
- [CVE-2023-2764](https://insights.sbomify.com/CVE-2023-2764/): Draw Attention <= 2.0.11 - Missing Authorization to Arbitrary Post Featured Image Modification (medium 4.3)
- [CVE-2023-27639](https://insights.sbomify.com/CVE-2023-27639/): Path traversal in tshirtecommerce:custom product designer (high 7.5)
- [CVE-2023-27638](https://insights.sbomify.com/CVE-2023-27638/): SQL injection in tshirtecommerce:custom product designer (critical 9.8)
- [CVE-2023-27637](https://insights.sbomify.com/CVE-2023-27637/): SQL injection in tshirtecommerce:custom product designer (critical 9.8)
- [CVE-2023-27636](https://insights.sbomify.com/CVE-2023-27636/): Cross-site scripting in progress:sitefinity (medium 6.5)
- [CVE-2023-27635](https://insights.sbomify.com/CVE-2023-27635/): Command injection in debian:debmany (high 7.8)
- [CVE-2023-27634](https://insights.sbomify.com/CVE-2023-27634/): WordPress Intrepidity Theme <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF) (high 8.8)
- [CVE-2023-27633](https://insights.sbomify.com/CVE-2023-27633/): WordPress Customify Plugin <= 2.10.4 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-27632](https://insights.sbomify.com/CVE-2023-27632/): WordPress Daily Prayer Time Plugin <= 2023.03.08 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-27631](https://insights.sbomify.com/CVE-2023-27631/): WordPress Daily Prayer Time Plugin <= 2023.05.04 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2023-27630](https://insights.sbomify.com/CVE-2023-27630/): WordPress Community by PeepSo plugin <= 6.0.9.0 - Server Information Disclosure (medium 5.3)
- [CVE-2023-2763](https://insights.sbomify.com/CVE-2023-2763/): Memory corruption in SOLIDWORKS Desktop (high 7.8)
- [CVE-2023-27629](https://insights.sbomify.com/CVE-2023-27629/): WordPress Site Reviews Plugin <= 6.5.1 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/347/