# Vulnerabilities published in 2023


- [CVE-2023-24789](https://insights.sbomify.com/CVE-2023-24789/): jeecg-boot contains SQL Injection vulnerability (high 8.8)
- [CVE-2023-24788](https://insights.sbomify.com/CVE-2023-24788/): NotrinosERP vulnerable to SQL Injection (high 8.8)
- [CVE-2023-24785](https://insights.sbomify.com/CVE-2023-24785/): Denial of service in peazip project:peazip (medium 5.5)
- [CVE-2023-24782](https://insights.sbomify.com/CVE-2023-24782/): SQL Injection in Funadmin (critical 9.8)
- [CVE-2023-24781](https://insights.sbomify.com/CVE-2023-24781/): SQL Injection in Funadmin (critical 9.8)
- [CVE-2023-24780](https://insights.sbomify.com/CVE-2023-24780/): SQL Injection in Funadmin (critical 9.8)
- [CVE-2023-2478](https://insights.sbomify.com/CVE-2023-2478/): Missing authorization in GitLab (critical 9.6)
- [CVE-2023-24777](https://insights.sbomify.com/CVE-2023-24777/): SQL Injection in Funadmin (critical 9.8)
- [CVE-2023-24776](https://insights.sbomify.com/CVE-2023-24776/): Remote code execution in Funadmin (critical 9.8)
- [CVE-2023-24775](https://insights.sbomify.com/CVE-2023-24775/): SQL Injection in Funadmin (critical 9.8)
- [CVE-2023-24774](https://insights.sbomify.com/CVE-2023-24774/): Funadmin vulnerable to SQL injection (critical 9.8)
- [CVE-2023-24773](https://insights.sbomify.com/CVE-2023-24773/): SQL Injection in Funadmin (critical 9.8)
- [CVE-2023-2477](https://insights.sbomify.com/CVE-2023-2477/): Funadmin Cx.php tagLoad cross site scripting (low 3.5)
- [CVE-2023-24769](https://insights.sbomify.com/CVE-2023-24769/): Stored cross site scripting in changedetection.io (medium 5.4)
- [CVE-2023-24763](https://insights.sbomify.com/CVE-2023-24763/): SQL injection in prestashop:xen forum (high 8.8)
- [CVE-2023-24762](https://insights.sbomify.com/CVE-2023-24762/): Command injection in dlink:dir-867 firmware (critical 9.8)
- [CVE-2023-24760](https://insights.sbomify.com/CVE-2023-24760/): Privilege escalation in ofcms project:ofcms (high 8.8)
- [CVE-2023-2476](https://insights.sbomify.com/CVE-2023-2476/): Dromara J2eeFAST Announcement cross site scripting (low 3.5)
- [CVE-2023-24758](https://insights.sbomify.com/CVE-2023-24758/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2023-24757](https://insights.sbomify.com/CVE-2023-24757/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2023-24756](https://insights.sbomify.com/CVE-2023-24756/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2023-24755](https://insights.sbomify.com/CVE-2023-24755/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2023-24754](https://insights.sbomify.com/CVE-2023-24754/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2023-24752](https://insights.sbomify.com/CVE-2023-24752/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2023-24751](https://insights.sbomify.com/CVE-2023-24751/): Null dereference in debian:debian linux (medium 6.5)
- [CVE-2023-2475](https://insights.sbomify.com/CVE-2023-2475/): Dromara J2eeFAST System Message cross site scripting (low 3.5)
- [CVE-2023-24747](https://insights.sbomify.com/CVE-2023-24747/): Cross-site scripting in jflyfox:jfinal cms (medium 5.4)
- [CVE-2023-24744](https://insights.sbomify.com/CVE-2023-24744/): Cross-site scripting in rediker:adminplus (medium 6.1)
- [CVE-2023-2474](https://insights.sbomify.com/CVE-2023-2474/): Rebuild cross-site request forgery (medium 4.3)
- [CVE-2023-24737](https://insights.sbomify.com/CVE-2023-24737/): Cross-site scripting in sigb:pmb (medium 6.1)
- [CVE-2023-24736](https://insights.sbomify.com/CVE-2023-24736/): Code injection in sigb:pmb (critical 9.8)
- [CVE-2023-24735](https://insights.sbomify.com/CVE-2023-24735/): Open redirect in sigb:pmb (medium 6.1)
- [CVE-2023-24734](https://insights.sbomify.com/CVE-2023-24734/): File upload in sigb:pmb (critical 9.8)
- [CVE-2023-24733](https://insights.sbomify.com/CVE-2023-24733/): Cross-site scripting in sigb:pmb (medium 6.1)
- [CVE-2023-24732](https://insights.sbomify.com/CVE-2023-24732/): SQL injection in oretnom23:simple customer relationship management system (high 8.8)
- [CVE-2023-24731](https://insights.sbomify.com/CVE-2023-24731/): SQL injection in oretnom23:simple customer relationship management system (high 8.8)
- [CVE-2023-24730](https://insights.sbomify.com/CVE-2023-24730/): SQL injection in oretnom23:simple customer relationship management system (high 8.8)
- [CVE-2023-2473](https://insights.sbomify.com/CVE-2023-2473/): Dreamer CMS Password Hash Calculation UserController.java updatePwd algorithmic complexity (medium 4.3)
- [CVE-2023-24729](https://insights.sbomify.com/CVE-2023-24729/): SQL injection in oretnom23:simple customer relationship management system (high 8.8)
- [CVE-2023-24728](https://insights.sbomify.com/CVE-2023-24728/): SQL injection in oretnom23:simple customer relationship management system (high 8.8)
- [CVE-2023-24726](https://insights.sbomify.com/CVE-2023-24726/): SQL injection in phpgurukul:art gallery management system (critical 9.8)
- [CVE-2023-24724](https://insights.sbomify.com/CVE-2023-24724/): Cross-site scripting in sas:web administration interface (medium 5.4)
- [CVE-2023-24721](https://insights.sbomify.com/CVE-2023-24721/): Cross-site scripting in liveaction:livesp (medium 5.4)
- [CVE-2023-24720](https://insights.sbomify.com/CVE-2023-24720/): File upload in readium:readium-js (critical 9.8)
- [CVE-2023-2472](https://insights.sbomify.com/CVE-2023-2472/): Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSS (medium 6.1)
- [CVE-2023-24709](https://insights.sbomify.com/CVE-2023-24709/): Denial of service in paradox:ipr512 firmware (high 7.5)
- [CVE-2023-2470](https://insights.sbomify.com/CVE-2023-2470/): Add to Feedly <= 1.2.11 - Admin+ Stored XSS (medium 4.8)
- [CVE-2023-24698](https://insights.sbomify.com/CVE-2023-24698/): Path traversal in foswiki:foswiki (high 7.5)
- [CVE-2023-24690](https://insights.sbomify.com/CVE-2023-24690/): Cross-site scripting in churchcrm:churchcrm (medium 5.4)
- [CVE-2023-24689](https://insights.sbomify.com/CVE-2023-24689/): Path traversal in mojoportal:mojoportal (medium 4.3)
- [CVE-2023-24688](https://insights.sbomify.com/CVE-2023-24688/): Missing authorization in mojoportal:mojoportal (medium 5.3)
- [CVE-2023-24687](https://insights.sbomify.com/CVE-2023-24687/): Cross-site scripting in mojoportal:mojoportal (medium 5.4)
- [CVE-2023-24686](https://insights.sbomify.com/CVE-2023-24686/): Code injection in churchcrm:churchcrm (medium 4.8)
- [CVE-2023-24685](https://insights.sbomify.com/CVE-2023-24685/): SQL injection in churchcrm:churchcrm (high 7.2)
- [CVE-2023-24684](https://insights.sbomify.com/CVE-2023-24684/): SQL injection in churchcrm:churchcrm (high 7.2)
- [CVE-2023-2468](https://insights.sbomify.com/CVE-2023-2468/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2023-24678](https://insights.sbomify.com/CVE-2023-24678/): Denial of service in centralite:pearl firmware (high 7.5)
- [CVE-2023-24676](https://insights.sbomify.com/CVE-2023-24676/): Arbitrary Code Execution in Processwire (high 7.2)
- [CVE-2023-24675](https://insights.sbomify.com/CVE-2023-24675/): Cross-site scripting in bludit:bludit (medium 4.8)
- [CVE-2023-24674](https://insights.sbomify.com/CVE-2023-24674/): Privilege escalation in bludit:bludit (high 7.8)
- [CVE-2023-24671](https://insights.sbomify.com/CVE-2023-24671/): Privilege escalation in vxsearch:vx search (high 7.8)
- [CVE-2023-2467](https://insights.sbomify.com/CVE-2023-2467/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2023-2466](https://insights.sbomify.com/CVE-2023-2466/): Other in Chrome (medium 4.3)
- [CVE-2023-24657](https://insights.sbomify.com/CVE-2023-24657/): Cross-site scripting in phpipam:phpipam (medium 6.1)
- [CVE-2023-24656](https://insights.sbomify.com/CVE-2023-24656/): SQL injection in oretnom23:simple customer relationship management system (high 8.8)
- [CVE-2023-24655](https://insights.sbomify.com/CVE-2023-24655/): SQL injection in oretnom23:simple customer relationship management system (critical 9.8)
- [CVE-2023-24654](https://insights.sbomify.com/CVE-2023-24654/): SQL injection in oretnom23:simple customer relationship management system (high 8.8)
- [CVE-2023-24653](https://insights.sbomify.com/CVE-2023-24653/): SQL injection in oretnom23:simple customer relationship management system (high 8.8)
- [CVE-2023-24652](https://insights.sbomify.com/CVE-2023-24652/): SQL injection in oretnom23:simple customer relationship management system (high 8.8)
- [CVE-2023-24651](https://insights.sbomify.com/CVE-2023-24651/): SQL injection in oretnom23:simple customer relationship management system (medium 5.4)
- [CVE-2023-2465](https://insights.sbomify.com/CVE-2023-2465/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2023-24648](https://insights.sbomify.com/CVE-2023-24648/): Cross-site scripting in zippy:zstore (medium 6.1)
- [CVE-2023-24647](https://insights.sbomify.com/CVE-2023-24647/): SQL injection in oretnom23:online food ordering system (high 7.5)
- [CVE-2023-24646](https://insights.sbomify.com/CVE-2023-24646/): File upload in oretnom23:online food ordering system (critical 9.8)
- [CVE-2023-24643](https://insights.sbomify.com/CVE-2023-24643/): SQL injection in judging management system project:judging management system (critical 9.8)
- [CVE-2023-24642](https://insights.sbomify.com/CVE-2023-24642/): SQL injection in judging management system project:judging management system (critical 9.8)
- [CVE-2023-24641](https://insights.sbomify.com/CVE-2023-24641/): SQL injection in judging management system project:judging management system (critical 9.8)
- [CVE-2023-2464](https://insights.sbomify.com/CVE-2023-2464/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2023-2463](https://insights.sbomify.com/CVE-2023-2463/): Other in Chrome (medium 4.3)
- [CVE-2023-24626](https://insights.sbomify.com/CVE-2023-24626/): Privilege escalation in gnu:screen (medium 6.5)
- [CVE-2023-24625](https://insights.sbomify.com/CVE-2023-24625/): Missing authorization in ladybirdweb:faveo servicedesk (medium 6.5)
- [CVE-2023-24623](https://insights.sbomify.com/CVE-2023-24623/): Paranoidhttp Server-Side Request Forgery vulnerability (high 7.5)
- [CVE-2023-24622](https://insights.sbomify.com/CVE-2023-24622/): safeurl-python contains Server-Side Request Forgery (medium 5.3)
- [CVE-2023-24621](https://insights.sbomify.com/CVE-2023-24621/): Esoteric YamlBeans Unsafe Deserialization vulnerability (high 7.8)
- [CVE-2023-24620](https://insights.sbomify.com/CVE-2023-24620/): Esoteric YamlBeans XML Entity Expansion vulnerability (medium 5.5)
- [CVE-2023-2462](https://insights.sbomify.com/CVE-2023-2462/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2023-24619](https://insights.sbomify.com/CVE-2023-24619/): Information disclosure in redpanda:redpanda (medium 5.5)
- [CVE-2023-24613](https://insights.sbomify.com/CVE-2023-24613/): Memory corruption in arraynetworks:arrayos ag (medium 4.9)
- [CVE-2023-24612](https://insights.sbomify.com/CVE-2023-24612/): Command injection in pdfbook project:pdfbook (critical 9.8)
- [CVE-2023-24610](https://insights.sbomify.com/CVE-2023-24610/): File upload in nosh chartingsystem project:nosh chartingsystem (high 8.8)
- [CVE-2023-2461](https://insights.sbomify.com/CVE-2023-2461/): Use after free in Chrome (high 8.8)
- [CVE-2023-24609](https://insights.sbomify.com/CVE-2023-24609/): Integer overflow in matrixssl:matrixssl (high 7.5)
- [CVE-2023-24607](https://insights.sbomify.com/CVE-2023-24607/): Denial of service in qt:qt (high 7.5)
- [CVE-2023-24605](https://insights.sbomify.com/CVE-2023-24605/): Missing authorization in open-xchange:ox app suite (medium 4.2)
- [CVE-2023-24604](https://insights.sbomify.com/CVE-2023-24604/): Denial of service in open-xchange:ox app suite (medium 4.3)
- [CVE-2023-24603](https://insights.sbomify.com/CVE-2023-24603/): Denial of service in open-xchange:ox app suite (medium 6.5)
- [CVE-2023-24602](https://insights.sbomify.com/CVE-2023-24602/): Cross-site scripting in open-xchange:ox app suite (medium 6.1)
- [CVE-2023-24601](https://insights.sbomify.com/CVE-2023-24601/): Cross-site scripting in open-xchange:ox app suite (medium 6.1)
- [CVE-2023-24600](https://insights.sbomify.com/CVE-2023-24600/): Missing authorization in open-xchange:ox app suite (medium 4.3)
- [CVE-2023-2460](https://insights.sbomify.com/CVE-2023-2460/): Security feature bypass in Chrome (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/371/