# Vulnerabilities published in 2023


- [CVE-2023-20032](https://insights.sbomify.com/CVE-2023-20032/): Memory corruption in Cisco Secure Endpoint (critical 9.8)
- [CVE-2023-20031](https://insights.sbomify.com/CVE-2023-20031/): Denial of service in Cisco Firepower Threat Defense Software (medium 4.0)
- [CVE-2023-20030](https://insights.sbomify.com/CVE-2023-20030/): Cisco Identity Services Engine XML External Entity Injection Vulnerability (medium 6.0)
- [CVE-2023-2003](https://insights.sbomify.com/CVE-2023-2003/): Embedded malicious code vulnerability in Unitronics Vision1210 (critical 9.1)
- [CVE-2023-20029](https://insights.sbomify.com/CVE-2023-20029/): Cisco IOS XE Software Privilege Escalation Vulnerability (medium 4.4)
- [CVE-2023-20028](https://insights.sbomify.com/CVE-2023-20028/): Cross-site scripting in Cisco Web Security Appliance (WSA) (medium 5.4)
- [CVE-2023-20027](https://insights.sbomify.com/CVE-2023-20027/): Cisco IOS XE Software Virtual Fragmentation Reassembly Denial of Service Vulnerability (high 8.6)
- [CVE-2023-20026](https://insights.sbomify.com/CVE-2023-20026/): Command injection in Cisco Small Business RV Series Router Firmware (medium 6.5)
- [CVE-2023-20025](https://insights.sbomify.com/CVE-2023-20025/): Auth bypass in Cisco Small Business RV Series Router Firmware (critical 9.0)
- [CVE-2023-20024](https://insights.sbomify.com/CVE-2023-20024/): Cisco Small Business Series Switches Buffer Overflow Vulnerabilities (high 8.6)
- [CVE-2023-20023](https://insights.sbomify.com/CVE-2023-20023/): Cisco Identity Services Engine Privilege Escalation Vulnerabilities (medium 6.0)
- [CVE-2023-20022](https://insights.sbomify.com/CVE-2023-20022/): Cisco Identity Services Engine Privilege Escalation Vulnerabilities (medium 6.0)
- [CVE-2023-20021](https://insights.sbomify.com/CVE-2023-20021/): Cisco Identity Services Engine Privilege Escalation Vulnerabilities (medium 6.0)
- [CVE-2023-20020](https://insights.sbomify.com/CVE-2023-20020/): Denial of service in Cisco BroadWorks (high 8.6)
- [CVE-2023-2002](https://insights.sbomify.com/CVE-2023-2002/): Missing authorization in Kernel (medium 6.8)
- [CVE-2023-20019](https://insights.sbomify.com/CVE-2023-20019/): Cross-site scripting in Cisco BroadWorks (medium 6.1)
- [CVE-2023-20018](https://insights.sbomify.com/CVE-2023-20018/): Auth bypass in Cisco Session Initiation Protocol (SIP) Software (high 8.6)
- [CVE-2023-20017](https://insights.sbomify.com/CVE-2023-20017/): Command injection in Cisco Intersight Virtual Appliance (medium 6.5)
- [CVE-2023-20016](https://insights.sbomify.com/CVE-2023-20016/): Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability (medium 6.3)
- [CVE-2023-20015](https://insights.sbomify.com/CVE-2023-20015/): Command injection in Cisco Unified Computing System (Managed) (medium 6.0)
- [CVE-2023-20014](https://insights.sbomify.com/CVE-2023-20014/): Denial of service in Cisco Nexus Dashboard (high 7.5)
- [CVE-2023-20013](https://insights.sbomify.com/CVE-2023-20013/): Command injection in Cisco Intersight Virtual Appliance (medium 6.5)
- [CVE-2023-20012](https://insights.sbomify.com/CVE-2023-20012/): Cisco Nexus 9300-FX3 Series Fabric Extender for UCS Fabric Interconnects Authentication Bypass Vulnerability (medium 5.3)
- [CVE-2023-20011](https://insights.sbomify.com/CVE-2023-20011/): Cross-site request forgery in Cisco Application Policy Infrastructure Controller (APIC) (high 8.8)
- [CVE-2023-20010](https://insights.sbomify.com/CVE-2023-20010/): SQL injection in Cisco Unified Communications Manager (high 8.1)
- [CVE-2023-2001](https://insights.sbomify.com/CVE-2023-2001/): Security feature bypass in GitLab (medium 4.3)
- [CVE-2023-20009](https://insights.sbomify.com/CVE-2023-20009/): Privilege escalation in Cisco Secure Email (medium 6.5)
- [CVE-2023-20008](https://insights.sbomify.com/CVE-2023-20008/): Path traversal in Cisco RoomOS Software (medium 4.4)
- [CVE-2023-20007](https://insights.sbomify.com/CVE-2023-20007/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2023-20006](https://insights.sbomify.com/CVE-2023-20006/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2023-20005](https://insights.sbomify.com/CVE-2023-20005/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2023-20004](https://insights.sbomify.com/CVE-2023-20004/): Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Write Vulnerability (medium 4.4)
- [CVE-2023-20003](https://insights.sbomify.com/CVE-2023-20003/): Cisco Business Wireless Access Points Social Login Guest User Authentication Bypass Vulnerability (medium 4.7)
- [CVE-2023-20002](https://insights.sbomify.com/CVE-2023-20002/): Server-side request forgery in Cisco RoomOS Software (medium 4.4)
- [CVE-2023-2000](https://insights.sbomify.com/CVE-2023-2000/): Unrestricted navigation due to unvalidated mattermost server redirection (medium 5.4)
- [CVE-2023-1999](https://insights.sbomify.com/CVE-2023-1999/): Use after free in libwebp (medium 5.3)
- [CVE-2023-1998](https://insights.sbomify.com/CVE-2023-1998/): Spectre v2 SMT mitigations problem in Linux kernel (medium 5.6)
- [CVE-2023-1997](https://insights.sbomify.com/CVE-2023-1997/): Command injection in SIMULIA 3DOrchestrate (high 8.8)
- [CVE-2023-1996](https://insights.sbomify.com/CVE-2023-1996/): Cross-site scripting in 3DEXPERIENCE (medium 6.1)
- [CVE-2023-1995](https://insights.sbomify.com/CVE-2023-1995/): Insufficient Logging Vulnerability in HiRDB (medium 5.3)
- [CVE-2023-1994](https://insights.sbomify.com/CVE-2023-1994/): Null dereference in Wireshark (medium 6.3)
- [CVE-2023-1993](https://insights.sbomify.com/CVE-2023-1993/): Denial of service in Wireshark (medium 6.3)
- [CVE-2023-1992](https://insights.sbomify.com/CVE-2023-1992/): Denial of service in Wireshark (medium 6.3)
- [CVE-2023-1990](https://insights.sbomify.com/CVE-2023-1990/): Use after free in Linux (medium 4.7)
- [CVE-2023-1989](https://insights.sbomify.com/CVE-2023-1989/): Kernel: use after free bug in btsdio_remove due to race condition (high 7.0)
- [CVE-2023-1988](https://insights.sbomify.com/CVE-2023-1988/): SourceCodester Online Computer and Laptop Store cross site scripting (low 3.5)
- [CVE-2023-1987](https://insights.sbomify.com/CVE-2023-1987/): SourceCodester Online Computer and Laptop Store update_order_status sql injection (medium 6.3)
- [CVE-2023-1986](https://insights.sbomify.com/CVE-2023-1986/): SourceCodester Online Computer and Laptop Store delete_order sql injection (medium 6.3)
- [CVE-2023-1985](https://insights.sbomify.com/CVE-2023-1985/): SourceCodester Online Computer and Laptop Store save_brand sql injection (medium 6.3)
- [CVE-2023-1984](https://insights.sbomify.com/CVE-2023-1984/): SourceCodester Complaint Management System POST Parameter check_availability.php sql injection (medium 6.3)
- [CVE-2023-1983](https://insights.sbomify.com/CVE-2023-1983/): SourceCodester Sales Tracker Management System GET Parameter manage_product.php sql injection (medium 6.3)
- [CVE-2023-1982](https://insights.sbomify.com/CVE-2023-1982/): Front Editor <= 4.0.4 - Admin+ Stored XSS (medium 4.8)
- [CVE-2023-1981](https://insights.sbomify.com/CVE-2023-1981/): Denial of service in avahi (medium 5.5)
- [CVE-2023-1980](https://insights.sbomify.com/CVE-2023-1980/): Auth bypass in Remote Desktop Manager (medium 6.5)
- [CVE-2023-1979](https://insights.sbomify.com/CVE-2023-1979/): Auth bypass in Web Stories for WordPress plugin (medium 4.9)
- [CVE-2023-1978](https://insights.sbomify.com/CVE-2023-1978/): ShiftController Employee Shift Scheduling <= 4.9.25 - Reflected Cross-Site Scripting via Query String (medium 6.1)
- [CVE-2023-1977](https://insights.sbomify.com/CVE-2023-1977/): Booking Manager < 2.0.29 - Subscriber+ SSRF (high 8.8)
- [CVE-2023-1976](https://insights.sbomify.com/CVE-2023-1976/): Password Aging with Long Expiration in answerdev/answer (medium 4.6)
- [CVE-2023-1975](https://insights.sbomify.com/CVE-2023-1975/): Insertion of Sensitive Information Into Sent Data in answerdev/answer (high 7.6)
- [CVE-2023-1974](https://insights.sbomify.com/CVE-2023-1974/): Exposure of Sensitive Information Through Metadata in answerdev/answer (high 7.7)
- [CVE-2023-1973](https://insights.sbomify.com/CVE-2023-1973/): Undertow: unrestricted request storage leads to memory exhaustion (high 7.5)
- [CVE-2023-1972](https://insights.sbomify.com/CVE-2023-1972/): Memory corruption in binutils (medium 6.5)
- [CVE-2023-1971](https://insights.sbomify.com/CVE-2023-1971/): yuan1994 tpAdmin Upload.php remote server-side request forgery (medium 6.3)
- [CVE-2023-1970](https://insights.sbomify.com/CVE-2023-1970/): yuan1994 tpAdmin Upload.php Upload unrestricted upload (medium 6.3)
- [CVE-2023-1969](https://insights.sbomify.com/CVE-2023-1969/): SourceCodester Online Eyewear Shop GET Parameter manage_stock.php sql injection (medium 6.3)
- [CVE-2023-1968](https://insights.sbomify.com/CVE-2023-1968/): CVE-2023-1968 (critical 10.0)
- [CVE-2023-1967](https://insights.sbomify.com/CVE-2023-1967/): CVE-2023-1967 (critical 9.8)
- [CVE-2023-1966](https://insights.sbomify.com/CVE-2023-1966/): CVE-2023-1966 (high 7.4)
- [CVE-2023-1965](https://insights.sbomify.com/CVE-2023-1965/): Cross-site request forgery in GitLab (medium 6.8)
- [CVE-2023-1964](https://insights.sbomify.com/CVE-2023-1964/): PHPGurukul Bank Locker Management System Password Reset recovery.php sql injection (high 7.3)
- [CVE-2023-1963](https://insights.sbomify.com/CVE-2023-1963/): PHPGurukul Bank Locker Management System Search index.php sql injection (medium 6.3)
- [CVE-2023-1962](https://insights.sbomify.com/CVE-2023-1962/): SourceCodester Best Online News Portal POST Parameter forgot-password.php sql injection (high 7.3)
- [CVE-2023-1961](https://insights.sbomify.com/CVE-2023-1961/): SourceCodester Online Computer and Laptop Store cross site scripting (low 2.4)
- [CVE-2023-1960](https://insights.sbomify.com/CVE-2023-1960/): SourceCodester Online Computer and Laptop Store sql injection (medium 6.3)
- [CVE-2023-1959](https://insights.sbomify.com/CVE-2023-1959/): SourceCodester Online Computer and Laptop Store sql injection (medium 6.3)
- [CVE-2023-1958](https://insights.sbomify.com/CVE-2023-1958/): SourceCodester Online Computer and Laptop Store sql injection (medium 6.3)
- [CVE-2023-1957](https://insights.sbomify.com/CVE-2023-1957/): SourceCodester Online Computer and Laptop Store Subcategory sql injection (medium 6.3)
- [CVE-2023-1956](https://insights.sbomify.com/CVE-2023-1956/): SourceCodester Online Computer and Laptop Store Image path traversal (medium 5.4)
- [CVE-2023-1955](https://insights.sbomify.com/CVE-2023-1955/): SourceCodester Online Computer and Laptop Store User Registration login.php sql injection (high 7.3)
- [CVE-2023-1954](https://insights.sbomify.com/CVE-2023-1954/): SourceCodester Online Computer and Laptop Store manage.php save_inventory sql injection (medium 6.3)
- [CVE-2023-1953](https://insights.sbomify.com/CVE-2023-1953/): SourceCodester Online Computer and Laptop Store index.php sql injection (medium 6.3)
- [CVE-2023-1952](https://insights.sbomify.com/CVE-2023-1952/): SourceCodester Online Computer and Laptop Store Product Search ?p=products sql injection (medium 6.3)
- [CVE-2023-1951](https://insights.sbomify.com/CVE-2023-1951/): SourceCodester Online Computer and Laptop Store brand.php delete_brand sql injection (medium 6.3)
- [CVE-2023-1950](https://insights.sbomify.com/CVE-2023-1950/): PHPGurukul BP Monitoring Management System Password Recovery password-recovery.php sql injection (medium 6.3)
- [CVE-2023-1949](https://insights.sbomify.com/CVE-2023-1949/): PHPGurukul BP Monitoring Management System Change Password change-password.php sql injection (medium 6.3)
- [CVE-2023-1948](https://insights.sbomify.com/CVE-2023-1948/): PHPGurukul BP Monitoring Management System Add New Family Member add-family-member.php cross site scripting (low 3.5)
- [CVE-2023-1947](https://insights.sbomify.com/CVE-2023-1947/): taoCMS admin.php code injection (medium 6.3)
- [CVE-2023-1946](https://insights.sbomify.com/CVE-2023-1946/): SourceCodester Survey Application System Add New cross site scripting (low 2.4)
- [CVE-2023-1945](https://insights.sbomify.com/CVE-2023-1945/): Memory corruption in Firefox ESR (medium 6.5)
- [CVE-2023-1944](https://insights.sbomify.com/CVE-2023-1944/): [minikube] ssh server with default password (high 8.4)
- [CVE-2023-1943](https://insights.sbomify.com/CVE-2023-1943/): Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode (high 8.0)
- [CVE-2023-1942](https://insights.sbomify.com/CVE-2023-1942/): SourceCodester Online Computer and Laptop Store Avatar unrestricted upload (medium 6.3)
- [CVE-2023-1941](https://insights.sbomify.com/CVE-2023-1941/): SourceCodester Simple and Beautiful Shopping Cart System login.php sql injection (high 7.3)
- [CVE-2023-1940](https://insights.sbomify.com/CVE-2023-1940/): SourceCodester Simple and Beautiful Shopping Cart System delete_user_query.php sql injection (medium 6.3)
- [CVE-2023-1939](https://insights.sbomify.com/CVE-2023-1939/): No access control for the OTP key on OTP entries (medium 4.3)
- [CVE-2023-1938](https://insights.sbomify.com/CVE-2023-1938/): WP Fatest Cache < 1.1.5 - Blind SSRF via CSRF (high 8.8)
- [CVE-2023-1937](https://insights.sbomify.com/CVE-2023-1937/): zhenfeng13 My-Blog userInfo cross-site request forgery (medium 4.3)
- [CVE-2023-1936](https://insights.sbomify.com/CVE-2023-1936/): Exposure of Private Personal Information to an Unauthorized Actor in GitLab (low 3.5)
- [CVE-2023-1935](https://insights.sbomify.com/CVE-2023-1935/): CVE-2023-1935 (critical 9.4)
- [CVE-2023-1934](https://insights.sbomify.com/CVE-2023-1934/): SQL injection in PnPSCADA (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/411/