# Vulnerabilities published in 2023


- [CVE-2023-1826](https://insights.sbomify.com/CVE-2023-1826/): SourceCodester Online Computer and Laptop Store index.php unrestricted upload (medium 6.3)
- [CVE-2023-1825](https://insights.sbomify.com/CVE-2023-1825/): Insertion of Sensitive Information Into Sent Data in GitLab (low 3.1)
- [CVE-2023-1823](https://insights.sbomify.com/CVE-2023-1823/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2023-1822](https://insights.sbomify.com/CVE-2023-1822/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2023-1821](https://insights.sbomify.com/CVE-2023-1821/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2023-1820](https://insights.sbomify.com/CVE-2023-1820/): Memory corruption in Chrome (high 8.8)
- [CVE-2023-1819](https://insights.sbomify.com/CVE-2023-1819/): Memory corruption in Chrome (medium 6.5)
- [CVE-2023-1818](https://insights.sbomify.com/CVE-2023-1818/): Use after free in Chrome (high 8.8)
- [CVE-2023-1817](https://insights.sbomify.com/CVE-2023-1817/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2023-1816](https://insights.sbomify.com/CVE-2023-1816/): Other in Chrome (medium 6.5)
- [CVE-2023-1815](https://insights.sbomify.com/CVE-2023-1815/): Use after free in Chrome (high 8.8)
- [CVE-2023-1814](https://insights.sbomify.com/CVE-2023-1814/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2023-1813](https://insights.sbomify.com/CVE-2023-1813/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2023-1812](https://insights.sbomify.com/CVE-2023-1812/): Memory corruption in Chrome (high 8.8)
- [CVE-2023-1811](https://insights.sbomify.com/CVE-2023-1811/): Use after free in Chrome (high 8.8)
- [CVE-2023-1810](https://insights.sbomify.com/CVE-2023-1810/): Memory corruption in Chrome (high 8.8)
- [CVE-2023-1809](https://insights.sbomify.com/CVE-2023-1809/): Download Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure (high 7.5)
- [CVE-2023-1807](https://insights.sbomify.com/CVE-2023-1807/): Elementor Addons, Widgets and Enhancements – Stax <= 1.4.3 - Cross-Site Request Forgery via toggle_widget (medium 4.3)
- [CVE-2023-1806](https://insights.sbomify.com/CVE-2023-1806/): WP Inventory Manager < 2.1.0.12 - Reflected XSS (medium 6.1)
- [CVE-2023-1805](https://insights.sbomify.com/CVE-2023-1805/): Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS (medium 6.1)
- [CVE-2023-1804](https://insights.sbomify.com/CVE-2023-1804/): Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS (medium 6.1)
- [CVE-2023-1803](https://insights.sbomify.com/CVE-2023-1803/): Authentication Bypass in Redline Router (critical 9.8)
- [CVE-2023-1802](https://insights.sbomify.com/CVE-2023-1802/): Information disclosure in Docker Desktop (medium 5.9)
- [CVE-2023-1801](https://insights.sbomify.com/CVE-2023-1801/): Memory corruption in tcpdump (medium 6.5)
- [CVE-2023-1800](https://insights.sbomify.com/CVE-2023-1800/): sjqzhang go-fastdfs File Upload uploa upload path traversal (high 7.3)
- [CVE-2023-1799](https://insights.sbomify.com/CVE-2023-1799/): EyouCMS login.php cross site scripting (low 3.5)
- [CVE-2023-1798](https://insights.sbomify.com/CVE-2023-1798/): EyouCMS login.php cross site scripting (low 3.5)
- [CVE-2023-1797](https://insights.sbomify.com/CVE-2023-1797/): OTCMS unrestricted upload (medium 6.3)
- [CVE-2023-1796](https://insights.sbomify.com/CVE-2023-1796/): SourceCodester Employee Payslip Generator Create News cross site scripting (low 2.4)
- [CVE-2023-1795](https://insights.sbomify.com/CVE-2023-1795/): SourceCodester Gadget Works Online Ordering System GET Parameter index.php cross site scripting (low 3.5)
- [CVE-2023-1794](https://insights.sbomify.com/CVE-2023-1794/): SourceCodester Police Crime Record Management System GET Parameter casedetails.php cross site scripting (low 3.5)
- [CVE-2023-1793](https://insights.sbomify.com/CVE-2023-1793/): SourceCodester Police Crime Record Management System GET Parameter assigncase.php sql injection (medium 6.3)
- [CVE-2023-1792](https://insights.sbomify.com/CVE-2023-1792/): SourceCodester Simple Mobile Comparison Website GET Parameter manage_field.php sql injection (medium 6.3)
- [CVE-2023-1791](https://insights.sbomify.com/CVE-2023-1791/): SourceCodester Simple Task Allocation System manage_user.php sql injection (medium 6.3)
- [CVE-2023-1790](https://insights.sbomify.com/CVE-2023-1790/): SourceCodester Simple Task Allocation System index.php information disclosure (medium 4.3)
- [CVE-2023-1789](https://insights.sbomify.com/CVE-2023-1789/): Improper Input Validation in firefly-iii/firefly-iii (medium 5.2)
- [CVE-2023-1788](https://insights.sbomify.com/CVE-2023-1788/): Insufficient Session Expiration in firefly-iii/firefly-iii (medium 5.4)
- [CVE-2023-1787](https://insights.sbomify.com/CVE-2023-1787/): Denial of service in GitLab (medium 4.3)
- [CVE-2023-1786](https://insights.sbomify.com/CVE-2023-1786/): sensitive data exposure in cloud-init logs (medium 5.5)
- [CVE-2023-1785](https://insights.sbomify.com/CVE-2023-1785/): SourceCodester Earnings and Expense Tracker App manage_user.php sql injection (medium 6.3)
- [CVE-2023-1784](https://insights.sbomify.com/CVE-2023-1784/): jeecg-boot API Documentation improper authentication (medium 5.3)
- [CVE-2023-1783](https://insights.sbomify.com/CVE-2023-1783/): OrangeScrum 2.0.11 - AWS Credentials Leak via PDF Rendering (medium 6.5)
- [CVE-2023-1782](https://insights.sbomify.com/CVE-2023-1782/): Nomad Unauthenticated Client Agent HTTP Request Privilege Escalation (critical 10.0)
- [CVE-2023-1780](https://insights.sbomify.com/CVE-2023-1780/): Companion Sitemap Generator < 4.5.3 - Reflected XSS (medium 6.1)
- [CVE-2023-1779](https://insights.sbomify.com/CVE-2023-1779/): Helmholz and MB Connect Line: Account takeover via password reset in multiple products (medium 4.3)
- [CVE-2023-1778](https://insights.sbomify.com/CVE-2023-1778/): Default Credential Vulnerability in GajShield Data Security Firewall (critical 10.0)
- [CVE-2023-1777](https://insights.sbomify.com/CVE-2023-1777/): Information disclosure in linked message previews (medium 6.5)
- [CVE-2023-1776](https://insights.sbomify.com/CVE-2023-1776/): Stored XSS via SVG attachment on Boards (high 7.3)
- [CVE-2023-1775](https://insights.sbomify.com/CVE-2023-1775/): Unsanitized events sent over Websocket to regular users in a High Availability environment (medium 4.3)
- [CVE-2023-1774](https://insights.sbomify.com/CVE-2023-1774/): Unauthorized email invite to a private channel (medium 4.2)
- [CVE-2023-1773](https://insights.sbomify.com/CVE-2023-1773/): Rockoa Configuration File webmainConfig.php code injection (medium 6.3)
- [CVE-2023-1772](https://insights.sbomify.com/CVE-2023-1772/): DataGear Diagram Type cross site scripting (low 3.5)
- [CVE-2023-1771](https://insights.sbomify.com/CVE-2023-1771/): SourceCodester Grade Point Average GPA Calculator Master.php get_scale cross site scripting (low 3.5)
- [CVE-2023-1770](https://insights.sbomify.com/CVE-2023-1770/): SourceCodester Grade Point Average GPA Calculator Master.php get_scale sql injection (medium 6.3)
- [CVE-2023-1769](https://insights.sbomify.com/CVE-2023-1769/): SourceCodester Grade Point Average GPA Calculator index.php information disclosure (medium 4.3)
- [CVE-2023-1768](https://insights.sbomify.com/CVE-2023-1768/): Symmetric agent data encryption fails silently (low 3.7)
- [CVE-2023-1767](https://insights.sbomify.com/CVE-2023-1767/): Cross-site scripting in Snyk Advisor (medium 4.3)
- [CVE-2023-1766](https://insights.sbomify.com/CVE-2023-1766/): XSS in Panon (medium 6.1)
- [CVE-2023-1765](https://insights.sbomify.com/CVE-2023-1765/): SQLi in Panon (critical 9.8)
- [CVE-2023-1764](https://insights.sbomify.com/CVE-2023-1764/): Information disclosure in Canon IJ NW Tool (medium 6.5)
- [CVE-2023-1763](https://insights.sbomify.com/CVE-2023-1763/): Information disclosure in Canon IJ NW Tool (medium 6.5)
- [CVE-2023-1762](https://insights.sbomify.com/CVE-2023-1762/): Improper Privilege Management in thorsten/phpmyfaq (high 7.2)
- [CVE-2023-1761](https://insights.sbomify.com/CVE-2023-1761/): Cross-site Scripting in thorsten/phpmyfaq (medium 6.3)
- [CVE-2023-1760](https://insights.sbomify.com/CVE-2023-1760/): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq (high 8.1)
- [CVE-2023-1759](https://insights.sbomify.com/CVE-2023-1759/): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq (medium 4.7)
- [CVE-2023-1758](https://insights.sbomify.com/CVE-2023-1758/): Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaq (high 8.9)
- [CVE-2023-1757](https://insights.sbomify.com/CVE-2023-1757/): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq (high 8.1)
- [CVE-2023-1756](https://insights.sbomify.com/CVE-2023-1756/): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq (medium 4.7)
- [CVE-2023-1755](https://insights.sbomify.com/CVE-2023-1755/): Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq (high 8.4)
- [CVE-2023-1754](https://insights.sbomify.com/CVE-2023-1754/): Improper Neutralization of Input During Web Page Generation in thorsten/phpmyfaq (medium 4.7)
- [CVE-2023-1753](https://insights.sbomify.com/CVE-2023-1753/): Weak Password Requirements in thorsten/phpmyfaq (medium 5.5)
- [CVE-2023-1752](https://insights.sbomify.com/CVE-2023-1752/): CVE-2023-1752 (high 8.1)
- [CVE-2023-1751](https://insights.sbomify.com/CVE-2023-1751/): CVE-2023-1751 (high 7.5)
- [CVE-2023-1750](https://insights.sbomify.com/CVE-2023-1750/): CVE-2023-1750 (high 7.1)
- [CVE-2023-1749](https://insights.sbomify.com/CVE-2023-1749/): CVE-2023-1749 (medium 6.5)
- [CVE-2023-1748](https://insights.sbomify.com/CVE-2023-1748/): CVE-2023-1748 (critical 9.3)
- [CVE-2023-1747](https://insights.sbomify.com/CVE-2023-1747/): IBOS mark&op=delFromSend sql injection (medium 6.3)
- [CVE-2023-1746](https://insights.sbomify.com/CVE-2023-1746/): Dreamer CMS File Upload cross site scripting (low 3.5)
- [CVE-2023-1745](https://insights.sbomify.com/CVE-2023-1745/): KMPlayer SHFOLDER.dll uncontrolled search path (medium 5.3)
- [CVE-2023-1744](https://insights.sbomify.com/CVE-2023-1744/): IBOS htaccess unrestricted upload (medium 6.3)
- [CVE-2023-1743](https://insights.sbomify.com/CVE-2023-1743/): SourceCodester Grade Point Average GPA Calculator index.php cross site scripting (low 3.5)
- [CVE-2023-1742](https://insights.sbomify.com/CVE-2023-1742/): IBOS Report Search getlist sql injection (medium 6.3)
- [CVE-2023-1741](https://insights.sbomify.com/CVE-2023-1741/): jeecg-boot Sleep Command SysDictMapper.java sql injection (medium 4.3)
- [CVE-2023-1740](https://insights.sbomify.com/CVE-2023-1740/): SourceCodester Air Cargo Management System GET Parameter manage_user.php sql injection (medium 4.7)
- [CVE-2023-1739](https://insights.sbomify.com/CVE-2023-1739/): SourceCodester Simple and Beautiful Shopping Cart System upload.php unrestricted upload (medium 6.3)
- [CVE-2023-1738](https://insights.sbomify.com/CVE-2023-1738/): SourceCodester Young Entrepreneur E-Negosyo System sql injection (medium 6.3)
- [CVE-2023-1737](https://insights.sbomify.com/CVE-2023-1737/): SourceCodester Young Entrepreneur E-Negosyo System login.php sql injection (high 7.3)
- [CVE-2023-1736](https://insights.sbomify.com/CVE-2023-1736/): SourceCodester Young Entrepreneur E-Negosyo System sql injection (medium 5.5)
- [CVE-2023-1735](https://insights.sbomify.com/CVE-2023-1735/): SourceCodester Young Entrepreneur E-Negosyo System passwordrecover.php sql injection (medium 6.3)
- [CVE-2023-1734](https://insights.sbomify.com/CVE-2023-1734/): SourceCodester Young Entrepreneur E-Negosyo System unrestricted upload (high 7.3)
- [CVE-2023-1733](https://insights.sbomify.com/CVE-2023-1733/): Denial of service in GitLab (medium 5.8)
- [CVE-2023-1732](https://insights.sbomify.com/CVE-2023-1732/): Improper random reading in CIRCL (medium 5.3)
- [CVE-2023-1731](https://insights.sbomify.com/CVE-2023-1731/): Improper Input Validation in Meinberg LTOS (high 7.2)
- [CVE-2023-1730](https://insights.sbomify.com/CVE-2023-1730/): SupportCandy < 3.1.5 - Unauthenticated SQLi (critical 9.8)
- [CVE-2023-1729](https://insights.sbomify.com/CVE-2023-1729/): Memory corruption in LibRaw (medium 6.5)
- [CVE-2023-1728](https://insights.sbomify.com/CVE-2023-1728/): Unrestricted Upload of File with Dangerous Type in Fernus LMS (critical 9.8)
- [CVE-2023-1726](https://insights.sbomify.com/CVE-2023-1726/): XSS in Proliz OBS (medium 5.4)
- [CVE-2023-1725](https://insights.sbomify.com/CVE-2023-1725/): SSRF in Infoline Project Management System (critical 9.8)
- [CVE-2023-1724](https://insights.sbomify.com/CVE-2023-1724/): Faveo Helpdesk Enterprise 6.0.1 - Privilege Escalation via Stored XSS (high 7.3)
- [CVE-2023-1723](https://insights.sbomify.com/CVE-2023-1723/): SQLi in Veragroup Mobile Assistant (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/413/