CVEs published in June 2023

2,445 vulnerabilities, 292 critical, 16 exploited.

• ivanti endpoint manager A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an... CVE-2023-28323 9.8 CriticalJune 30, 2023
• ivanti endpoint manager A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that... CVE-2023-28324 Public exploit EPSS 12.9% 9.8 CriticalJune 30, 2023
• ubiquiti unifi network application A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on... CVE-2023-28365 9.1 CriticalJune 30, 2023
• nodejs node, node.js +1 more A privilege escalation vulnerability exists in Node.js 20 that allowed loading arbitrary OpenSSL... CVE-2023-30586 Fix available 7.5 HighJune 30, 2023
• ubiquiti unifi os UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on... CVE-2023-31997 9.0 CriticalJune 30, 2023
• brave browser, brave software browser android +1 more An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in... CVE-2023-28364 6.1 MediumJune 30, 2023
• microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2021-34475 5.4 MediumJune 30, 2023
• microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability CVE-2021-31982 8.8 HighJune 30, 2023
• microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Information Disclosure Vulnerability CVE-2021-42307 4.3 MediumJune 30, 2023
• microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability CVE-2021-34506 6.1 MediumJune 30, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more Authentication Bypass issue in My Cloud OS 5 devices CVE-2023-22814 10.0 CriticalJune 30, 2023
• opentsdb Remote Code Execution in OpenTSDB CVE-2023-36812 Public exploitFix available EPSS 16.5% 9.8 CriticalJune 30, 2023
• github.com/cosmos/cosmos-sdk Go github.com/cosmos/cosmos-sdk's x/crisis does not charge ConstantFee GHSA-w5w5-2882-47pc No scoreJune 30, 2023
• s2n-quic crates.io s2n-quic potential denial of service vulnerability when receiving empty UDP packets GHSA-hxq4-mx37-fqvg Fix available No scoreJune 30, 2023
• fossbilling, fossbilling fossbilling/fossbilling +1 more Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling CVE-2023-3493 7.7 HighJune 30, 2023
• fossbilling, fossbilling fossbilling/fossbilling +1 more Unrestricted Upload of File with Dangerous Type in fossbilling/fossbilling CVE-2023-3491 8.0 HighJune 30, 2023
• fossbilling, fossbilling fossbilling/fossbilling +1 more SQL Injection in fossbilling/fossbilling CVE-2023-3490 9.8 CriticalJune 30, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices CVE-2023-22815 6.2 MediumJune 30, 2023
• western digital my cloud os 5, westerndigital my cloud os +1 more Limited Post-Authentication Remote Command Injection in My Cloud Products CVE-2023-22816 6.0 MediumJune 30, 2023
• labring sealos Sealos billing system permission control defect CVE-2023-36815 7.3 HighJune 30, 2023
• wpengine wpgraphql WordPress WPGraphQL Plugin <= 1.14.5 is vulnerable to Server Side Request Forgery (SSRF) CVE-2023-23684 Fix available 4.4 MediumJune 30, 2023
• redhat keycloak, red hat single sign-on 7, single sign-on 7.6 for rhel 7 +5 more +7 more Keycloak: oauth client impersonation CVE-2023-2422 Fix available 5.5 MediumJune 30, 2023
• keycloak, redhat openshift container platform, openshift container platform for ibm linuxone +2 more +4 more Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC CVE-2022-4361 Public exploitFix available 10.0 CriticalJune 30, 2023
• red hat single sign-on 7, single sign-on 7.6 for rhel 7, single sign-on 7.6 for rhel 8 +7 more +9 more Keycloak: client access via device auth request spoof CVE-2023-2585 Fix available 3.5 LowJune 30, 2023
• gradle Dependency cache path traversal in Gradle CVE-2023-35946 Fix available 6.9 MediumJune 30, 2023
• gradle Path traversal vulnerabilities in handling of Tar archives in Gradle CVE-2023-35947 Fix available 6.9 MediumJune 30, 2023
• xwiki ckeditor integration, xwiki, xwiki xwiki-platform +2 more Persistent Cross-site Scripting (XSS) through CKEditor Configuration pages in XWiki Platform CVE-2023-36477 Fix available 9.1 CriticalJune 30, 2023
• py-pdf pypdf Quadratic runtime with malformed PDF missing xref marker in pypdf CVE-2023-36810 Fix available 6.2 MediumJune 30, 2023
• py-pdf pypdf Infinite Loop when reading malformed objects in pypdf CVE-2023-36807 Fix available 6.2 MediumJune 30, 2023
• temporal, temporal technologies inc. server +1 more Insecure Default Authorization in Temporal Server CVE-2023-3485 Fix available 3.0 LowJune 30, 2023
• hp laserjet pro, laserjet pro m304-m305 w1a46a firmware, laserjet pro m304-m305 w1a47a firmware +36 more +38 more Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when... CVE-2023-35178 8.8 HighJune 30, 2023
• hp laserjet pro, laserjet pro m304-m305 w1a46a firmware, laserjet pro m304-m305 w1a47a firmware +36 more +38 more Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer... CVE-2023-35177 8.8 HighJune 30, 2023
• hp laserjet pro, laserjet pro m304-m305 w1a46a firmware, laserjet pro m304-m305 w1a47a firmware +36 more +38 more Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or... CVE-2023-35176 8.8 HighJune 30, 2023
• hp laserjet pro, laserjet pro m304-m305 w1a46a firmware, laserjet pro m304-m305 w1a47a firmware +36 more +38 more Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code... CVE-2023-35175 9.8 CriticalJune 30, 2023
• hp inc. pc products using ami uefi firmware, hp 200 g3 firmware, 200 g4 22 all-in-one firmware +57 more +59 more A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP... CVE-2023-26299 7.0 HighJune 30, 2023
• ghostscript OSS-Fuzz Memcpy-param-overlap in pdfi_copy_truetype_font OSV-2023-528 Fix available No scoreJune 30, 2023
• ghostscript OSS-Fuzz Heap-buffer-overflow in default_get_outline OSV-2023-527 Fix available No scoreJune 30, 2023
• terraform-provider-null openSUSE Security update for terraform-provider-null SUSE-SU-2023:2753-1 Fix available No scoreJune 30, 2023
• terraform-provider-helm openSUSE Security update for terraform-provider-helm SUSE-SU-2023:2752-1 Fix available No scoreJune 30, 2023
• terraform-provider-aws openSUSE Security update for terraform-provider-aws SUSE-SU-2023:2751-1 Fix available No scoreJune 30, 2023
• terraform-provider-helm SUSE Security update for terraform-provider-helm SUSE-SU-2023:2750-1 Fix available No scoreJune 30, 2023
• ibos, ibos oa +1 more IBOS OA Add User edit&op=member actionEdit sql injection CVE-2023-3478 4.7 MediumJune 30, 2023
• prometheus-ha_cluster_exporter SUSE Security update for prometheus-ha_cluster_exporter SUSE-SU-2023:2746-1 Fix available No scoreJune 30, 2023
• prometheus-ha_cluster_exporter SUSE Security update for prometheus-ha_cluster_exporter SUSE-SU-2023:2745-1 Fix available No scoreJune 30, 2023
• rekor openSUSE Security update for rekor SUSE-SU-2023:2744-1 Fix available No scoreJune 30, 2023
• hestiacp, hestiacp hestiacp/hestiacp, control panel +2 more Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp CVE-2023-3479 4.3 MediumJune 30, 2023
• rocketsoft rocket lms RocketSoft Rocket LMS Contact Form store cross site scripting CVE-2023-3477 3.5 LowJune 30, 2023
• simplephpscripts guestbook script SimplePHPscripts GuestBook Script URL Parameter preview.php cross site scripting CVE-2023-3476 3.5 LowJune 30, 2023
• simplephpscripts event script SimplePHPscripts Event Script URL Parameter preview.php cross site scripting CVE-2023-3475 3.5 LowJune 30, 2023
• simplephpscripts simple blog SimplePHPscripts Simple Blog URL Parameter preview.php cross site scripting CVE-2023-3474 3.5 LowJune 30, 2023
• Show olderLoading…