CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- xfinity comcast defined technologies microeisbssAn issue was discovered in Comcast Defined Technologies microeisbss through 2021. An attacker can...9.0 Critical
- bluetooth core specificationBluetooth Classic in Bluetooth Core Specification through 5.3 does not properly conceal device...4.3 Medium
- mh httpbl project httpbl, mback2k mh httpbl extension +1 moremback2k mh_httpbl Extension class.tx_mhhttpbl.php stopOutput cross site scripting3.5 Low
- ruddernation tinychat room spy plugin, tinychat room spy +1 moreruddernation TinyChat Room Spy Plugin room-spy.php wp_show_room_spy cross site scripting3.5 Low
- pmmp pocketmine-mpPocketMine-MP before 4.18.0-ALPHA2 Bandwidth Amplification via InventoryTransactionPacket5.3 Medium
- jetbrains ktorIn JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the...3.3 Low
- splunk app for streamLocal Privilege Escalation via the ‘streamfwd’ program in Splunk App for Stream7.8 High
- splunk, splunk cloud platform, enterprise +2 moreLow-privileged User can View Hashed Default Splunk Password4.3 Medium
- splunk, splunk cloud platform, enterprise +2 more‘edit_user’ Capability Privilege Escalation8.8 High
- splunk, splunk cloud platform, enterprise +2 moreDenial of Service via the 'dump' SPL command6.5 Medium
- splunk, splunk app for lookup file editing +1 morePath Traversal in Splunk App for Lookup File Editing8.1 High
- splunk, splunk enterprise, universal forwarder +2 moreUnauthenticated Log Injection in Splunk Enterprise8.6 High
- splunk, splunk cloud platform, enterprise +2 moreRole-based Access Control (RBAC) Bypass on '/services/indexing/preview' REST Endpoint Can Overwrite Search Results4.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreInformation Disclosure via the ‘copyresults’ SPL Command4.8 Medium
- splunk, splunk enterprise, cloud platform +2 moreDenial Of Service due to Untrusted XML Tag in XML Parser within SAML Authentication7.7 High
- splunk app for lookup file editingSelf Cross-Site Scripting (XSS) on Splunk App for Lookup File Editing4.7 Medium
- splunk, splunk enterprise +1 morePersistent Cross-Site Scripting (XSS) through a URL Validation Bypass within a Dashboard View5.4 Medium
- splunk, splunk cloud platform, enterprise +2 moreHTTP Response Splitting via the ‘rest’ SPL Command7.2 High
- vitejs viteVite Server Options (server.fs.deny) can be bypassed using double forward-slash (//)7.5 High
- kyvernoKyverno resource with a deletionTimestamp may allow policy circumvention6.5 Medium
- openprojectOpenProject vulnerable to project identifier information leakage through robots.txt7.5 High
- dmtf libspdmResponder can Invoke Undefined Behavior in libspdm Requester5.7 Medium
- dell secure connect gatewayDell SCG 5.14 contains an information disclosure vulnerability during the SRS to SCG upgrade...6.5 Medium
- dell os recovery toolDell OS Recovery Tool, versions 2.2.4013 and 2.3.7012.0, contain an Improper Access Control...7.3 High
- dataeaseDataEase data source has deserialization vulnerability9.8 Critical
- dataeaseDataEase API interface has IDOR vulnerability8.1 High
nettleTuxCare,nettle-develTuxCare +1 moreUpdate of nettleNo scoreinstallation-images-SMOSUSESecurity update for installation-imagesNo score- txthinking brookBrook's tproxy server is vulnerable to a drive-by command injection.9.7 Critical
openexrOSS-FuzzHeap-buffer-overflow in LossyDctDecoder_executeNo score- gougucms pythagorean oa office systemGuangdong Pythagorean OA Office System Schedule cross site scripting3.5 Low
- cincopa video and media plug-inVideo Playlist and Gallery Plugin wp-media-cincopa.php cross-site request forgery4.3 Medium
- automattic vaultpress, unspecified vaultpress plugin +1 moreVaultPress Plugin MailPoet Plugin class.vaultpress-hotfixes.php protect_aioseo_ajax unrestricted upload6.3 Medium
- suse rancherRancher UI has multiple Cross-Site Scripting (XSS) issues8.4 High
- suse rancherRancher vulnerable to Privilege Escalation via manipulation of Secrets9.9 Critical
- suse rancherRancher's Azure AD permission changes are not reflected on active sessions8.0 High
userscrates.io`users` crate is unmaintainedNo scoretrust-dns-servercrates.iotrust-dns vulnerable to Remote Attackers causing Denial-of-Service (packet loops) with crafted DNS packetsNo score- opensuse libeconfStack buffer overflow in "read_file" function3.3 Low
- opensuse libeconfStack buffer overflow in "econf_writeFile" function3.3 Low
- fanpress cm project cm, sea75300 fanpress cm +1 moresea75300 FanPress CM Template Preview templatepreview.php getArticlesPreview cross site scripting3.5 Low
- guangdong pythagorean oa office system, pythagorean oa office system project oa office system +1 moreGuangdong Pythagorean OA Office System delete cross-site request forgery4.3 Medium
- sprecher automation sprecon-e-c/p/t3 cpu pu244x, sprecher-automation sprecon-e-c firmware, sprecon-e-p dl6-1 firmware +4 more +6 moreSprecher: Vulnerable firmware verification6.8 Medium
- sprecher automation sprecon-e cpu mc33/34, sprecon-e cpu pu243x, sprecon-e cpu pu244x +10 more +12 moreSprecher: Sprecon maintenance access with hardcoded credentials9.8 Critical
- hangzhou hopechart iot technology co., ltd. hqt401, hopechart hqt401 firmware +1 moreImproper backend communication allows access and manipulation of the telemetry data8.6 High
- psychostatsStars Alliance PsychoStats login.php cross site scripting3.5 Low
- gallagher controller 6000, controller 6000 firmware +1 moreController 6000 buffer overflow via upload feature in web interface7.5 High
starletteRootDuplicate Advisory: Starlette vulnerable to directory traversal7.5 High- microsoft outlook, 365 apps, 365 apps for enterprise +6 more +8 moreMicrosoft Outlook Denial of Service Vulnerability7.5 High
netatalkDebiannetatalk - regression updateNo score- Show moreLoading…