CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- mitsubishi electric corporation melsec iq-f series ethernet/ip module fx5-enet/ip, melsec iq-r series ethernet/ip module rj71eip91, mitsubishielectric fx5-enet\/ip firmware +3 more +5 moreInformation disclosure, tampering, deletion and destruction vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules6.3 Medium
- mitsubishi electric corporation ethernet/ip configuration tool for fx5-enet/ip sw1dnn-eipctfx5-bd, ethernet/ip configuration tool for rj71eip91 sw1dnn-eipct-bd, mitsubishielectric fx5-enet\/ip firmware +3 more +5 moreInformation Disclosure vulnerability in EtherNet/IP Configuration tools6.2 Medium
- mitsubishi electric corporation melsec iq-f series ethernet/ip module fx5-enet/ip, melsec iq-r series ethernet/ip module rj71eip91, mitsubishielectric fx5-enet\/ip firmware +3 more +5 moreAuthentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules6.2 Medium
- mitsubishi electric corporation melsec iq-f series ethernet/ip module fx5-enet/ip, melsec iq-r series ethernet/ip module rj71eip91, mitsubishielectric fx5-enet\/ip firmware +3 more +5 moreAuthentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules7.5 High
- mihail-chepovskiy web directory freeWeb Directory Free <= 1.6.8 - Authenticated (Contributor+) SQL Injection via post_id8.8 High
- progress moveit transfer, moveit cloud +1 moreIn Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022...9.8 Critical
- simpleredakeMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a reflected cross-site...6.1 Medium
- simpleredakeMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a SQL injection...9.8 Critical
- simpleredakeMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a reflected cross-site...6.1 Medium
- escanav escan management consoleReflected Cross Site Scripting (XSS) in the view dashboard detail feature in Microworld...6.1 Medium
- mp4v2 project mp4v2mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes()...5.5 Medium
- tenda ac8 firmwareTenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in...9.8 Critical
- tenda ac8 firmwareTenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the firewallEn...9.8 Critical
- tenda ac8 firmwareTenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed...7.5 High
- tenda ac8 firmwareTenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the deviceId parameter...9.8 Critical
- tenda ac8 firmwareTenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in...9.8 Critical
- tenda ac8 firmwareTenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter...9.8 Critical
- readymedia project readymediaReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The...9.8 Critical
- corebos, tsolucio tsolucio/corebos +1 moreCross-Site Request Forgery (CSRF) in tsolucio/corebos7.5 High
- corebos, tsolucio tsolucio/corebos +1 moreCross-site Scripting (XSS) - Stored in tsolucio/corebos8.6 High
- corebos, tsolucio tsolucio/corebos +1 moreCross-site Scripting (XSS) - Stored in tsolucio/corebos6.5 Medium
- tsolucio corebos, tsolucio/corebos +1 moreCross-site Scripting (XSS) - Stored in tsolucio/corebos7.5 High
- corebos, tsolucio tsolucio/corebos +1 moreCross-site Scripting (XSS) - Stored in tsolucio/corebos7.6 High
- corebos, tsolucio tsolucio/corebos +1 moreUnverified Password Change in tsolucio/corebos7.6 High
- trilium project trilium, zadam zadam/trilium +1 moreCross-site Scripting (XSS) - Stored in zadam/trilium4.6 Medium
- hitron technologies inc. coda-5310, hitrontech coda-5310 firmware +1 moreHitron Technologies Inc. CODA-5310 - Broken Access Control9.8 Critical
- hitron technologies inc. coda-5310, hitrontech coda-5310 firmware +1 moreHitron Technologies Inc. CODA-5310 - Using default credentials9.8 Critical
- hitron technologies inc. coda-5310, hitrontech coda-5310 firmware +1 moreHitron Technologies Inc. CODA-5310 - Insecure service Telnet7.5 High
- ebewe city autocompleteSQL injection vulnerability in the City Autocomplete (cityautocomplete) module from ebewe.net for...9.8 Critical
- thethaiger the thaigerAn issue found in The Thaiger v.1.2 for Android allows unauthorized apps to cause a code...9.8 Critical
- bt21 x bts wallpaper project x bts wallpaperThe BT21 x BTS Wallpaper app 12 for Android allows unauthorized applications to actively request...5.5 Medium
- bt21 x bts wallpaper project x bts wallpaperThe BT21 x BTS Wallpaper app 12 for Android allows unauthorized apps to actively request...7.8 High
- openfind mail2000Openfind Mail2000 - XSS (Reflected Cross-site scripting)5.4 Medium
- furbo dog camera fireware, dog camera firmware +1 moreFurbo dog camera - Command Injection8.8 High
- asus rt-ac86u, rt-ac86u firmware +1 moreASUS RT-AC86U - Buffer Overflow7.2 High
- asus rt-ac86u, rt-ac86u firmware +1 moreASUS RT-AC86U - Command Injection8.8 High
- elite web fax, webfax +1 moreELITE Web Fax - SQL Injection9.8 Critical
- itpison omicard edmITPison OMICARD EDM - Arbitrary File Upload6.8 Medium
- wade digital design co, ltd. fantsy, wddgroup fantasy +1 moreWADE DIGITAL DESIGN CO, LTD. FANTSY - Arbitrary File Upload8.8 High
- wade digital design co, ltd. fantsyWADE DIGITAL DESIGN CO, LTD. FANTSY - Broken Acesss Control9.8 Critical
- arm avalon gpu kernel driver, valhall gpu kernel driver +1 moreAn issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make...5.5 Medium
- southrivertech titan ftp server nextgenAn issue in South River Technologies TitanFTP Before v2.0.1.2102 allows attackers with low-level...8.8 High
- southrivertech titan ftp server nextgenAn issue was discovered in South River Technologies TitanFTP NextGen server that allows for a...7.8 High
- status powerbpmStatus Internet Co.,Ltd. PowerBPM - Broken Access Control5.7 Medium
- mozilla firefoxAfter downloading a Windows <code>.scf</code> script from the local filesystem, an attacker could...8.8 High
- mozilla firefoxNotification permissions persisted between Normal and Private Browsing on Android6.5 Medium
- hitron technologies inc. coda-5310, hitrontech coda-5310 firmware +1 moreHitron Technologies Inc. CODA-5310 - Hard-coded Cryptographic Key7.2 High
- hitron technologies inc. coda-5310, hitrontech coda-5310 firmware +1 moreHitron Technologies Inc. CODA-5310 - Remote Command Execution7.2 High
- sguda u-lock, u-lock firmware +1 moreSGUDA U-Lock - Broken Access Control8.8 High
- sguda u-lock, u-lock firmware +1 moreSGUDA U-Lock - Broken Access Control8.8 High
- Show moreLoading…