CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- apple ipados, macos, safari +7 more +9 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple ipados, macos, safari +6 more +8 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in...6.5 Medium
- don8 project don8WordPress Don8 Plugin <= 0.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- openwrt luciX-WRT luci 404 Error Template dispatcher.uc run_action cross site scripting3.5 Low
- vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 moreOnline Booking & Scheduling Calendar for WordPress by vcita <= 4.5 - Cross-Site Request Forgery to Account Logout5.4 Medium
- vcita crm and lead management by vcitaCRM and Lead Management by vcita <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 moreOnline Booking & Scheduling Calendar for WordPress by vcita <= 4.2.10 - Missing Authorization to Account Logout5.4 Medium
- eyale-vc contact form builder by vcitaContact Form Builder by vcita <= 4.10.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 moreOnline Booking & Scheduling Calendar for WordPress by vcita <= 4.3.0 - Unauthenticated Stored Cross-Site Scripting7.2 High
- vcita contact form and calls to action by vcitaContact Form and Calls To Action by vcita <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 moreOnline Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Missing Authorization on REST-API5.3 Medium
- vcita event registration calendar by vcita, online payments – get paid with paypal, square & stripe, online payments - get paid with paypal\, square \& stripe +2 moreEvent Registration Calendar By vcita <= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe <= 3.10.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- vcita contact form and calls to action by vcita, eyale-vc contact form builder by vcita +1 moreContact Form and Calls To Action by vcita <= 4.10.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- vcita event registration calendar by vcita, online payments – get paid with paypal, square & stripe, online payments - get paid with paypal\, square \& stripe +2 moreEvent Registration Calendar By vcita <= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- eyale-vc contact form builder by vcitaContact Form Builder by vcita <= 4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- vcita crm and lead management by vcitaCRM and Lead Management by vcita <= 2.7.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- vektor-inc vk blocksVK Blocks <= 1.57.0.5 - Authenticated(Contributor+) Settings Update4.3 Medium
- vektor-inc vk blocksVK Blocks <= 1.57.0.5 - Authenticated(Contributor+) Settings Update4.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability7.5 High
- google chromeOut of bounds read and write in ANGLE in Google Chrome prior to 114.0.5735.90 allowed a remote...8.8 High
- nilsteampassnet nilsteampassnet/teampass, teampass +1 moreCross-site Scripting (XSS) - Stored in nilsteampassnet/teampass9.0 Critical
- nilsteampassnet nilsteampassnet/teampass, teampass +1 moreCross-site Scripting (XSS) - Stored in nilsteampassnet/teampass8.1 High
- nilsteampassnet nilsteampassnet/teampass, teampass +1 moreCross-site Scripting (XSS) - Stored in nilsteampassnet/teampass6.1 Medium
- azexo page builder with image map by azexoPage Builder by AZEXO <= 1.27.133 - Missing Authorization to Post Creation5.4 Medium
- azexo page builder with image map by azexoPage Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Post Creation/Modification/Deletion6.3 Medium
- sandeepsoni214 user email verification for woocommerceUser Email Verification for WooCommerce <= 3.5.0 - Authentication Bypass8.1 High
- azexo page builder with image map by azexoPage Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Stored Cross-Site Scripting via azh_save6.1 Medium
- azexo page builder with image map by azexoPage Builder by AZEXO <= 1.27.133 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- hashicorp consul, consul enterprise +1 moreConsul Cluster Peering can Result in Denial of Service4.9 Medium
- hashicorp consul, consul enterprise +1 moreConsul Envoy Extension Downsteam Proxy Configuration By Upstream Service Owner8.7 High
- xpdfDivide-by-zero in Xpdf 4.04 due to very large page size3.3 Low
cryptographyPyPIVulnerable OpenSSL included in cryptography wheelsNo scoregithub.com/cosmos/cosmos-sdkGoGo package github.com/cosmos/cosmos-sdk module x/crisis does NOT cause chain haltNo score- silabs.com gecko sdk, silabs gecko software development kit +1 moreBuffer overflow in Platform CLI component in Silicon Labs Gecko SDK v4.2.1 and earlier allows...2.9 Low
- campcodes retro cellphone online store, retro cellphone online store project cellphone online store +1 moreCampcodes Retro Cellphone Online Store modal_add_product.php sql injection6.3 Medium
- chuanhuchatgpt project chuanhuchatgptChuanhuChatGPT vulnerable to unauthorized configuration file access7.5 High
wolfsslOSS-FuzzHeap-buffer-overflow in BundlePacketNo score- agro-school management system project management system, code-projects agro-school management system +1 morecode-projects Agro-School Management System index.php sql injection6.3 Medium
- agro-school management system project management system, code-projects agro-school management system +1 morecode-projects Agro-School Management System Attachment Image btn_functions.php unrestricted upload6.3 Medium
- agro-school management system project management system, code-projects agro-school management system +1 morecode-projects Agro-School Management System btn_functions.php doAddQuestion cross site scripting3.5 Low
- online exam form submission project exam form submission, sourcecodester online exam form submission +1 moreSourceCodester Online Exam Form Submission update_s6.php sql injection6.3 Medium
- 07fly crm, customer relationship management +1 more07FLY CRM User Profile cross site scripting3.5 Low
- webbax king-avisPrestahop module King-Avis - Path traversal4.9 Medium
- iuok yfcmf-tp6YFCMF Ajax.php path traversal4.3 Medium
- mobatime web applicationMobatime web application - broken authorisation mechanisms6.8 Medium
- mobatime web applicationMobatime web application - Arbitrary file upload (RCE)8.1 High
- iuok yfcmf-tp6YFCMF index.php path traversal4.3 Medium
- erikoglu technology ermon, erikogluteknoloji energy monitoring +1 moreSQLi in Erikoglu Technology's ErMon9.8 Critical
- booking-wp-plugin bookly, ladela wordpress online booking and scheduling plugin – bookly +1 moreThe Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via service titles...4.0 Medium
- wpdirectorykit wp directory kitWP Directory Kit <= 1.2.3 - Reflected Cross-Site Scripting via 'search'6.1 Medium
- Show moreLoading…