CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- zyxel nr7101 firmware, lte7480-m804 firmware, lte7490-m904 firmware +1 more +3 moreA buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to...6.5 Medium
- mobatime mobile application amxgt100, amxgt 100 +1 moreMobatime mobile application - Broken authorisation8.1 High
- mobatime mobile application amxgt100, amxgt 100 +1 moreMobatime mobile application - Authentication bypass9.1 Critical
- mobatime mobile application amxgt100, amxgt 100 +1 moreMobatime mobile application - Sensitive information disclosure7.5 High
- woocommerce wooframework brandingWooFramework Branding Plugin wooframework-branding.php admin_screen_logic redirect4.3 Medium
- ibosIBOS del actionDel sql injection5.5 Medium
- kylinsoft youker-assistantKylinSoft youker-assistant Arbitrary File dbus.SystemBus delete_file access control4.4 Medium
- kylinsoft youker-assistantKylinSoft youker-assistant restore_all_sound_file path traversal4.4 Medium
- kylinos kylin-software-propertiesKylinSoft kylin-software-properties setMainSource os command injection5.3 Medium
- kylinos kylin-software-propertiesKylinSoft kylin-software-properties changedSource access control5.3 Medium
- abb matrix series, nexus series, abb ltd. aspect®-enterprise +19 more +21 moreRemote Code Execution via Command Injection7.2 High
- abb matrix series, nexus series, abb ltd. aspect®-enterprise +19 more +21 morePrivilege escalation to root7.8 High
- managewp broken link checkerBroken Link Checker Plugin Settings Page core.php options_page cross site scripting2.4 Low
- ibm security guardiumIBM Security Guardium session fixation6.3 Medium
- ibm maximo application suite, maximo asset management +1 moreIBM Maximo Asset Management information disclosure3.7 Low
- ibm maximo application suiteIBM Maximo Application Suite information disclosure5.9 Medium
- xml library project libraryxml-rs vulnerable to denial of service via invalid token in XML document7.5 High
- qt, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6...5.3 Medium
- dokuwikiDokuWiki before 2023-04-04a allows XSS via RSS titles.5.4 Medium
- harbingergroup office playerOfflinePlayerService.exe in Harbinger Offline Player 4.0.6.0.2 allows directory traversal as...7.5 High
- reportlabReportlab vulnerable to remote code execution7.8 High
- tsingsee easyplayerproA buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a...5.5 Medium
- sonicjsSonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker...6.5 Medium
- advent tamale rmsAdvent/SSC Inc. Tamale RMS < 23.1 is vulnerable to Directory Traversal. The configuration backup...5.3 Medium
- emoncmsemoncms v11 and later was discovered to contain an information disclosure vulnerability which...5.3 Medium
- minicalMinical 1.0.0 and earlier contains a CSV injection vulnerability which allows an attacker to...8.8 High
- minicalMinical 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF) via minical/public/application...6.5 Medium
- minicalMinical 1.0.0 is vulnerable to Cross Site Scripting (XSS). The vulnerability exists due to...5.4 Medium
- marsctf project marsctfMarsCTF 1.2.1 has an arbitrary file upload vulnerability in the interface for uploading...9.8 Critical
- gitpodGitpod vulnerable to Cross-site Scripting6.1 Medium
- telefonica brasil vivo play firmwareTelefnica Brasil Vivo Play (IPTV) Firmware: 2023.04.04.01.06.15 is vulnerable to Denial of...7.5 High
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreA use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs...7.8 High
- admidio, admidio admidio/admidio +1 moreCross-site Scripting (XSS) - Stored in admidio/admidio6.3 Medium
- redhat advanced cluster management for kubernetes, redhat.com rhacm +1 moreThe grc-policy-propagator allows security escalation within the cluster. The propagator allows...7.8 High
- joommasters jms sliderPrestaShop jmsslider 1.6.0 is vulnerable to Incorrect Access Control via ajax_jmsslider.php.9.8 Critical
- joommasters jms drop mega menuPrestaShop jmsmegamenu 1.1.x and 2.0.x is vulnerable to SQL Injection via ajax_jmsmegamenu.php.9.8 Critical
- jmsthemelayout project jmsthemelayoutPrestaShop jmsthemelayout 2.5.5 is vulnerable to SQL Injection via ajax_jmsvermegamenu.php.9.8 Critical
- arista eosOn the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.7.5 High
- emlog*File Upload vulnerability found in Emlog EmlogCMS v.6.0.0 allows a remote attacker to gain...7.5 High
- ibm aspera cargo, aspera connect +1 moreIBM Aspera buffer overflow8.4 High
- ibm aspera cargo, aspera connect +1 moreIBM Aspera information disclosure5.9 Medium
- eelv newsletter project newsletterEELV Newsletter Plugin lettreinfo.php style_newsletter cross site scripting3.5 Low
libavcOSS-FuzzUNKNOWN READ in ih264e_cabac_put_byteNo score- wordpress blogger importerBlogger Importer Plugin blogger-importer.php restart cross-site request forgery4.3 Medium
- kibokolabs watu quizWatu Quiz Plugin Exam exam.php watu_exams sql injection6.3 Medium
- agro-school management system project management system, code-projects agro-school management system +1 morecode-projects Agro-School Management System btn_functions.php doUpdateQuestion sql injection6.3 Medium
- nilsteampassnet nilsteampassnet/teampass, teampass +1 moreImproper Access Control in nilsteampassnet/teampass6.2 Medium
- captura project capturaCaptura CRYPTBASE.dll uncontrolled search path7.0 High
libredwgOSS-FuzzHeap-buffer-overflow in json_write_TFNo score- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, macOS...8.6 High
- Show moreLoading…