CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- yajl project yajl, debian linux, fedoraproject fedora +2 moreThere's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of...6.5 Medium
- sogou c\+\+ workflowIn Sogou Workflow v0.10.6, memcpy a negtive size in URIParser::parse , may cause buffer-overflow...8.8 High
- mitrastar gpt-2741gnac firmwareA command injection vulnerability was found in the ping functionality of the MitraStar GPT...7.2 High
- canonical ubuntu kernel, ubantu kernel, ubuntu linux +2 moreLocal privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data...7.8 High
- promptworks redclothRedCloth Regular Expression Denial of Service issue7.5 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection via the...9.8 Critical
- joommasters jmspagebuilderPrestaShop jmspagebuilder 3.x is vulnerable to SQL Injection via ajax_jmspagebuilder.php.9.8 Critical
- advancemame advancecompA segmentation fault flaw was found in the Advancecomp package. This may lead to decreased...3.3 Low
- tp-link tapo c200 firmwareThe AES Key-IV pair used by the TP-Link TAPO C200 camera V3 (EU) on firmware version 1.1.22 Build...4.6 Medium
- canonical ubuntu kernel, ubantu kernel, ubuntu linux +2 moreOn Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission...7.8 High
- imagemagickA heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to...5.5 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15...7.5 High
- gitlabAn issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10...6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab4.3 Medium
- advantech webaccess/scada, webaccess\/scada +1 moreIn Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability...7.2 High
- advantech webaccess/scada, webaccess\/scada +1 moreIn Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file overwrite vulnerability...7.2 High
- advantech webaccess/scada, webaccess\/scada +1 moreIn Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload...7.2 High
- avo-hq avoPossible unsafe reflection / partial denial of service in avo8.3 High
- avo-hq avoStored XSS (Cross Site Scripting) in html content based fields of avo7.3 High
- angrybyte wordpress exit box liteExit Box Lite Plugin wordpress-exit-box-lite.php information disclosure4.3 Medium
- google chrome, couchbase server, debian linux +2 more +4 moreType confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to...8.8 High
- lenovo ideacentre 510s-07icb firmware, ideacentre 510s-07ick firmware, ideacentre 720-18apr firmware +25 more +27 moreA buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and...6.7 Medium
- lenovo ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware, ideacentre 3 07ach7 firmware +112 more +114 moreAn ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models...6.7 Medium
- angrybte wordpress exit box liteExit Box Lite Plugin wordpress-exit-box-lite.php exitboxadmin cross-site request forgery4.3 Medium
- lenovo thinkpad hybrid usb-c with usb-a dock firmware update tool, thinkpad hybrid usb-c with usb-a dock firmware +1 moreA local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware...7.8 High
github.com/cheqd/cheqd-nodeGocheqd-node affected by Inter-blockchain Communication (IBC) protocol "Huckleberry" vulnerabilityNo score- hoppscotchDatabase password exposed in logs in hoppscotch7.8 High
- kanboardStored Cross site scripting in the Task External Link Functionality in Kanboard6.4 Medium
- kanboardMissing access control in internal task links feature in Kanboard5.4 Medium
- kanboardMissing Access Control allows User to move and duplicate tasks in Kanboard5.4 Medium
- kanboardParameter based Indirect Object Referencing leading to private file exposure in Kanboard4.3 Medium
- microsoft office, 365 apps, 365 apps for enterprise +3 more +5 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- woocommerce sidebar manager to woosidebars converterWooSidebars Sidebar Manager Converter Plugin class-woosidebars-sbm-converter.php process_request redirect4.3 Medium
- woocommerce woosidebarsWooSidebars Plugin class-woo-sidebars.php enable_custom_post_sidebars redirect4.3 Medium
- woocommerce wooframework tweaksWooFramework Tweaks Plugin wooframework-tweaks.php admin_screen_logic redirect3.5 Low
harfbuzzOSS-FuzzInvalid-free in hb_free_implNo scorelibredwgOSS-FuzzHeap-buffer-overflow in bit_TV_to_utf8No score- ays pro quiz makerQuiz Maker < 6.4.2.7 - Reflected XSS6.1 Medium
- brevo newsletter, smtp, email marketing and subscribe forms by sendinblue, newsletter\, smtp\, email marketing and subscribe +1 moreNewsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSS6.1 Medium
- 10web seo, unknown seo by 10web +1 moreSeo By 10Web < 1.2.7 - Admin+ Stored XSS4.8 Medium
- convertkit, convertkit - email marketing\, email newsletter and landing pages +1 moreConvertKit < 2.2.1 - Reflected XSS6.1 Medium
- unknown pricing table builderAP Pricing Tables Lite <= 1.1.6 - Admin+ SQLi7.2 High
- punchcreative get your numberGet Your Number <= 1.1.3 - Admin+ Stored XSS4.8 Medium
- unknown wp multi store locatorWP Multi Store Locator <= 2.4 - Contributor+ Stored XSS5.4 Medium
- accesspressthemes frontend post wordpress pluginFrontend Post WordPress Plugin <= 2.8.4 - Contributor+ Arbitrary Redirect5.4 Medium
- ays pro survey makerSurvey Maker < 3.4.7 - Reflected XSS6.1 Medium
- trumani stop spammers, unknown stop spammers security | block spam users, comments, forms +1 moreStop Spammers Security < 2023 - Admin+ Stored XSS4.8 Medium
- trumani stop spammers, unknown stop spammers security | block spam users, comments, forms +1 moreStop Spammers Security < 2023 - Reflected XSS6.1 Medium
- 10web social post feed, unknown 10web social post feed +1 more10WebSocial < 1.2.9 - Reflected XSS6.1 Medium
- kibokolabs hostelHostel < 1.1.5.2 - Admin+ Stored XSS4.8 Medium
- Show moreLoading…