CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Stored in microweber/microweber3.8 Low
- samsung exynos 5123 firmware, exynos 5300 firmware +1 moreAn issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. An...9.8 Critical
- samsung exynos 5123 firmware, exynos 5300 firmware +1 moreAn issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300....7.5 High
- samsung exynos 5123 firmware, exynos 5300 firmware +1 moreAn issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300....9.1 Critical
- anyka ak3918ev300 firmwareAn issue was discovered in Anyka Microelectronics AK3918EV300 MCU v18. A command injection...9.8 Critical
- gnome glib, fedora extra packages for enterprise linux, 37 +8 more +10 moreGvariant offset table entry size is not checked in is_normal()5.5 Medium
- gitlabAn issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10...5.9 Medium
- perforce puppet enterprise, puppet enterprise +1 moreA privilege escalation allowing remote code execution was discovered in the orchestration service.9.8 Critical
- gitlabIncorrect Privilege Assignment in GitLab4.4 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 15.11 before 15...8.7 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.0 before 15...7.5 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 8.7 before 15...7.5 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 15.8 before 15...4.4 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 1.2 before 15...2.6 Low
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions before 15.10.8, all versions...4.3 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab3.1 Low
- gitlabImproper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in GitLab3.1 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- vmware toolsVMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service...5.5 Medium
- percona xtrabackupIn Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the...7.8 High
- 10web photo galleryThe 10Web Photo Gallery plugin through 1.5.69 for WordPress allows XSS via theme_id for...6.1 Medium
- seeddmsAn issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid...8.8 High
- palantir foundry, com.palantir.lime:lime2 +1 moreMandatory control bypass in Lime27.6 High
- grafana, grafana enterprise +1 moreGrafana has Broken Access Control in Alert manager: Viewer can send test alerts4.1 Medium
- grafana, grafana enterprise +1 moreGrafana Missing Synchronization vulnerability7.5 High
- naturalintelligence fast-xml-parserRegex Injection via Doctype Entities7.5 High
- kiwitcms kiwi, kiwi tcms +1 moreStored cross site scripting (XSS) via unrestricted file upload in Kiwi TCMS8.1 High
- notaryproject notation-goVerification bypass can cause users into verifying the wrong artifact8.4 High
- notaryproject notation, notation-go +1 moreDefault `maxSignatureAttempts` in `notation verify` enables an endless data attack in notation5.4 Medium
- notaryproject notation, notation-go +1 moreDenial of service from high number of artifact signatures in notation2.6 Low
- horner automation cscape, cscape envisionrv +1 moreThe affected application lacks proper validation of user-supplied data when...7.8 High
- element-hq synapseURL deny list bypass via oEmbed and image URLs when generating previews in Synapse3.5 Low
- element-hq synapseImproper checks for deactivated users during login in synapse5.4 Medium
- syncthingCross-site Scripting (XSS) in Web GUI in syncthing4.6 Medium
- horner automation cscape, cscape envisionrv +1 moreThe affected application lacks proper validation of user-supplied data when...7.8 High
- horner automation cscape, cscape envisionrv +1 moreThe affected application lacks proper validation of user-supplied data when parsing...7.8 High
- taosdata grafanaplugin, tdengine grafana +1 moreCommand Injection Vulnerability in `Release PR Merged` Workflow in taosdata/grafanaplugin8.1 High
- horner automation cscape, cscape envisionrv +1 moreThe affected product does not properly validate user-supplied data. If a user...7.8 High
- horner automation cscape, cscape envisionrv +1 moreHorner Automation Cscape Out-of-bounds Read7.8 High
- horner automation cscape, cscape envisionrv +1 moreHorner Automation Cscape Out-of-bounds Write7.8 High
- horner automation cscape, cscape envisionrv +1 moreThe affected application lacks proper validation of user-supplied data when parsing...7.8 High
- horner automation cscape, cscape envisionrv +1 moreThe affected application lacks proper validation of user-supplied data when parsing...7.8 High
- horner automation cscape, cscape envisionrv +1 moreHorner Automation Cscape Out-of-bounds Write7.8 High
- canonical landscapeLandscape Open Redirect6.1 Medium
- canonical landscapeLandscape's Apache server-status is accessible by default9.3 Critical
- canonical landscapeLandscape insecure token generation6.8 Medium
- horner automation cscape, cscape envisionrv +1 moreThe affected application lacks proper validation of user-supplied data when parsing...7.8 High
- palantir foundry comments, com.palantir.comments:comments +1 moreRetrieval of Attachments to Comments lacks Authorization6.5 Medium
mosquittoOSS-FuzzSegv on unknown address in config__bridge_cleanupNo score- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6877, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6893, mt6895, mt6980, mt6983, mt6985, mt6990, mt8167, mt8175, mt8195, mt8365, mt8385, mt8673, mt8781, mt8788, mt8789, openwrt +1 more +3 moreIn preloader, there is a possible out of bounds write due to a missing bounds check. This could...6.7 Medium
- Show moreLoading…