CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- zxcvbn-ts zxcvbn, zxcvbn-ts project zxcvbn-ts +1 moreUser input results in Unbounded resource consumption in @zxcvbn-ts/core6.5 Medium
- openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 moreGovernor proposal creation may be blocked by frontrunning in OpenZeppelin5.3 Medium
- razormist online discussion forum siteSourceCodester Online Discussion Forum Site manage_user.php sql injection6.3 Medium
- razormist online discussion forum siteSourceCodester Online Discussion Forum Site manage_post.php sql injection6.3 Medium
- razormist online discussion forum siteSourceCodester Online Discussion Forum Site view_category.php sql injection6.3 Medium
- razormist online discussion forum siteSourceCodester Online Discussion Forum Site manage_category.php sql injection6.3 Medium
- razormist online discussion forum siteSourceCodester Online Discussion Forum Site sql injection6.3 Medium
- razormist online discussion forum siteSourceCodester Online Discussion Forum Site manage_post.php cross site scripting3.5 Low
- razormist online discussion forum siteSourceCodester Online Discussion Forum Site manage_post.php cross site scripting3.5 Low
- vmware vrealize network insightAria Operations for Networks contains an information disclosure vulnerability. A malicious actor...7.5 High
- vmware vrealize network insightAria Operations for Networks contains an authenticated deserialization vulnerability. A malicious...8.8 High
- vmware aria operations for networksAria Operations for Networks contains a command injection vulnerability. A malicious actor with...9.8 Critical
ntopngOSS-FuzzHeap-buffer-overflow in IEC104Stats::processPacketNo score- valvepress pinterest automatic, pinterest automatic pin +1 morePinterest Automatic <= 4.14.3 - Unuathenticated Arbitrary Options Update9.8 Critical
- tunafish adning advertisingAdning Advertising <= 1.5.5 - Unauthenticated Arbitrary File Deletion via Path Traversal6.5 Medium
- villatheme woocommerce multi currency, curcy - woocommerce multi currency - currency switcher +1 moreWooCommerce Multi Currency <= 2.1.17 - Missing Authorization6.5 Medium
- tunafish adning advertisingAdning Advertising <= 1.5.5 - Arbitrary File Upload9.8 Critical
- xforwoocommerce add product tabs for woocommerce, add product tabs, autopilot seo for woocommerce +28 more +30 moreMultiple XforWooCommerce Add-On Plugins (Various Versions) - Missing Authorization8.8 High
google-cloud-sap-agentopenSUSESecurity update for google-cloud-sap-agentNo score- knime business hubKNIME Hub Web Application is vulnerable to clickjacking4.3 Medium
- knime business hubSensitive information disclosure in KNIME Hub Web Application5.3 Medium
- apache guacamoleApache Guacamole: Use-after-free in handling of RDP audio input buffer6.8 Medium
- apache guacamoleApache Guacamole: Incorrect calculation of Guacamole protocol element lengths6.5 Medium
- trellix agentA heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter...6.3 Medium
- trellix agentA heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter...6.3 Medium
- triangle microworks scada data gatewayOn Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can...5.3 Medium
- triangle microworks scada data gatewayOn Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can...8.2 High
- wiresharkWireshark MSMMS parsing buffer overflow6.5 Medium
- wireshark, debian linux +1 moreWireshark RTPS Parsing Buffer Overflow6.5 Medium
- stylemixthemes ulisting, stylemix directory listings wordpress plugin – ulisting +1 moreuListing <= 1.6.6 - Unauthenticated Options Changes via wp_route9.8 Critical
- wpdesk flexible checkout fields, flexible checkout fields for woocommerce – woocommerce checkout manager +1 moreFlexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update7.2 High
- adastracrypto cryptocurrency donation box – bitcoin & crypto donations, cool plugins cryptocurrency widgets for elementor, cryptocurrency widgets – price ticker & coins list +13 more +15 moreCool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation8.8 High
- al imran akash recentlyRecently <= 3.0.4 - Arbitrary File Upload to Remote Code Exectution8.8 High
- wpexperts email templates, saadiqbal email templates customizer and designer for wordpress and woocommerce +1 moreEmail Templates <= 1.3 - HTML Injection8.8 High
- webdevocean wp quick frontend editor, labibahmed42 wp quick frontend editor – wordpress plugin +1 moreWP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Content Injection8.1 High
- niteothemes cmp, niteo cmp – coming soon & maintenance plugin by niteothemes +1 moreCMP <= 3.8.1 - Missing Authorization8.3 High
- 2j-slideshow slideshow, image slider by 2j, 2joomla 2j slideshow +1 moreSlideshow, Image Slider by 2J <= 1.3.31 - Authorization Bypass5.4 Medium
- brainstormforce cartflows – funnel builder & checkout plugin for woocommerce, cartflows +1 moreFunnel Builder <= 1.3.0 - Arbitrary Plugin Activation5.4 Medium
- adsanityplugin adsanity, xen +1 moreAdSanity < 1.8.2 - Authenticated Arbitrary File Upload8.8 High
- ndijkstra doneren met mollieDoneren met Mollie <= 2.8.4 - Information Disclosure6.5 Medium
- webdevocean wp quick frontend editor, labibahmed42 wp quick frontend editor – wordpress plugin +1 moreWP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4 Medium
- f1logic newsletter managerNewsletter Manager <= 1.5.1 - Insecure Deserialization9.8 Critical
- galleryape gallery images apeGallery Images Ape <= 2.0.6 - Authenticated Plugin Deactivation7.6 High
- palscode woocommerce multi currency, villatheme curcy – multi currency for woocommerce – smoothly on woocommerce 9.x +1 moreWooCommerce Multi Currency <= 2.1.17 - Missing Authorization4.3 Medium
- etoilewebdesign ultimate reviewsUltimate Reviews < 2.1.33 - PHP Object Injection9.8 Critical
- nanbu welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure4.3 Medium
- templateinvaders ti woocommerce wishlist, ti woocommerce wishlist pro +1 moreTI WooCommerce Wishlist <= 1.21.11 and TI WooCommerce Wishlist Pro <= 1.21.4 - Arbitrary Options Update8.8 High
- webwizards b2bking, webwizardsdev b2bking — ultimate woocommerce b2b and wholesale plugin — wholesale prices, bulk order form & more +1 moreB2BKing <= 4.6.00 - Missing Authorization to Authenticated(Subscriber+) Information Disclosure4.3 Medium
- valvepress wordpress automatic pluginWordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update9.1 Critical
- webberzone better search, ajay better search – relevant search results for wordpress +1 moreBetter Search <= 2.5.2 - Cross-Site Request Forgery to Settings Import8.8 High
- Show moreLoading…