CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- iptanus wordpress file upload, wordpress file upload pro, nickboss iptanus file upload +2 moreWordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_last_name shortcode5.4 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf shortcode5.4 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf shortcode6.5 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_transaction_id' shortcode6.5 Medium
- nsqua draw attention, croixhaug interactive image map plugin – draw attention +1 moreDraw Attention <= 2.0.11 - Missing Authorization to Arbitrary Post Featured Image Modification4.3 Medium
- getshieldsecurity shield security, paultgoodchild shield: blocks bots, protects users, and prevents security breaches +1 moreShield Security <= 17.0.17 - Unauthenticated Stored Cross-Site Scripting7.2 High
- themeisle multiple page generator, multiple page generator plugin – mpg +1 moreMultiple Page Generator Plugin <= 3.3.17 - Authenticated (Administrator+) SQL Injection7.2 High
- wpdeveloper essential blocks, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +1 moreEssential Blocks <= 4.0.6 - Missing Authorization via get4.3 Medium
- wpwax directorist, directorist: ai-powered business directory, listings & classified ads +1 moreDirectorist <= 7.5.4 - Authenticated (Subscriber+) Arbitrary User Password Reset to Privilege Escalation8.8 High
- webfactory under constructionUnder Construction <= 3.96 - Cross-Site Request Forgery via admin_action_ucp_dismiss_notice4.3 Medium
- oretnom23 lost and found information systemSourceCodester Lost and Found Information System manage_user.php sql injection6.3 Medium
- dlink di-7500g-ci firmwareA Cross Site Scripting (XSS) vulnerability in D-Link DI-7500G-CI-19.05.29A allows attackers to...5.4 Medium
- progress datadirect odbc oracle wire protocol driverA buffer overflow was discovered in Progress DataDirect Connect for ODBC before 08.02.2770 for...9.8 Critical
- progress datadirect odbc oracle wire protocol driverAn issue was discovered in Progress DataDirect Connect for ODBC before 08.02.2770 for Oracle....5.9 Medium
- thedaylightstudio fuel cmsFuel CMS v1.5.2 was discovered to contain a SQL injection vulnerability via the id parameter at ...8.8 High
- froxlor, froxlor froxlor/froxlor +1 moreImproper Restriction of Excessive Authentication Attempts in froxlor/froxlor9.8 Critical
- froxlor, froxlor froxlor/froxlor +1 morePath Traversal in froxlor/froxlor6.5 Medium
- debian linux, linux kernel, netapp hci baseboard management controller +1 more +3 moreA use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in...7.1 High
- mimsoftware mim concurrent license server, mim local concurrent license server +1 moreAn issue found in MIM software Inc MIM License Server and MIMpacs services v.6.9 thru v.7.0 fixed...8.8 High
- appcrossx crossxAn issue found in CrossX v.1.15.3 for Android allows a local attacker to cause a persistent...5.5 Medium
- appcrossx crossxAn issue found in CrossX v.1.15.3 for Android allows a local attacker to cause an escalation of...7.8 High
- urbanandroid sleepAn issue found in Sleep v.20230303 for Android allows unauthorized apps to cause a persistent...5.5 Medium
- flightawareAn issue found in FlightAware v.5.8.0 for Android allows unauthorized apps to cause a persistent...5.5 Medium
- leap blue light filterAn issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause a...5.5 Medium
- leap blue light filterAn issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause...7.8 High
- urbanandroid twilightAn issue found in Twilight v.13.3 for Android allows unauthorized apps to cause a persistent...5.5 Medium
- urbanandroid twilightAn issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of...7.8 High
- ekatox facemoji\An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows a local attacker to cause...5.5 Medium
- ekatox facemoji emoji keyboardAn issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows unauthorized apps to cause...7.8 High
- yandex navigatorAn issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause a...5.5 Medium
- yandex navigatorAn issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause...7.8 High
- vadesecure secure gatewayCross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to...6.1 Medium
- vadesecure secure gatewayCross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to...6.1 Medium
- vadesecure secure gatewayCross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to...6.1 Medium
- bitwardenBitwarden Desktop v1.20.0 and above stores the biometric key in plaintext which allows a local...7.1 High
- pega platform, pegasystems pega infinity +1 morePega Platform versions 7.2 to 8.8.1 are affected by an XSS issue.8.0 High
- mongodb inc. ops manager, mongodb ops manager server +1 moreMongoDB Ops Manager may disclose sensitive information in Diagnostic Archive3.1 Low
- bytedeco javacpp-presets, javacpp presets +1 moreJavaCPP project actions vulnerable to code injection4.3 Medium
linux-gkeUbuntulinux-gke regressionNo score- tgstation tgstation-serverWindows user name disclosure in TGstation5.8 Medium
- snowflake connector, snowflakedb snowflake-connector-net +1 moreSnowflake Connector vulnerable to Command Injection7.3 High
- snowflake connector, snowflakedb snowflake-connector-python +1 moreSnowflake Python Connector vulnerable to Command Injection7.3 High
- snowflake connector, snowflakedb snowflake-connector-nodejs +1 moreSnowflake NodeJS Driver vulnerable to Command Injection7.3 High
- go toolchain cmd/go, golang go, fedoraproject fedora +2 moreCode injection via go command with cgo in cmd/go9.8 Critical
- go standard library runtime, golang go, fedoraproject fedora +2 moreUnsafe behavior in setuid/setgid binaries in runtime7.8 High
- go toolchain cmd/go, golang go, fedoraproject fedora +1 more +3 moreImproper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go9.8 Critical
- go toolchain cmd/go, golang go, fedoraproject fedora +2 moreImproper handling of non-optional LDFLAGS in go command with cgo in cmd/go9.8 Critical
- sensormatic electronics, a subsidiary of johnson controls, inc. illustra pro gen 4 dome, johnsoncontrols illustra pro gen 4 dome firmware, illustra pro gen 4 ptz firmware +1 more +3 moreDebug feature in Sensormatic Electronics Illustra Dome and PTZ cameras8.3 High
- snowflake gosnowflakeSnowflake Golang Driver vulnerable to Command Injection7.3 High
- Show moreLoading…