CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- kafkaui-lite project kafkaui-liteAn issue was discovered in freakchicken kafkaUI-lite 1.2.11 allows attackers on the same network...9.8 Critical
- kratosdefense spectralnet narrowband firmwareA remote command injection issues exists in the web server of the Kratos SpectralNet device with...7.2 High
- crypto-js project crypto-jscrypto-js uses insecure random numbers5.3 Medium
libxml2OSS-FuzzGlobal-buffer-overflow in htmlParseHTMLAttributeNo score- danfoss ak-em100, ak-em100 firmware +1 moreAuthenticated OS Command Injection in Danfoss AK-EM1009.9 Critical
- danfoss ak-em100, ak-em100 firmware +1 moreSQL Injection in Danfoss AK-EM10010.0 Critical
- danfoss ak-em100, ak-em100 firmware +1 moreReflected Cross-Site Scripting in Danfoss AK-EM1009.0 Critical
- danfoss ak-em100, ak-em100 firmware +1 moreWebreport disclosure to unauthorized actor in Danfoss AK-EM1005.3 Medium
- danfoss ak-em100, ak-em100 firmware +1 moreLocal File Inclusion in Danfoss AK-EM1007.7 High
- danfoss ak-em100, ak-em100 firmware +1 moreReflected Cross-Site Scripting in Danfoss AK-EM1009.0 Critical
- danfoss ak-em100, ak-em100 firmware +1 moreCleartext credentials in Danfoss AK-EM1007.5 High
ouroboroscrates.ioOuroboros is UnsoundNo score- froxlor, froxlor froxlor/froxlor +1 moreSession Fixation in froxlor/froxlor4.2 Medium
libxml2OSS-FuzzGlobal-buffer-overflow in xmlDictLookupNo score- dottie project dottiedottie vulnerable to Prototype Pollution7.5 High
- nilsteampassnet nilsteampassnet/teampass, teampass +1 moreCross-site Scripting (XSS) - Stored in nilsteampassnet/teampass8.1 High
- nilsteampassnet nilsteampassnet/teampass, teampass +1 moreImproper Encoding or Escaping of Output in nilsteampassnet/teampass3.5 Low
- owncast owncast/owncast, owncast project owncast +1 moreServer-Side Request Forgery (SSRF) in owncast/owncast8.3 High
- rails kredis jsonKredis JSON Possible Deserialization of Untrusted Data Vulnerability5.3 Medium
- phpgurukul teachers record management system, teachers record management system project record management system +1 morePHPGurukul Teachers Record Management System Profile Picture changeimage.php unrestricted upload6.3 Medium
- umbraco umbracoidentityextensions, identity extensibility +1 moreClient secret not mandatory in UmbracoIdentityExtensions3.7 Low
- contiki-ngOut-of-Bounds Read in contiki-ng7.3 High
- hp softpaq installerA potential security vulnerability has been identified with a version of the HP Softpaq installer...7.8 High
- udecode plateCross site scripting (XSS) in @udecode/plate-link8.1 High
- hashicorp vault, vault enterprise +1 moreVault’s KV Diff Viewer Allowed for HTML Injection4.3 Medium
freerdpOSS-FuzzHeap-buffer-overflow in TestFuzzCommonAssistanceParseFileBuffer.cNo scorehdf5OSS-FuzzHeap-buffer-overflow in H5FS__sinfo_serialize_node_cbNo scoreghostscriptOSS-FuzzHeap-use-after-free in psi_device_ref_finalizeNo score- sales tracker management system project tracker management system, sourcecodester sales tracker management system +1 moreSourceCodester Sales Tracker Management System cross site scripting2.4 Low
- performance indicator system project indicator system, sourcecodester performance indicator system +1 moreSourceCodester Performance Indicator System addproduct.php cross site scripting3.5 Low
- melapress wp activity log, wpwhitesecurity wp activity log premium +1 moreWP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration4.3 Medium
- melapress wp activity log, wpwhitesecurity wp activity log premium +1 moreWP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup4.3 Medium
- wpwhitesecurity wp activity log premium, wp activity log +1 moreWP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db4.3 Medium
- wpwhitesecurity wp activity log premium, wp activity log +1 moreWP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db4.3 Medium
- google grpcInformation leak in gRPC7.4 High
- google grpc, fedoraproject fedora +1 moreDenial-of-Service in gRPC5.3 Medium
- google grpcDenial-of-Service in gRPC7.5 High
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_delete_product6.5 Medium
- brizy, themefusecom brizy – page builder +1 moreBrizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass3.7 Low
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_product4.3 Medium
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_product4.3 Medium
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_product4.3 Medium
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_product4.3 Medium
- oretnom23 lost and found information systemSourceCodester Lost and Found Information System view_inquiry.php sql injection6.3 Medium
- i thirteen web solution wp responsive tabs horizontal vertical and accordion tabs, i13websolution wp responsive tabs +1 moreWP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.15 - Reflected Cross-Site Scripting6.1 Medium
- wpdeveloper essential blocks, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +1 moreEssential Blocks <= 4.0.6 - Missing Authorization via save4.3 Medium
- jetmonsters getwid – gutenberg blocks, motopress getwid +1 moreGetwid – Gutenberg Blocks <= 1.8.3 - Authenticated(Subscriber+) Server Side Request Forgery8.5 High
- wpmanageninja fluentcrm, techjewel fluentcrm – email newsletter, automation, email marketing, email campaigns, optins, leads, and crm solution +1 moreFluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization Control6.5 Medium
- pluginus wordpress currency switcher professional, realmag777 wpcs – wordpress currency switcher professional +1 moreWPCS – WordPress Currency Switcher Professional <= 1.1.9 - Missing Authorization to Custom Drop-Down Currency Switcher Creation4.3 Medium
- hijiri intuitive custom post orderIntuitive Custom Post Order <= 3.1.4.1 - Authenticated (Admin+) SQL Injection6.6 Medium
- Show moreLoading…