CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- doorkeeper-gem doorkeeperDoorkeeper Improper Authentication vulnerability4.2 Medium
- ossrs srs, simple realtime server +1 moreSRS has command injection vulnerability in demonstration api-server for HTTP callback.7.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2023.1.10518 stored XSS in a Markdown-rendering engine was possible4.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms7.5 High
- kevon adonis wp abstractsWordPress WP Abstracts Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- apache nifiApache NiFi: Potential Deserialization of Untrusted Data with JNDI in JMS Components6.5 Medium
- stpetedesign call now accessibility buttonWordPress Call Now Accessibility Button Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- apache nifiApache NiFi: Potential Code Injection with Database Services using H28.8 High
- brokencrust this day in history, this day in history project day in history +1 moreWordPress This Day In History Plugin <= 3.10.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- roadflow, roadflow visual process engine .net core mvc +1 moreRoadFlow Visual Process Engine .NET Core Mvc Login sql injection6.3 Medium
- chengdu vec40g, feiyuxing vec40g firmware +1 moreChengdu VEC40G denial of service5.3 Medium
- wpoperation salert – fake sales notification woocommerce, salert - fake sales notification woocommerce +1 moreWordPress SALERT Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- unfocus scripts n stylesWordPress Scripts n Styles Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- katie seaborn zotpressWordPress Zotpress Plugin <= 7.3.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
ntopngOSS-FuzzHeap-buffer-overflow in NetworkInterface::dissectPacketNo score- ip metaboxes project metaboxes, phan chuong ip metaboxes +1 moreWordPress IP Metaboxes Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- ip metaboxes project metaboxes, phan chuong ip metaboxes +1 moreWordPress IP Metaboxes Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- ludwig media utm tracker, utm tracker project tracker +1 moreWordPress UTM Tracker Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- rolands umbrovskis itemprop wp for serp/seo rich snippets, itemprop wp for serp\/seo rich snippets project wp for serp\/seo rich snippets +1 moreWordPress itemprop WP for SERP/SEO Rich snippets Plugin <= 3.5.201706131 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- repute infosystems armemberWordPress ARMember Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- galleryplugins video contestWordPress Video Contest WordPress Plugin Plugin <= 3.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- aviplugins wp register profile with shortcodeWordPress WP Register Profile With Shortcode Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- cchetanonline wp-copyprotectcchetanonline WP-CopyProtect wp-copyprotect.php CopyProtect_options_page cross site scripting3.5 Low
- progressbar.js project progressbar.jsprogressbar.js vulnerable to Prototype Pollution8.2 High
- geoserverGeoServer RCE due to improper control of generation of code in jai-ext`Jiffle` map algebra language9.8 Critical
- progress moveit transferIn Progress MOVEit Transfer before 2021.0.7 (13.0.7), 2021.1.5 (13.1.5), 2022.0.5 (14.0.5), 2022...9.1 Critical
- atos unify openscape 4000 assistant, unify openscape 4000 manager +1 moreAtos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0,...8.8 High
- atos unify openscape 4000 assistant, unify openscape 4000 manager +1 moreAtos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1...9.8 Critical
- atos unify openscape 4000 assistant, unify openscape 4000 manager +1 moreAtos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0,...8.8 High
- atos unify openscape 4000 assistant, unify openscape 4000 manager +1 moreAtos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1...8.8 High
- atos unify openscape 4000 assistant, unify openscape 4000 manager +1 moreAtos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0,...8.8 High
- asus rt-n10lx firmware** UNSUPPORTED WHEN ASSIGNED ** Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack...7.5 High
- asus rt-n10lx firmware** UNSUPPORTED WHEN ASSIGNED ** A stored cross-site scripting (XSS) vulnerability in the...5.4 Medium
- asus rt-n10lx firmware** UNSUPPORTED WHEN ASSIGNED ** Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack...7.5 High
- ac centralized management platform project centralized management platformA Cross Site Scripting (XSS) vulnerability in Youxun Electronic Equipment (Shanghai) Co., Ltd AC...4.8 Medium
- oretnom23 service provider management systemSourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID...9.8 Critical
- emqx nanomqNanoMQ 0.16.5 is vulnerable to heap-use-after-free in the nano_ctx_send function of nmq_mqtt.c.7.5 High
- emqx nanomqNanoMQ 0.17.5 is vulnerable to heap-buffer-overflow in the conn_handler function of mqtt_parser.c...7.8 High
- dlink dir-600 firmwareD-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a stack...9.8 Critical
- dlink dir-600 firmwareD-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command...9.8 Critical
- eyoucmsEyouCMS 1.6.2 is vulnerable to Cross Site Scripting (XSS).5.4 Medium
- git-url-parse project git-url-parsegit-url-parse crate vulnerable to Regular Expression Denial of Service7.5 High
- agilebio labcollectorLabCollector 6.0 though 6.15 allows remote code execution. An authenticated remote low-privileged...8.8 High
- easeus todo backupEaseUS Todo Backup may allow local privilege escalation8.8 High
- milesight ncr/camera, ncr\/camera firmware +1 moreMilesight NCR/Camera Authentication Bypass8.2 High
- mazda (2015-2016), firmware +1 moreMazda cars unlocking6.5 Medium
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font-...5.5 Medium
- linux kernelA use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the...6.7 Medium
- webbax winbizpaymentPrestashop winbizpayment <= 1.0.2 is vulnerable to Incorrect Access Control via modules...7.5 High
- tp-link ec70 firmwareTP-Link EC-70 devices through 2.3.4 Build 20220902 rel.69498 have a Buffer Overflow.8.8 High
- Show moreLoading…