CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- kbdevice,inc. kb-ahr series and kb-irip series, kbdevice kb-ahr04d firmware, kb-ahr08d firmware +4 more +6 moreOS command injection vulnerability exists in KB-AHR series and KB-IRIP series. If this...9.8 Critical
- kbdevice,inc. kb-ahr series and kb-irip series, kbdevice kb-ahr04d firmware, kb-ahr08d firmware +4 more +6 moreImproper authentication vulnerability exists in KB-AHR series and KB-IRIP series. If this...9.8 Critical
- craftcms craft cmsWithdrawn Advisory: CraftCMS Server-Side Template Injection vulnerability7.2 High
- tp-link tl-wpa7510 firmwareTP-Link TL-WPA7510 (EU)_V2_190125 was discovered to contain a stack overflow via the operation...9.8 Critical
- runsystem jiyu kukan toku-toku coupon, runsystem co.,ltd. jiyu kukan toku-toku coupon app for ios, and jiyu kukan toku-toku coupon app for android +1 moreJiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier, and Jiyu Kukan Toku-Toku...4.8 Medium
- fuji electric co., ltd. frenic rhc loaderImproper restriction of XML external entity reference (XXE) vulnerability exists in FRENIC RHC...5.5 Medium
- microsoft nuget, nuget 5.11.4, nuget 6.0.4 +5 more +7 moreNuGet Client Remote Code Execution Vulnerability7.1 High
- microsoft .net, .net framework, .net 6.0 +19 more +21 more.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability7.5 High
- fuji electric co., ltd. frenic rhc loaderOut-of-bound reads vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a...7.8 High
- fuji electric co., ltd. frenic rhc loaderStack-based buffer overflow vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a...7.8 High
- tp-link tl-wpa8630p firmwareTP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection...9.8 Critical
- tp-link tl-wpa8630p firmwareTP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection...9.8 Critical
- microsoft .net, .net framework, .net 6.0 +19 more +21 more.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability7.5 High
- arista cloudvision portal, arista networks cloudvision +1 moreOn affected versions of the CloudVision Portal improper access controls on the connection from...8.1 High
- microfocus arcsight loggerPotential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.9.1 Critical
- microfocus arcsight loggerPotential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.06.1 Medium
- vmware tools, debian linux, fedoraproject fedora +2 moreVMware Tools Authentication Bypass Vulnerability3.9 Low
- bd alaris infusion centralThe Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password...7.3 High
- jhead project jheadMatthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c,...9.8 Critical
- hp pc hardware diagnostics, hp inc. pc hardware diagnostics windows +1 moreCertain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer...9.8 Critical
- hp image assistant, pc hardware diagnostics, thunderbolt dock g2 firmware +1 more +3 moreCertain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt...9.8 Critical
- hp device managerPrevious versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command...8.8 High
- hp device managerPrevious versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command...8.8 High
- hp device managerPrevious versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command...8.8 High
- hp device managerPrevious versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command...9.8 Critical
- hp device managerPrevious versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command...7.8 High
- atlas copco power focus, atlascopco power focus 6000 firmware +1 moreCVE-2023-18979.4 Critical
- atlas copco power focus, atlascopco power focus 6000 firmware +1 moreCVE-2023-18989.4 Critical
- atlas copco power focus, atlascopco power focus 6000 firmware +1 moreCVE-2023-18999.4 Critical
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +385 more +387 morePotential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP...7.8 High
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +385 more +387 morePotential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP...7.8 High
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +385 more +387 morePotential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP...7.8 High
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +385 more +387 morePotential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP...7.8 High
@keystone-6/corenpm@keystone-6/core's bundled cuid package known to be insecureNo scoregithub.com/cheqd/cheqd-nodeGocheqd-node subject to Cosmos SDK "Barberry" vulnerabilityNo score- sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +12 more +14 moreImpersonation attack causing an Authentication Bypass on Western Digital devices10.0 Critical
- ays pro photo gallery by ays, ays-pro photo gallery +1 morePhoto Gallery by Ays < 5.1.7 - Reflected XSS6.1 Medium
- icegram engage, unknown icegram engage +1 moreIcegram Engage < 3.1.12 - Reflected XSS6.1 Medium
- unknown bubble menu, button generator, calculator builder +10 more +12 moreMultiple Plugins from Wow-Company - Reflected XSS6.1 Medium
- codepeople contact form emailContact Form Email < 1.3.38 - Unauthenticated Stored Cross-Site Scripting5.4 Medium
- unknown easy forms for mailchimpEasy Forms for MailChimp < 6.8.9 - Admin+ Stored XSS4.8 Medium
- file away project away, thomstark file away +1 moreFile Away <= 3.9.9.0.1 - Contributor+ Stored XSS via Shortcode5.4 Medium
- ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required...8.1 High
- ami megarac spxAMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to...7.7 High
- ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required...7.2 High
- ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required...7.2 High
- ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download...6.0 Medium
- ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required...7.2 High
- ami megarac sp-x, megarac spx +1 moreAMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required...6.5 Medium
- ami megarac sp-x, megarac spx +1 moreA vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username5.3 Medium
- Show moreLoading…