CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- siemens jt2go, teamcenter visualization v13.2, teamcenter visualization v13.3 +4 more +6 moreA vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization...7.8 High
- siemens jt2go, teamcenter visualization v13.2, teamcenter visualization v13.3 +4 more +6 moreA vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization...3.3 Low
- siemens jt2go, teamcenter visualization v13.2, teamcenter visualization v13.3 +4 more +6 moreA vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization...3.3 Low
- siemens sicam p850, sicam p855, sicam t +1 more +3 moreA vulnerability has been identified in POWER METER SICAM Q200 family (All versions < V2.70)....5.5 Medium
- siemens sicam p850, sicam p855, sicam t +1 more +3 moreA vulnerability has been identified in POWER METER SICAM Q200 family (All versions < V2.70). The...4.3 Medium
- siemens simatic wincc, wincc +1 moreA vulnerability has been identified in SIMATIC WinCC (All versions < V7.5.2.13). Affected...7.8 High
- siemens totally integrated automation portal (tia portal) v14, totally integrated automation portal (tia portal) v15, totally integrated automation portal (tia portal) v15.1 +6 more +8 moreA vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V14 (All...6.2 Medium
- mendix saml, siemens mendix saml (mendix 7 compatible), mendix saml (mendix 8 compatible) +6 more +8 moreA vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3...9.1 Critical
- siemens simatic net pc software v14, simatic net pc software v15, simatic pcs 7 v8.2 +7 more +9 moreA vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC...3.9 Low
- siemens simotion c240, simotion c240 pn, simotion d410-2 dp +22 more +24 moreA vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION...4.6 Medium
- siemens simatic pcs 7, simatic s7-pm, simatic step 7 v5 +1 more +3 moreA vulnerability has been identified in SIMATIC PCS 7 (All versions), SIMATIC S7-PM (All versions)...10.0 Critical
- synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +3 more +5 moreUse of insufficiently random values vulnerability in User Management Functionality in Synology...5.9 Medium
- synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +3 more +5 moreUncontrolled search path element vulnerability in Backup Management Functionality in Synology...6.5 Medium
- phoenix contact fl mguard 2102, fl mguard 4102 pci, fl mguard 4102 pcie +49 more +51 morePHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation5.3 Medium
- abb rex640 pcl1, rex640 pcl2, rex640 pcl3 +3 more +5 moreSession cookie exposure for client side script3.1 Low
firefoxUbuntufirefox regressionsNo score- sap ui, sap se ui5 variant management +1 moreStored Cross-Site Scripting (Stored XSS) vulnerability in SAP UI5 Variant Management8.2 High
- sap se crm abap (grantor management), sap customer relationship management abap +1 moreCross-Site Scripting (XSS) vulnerability in SAP CRM ABAP (Grantor Management)6.1 Medium
- sap netweaver, sap se netweaver enterprise portal +1 moreCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal6.1 Medium
- sap netweaver, sap se netweaver (design time repository) +1 moreCross-Site Scripting (XSS) vulnerability in NetWeaver (Design Time Repository)6.4 Medium
- sap master data synchronization, sap se master data synchronization (mds compare tool) +1 moreSQL Injection in Master Data Synchronization (MDS COMPARE TOOL)4.2 Medium
- sap netweaver, sap se netweaver (change and transport system) +1 moreDenial of Service in SAP NetWeaver2.7 Low
- sap digital manufacturing, plant connectivity +1 moreMissing Authentication in SAP Plant Connectivity and Production Connector for SAP Digital7.9 High
- cimatti contact forms by cimatti, contact forms +1 moreWordPress Contact Forms by Cimatti <= 1.5.7 - Cross-Site Request Forgery via _accua_forms_form_edit_action4.3 Medium
- wpdirectorykit wp directory kitWP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_action9.8 Critical
- wpdirectorykit wp directory kitWP Directory Kit <= 1.2.3 - Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_action6.5 Medium
- wpdirectorykit wp directory kitWP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitem6.1 Medium
- sspanel-uim project sspanel-uimSSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of...5.3 Medium
- chamilo lmsAn arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11.* up...9.8 Critical
- digitaldruid hoteldruidA Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code...5.4 Medium
- digitaldruid hoteldruidhoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability.8.8 High
- hutoolInsecure Temporary File in HuTool7.1 High
- gl-inet gl-ar750s firmwareGL.iNET GL-AR750S-Ext firmware v3.215 inserts the admin authentication token into a GET request...5.9 Medium
- gl-inet gl-ar750s firmwareGL.iNET GL-AR750S-Ext firmware v3.215 uses an insecure protocol in its communications which...5.9 Medium
- dolibarr erp\/crmDolibarr vulnerable to unauthenticated database access7.5 High
- microsoft .net, .net 6.0, .net 7.0 +6 more +8 more.NET and Visual Studio Remote Code Execution Vulnerability7.3 High
- kingsoft wps office, wps office +1 moreOS command injection vulnerability exists in WPS Office version 10.8.0.6186. If a remote attacker...8.1 High
- chatwork, chatwork co., ltd. desktop application (mac) +1 moreCode injection vulnerability exists in Chatwork Desktop Application (Mac) 2.6.43 and earlier. If...4.4 Medium
- phpMissing error check and insufficient random bytes in HTTP Digest authentication for SOAP2.6 Low
- nuxt, nuxt nuxt/nuxt +1 moreCode Injection in nuxt/nuxt8.1 High
- it-novum it-novum/openitcockpit, openitcockpit +1 moreRace Condition within a Thread in it-novum/openitcockpit6.5 Medium
- microsoft .net, .net 7.0, visual studio 2022 version 17.0 +5 more +7 more.NET and Visual Studio Elevation of Privilege Vulnerability6.5 Medium
- ckeditorA unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature...9.8 Critical
- systemd project systemdAn issue was discovered in systemd 253. An attacker can modify the contents of past events in a...5.3 Medium
- systemd project systemdAn issue was discovered in systemd 253. An attacker can truncate a sealed log file and then...5.3 Medium
- systemd project systemdAn issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in...5.3 Medium
- inaba denki sangyo co., ltd. wi-fi ap unit, inaba ac-pd-wapu-p firmware, ac-pd-wapu firmware +6 more +8 moreOS command injection vulnerability exists in Wi-Fi AP UNIT allows. If this vulnerability is...7.2 High
- inaba denki sangyo co., ltd. wi-fi ap unit, inaba ac-pd-wapu-p firmware, ac-pd-wapu firmware +6 more +8 moreMissing authentication for critical function in Wi-Fi AP UNIT allows a remote unauthenticated...7.5 High
- asus rt-ax3000 firmware, asustek computer inc. asus router rt-ax3000 +1 moreASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388.23403 uses sensitive cookies without...5.3 Medium
- kbdevice,inc. kb-ahr series and kb-irip series, kbdevice kb-ahr04d firmware, kb-ahr08d firmware +4 more +6 moreHidden functionality issue exists in KB-AHR series and KB-IRIP series. If this vulnerability is...9.8 Critical
- Show moreLoading…