CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- zoom, zoom video communications, inc. for windows client +1 moreZoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic...2.8 Low
- hp inc. enterprise laserjet and hp laserjet managed printers, hp futuresmart 5 +1 moreCertain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to...7.5 High
- zoom, zoom video communications, inc. for windows client +1 moreZoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the...8.3 High
- zoom, zoom video communications, inc. for macos client +1 moreZoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability. A...5.2 Medium
- zoom, zoom video communications inc for windows, zoom video communications, inc. for android +3 more +5 moreZoom clients prior to 5.13.10 contain an HTML injection vulnerability. A malicious user could...4.3 Medium
- zoom, zoom video communications, inc. for linux clients +1 moreZoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability. If a victim...7.5 High
- benjjvi pybbbenjjvi/PyBB may send unsanitized request to SQL database9.8 Critical
- keystonejs keystone@keystone-6/auth Open Redirect vulnerability6.1 Medium
- microsoft snipping tool, snip & sketch for windows 10, snip \& sketch +2 moreWindows Snipping Tool Information Disclosure Vulnerability3.3 Low
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +401 more +403 morePotential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS...7.8 High
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +401 more +403 morePotential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS...7.8 High
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +401 more +403 morePotential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS...7.8 High
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +401 more +403 morePotential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS...7.8 High
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +401 more +403 morePotential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS...7.8 High
- mindutopia protected posts logout buttonWordPress Protected Posts Logout Button Plugin <= 1.4.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- marcelotorres redirect after login, redirect after login project after login +1 moreWordPress Redirect After Login Plugin <= 0.1.9 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- cyberus labs key, cyberuslabs cyberus key +1 moreWordPress Cyberus Key Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- jinit9906 shipyaari shipping management, shipyaari shipping management +1 moreWordPress Shipyaari Shipping Management Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- chat bee project bee, kamyabsoft chat bee +1 moreWordPress Chat Bee Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- noah hearle, design extreme we’re open!, designextreme we\'re open\! +1 moreWordPress We’re Open! Plugin <= 1.46 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- ali irani auto upload images, auto upload images project upload images +1 moreWordPress Auto Upload Images Plugin <= 3.3 is vulnerable to Cross Site Request Forgery (CSRF)6.1 Medium
- rating-widget rating-widget: star review system, ratingwidget +1 moreWordPress Rating Widget Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- satos mobileSQLi in Satos Mobile9.8 Critical
- tmt lockcell, tmtmakine lockcell firmware +1 moreAuthentication Bypass in TMT's Lockcell9.8 Critical
- tmt lockcell, tmtmakine lockcell firmware +1 moreFile Upload in TMT's Lockcell9.8 Critical
- tmt lockcell, tmtmakine lockcell firmware +1 moreIDOR in TMT's Lockcell9.8 Critical
- tmt lockcell, tmtmakine lockcell firmware +1 moreSQLi in TMT's Lockcell9.8 Critical
- artica pfms pandora fms, pandora fms fms +1 moreAuthentication bypass in password reset process6.4 Medium
- fortinet fortios, fortiproxy, fortiweb +2 moreA loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0...4.9 Medium
- fortinet fortios, fortiproxy +1 moreA access of uninitialized pointer vulnerability [CWE-824] in Fortinet FortiProxy version 7.2.0...3.9 Low
- fortinet fortios, fortiproxy +1 moreAn improper certificate validation vulnerability [CWE-295] in FortiOS 6.2 all versions, 6.4 all...4.4 Medium
- fortinet fortiadcAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...6.3 Medium
- fortinet fortios, fortiproxy, fortios and fortiproxy ssl-vpn +1 more +3 moreA heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version...9.2 Critical
- fortinet fortiadc, fortiadc manager, fortiadcmanager +2 moreMultiple improper neutralization of special elements used in an os command ('OS Command Injection...7.8 High
- fortinet fortisiemA plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all...3.6 Low
- fortinet fortios, fortiproxy +1 moreAn insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0...3.3 Low
- fortinet fortianalyzer, fortimanager +1 moreA server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer...4.2 Medium
- fortinet fortios, fortiproxy +1 moreA out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0...6.3 Medium
- fortinet fortinac, fortinac-f +1 moreAn improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7...7.2 High
- fortinet fortios, fortiproxy +1 moreA use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4,...6.3 Medium
- fortinet fortisiemA use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1...5.9 Medium
- fortinet fortisiemAn Improper Restriction of Excessive Authentication Attempts [CWE-307] in FortiSIEM below 7.0.0...8.1 High
- fortinet fortios, fortiproxy, fortiswitchmanager +2 moreA relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3,...6.2 Medium
- fortinet fortios, fortiproxy +1 moreA cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS...7.6 High
- fortinet fortinacAn access control vulnerability [CWE-284] in FortiNAC version 9.4.2 and below, version 9.2.7 and...7.2 High
- fortinet forticlient, forticonverter, forticlientwindows +2 moreAn incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0...6.8 Medium
- siemens cp-8031 master module, cp-8050 master module, cpci85 firmware +2 moreA vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050...6.8 Medium
- siemens cp-8031 master module, cp-8050 master module, cpci85 firmware +2 moreA vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050...6.8 Medium
- siemens cp-8031 master module, cp-8050 master module, cpci85 firmware +2 moreA vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050...7.2 High
- siemens jt2go, teamcenter visualization v13.2, teamcenter visualization v13.3 +4 more +6 moreA vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization...7.8 High
- Show moreLoading…