CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- otcmsOTCMS path traversal3.5 Low
- otcmsOTCMS usersNews_deal.php path traversal3.5 Low
- otcmsOTCMS path traversal3.5 Low
- otcmsOTCMS server-side request forgery6.3 Medium
- schneider electric ecostruxure foxboro dcs control core servicesA CWE-129: Improper Validation of Array Index vulnerability exists that could cause local...7.0 High
- apache strutsApache Struts: DoS via OOM owing to no sanity limit on normal form fields in multipart forms4.3 Medium
- schneider electric ecostruxure foxboro dcs control core servicesA CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service,...7.8 High
- apache strutsApache Struts: DoS via OOM owing to not properly checking of list bounds4.3 Medium
- apache traffic server, debian linux, fedoraproject fedora +2 moreApache Traffic Server: Configuration option to block the PUSH method in ATS didn't work7.5 High
- apache traffic serverApache Traffic Server: s3_auth plugin problem with hash calculation7.5 High
- apache traffic server, debian linux +1 moreApache Traffic Server: The TRACE method can be use to disclose network information7.5 High
- schneider electric igss dashboard (dashboard.exe), schneider-electric igss dashboard +1 moreA CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that...7.8 High
- otcmsOTCMS hard-coded password6.3 Medium
- woocommerce stripe payment gatewayWordPress WooCommerce Stripe Payment Gateway Plugin <= 7.4.0 is vulnerable to Insecure Direct Object References (IDOR)7.5 High
- schneider electric ecostruxure™ operator terminal expert, pro-face blue, schneider-electric ecostruxure operator terminal expert +2 moreA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that...7.8 High
- teamviewer remoteAn improper authorization check of local device settings in TeamViewer Remote between version 15...6.6 Medium
- chshcms mccmsmccms Comic.php pic_save server-side request forgery6.3 Medium
- chshcms mccmsmccms Comic.php pic_api server-side request forgery6.3 Medium
- crmebZhong Bang CRMEB PublicController.php put_image deserialization4.3 Medium
- crmebZhong Bang CRMEB PublicController.php get_image_base64 server-side request forgery6.3 Medium
- crmebZhong Bang CRMEB Image Upload app_auth deserialization6.3 Medium
- dromara ujcmsUJCMS ZIP Package information disclosure3.1 Low
- online school fees system project school fees system, sourcecodester online school fees system +1 moreSourceCodester Online School Fees System POST Parameter branch.php cross site scripting3.5 Low
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +10 more +12 moreWindows CryptoAPI Denial of Service Vulnerability6.5 Medium
- inspireui mstore api, mstore api – create native android & ios apps on the cloud +1 moreMStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update4.3 Medium
- inspireui mstore api, mstore api – create native android & ios apps on the cloud +1 moreMStore API <= 3.9.6 - Cross-Site Request Forgery to Order Message Update4.3 Medium
- inspireui mstore api, mstore api – create native android & ios apps on the cloud +1 moreMStore API <= 3.9.6 - Cross-Site Request Forgery to Order Status Update4.3 Medium
- inspireui mstore api, mstore api – create native android & ios apps on the cloud +1 moreMStore API <= 3.9.6 - Cross-Site Request Forgery to Product Limit Update4.3 Medium
- fasterxml jackson-databindAn issue was discovered jackson-databind thru 2.15.2 allows attackers to cause a denial of...4.7 Medium
- jjson project jjsonjjson vulnerable to stack exhaustion7.5 High
- ujcmsAn issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the...7.5 High
- jerryscriptJerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the...7.5 High
- jerryscriptJerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the...7.5 High
- ujcmsDirectory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename...9.8 Critical
- fdkaac project fdkaacfdkaac before 1.0.5 was discovered to contain a heap buffer overflow in caf_info function in...5.5 Medium
- fdkaac project fdkaacfdkaac before 1.0.5 was discovered to contain a stack overflow in read_callback function in src...5.5 Medium
- bloofox bloofoxcmsbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at...9.8 Critical
- bloofox bloofoxcmsbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the userid parameter...9.8 Critical
- bloofox bloofoxcmsbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the pid parameter at...9.8 Critical
- bloofox bloofoxcmsbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the tid parameter at...9.8 Critical
- bloofox bloofoxcmsbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at...9.8 Critical
- bloofox bloofoxcmsbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the gid parameter at...9.8 Critical
- bloofox bloofoxcmsbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at...9.8 Critical
- ujcmsFile upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload.9.8 Critical
- htmlcleaner project htmlcleanerhtmlcleaner vulnerable to stack exhaustion7.5 High
- jtidy project jtidyAn issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other...7.5 High
- hjson project hjsonhjson stack exhaustion vulnerability7.5 High
- genson project gensongenson vulnerable to stack exhaustion7.5 High
- pbjson project pbjsonpbjson vulnerable to stack exhaustion7.5 High
- pwall jsonutilJSONUtil vulnerable to stack exhaustion7.5 High
- Show moreLoading…