CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- hikvision ds-k1t320efwx firmware, ds-k1t320efx firmware, ds-k1t320ewx firmware +42 more +44 moreSome access control/intercom products have unauthorized modification of device network...4.3 Medium
- hikvision ds-k1t320efwx firmware, ds-k1t320efx firmware, ds-k1t320ewx firmware +29 more +31 moreSome access control products are vulnerable to a session hijacking attack because the product...7.5 High
- zimbra collaborationIn Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user access to...7.8 High
- zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15. XSS can occur, via one of...6.1 Medium
- zimbra collaborationAn open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite...6.1 Medium
- solarwinds serv-u, servu +1 moreSolarWinds Serv-U Exposure of Sensitive Information Vulnerability7.5 High
- adobe commerce, magento, magento commerce +2 moreAdobe Commerce Incorrect Authorization Security feature bypass7.5 High
- adobe substance 3d designer, substance3d - designer +1 moreZDI-CAN-20963: Adobe Substance 3D Designer SBS File Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- getgrav gravGrav vulnerable to Self Cross Site Scripting in /forgot_password5.4 Medium
- getgrav gravGrav Server-side Template Injection (SSTI) via Twig Default Filters8.8 High
- getgrav gravGrav vulnerable to Server-side Template Injection (SSTI) via Denylist Bypass8.8 High
- getgrav gravGrav Server-side Template Injection via Insufficient Validation in filterFilter8.8 High
- getgrav gravGrav Server Side Template Injection vulnerability10.0 Critical
- proofpoint threat response auto pullAn information disclosure vulnerability in the?faye endpoint in Proofpoint Threat Response /...6.1 Medium
- proofpoint threat response auto pullA stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/...4.3 Medium
- hp inc. multifunction printers, hp laserjet managed mfp e62665 3gy14a firmware, laserjet managed mfp e62665 3gy15a firmware +955 more +957 moreA potential security vulnerability has been identified for certain HP multifunction printers ...9.8 Critical
- paritytech ink, parity ink\! +1 moreink! vulnerable to incorrect decoding of storage value when using `DelegateCall`5.3 Medium
- google guavaUse of temporary directory for file creation in `FileBackedOutputStream` in Guava5.5 Medium
github.com/lestrrat-go/jwxGo,github.com/lestrrat-go/jwx/v2Go +1 moregithub.com/lestrrat-go/jwx vulnerable to Potential Padding Oracle AttackNo score- hp dragonfly folio g3 2-in-1 firmware, elite dragonfly firmware, elite dragonfly g2 firmware +325 more +327 morePotential vulnerabilities have been identified in the system BIOS of certain HP PC products,...7.8 High
- hp dragonfly folio g3 2-in-1 firmware, elite dragonfly firmware, elite dragonfly g2 firmware +325 more +327 morePotential vulnerabilities have been identified in the system BIOS of certain HP PC products,...7.8 High
- hp dragonfly folio g3 2-in-1 firmware, elite dragonfly firmware, elite dragonfly g2 firmware +325 more +327 morePotential vulnerabilities have been identified in the system BIOS of certain HP PC products,...7.8 High
- std42 elfinderelFinder vulnerable to path traversal in LocalVolumeDriver connector6.5 Medium
- hp elite dragonfly firmware, elite dragonfly g2 firmware, elite dragonfly g3 firmware +289 more +291 morePotential vulnerabilities have been identified in the system BIOS of certain HP PC products,...7.0 High
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local Privilege Escalation (PE) Vulnerability7.8 High
- hp elite dragonfly firmware, elite dragonfly g2 firmware, elite dragonfly g3 firmware +289 more +291 morePotential vulnerabilities have been identified in the system BIOS of certain HP PC products,...7.0 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication5.4 Medium
- hp elite dragonfly firmware, elite dragonfly g2 firmware, elite dragonfly g3 firmware +289 more +291 morePotential vulnerabilities have been identified in the system BIOS of certain HP PC products,...7.0 High
- microsoft .net framework, .net framework 2.0 service pack 2, .net framework 3.0 service pack 2 +10 more +12 more.NET and Visual Studio Denial of Service Vulnerability7.5 High
drupal/office_hoursPackagistThis module enables you to define a 'weekly office hours' field type, and add a field to any Content type, in order to display the weekly opening hours for a location. The module doesn't sufficiently…No score- microsoft .net, .net framework, .net 7.0 +19 more +21 more.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability7.8 High
- microsoft exchange server, exchange server 2016 cumulative update 23, exchange server 2019 cumulative update 12 +1 more +3 moreMicrosoft Exchange Server Remote Code Execution Vulnerability8.8 High
- microsoft power appsMicrosoft Power Apps Spoofing Vulnerability3.0 Low
- microsoft .net framework, .net framework 2.0 service pack 2, .net framework 3.0 service pack 2 +7 more +9 more.NET Framework Remote Code Execution Vulnerability7.8 High
- microsoft .net, .net framework, visual studio +22 more +24 more.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability7.8 High
- microsoft exchange server, exchange server 2016 cumulative update 23, exchange server 2019 cumulative update 12 +1 more +3 moreMicrosoft Exchange Server Remote Code Execution Vulnerability8.0 High
- contiki-ngContiki-NG vulnerable to out-of-bounds read when processing ICMP DAO input7.3 High
javaparserOSS-FuzzSecurity exception in com.github.javaparser.CommentsInserter.insertCommentsNo score- dell powerprotect cyber recoveryDell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker...8.8 High
- jenkins digital.ai app management publisher, jenkins project digital.ai app management publisher plugin +1 moreJenkins Digital.ai App Management Publisher Plugin missing permission checks6.5 Medium
- jenkins digital.ai app management publisher, jenkins project digital.ai app management publisher plugin +1 moreJenkins Digital.ai App Management Publisher Plugin vulnerable to Cross-Site Request Forgery6.5 Medium
- jenkins aws codecommit trigger, jenkins project aws codecommit trigger plugin +1 moreArbitrary file read vulnerability in Jenkins AWS CodeCommit Trigger Plugin6.5 Medium
- jenkins template workflows, jenkins project template workflows plugin +1 moreJenkins Template Workflows Plugin vulnerable to Stored Cross-site Scripting5.4 Medium
- jenkins sonargraph integration, jenkins project sonargraph integration plugin +1 moreJenkins Sonargraph Integration Plugin vulnerable to Stored Cross-site Scripting5.4 Medium
- jenkins maven repository server, jenkins project maven repository server plugin +1 moreStored XSS vulnerability in Jenkins Maven Repository Server Plugin5.4 Medium
- jenkins maven repository server, jenkins project maven repository server plugin +1 moreStored XSS vulnerability in Jenkins Maven Repository Server Plugin5.4 Medium
- jenkins checkmarx, jenkins project checkmarx plugin +1 moreSSL/TLS certificate validation disabled by default in Jenkins Checkmarx Plugin8.1 High
- jenkinsJenkins CSRF protection bypass vulnerability8.0 High
- cloudflare lua-resty-jsonOut of Bounds Access Leading to Undefined Behavior3.7 Low
- cloudflare cfntsOut of Bounds Slice index in cfnts leads to remote panic8.6 High
- Show moreLoading…