CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- dromara hutoolDromara HuTool XML Parsing Module XmlUtil.java readBySax xml external entity reference5.5 Medium
- phpgurukul rail pass management systemPHPGurukul Rail Pass Management System POST Request view-pass-detail.php sql injection6.3 Medium
- campcodes supplier management system, supplier management system project management system +1 morecode-projects Supplier Management System Picture btn_functions.php unrestricted upload6.3 Medium
- iksweb wordpress старт, wordpress ctapt +1 moreWordPress Старт Plugin <= 3.7 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreWordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- hasthemes ht easy ga4 ( google analytics 4 ), ht easy ga4 \(google analytics 4\) +1 moreWordPress HT Easy GA4 ( Google Analytics 4 ) Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
cyfs-basecrates.iocyfs-base vulnerable to misaligned pointer dereference in `ChunkId::new`No score- cformsii project cformsiiWordPress CformsII Plugin <=15.0.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- bosch divar ip 3000, divar ip 7000 r1, divar ip 7000 r2 +16 more +18 moreImproper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote...7.1 High
- bosch camera firmware, cpp13 firmware, cpp14 firmware +2 moreDue to an error in the software interface to the secure element chip on Bosch IP cameras of...4.9 Medium
- eset cyber security, endpoint antivirus for linux, endpoint antivirus for macos +3 more +5 moreLocal privilege escalation in ESET products for Linux and MacOS7.8 High
- netskope, netskope client +1 moreLocal privilege escalation using log file7.0 High
- netskope, netskope client +1 moreLocal privilege escalation7.0 High
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to CSRF via the Layout Module8.8 High
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to Open Redirect via the Layout Module6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Layout Module6.1 Medium
- ibm security directory suite vaIBM Security Directory Suite VA command execution7.2 High
- ibm security directory suite vaIBM Security Directory Suite VA information disclosure7.5 High
- ibm security directory suite vaIBM Security Directory Suite VA file upload7.2 High
- ibm security directory suite vaIBM Security Directory Suite VA information disclosure5.3 Medium
- ibm security directory suite vaIBM Security Directory Suite VA denial of service7.5 High
- ibm security directory suite vaIBM Security Directory Suite VA information disclosure5.3 Medium
- ibm powervm hypervisorIBM PowerVM Hypervisor information disclosure5.9 Medium
- ibm security guardiumIBM Security Guardium privilege escalation4.4 Medium
- cmseasycmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the...9.8 Critical
- publiccmsPublicCMS <=V4.0.202302 is vulnerable to Insecure Permissions.9.8 Critical
- thinkadminAn arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows...6.1 Medium
- dlink go-rt-ac750 firmwareD-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via...9.8 Critical
- temenos cwxBroken access control in the Registration page (/Registration.aspx) of Termenos CWX v8.5.6 allows...5.4 Medium
- phpgurukul cyber cafe management systemCross-site scripting (XSS) vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows...6.1 Medium
- piwigoPiwigo 13.7.0 is vulnerable to SQL Injection via the "Users" function.4.3 Medium
- starfaceRedTeam Pentesting discovered that the web interface of STARFACE as well as its REST API allows...8.1 High
- ai-dev ailinearIn the PrestaShop < 2.4.3 module "Length, weight or volume sell" (ailinear) there is a SQL...9.8 Critical
- the x11 project libx11, redhat enterprise linux +1 moreA vulnerability was found in libX11. The security flaw occurs because the functions in src...7.5 High
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe animateAdobe Animate FLA files Use After Free Arbitrary code execution7.8 High
- adobe experience manager, experience manager cloud service +1 moreOpen Redirect on AEM Target5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe commerce, magento, magento commerce +2 moreAdmin-to-admin stored XSS via cache poisoning9.1 Critical
- adobe commerce, magento, magento commerce +2 more[Cloud] Customer suspects IDOR vulnerability4.3 Medium
- adobe commerce, magento, magento commerce +2 moreInsecure Direct Object Reference (IDOR) in Create Quote Function4.3 Medium
- adobe commerce, magento, magento commerce +2 moreBypass Purchase Order Approval using Company User in Adobe Commerce B2B4.3 Medium
- adobe commerce, magento +1 moreAdobe Commerce | Improper Input Validation (CWE-20)2.7 Low
- adobe commerce, magento, magento commerce +2 moreServer Side Request Forgery (SSRF) in FedEx carrier integration configuration4.9 Medium
- adobe commerce, magento, magento commerce +2 moreServer Side Request Forgery (SSRF) in USPS carrier integration configuration4.9 Medium
- adobe commerce, magento, magento commerce +2 moreAdobe Commerce Guest Cart Shipping Address Overwrite IDOR5.3 Medium
- adobe commerce, magento, magento commerce +2 moreAdobe Commerce XML Injection Security feature bypass6.5 Medium
- adobe commerce, magento +1 moreAdobe Commerce | Incorrect Authorization (CWE-863)4.3 Medium
- adobe commerce, magento, magento commerce +2 moreAdobe Commerce Information Exposure Security feature bypass5.3 Medium
- Show moreLoading…