CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- libjxl project libjxlAn issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow...7.5 High
- rabbitmq-c project rabbitmq-cAn issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreAn issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before...7.8 High
- openbsd libressl, openbsd +1 moreA double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and...9.8 Critical
- faceted search project searchke_search (aka Faceted Search) vulnerable to Cross-Site Scripting6.3 Medium
- ipandlanguageredirect project ipandlanguageredirectipandlanguageredirect extension vulnerable to SQL Injection8.2 High
- progress moveit transferProgress MOVEit Transfer has a privilege escalation vulnerability that can be addressed with DLL...9.8 Critical
- bluditBludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component ...5.4 Medium
- tp-link archer ax10 firmwareTP-Link Archer AX10(EU)_V1.2_230220 was discovered to contain a buffer overflow via the function...9.8 Critical
- xlsxio project xlsxioxlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the...7.8 High
- vw discover media infotainment systemA lack of exception handling in the Volkswagen Discover Media Infotainment System Software...6.8 Medium
- jeecg bootjeecg-boot unrestricted file upload vulnerability6.5 Medium
- jeecg bootjeecg-boot SQL injection vulnerability9.8 Critical
- jflyfox jfinal cmsjfinal CMS 5.1.0 has an arbitrary file read vulnerability.7.5 High
- simple customer relationship management project customer relationship managementSimple Customer Relationship Management 1.0 is vulnerable to SQL Injection via the email parameter.9.8 Critical
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 moreA heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in...5.5 Medium
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 moreA heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function...5.5 Medium
- wolterskluwer teammate\+A stored Cross-site scripting (XSS) vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0 allows...5.4 Medium
- saleor react-storefront, saleor/react-storefront +1 moreCross-site Scripting (XSS) - DOM in saleor/react-storefront7.6 High
- salesagility salesagility/suitecrm-core, suitecrm +1 moreCross-site Scripting (XSS) - Stored in salesagility/suitecrm-core7.6 High
- gpac, gpac gpac/gpac +1 moreHeap-based Buffer Overflow in gpac/gpac5.1 Medium
- thinking software efenceThinking Software Efence - SQL injection9.8 Critical
- itpison omicard edm, contact itpison +1 moreITPison OMICARD EDM - Arbitrary File Upload9.8 Critical
- l7 networks instantqos, instantscan +1 moreL7 Networks InstantScan & InstantQoS - Arbitrary File Upload9.8 Critical
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreAn out of bounds (OOB) memory access flaw was found in the Linux kernel in...7.1 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 moreA stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. This flaw allows an...5.5 Medium
- teamlead reminderThe Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter.5.4 Medium
- 4d serverA broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and earlier...7.5 High
- 4d serverAn information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and...7.5 High
- zte up t2 4k firmware, zxv10 b860h v5d0 firmware, zxv10 b866v2-h firmware +2 more +4 moreThere is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to...7.7 High
- siglent sds 1104x-e firmwareIn Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS, insecure SCPI interface discloses web password.9.8 Critical
- nokia asika airscale firmwareAn issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a...5.1 Medium
- nokia asika airscale firmwareAn issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. Nokia Single RAN...6.3 Medium
- nokia asika airscale firmwareAn issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a...5.1 Medium
- nokia asika airscale firmwareAn issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. A mobile network...3.8 Low
- cdata arcCData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).7.5 High
- forcepoint cloud security gateway (csg), email security, web security +2 moreImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...8.5 High
github.com/cosmos/ibc-go/v4Go,github.com/cosmos/ibc-go/v5Go,github.com/cosmos/ibc-go/v6Go +1 more +3 moreIBC protocol "Huckleberry" vulnerability in github.com/cosmos/ibc-goNo score- silabs gecko software development kit, silabs.com gsdk +1 moreUninitialized IV in Silicon Labs SE FW v2.0.0 through v 2.2.1 for internally stored data3.1 Low
- ciliumCilium vulnerable to information leakage via incorrect ReferenceGrant handling3.4 Low
- silabs bluetooth low energy software development kit, silabs.com bluetooth sdk +1 moreConnection update while closing connection may lead to denial-of-service5.3 Medium
fast-xml-parsernpmfast-xml-parser regex vulnerability patch could be improved from a safety perspectiveNo score- silabs gecko software development kit, silabs.com gecko platform +1 moreBuffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or...9.8 Critical
- xerial snappy-javasnappy-java's unchecked chunk length leads to DoS7.5 High
- xerial snappy-javasnappy-java's Integer Overflow vulnerability in compress leads to DoS5.9 Medium
- xerial snappy-javasnappy-java's Integer Overflow vulnerability in shuffle leads to DoS5.9 Medium
openvpnOSS-FuzzStack-buffer-overflow in ntlm_phase_3No score- zestard admin side data storage for contact form 7WordPress Admin side data storage for Contact Form 7 Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- amit agarwal google xml sitemap for videosWordPress Google XML Sitemap for Videos Plugin <= 2.6.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- intrepidity project intrepidityWordPress Intrepidity Theme <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)8.8 High
- Show moreLoading…