CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- sugarcrmAn issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Second...7.2 High
- sugarcrmAn issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Bean...8.8 High
- sugarcrmAn issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. An...8.8 High
- nanopb project nanopbNanopb before 0.3.1 allows size_t overflows in pb_dec_bytes and pb_dec_string.9.8 Critical
- openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 moreOpenZeppelin Contracts's MerkleProof multiproofs may allow proving arbitrary leaves for specific trees5.3 Medium
- hewlett packard enterprise (hpe) hpe mc990 x rmc firmware, hpe integrity mc990 x server rmc firmware, sgi uv 300 rmc firmware +2 moreThe MC990 X and UV300 RMC component has and inadequate default configuration that could be...7.8 High
- hewlett packard enterprise (hpe) hpe insight remote support, hpe insight remote support +1 moreA security vulnerability in HPE Insight Remote Support may result in the local disclosure of...5.5 Medium
- hewlett packard enterprise (hpe) hp-uxHP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface...5.5 Medium
@apollo/servernpm@apollo/server vulnerable to unsafe application of Content Security Policy via reused noncesNo score- rudderlabs rudder-serverrudder-server vulnerable to SQL Injection8.8 High
- huawei b535-232a, b535-232a firmware +1 moreThere is a traffic hijacking vulnerability in Huawei routers. Successful exploitation of this...6.5 Medium
- huawei bisheng-wnm, bisheng-wnm firmware +1 moreThere is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of...7.5 High
- huawei bisheng-wnm, bisheng-wnm firmware +1 moreThere is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of...7.5 High
- huawei bisheng-wnm, bisheng-wnm firmware, ota-bisheng firmware +2 moreA Huawei printer has a system command injection vulnerability. Successful exploitation could lead...9.8 Critical
- huawei flmg-10, flmg-10 firmware +1 moreA Huawei sound box product has an out-of-bounds write vulnerability. Attackers can exploit this...8.0 High
- cloud foundry cf-nfs-volume release, notifications, smb-volume release +3 more +5 moreCF workflows leak credentials in system audit logs6.5 Medium
libpodUbuntulibpod vulnerabilitiesNo scoresssdUbuntusssd regressionNo score- nicolly wp no external links, wp no external links project no external links +1 moreWordPress WP No External Links Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- psicosi448 wp2syslogWordPress wp2syslog Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- wpindeed debug assistantWordPress Debug Assistant Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- everest themes arya multipurposeWordPress Arya Multipurpose Theme <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- ko takagi simple slug translate, simple slug translate project slug translate +1 moreWordPress Simple Slug Translate Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- fortinet fortios, fortiproxy +1 moreA null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before...6.4 Medium
- fortinet fortios, fortiproxy +1 moreA null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13,...6.2 Medium
- mattermostSpecially crafted search query can cause large log entries in postgres4.3 Medium
- mattermostDenial of Service while unescaping a Markdown string4.3 Medium
- mattermost, mattermost github plugin +1 morePath traversal in GitHub plugin's code preview feature3.1 Low
- mattermostStack exhaustion in PreparePostForClientWithEmbedsAndImages6.5 Medium
- mattermostEphemeral messages return private channel contents in permalink previews6.5 Medium
- mattermostPlaybooks lets you edit arbitrary posts4.3 Medium
- mattermostDeactivated user can retain access using oauth2 api6.2 Medium
- alexander suess asmemberWordPress asMember Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- mattermostCollapsed Reply Threads APIs leak message contents from private channels6.5 Medium
- mattermostChannel commands execution doesn't properly verify permissions4.3 Medium
- mattermost, mattermost app framework +1 moreApps Framework allows install requests from regular members via an internal path4.2 Medium
- joomsky js job managerWordPress JS Job Manager Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- mattermost, mattermost app framework +1 moreApp Framework does not checks for the secret provided in the incoming webhook request4.3 Medium
- wpchill strong testimonialsWordPress Strong Testimonials Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
amazon-ssm-agentSUSESecurity update for amazon-ssm-agentNo score- fedoraproject fedora, kubernetes +1 moreBypass of seccomp profile enforcement3.4 Low
- huawei harmonyosVulnerability of HwWatchHealth being hijacked.Successful exploitation of this vulnerability may...10.0 Critical
- huawei harmonyosUnauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful...5.3 Medium
- huawei harmonyosVulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of...8.2 High
- microsoft odbc driver 17 for sql server on linux, odbc driver 17 for sql server on macos, odbc driver 17 for sql server on windows +13 more +15 moreMicrosoft ODBC and OLE DB Remote Code Execution Vulnerability7.8 High
- microsoft ole db driver 18 for sql server, ole db driver 19 for sql server, visual studio 2019 version 16.11 (includes 16.0 - 16.10) +6 more +8 moreMicrosoft SQL OLE DB Remote Code Execution Vulnerability7.8 High
- microsoft odbc driver for sql server, sql server, odbc driver 17 for sql server on linux +10 more +12 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability7.8 High
- microsoft odbc driver for sql server, sql server, odbc driver 17 for sql server on linux +10 more +12 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability7.8 High
- microsoft odbc driver for sql server, sql server, odbc driver 17 for sql server on linux +10 more +12 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability7.8 High
- microsoft odbc driver for sql server, sql server, odbc driver 17 for sql server on linux +10 more +12 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability7.8 High
- Show moreLoading…