CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- themify conditional menusConditional Menus < 1.2.1 - Reflected XSS6.1 Medium
- unknown upload resume, upload resume project resume +1 moreUpload Resume <= 1.2.0 - Captcha Bypass5.3 Medium
- qudata qubotqubotchat < 1.1.6 - Unauthenticated Stored XSS6.1 Medium
- crm perks integration for contact form 7 and zoho crm, bigin, crmperks integration for contact form 7 and zoho crm\, bigin +1 moreIntegration for Contact Form 7 and Zoho CRM, Bigin < 1.2.4 - Admin+ SQLi4.8 Medium
- revolution slider slider revolutionRevolution Slider <= 6.6.12 - Author+ Remote Code Execution8.8 High
- unknown slideonline, slideonline project sideonline +1 moreSlideOnline <= 1.2.1 - Contributor+ Stored XSS5.4 Medium
- responsive tabs for wpbakery page builder project tabs for wpbakery page builder, unknown responsive tabs for wpbakery page builder (formerly visual composer) +1 moreResponsive Tabs For WPBakery Page Builder <= 1.1 - Contributor+ Stored XSS5.4 Medium
- artprojectgroup custom base termsCustom Base Terms < 1.0.3 - Admin+ Stored XSS4.8 Medium
- qudata qubotQubotchat < 1.1.6 – Admin+ Stored XSS4.8 Medium
- alain gonzalez google map shortcodeGoogle Map Shortcode <= 3.1.2 - Contributor+ Stored XSS5.4 Medium
- unknown querywall: plug'n play firewall, querywall plug\'n play firewall project plug\'n play firewall +1 moreQueryWall: Plug'n Play Firewall <= 1.1.1 - Admin+ SQLi7.2 High
- quantumcloud ai chatbot, wpbot +1 moreAI ChatBot < 4.5.5 - Admin+ Stored Cross-Site Scripting4.8 Medium
- psm plugins supportcandySupportCandy < 3.1.7 - Subscriber+ SQLi8.8 High
- wp custom cursors project custom cursors, unknown wp custom cursors | wordpress cursor plugin +1 moreWP Custom Cursors < 3.2 - Admin+ SQLi7.2 High
- quantumcloud ai chatbot, wpbot +1 moreAI ChatBot < 4.5.6 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown file renaming on uploadFile Renaming on Upload < 2.5.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- heator social share\, social login and social comments, unknown social share, social login and social comments plugin +1 moreSuper Socializer < 7.13.52 - Reflected XSS6.1 Medium
- mozilla firefoxA compromised child process could have injected XBL Bindings into privileged CSS rules, resulting...10.0 Critical
- mozilla firefox for android, focus for android, firefox focus +1 more +3 moreWhen recording the screen while in Private Browsing on Firefox for Android the address bar and...6.5 Medium
- mozilla firefox for android, focus for android, firefox focus +1 more +3 moreDifferent techniques existed to obscure the fullscreen notification in Firefox and Focus for...9.1 Critical
- mozilla firefox for android, firefox mobile +1 moreA potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on...7.5 High
- apache airflowApache Airflow: Information disclosure on configuration view6.5 Medium
- keepassxcIn KeePassXC through 2.7.5, a local attacker can make changes to the Database security settings,...5.5 Medium
- libcoaplibcoap 4.3.1 contains a buffer over-read via the function coap_parse_oscore_conf_mem at...6.5 Medium
- siren investigateIn Siren Investigate before 13.2.2, session keys remain active even after logging out.9.8 Critical
- nintendo mario kart wiiA buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited...9.8 Critical
- valvesoftware counter-strikeA buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code...9.8 Critical
- oisf suricataIn Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able...9.8 Critical
- oisf suricataIn Suricata before 6.0.13 (when there is an adversary who controls an external source of rules),...7.5 High
- virtualsquare picotcpVirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes...7.5 High
- virtualsquare picotcpVirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before...7.5 High
- virtualsquare picotcpVirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it...7.5 High
- virtualsquare picotcpVirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a...7.5 High
- lightdashpackages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they...7.5 High
- nocodbNocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allows an...7.5 High
- solonSolon vulnerable to deserialization of untrusted data9.8 Critical
- eyoucmsA stored cross-site scripting (XSS) vulnerability in Eyoucms v1.6.2 allows attackers to execute...4.8 Medium
- kiowareKioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for...7.8 High
- kiowareKioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for...7.8 High
- jeecg jeecgbootJeecgBoot vulnerable to SQL injection in queryFilterTableDictInfo7.5 High
- jeecg jeecgbootJeecgBoot vulnerable to SQL injection in queryTableDictItemsByCode7.5 High
- huawei emui, harmonyos +1 moreVulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this...5.3 Medium
- huawei emui, harmonyos +1 moreVulnerability of system restart triggered by abnormal callbacks passed to APIs.Successful...7.5 High
- huawei emui, harmonyos +1 morePermission control vulnerability in the window management module.Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreVersion update determination vulnerability in the user profile module.Successful exploitation of...7.5 High
- huawei emui, harmonyos +1 morenappropriate authorization vulnerability in the SettingsProvider module.Successful exploitation...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this...5.3 Medium
- huawei emui, harmonyos +1 moreImproper permission control vulnerability in the Notepad app.Successful exploitation of the...9.8 Critical
- huawei emui, harmonyos +1 moreVulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this...5.3 Medium
- huawei harmonyos, emui +1 moreVulnerability of services denied by early fingerprint APIs on HarmonyOS products.Successful...5.3 Medium
- Show moreLoading…