CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- nucleuscmsFile Upload vulnerability in NucleusCMS v.3.71 allows a remote attacker to execute arbitrary code...9.8 Critical
- phpmywindSQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute...7.2 High
- njtech greencmsCross Site Request Forgery vulnerability in GreenCMS v.2.3 allows an attacker to gain privileges...8.0 High
- wuzhicmsAn issue in WUZHI CMS v.4.1.0 allows a remote attacker to execute arbitrary code via the...8.8 High
- easycorp zentaoCross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to...6.1 Medium
- hongcms project hongcmsCross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to...8.8 High
- yiicms project yiicmsYiiCMS Cross Site Scripting vulnerability5.4 Medium
- feehi feehicmsliufee CMS File Upload vulnerability9.8 Critical
- typoraCross Site Scripting vulnerability in Typora v.0.9.79 allows a remote attacker to execute...6.1 Medium
- zrlogCross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote attacker to execute...6.1 Medium
- pluck-cms pluckFile Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code...7.2 High
- pluck-cms pluckFile upload vulnerability in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute...7.2 High
- pluck-cms pluckAn issue discovered in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary php...7.2 High
- 8cms ljcmsFile Upload vulnerability in LJCMS v.4.3.R60321 allows a remote attacker to execute arbitrary...9.8 Critical
- gilacms gila cmsGilaCMS Cross Site Request Forgery vulnerability8.8 High
- taogogo taocmsCross Site Scripting vulnerability in taogogo taoCMS v.2.5 beta5.1 allows remote attacker to...6.1 Medium
- pluck-cms pluckcmsFile Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute...9.8 Critical
- vimBuffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary...9.8 Critical
- nodcmsNodCMS Cross Site Scripting vulnerability4.8 Medium
- joyplus-cms project joyplus-cmsSQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access...7.5 High
- yzmcmsCross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary...6.5 Medium
- opencartSQL injection vulnerability in OpenCart v.2.2.00 thru 3.0.3.2 allows a remote attacker to execute...7.2 High
- wuzhicmsSQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute...9.8 Critical
- kilo project kiloBuffer Overflow vulnerability in Antirez Kilo before commit...7.5 High
- diaowen dwsurveyCross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to...6.1 Medium
- ebcmsFile upload vulnerability in ebCMS v.1.1.0 allows a remote attacker to execute arbitrary code via...8.8 High
- amazon aws cloud development kit, aws aws-cdk +1 moreAWS CDK EKS overly permissive trust policies6.6 Medium
- subnet powersystem centerSUBNET PowerSYSTEM Center Cross-site Scripting6.5 Medium
- subnet powersystem centerSUBNET PowerSYSTEM Center Authentication Bypass by Capture-replay6.1 Medium
- jenkins team concert, jenkins project team concert plugin +1 moreJenkins Team Concert Plugin does not perform permission checks in methods implementing form validation4.3 Medium
- benjjvi pybbCross-site Scripting (XSS) Availability in PyBB4.6 Medium
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreA NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs...4.4 Medium
- sick eventcam appA remote unprivileged attacker can modify and access configuration settings on the EventCam App...9.8 Critical
- sick eventcam appA remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to...9.8 Critical
- alain gonzalez google map shortcode, google map shortcode project map shortcode +1 moreWordPress Google Map Shortcode Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- wp backup solutions backup manager, wp backup solutions project backup solutions +1 moreWordPress WP Backup Manager Plugin <= 1.13.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- bearsthemes sermons online, beplus sermon'e – sermons online +1 moreWordPress Sermon'e – Sermons Online Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- seed webs fonts, seedwebs seed fonts +1 moreWordPress Seed Fonts Plugin 2.3.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- gvectors display custom fields – wpview, wpview +1 moreWordPress wpView Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- marksoftSQLi in Marksoft9.8 Critical
- dylan james zephyr project manager, zephyr project manager project project manager +1 moreWordPress Zephyr Project Manager Plugin <= 3.3.93 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- resort management system project management system, sourcecodester resort management system +1 moreSourceCodester Resort Management System cross site scripting3.5 Low
- easy media replace project media replace, nabil lemsieh easy media replace +1 moreWordPress Easy Media Replace Plugin <= 0.1.3 is vulnerable to Arbitrary File Deletion8.7 High
- themefic ultimate addons for contact form 7WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection8.2 High
- zyxel nas326 firmware, nas540 firmware, multiple network-attached storage (nas) devices +1 more +3 moreThe pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions...9.8 Critical
- libtiffA NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.5.9 Medium
- kubernetesBypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin6.5 Medium
- kubernetesBypassing policies imposed by the ImagePolicyWebhook admission plugin6.5 Medium
- ultimate dashboard project dashboard, unknown ultimate dashboard +1 moreUltimate Dashboard < 3.7.6 - Admin+ Stored XSS4.8 Medium
- psm plugins supportcandySupportCandy < 3.1.7 - Admin+ SQLi7.2 High
- Show moreLoading…