CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- backstageInsecure sandbox in Backstage Scaffolder plugin8.1 High
- webklex php-imapphp-imap vulnerable to RCE through a directory traversal vulnerability9.1 Critical
- silicon labs unify gateway, silabs unify software development kit +1 moreBuffer overflow in S0 Decryption on Unify Gateway9.6 Critical
- silicon labs z/ip gateway, silabs z\/ip gateway sdk +1 moreBuffer overflow in S0 Decryption on Z/IP Gatweay9.6 Critical
- silicon labs z/ip gateway, silabs z\/ip gateway sdk +1 moreCommand Authentication Bypass in Z/IP Gateway9.6 Critical
- silicon labs z/ip gateway, silabs z\/ip gateway sdk +1 moreSerial API Buffer Overflow in Z/IP Gateway7.1 High
- silicon labs z/ip gateway, silabs z\/ip gateway sdk +1 moreGlobal read overflow in Z/IP Gateway3.5 Low
- tauriTauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles4.8 Medium
drupal/civicccookiecontrolPackagistCivicCookieControl is a module that can help make a website compliant with EU and UK cookie legislation. The Civic GovUK Cookie Control module does not sufficiently sanitize the configuration resultin…No score- isc bind, bind 9, netapp active iq unified manager +5 more +7 moreMalformed NSEC records can cause named to terminate unexpectedly when synth-from-dnssec is enabled7.5 High
- ays-pro popup box, popup box team box +1 moreWordPress Popup box Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
container-suseconnectSUSESecurity update for container-suseconnectNo score- automattic jetpack crmWordPress Jetpack CRM Plugin <= 5.4.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- manage upload limit project upload limit, wpsimpletools manage upload limit +1 moreWordPress Manage Upload Limit Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- gl spice new adman, new adman project adman +1 moreWordPress New Adman Plugin <= 1.6.8 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- te-st leykaWordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- riello ups netman-204, riello-ups netman 204, netman 204 firmware +2 moreCross-Site Request Forgery (CSRF) in Riello UPS Netman-2048.8 High
- grant kimball simple vimeo shortcode, simple vimeo shortcode project vimeo shortcode +1 moreWordPress Simple Vimeo Shortcode Plugin <= 2.9.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
python-pyzmqopenSUSE,saltSUSE +1 moreSecurity update for salt and python-pyzmqNo scorememoffsetcrates.iomemoffset allows reading uninitialized memoryNo scoresaltSUSESecurity update for saltNo scoresaltSUSESecurity update for saltNo scorepython-jmespathopenSUSE,python-plyopenSUSE,saltopenSUSE +1 more +3 moreSecurity update for SaltNo score- suse neuvector, manager server +1 moreJWT token compromise can allow malicious actions including Remote Code Execution (RCE)9.4 Critical
geoipupdateopenSUSESecurity update for geoipupdateNo score- apache tomcatApache Tomcat: AJP response header mix-up7.5 High
terraform-provider-nullopenSUSESecurity update for terraform-provider-nullNo scoreterraform-provider-awsopenSUSESecurity update for terraform-provider-awsNo scoreterraform-provider-helmSUSESecurity update for terraform-provider-helmNo score- apache accumuloApache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials9.8 Critical
- agro-school management system project management system, code-projects agro-school management system +1 morecode-projects Agro-School Management System exam-delete.php sql injection6.3 Medium
- npmjs semversemver vulnerable to Regular Expression Denial of Service5.3 Medium
firefoxUbuntufirefox regressionsNo score- broadleafcommerce broadleaf commerceBroadleaf vulnerable to Cross-site Scripting6.1 Medium
- user registration \& login and user management system project registration \& login and user management systemUser Registration & Login and User Management System v1.0 was discovered to contain a cross-site...6.1 Medium
- enrollment system project systemSourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks,...9.8 Critical
- blogengine blogengine.netBlogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect.6.1 Medium
- urlnorm project urlnormWithdrawn Advisory: urlnorm vulnerable to Regular Expression Denial of Service7.5 High
- isc bind, bind 9, debian linux +7 more +9 moreExceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 07.5 High
- isc bind, bind 9, debian linux +7 more +9 morenamed's configured cache size limit can be significantly exceeded7.5 High
- makves dcapAn access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain...7.5 High
- libtifflibtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff...5.5 Medium
- gl-inet gl-e750 firmwareA vulnerability in GL.iNET GL-E750 Mudi before firmware v3.216 allows authenticated attackers to...7.2 High
- libreoffice, fedora, red hat enterprise linux 6 +4 more +6 moreArbitrary file write5.0 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 more2023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute7.5 High
- temenos cwxAn access control issue in Registration.aspx of Temenos CWX 8.5.6 allows authenticated attackers...8.8 High
- enphase envoy, envoy firmware +1 moreEnphase Envoy OS Command Injection6.3 Medium
- enphase installer toolkitEnphase Installer Toolkit Android App Use of Hard-coded Credentials8.6 High
- xwiki, xwiki xwiki-platform +1 morePrivilege escalation (PR) from account through TipsPanel10.0 Critical
- remultWhen setting EntityOptions.apiPrefilter to a function, the filter is not applied to API requests for a resource by Id5.0 Medium
- Show moreLoading…