CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- mmrs151 daily prayer timeWordPress Daily Prayer Time Plugin <= 2023.05.04 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- dell powerstore, powerstoreos, powerstoret os +2 moreDell PowerStore versions prior to 3.5 contain an improper verification of cryptographic...7.2 High
- word-wrap project word-wrapword-wrap vulnerable to Regular Expression Denial of Service5.3 Medium
- tyche abandoned cart pro for woocommerce, tyche softwares abandoned cart lite for woocommerce +1 moreAbandoned Cart Lite for WooCommerce < 5.2.0 and Abandoned Cart Pro for WooCommerce < 7.13.0 - Stored Cross-Site Scripting7.2 High
- ibm spss modelerIBM SPSS Modeler information disclosure6.2 Medium
- ibm spectrum protect backup-archive client, spectrum protect +1 moreIBM Spectrum Protect Backup-Archive Client privilege escalation8.4 High
- monetdbAn issue in the GDKfree component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to...7.5 High
- monetdbAn issue in the gc_col component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to...7.5 High
- monetdbAn issue in the list_append component of MonetDB Server v11.45.17 and v11.46.0 allows attackers...7.5 High
- monetdbAn issue in the cs_bind_ubat component of MonetDB Server v11.45.17 and v11.46.0 allows attackers...7.5 High
- monetdbAn issue in the BLOBcmp component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to...7.5 High
- monetdbAn issue in the log_create_delta component of MonetDB Server v11.45.17 and v11.46.0 allows...7.5 High
- monetdbAn issue in the sql_trans_copy_key component of MonetDB Server v11.45.17 and v11.46.0 allows...7.5 High
- monetdbAn issue in the rel_deps component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to...7.5 High
- monetdbAn issue in the __nss_database_lookup component of MonetDB Server v11.45.17 and v11.46.0 allows...7.5 High
- monetdbAn issue in the rel_sequences component of MonetDB Server v11.45.17 and v11.46.0 allows attackers...7.5 High
- tp-link tl-wr841n firmware, tl-wr940n firmware, tl-wr941nd firmware +2 moreTP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to...7.5 High
- tp-link tl-wr743nd firmware, tl-wr841n firmware, tl-wr940n firmware +1 more +3 moreTP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to...7.7 High
- tp-link tl-wr841n firmware, tl-wr940n firmware, tl-wr941nd firmware +2 moreAn issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N...7.7 High
- tp-link tl-wr740n firmware, tl-wr841n firmware, tl-wr940n firmware +1 more +3 moreTP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to...7.7 High
- tp-link tl-wr940n v4, tl-wr940n firmware +1 moreTP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at ...9.9 Critical
- tp-link tl-wr740n, tl-wr841n, tl-wr940n +6 more +8 moreTP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6...7.5 High
- flvmetaFLVMeta v1.2.1 was discovered to contain a buffer overflow via the xml_on_metadata_tag_only...7.8 High
- libminglibming listswf 0.4.7 was discovered to contain a buffer overflow in the parseSWF_DEFINEFONTINFO(...8.8 High
- funadminfuadmin vulnerable to insecure file upload9.8 Critical
- eyoucmsThere is a storage type cross site scripting (XSS) vulnerability in the filing number of the...5.4 Medium
- moodleMoodle: ssrf risk due to insufficient check on the curl blocked hosts7.5 High
- moodleMoodle: minor sql injection risk on mnet sso access control page6.3 Medium
- moodleMoodle: xss risk on groups page6.1 Medium
- onlyofficeOnlyoffice Community Server before v12.5.2 was discovered to contain a remote code execution (RCE...9.8 Critical
- casbin casdoorCasdoor Cross-Site Request Forgery vulnerability6.5 Medium
- topdeskXML Signature Wrapping (XSW) in SAML-based Single Sign-on feature in TOPdesk v12.10.12 allows bad...8.1 High
- techsneeze dmarc reportCross site scripting (XSS) vulnerabiliy in dmarcts-report-viewer dashboard versions 1.1 and thru...6.1 Medium
- jeesiteJeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- wafucn wafu keyless smart lock firmwareAn issue was discovered in WAFU Keyless Smart Lock v1.0 allows attackers to unlock a device via...6.5 Medium
- datev eg personal-management system comfort\/comfort plusA reflected cross-site scripting (XSS) vulnerability in DATEV eG Personal-Management System...6.1 Medium
- dynamic-linq linqDynamic Linq vulnerable to remote code execution9.8 Critical
- sage x3Sage X3 version 12.14.0.50-0 is vulnerable to Cross Site Scripting (XSS). Some parts of the Web...5.4 Medium
- sage x3Sage X3 version 12.14.0.50-0 is vulnerable to CSV Injection.7.2 High
- stl neox dial centreCross Site Scripting (XSS) vulnerability in Neox Contact Center 2.3.9, via the...4.8 Medium
- laravels project laravelslaravel-s vulnerable to Local File Inclusion9.8 Critical
- interlink psg-5124 firmwareAn incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows...9.8 Critical
- wildix wsg24poe firmwareAn issue was discovered in /cgi-bin/login_rj.cgi in Wildix WSG24POE version 103SP7D190822, allows...7.5 High
- wavlink wavrouter appAn issue was discovered in /cgi-bin/adm.cgi in WavLink WavRouter version RPT70HA1.x, allows...7.5 High
- gbcom lac web control centerCross Site Scripting (XSS) vulnerability in GBCOM LAC WEB Control Center version lac-1.3.x,...4.8 Medium
- pega platform, pegasystems pega platform +1 morePega platform clients who are using versions 6.1 through 8.8.3 and have upgraded from a version...8.1 High
- pluck-cms pluckAn issue discovered in /admin.php in Pluck CMS 4.7.15 through 4.7.16-dev5 allows remote attackers...7.2 High
- bishopfox sliverSilver vulnerable to MitM attack against implants due to a cryptography vulnerability8.1 High
- livebookLivebook Desktop's protocol handler can be exploited to execute arbitrary command on Windows8.6 High
passport-wsfed-saml2npmpassport-wsfed-saml2 Signature Bypass vulnerabilityNo score- Show moreLoading…