CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- apple macosA permissions issue was addressed by removing vulnerable code and adding additional checks. This...5.5 Medium
- apple macosAn authentication issue was addressed with improved state management. This issue is fixed in...5.5 Medium
- apple ipados, macos, tvos +3 more +5 moreAn authorization issue was addressed with improved state management. This issue is fixed in...7.1 High
- apple macosA logic issue was addressed with improved state management. This issue is fixed in macOS Ventura...5.5 Medium
- apple ipados, tvos, watchos +2 more +4 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16...5.5 Medium
- apple itunes, itunes for windows +1 moreA logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for...7.8 High
- apple ipados, macos, watchos +2 more +4 moreA logic issue was addressed with improved checks. This issue is fixed in watchOS 9.5, macOS...5.5 Medium
- apple itunes, itunes for windows +1 moreA logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for...7.8 High
- libcoapBuffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed...7.5 High
- raspapRaspAP raspap-webgui Command Injection vulnerability8.8 High
- magnussolution magnusbillingCommand Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote...9.8 Critical
- dtstack taierAn insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows...7.5 High
- apple ipados, macos, tvos +3 more +5 moreThis issue was addressed with improved state management. This issue is fixed in iOS 16.5 and...5.5 Medium
- apple ipados, macos, tvos +3 more +5 moreThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...5.5 Medium
- apple airpods firmware, airpods firmware update e +1 moreAn authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 5E133. When your headphones are seeking a connection request to one of your previou…5.4 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura...6.3 Medium
- apple ipados, macos, tvos +3 more +5 moreA type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5 and...7.8 High
- autodesk installerA maliciously crafted DLL file can be forced to write beyond allocated boundaries in the Autodesk...7.8 High
- autodesk autocad, alias, autocad advance steel +14 more +16 moreA maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to...7.8 High
- apple macosA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS...7.8 High
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6...7.8 High
- apple ipados, macos, iphone os +2 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.7.2 and...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 16.1 and iPadOS 16....5.5 Medium
- apple macosThis issue was addressed with improved checks to prevent unauthorized actions. This issue is...5.5 Medium
- apple macosAn access issue was addressed with improved access restrictions. This issue is fixed in macOS...3.3 Low
- apple macosA logic issue was addressed with improved state management. This issue is fixed in macOS Ventura...4.3 Medium
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed with improved data protection. This issue is fixed in iOS 16.1 and...5.5 Medium
- apple macos, mac os x +1 moreA use after free issue was addressed with improved memory management. This issue is fixed in...9.8 Critical
- hcl software bigfix osd bare metal serverHCL BigFix OSD Bare Metal Server is affected by a host header injection vulnerability3.1 Low
- hcl software bigfix osd bare metal serverHCL BigFix OSD Bare Metal Server is affected by a weak cryptographic algorithm.7.0 High
- hashicorp terraform enterpriseTerraform Enterprise Agent Pool Controls Allowed Unauthorized Workspaces To Target an Agent Pool5.0 Medium
- hcl software bigfix osd bare metal serverHCL BigFix OSD Bare Metal Server version 311.12 or lower is affected by a clickjacking vulnerability.2.4 Low
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server's brute force protection allows someone to send more requests than intended8.7 High
- grafana, grafana enterprise +1 moreGrafana vulnerable to Authentication Bypass by Spoofing9.4 Critical
- ericcornelissen shescapeShescape potential environment variable exposure on Windows with CMD3.1 Low
- intellectualsites fastasyncworldeditFastAsyncWorldEdit vulnerable to Uncontrolled Resource Consumption6.2 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in DeleteApplication page9.7 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit template9.7 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in deletespace template9.7 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in restore template9.7 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to reflected cross-site scripting via delattachment action8.5 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in delete template9.7 Critical
- dpgaspar flask-appbuilderFlask-AppBuilder vulnerable to possible disclosure of sensitive information on user error2.7 Low
- fortra globalscape eft, globalscape eft server +1 moreFortra Globalscape Administration Server Information Disclosure5.3 Medium
- fortra globalscape eft, globalscape eft server +1 moreFortra Globalscape Administration Server Denial of Service7.5 High
- zscaler client connectorOutput encoding missing in redrurl parameter8.1 High
- fortra globalscape eft, globalscape eft server +1 moreFortra Globalscape Administration Server Out of Bounds Memory Read9.1 Critical
- zscaler client connectorA URL parameter during login flow was vulnerable to injection. An attacker could insert a...8.2 High
- freebsdNetwork authentication attack via pam_krb59.8 Critical
github.com/cosmos/cosmos-sdkGoBarberry Security Advisory - regarding x/auth periodic vesting accountsNo score- Show moreLoading…