CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- mgt-commerce cloudpanelIn CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication...8.8 High
- basecampDirectory traversal can occur in the Basecamp com.basecamp.bc3 application before 4.2.1 for...7.5 High
- gnu glibcend_pattern (called from internal_fnmatch) in the GNU C Library (aka glibc or libc6) before 2.22...5.5 Medium
hunspellOSS-FuzzHeap-buffer-overflow in AffixMgr::compound_checkNo scorentopngOSS-FuzzHeap-buffer-overflow in IEC104Stats::processPacketNo score- lanacodes lana text to imageLana Text to Image <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- beautiful-cookie-banner beautiful cookie consent bannerBeautiful Cookie Consent Banner <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting7.2 High
- inspireui mstore api, mstore api – create native android & ios apps on the cloud +1 moreMStore API <= 4.0.1 - Unauthenticated SQL Injection9.8 Critical
- sourcecodester yoga class registration system, yoga class registration system class registration system +1 moreYoga Class Registration System 1.0 - ATO9.1 Critical
- ladybirdweb faveo helpdeskFaveo Helpdesk Enterprise 6.0.1 - Privilege Escalation via Stored XSS7.3 High
- sourcecodester yoga class registration system, yoga class registration system class registration system +1 moreYoga Class Registration System 1.0 - RCE9.1 Critical
- orangescrumOrangeScrum 2.0.11 - AWS Credentials Leak via PDF Rendering6.5 Medium
fief-serverPyPIfief-server Server-Side Template Injection vulnerability10.0 Critical- jcvi project jcvijcvi vulnerable to Configuration Injection due to unsanitized user input7.1 High
- nextcloud server, kiteworks security-advisories +1 moreNextcloud user scoped external storage can be used to gather credentials of other users8.5 High
- nextcloud server, kiteworks security-advisories +1 moreNextcloud system addressbooks can be modified by malicious trusted server7.6 High
- nextcloud end-to-end encryption, kiteworks security-advisories +1 moreEnd-to-End encrypted file-drops can be made inaccessible5.7 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server password reset endpoint is not brute force protected8.7 High
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server vulnerable to open redirect on "Unsupported browser" warning4.1 Medium
- eng knowage, knowagelabs knowage-server +1 moreKnowage-Server vulnerable to account validation bypass7.2 High
- glpi-project glpi-agent, glpi agent +1 moreRemote inventory task command injection when using ssh command mode7.7 High
- fossbilling, fossbilling fossbilling/fossbilling +1 moreSession Fixation in fossbilling/fossbilling6.8 Medium
- fossbilling, fossbilling fossbilling/fossbilling +1 moreCode Injection in fossbilling/fossbilling8.0 High
- nvidia jetson linux, jetson agx xavier series, jetson xavier nx, jetson tx2 series, jetson tx2 nx +1 moreNVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged...4.4 Medium
- nvidia jetson agx xavier series, jetson xavier nx, jetson agx xavier, jetson linux +2 moreNVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized...7.1 High
- nvidia gpu display driver for windows and linux, gpu display driver, cloud gaming +1 more +3 moreNVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized...7.8 High
- itsourcecode human resource management systemSourceCodester Human Resource Management System detailview.php sql injection6.3 Medium
- inspireui mstore api, mstore api +1 moreWordPress MStore API Plugin <= 3.9.7 is vulnerable to SQL Injection7.5 High
- joomsky js help desk, js help desk help desk, jshelpdesk +2 moreWordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.7 is vulnerable to Insecure Direct Object References (IDOR)4.6 Medium
golang-github-vpenso-prometheus_slurm_exporteropenSUSESecurity update for golang-github-vpenso-prometheus_slurm_exporterNo scorecrasOSS-FuzzUse-of-uninitialized-value in dev_io_captureNo score- roxnor wp ultimate reviewWordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- dripadmin crm membershipsWordPress CRM Memberships Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- dream-theme the7WordPress The7 Theme <= 11.6.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- wpexperts password protectedWordPress Password Protected Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- magepeople team booking and rental manager for bike, magepeople booking \& rental manager +1 moreWordPress Booking and Rental Manager Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
dotnet6Ubuntu,dotnet7Ubuntu +1 moredotnet6, dotnet7 regressionNo score- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin Plugin <= 3.7.29 is vulnerable to Cross Site Scripting (XSS)7.1 High
- leap13 premium addons for elementor, premium addons pro, premium addons for elementor addons pro +2 moreWordPress Premium Addons PRO Plugin <= 2.8.24 is vulnerable to Cross Site Scripting (XSS)7.1 High
- dell alienware update, update, command update +1 more +3 moreDell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an...6.7 Medium
- dell alienware m15 r6 firmware, alienware m15 r7 firmware, chengming 3900 firmware +68 more +70 moreDell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker...3.5 Low
- dell alienware m15 r7 firmware, cpg bios, g15 5510 firmware +29 more +31 moreDell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical...6.8 Medium
- dell cpg bios, latitude 5530 firmware, precision 3570 firmware +2 moreDell BIOS contains an improper authentication vulnerability. A locally authenticated malicious...8.2 High
- dell alienware update, update, command update +1 more +3 moreDell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain...6.3 Medium
- dell alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware aurora r11 firmware +432 more +434 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...5.1 Medium
- dell alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware aurora r11 firmware +432 more +434 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...5.1 Medium
- dell alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware aurora r11 firmware +432 more +434 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...5.1 Medium
- dell alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware aurora r11 firmware +432 more +434 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...5.1 Medium
- dell alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware aurora r11 firmware +432 more +434 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...5.1 Medium
- dell alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware aurora r11 firmware +432 more +434 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...5.1 Medium
- Show moreLoading…