CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- aajoda testimonials, unknown aajoda testimonials +1 moreAajoda Testimonials < 2.2.2 - Admin+ Stored XSS4.8 Medium
- meowapps ai engine, unknown ai engine: chatgpt chatbot, content generator, gpt 3 & 4, ultra-customizable +1 moreAI-Engine < 1.6.83 - Admin+ Stored XSS4.8 Medium
- automattic jetpackJetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API8.8 High
- iqonic kivicareKiviCare Management System < 3.2.1 - Subscriber+ Unauthorised AJAX Calls4.3 Medium
- wedevs wp erp, unknown wp erp | complete hr solution with recruitment & job listings | woocommerce crm & accounting +1 moreWP ERP < 1.12.4 - Reflected Cross-Site Scripting6.1 Medium
- apache software foundation airflow mssql provider, airflow odbc provider, apache apache-airflow-providers-microsoft-mssql +1 more +3 moreAirflow Apache ODBC and MSSQL Providers Arbitrary File Read Vulnerability4.3 Medium
- apache software foundation airflow odbc provider, apache apache-airflow-providers-odbc +1 moreApache Airflow ODBC Provider: Remote code execution vulnerability7.8 High
amazon-ssm-agentSUSESecurity update for amazon-ssm-agentNo score- nodejs node, node.js +1 moreThe generateKeys() API function returned from crypto.createDiffieHellman() only generates missing...7.5 High
- nodejs node, node.js, fedoraproject fedora +2 morellhttp vulnerable to HTTP request smuggling7.5 High
- nodejs node, node.js +1 moreWhen an invalid public key is used to create an x509 certificate using the crypto.X509Certificate...5.3 Medium
- nodejs node, node.js +1 moreA vulnerability has been identified in the Node.js (.msi version) installation process,...7.5 High
- nodejs node, node.js +1 moreThe use of __proto__ in process.mainModule.__proto__.require() can bypass the policy mechanism...7.5 High
kubernetes1.24openSUSESecurity update for kubernetes1.24No scoreamazon-ssm-agentopenSUSESecurity update for amazon-ssm-agentNo score- linux kernel, red hat enterprise linux 6, enterprise linux 7 +7 more +9 moreKernel: vmwgfx: double free within the handling of vmw_buffer_object objects6.7 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +7 more +9 moreKernel: vmwgfx: race condition leading to information disclosure vulnerability6.7 Medium
- cloudexplorer-dev cloudexplorer-dev/cloudexplorer-lite, fit2cloud cloudexplorer lite +1 moreWeak Password Requirements in cloudexplorer-dev/cloudexplorer-lite6.5 Medium
- webcraftplugins image map pro – drag-and-drop builder for interactive images – lite, image map pro +1 moreImage Map Pro – Drag-and-drop Builder for Interactive Images – Lite <= 1.0.0 - Missing Authorization to Stored Cross-Site Scripting6.4 Medium
- webcraftplugins image map pro – drag-and-drop builder for interactive images – lite, image map pro +1 moreImage Map Pro – Drag-and-drop Builder for Interactive Images – Lite <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- mainwp child, child – securely connects to the mainwp dashboard to manage multiple sites +1 moreMainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files5.9 Medium
- wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 moreEmbedPress <= 3.7.3 - Sensitive Information Exposure5.3 Medium
- stormshield endpoint securityStormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL...4.3 Medium
- stormshield endpoint securityStormshield Endpoint Security Evolution 2.0.0 through 2.3.2 has Insecure Permissions. An...5.5 Medium
- issabel pbxA Cross Site Request Forgery (CSRF) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows a...6.8 Medium
- escanav escan management consoleA Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0...5.4 Medium
- escanav escan management consoleA Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0...5.4 Medium
- escanav escan management consoleA Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0...5.4 Medium
- escanav escan management consoleA Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0...5.4 Medium
- i-doiti-doit Open v24 was discovered to contain a reflected cross-site scripting (XSS) vulnerability...5.4 Medium
- autodesk alias, autocad, autocad advance steel +14 more +16 moreA maliciously crafted file consumed through pskernel.dll file could lead to memory corruption...7.8 High
- autodesk alias, autocad, autocad advance steel +14 more +16 moreA maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow...7.8 High
- autodesk 3ds max, navisworks, revit +2 more +4 moreA maliciously crafted SKP file in Autodesk products is used to trigger use-after-free...7.8 High
- autodesk navisworksA maliciously crafted SKP file in Autodesk Navisworks 2023 and 2022 be used to trigger use-after...7.8 High
- dzzofficeIncorrect access control in the component /index.php?mod=system&op=orgtree of dzzoffice 2.02...5.3 Medium
- dzzofficeA reflected cross-site scripting (XSS) vulnerability in the zero parameter of dzzoffice 2.02...6.1 Medium
- wcmsDirectory Traversal vulnerability found in Cryptoprof WCMS v.0.3.2 allows a remote attacker to...9.8 Critical
- feifeicmsA Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which...8.8 High
- jyuu jymusicAn cross site request forgery (CSRF) vulnerability discovered in Jymusic v2.0.0.,that allows...6.8 Medium
- chaoji cms project cmsStored cross site scripting (XSS) vulnerability in Chaoji CMS v2.18 that allows attackers to...4.8 Medium
- chaoji cms project cmsStored cross site scripting (XSS) vulnerability in /index.php?admin-master-navmenu-add of Chaoji...4.8 Medium
- chaoji cms project cmsA stored cross site scripting (XSS) vulnerability in /index.php?admin-master-article-edit of...4.8 Medium
- catfishcms project catfishcmsCross Site Request Forgery (CSRF) vulnerability was discovered in CatfishCMS 4.8.63 that would...6.8 Medium
- cmseasyAn issue was discovered in cmseasy v7.0.0 that allows user credentials to be sent in clear text...7.5 High
- ecisp espcmsAn issue was discovered in espcms version P8.18101601. There is a cross site scripting (XSS)...4.8 Medium
- palantir contour, com.palantir.contour:contour-dispatch +1 moreThe contour service was not checking that users had permission to create an analysis for a given dataset2.7 Low
- palantir clips2, video clip distributor, com.palantir.gotham:clips2 +3 more +5 moreCVE-2023-309459.8 Critical
- trendmicro mobile security, trend micro, inc. micro moibile security for enterprise +1 moreA remote attacker could leverage a vulnerability in Trend Micro Mobile Security (Enterprise) 9.8...7.5 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreAn exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service...7.8 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreAn exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service...7.8 High
- Show moreLoading…