CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- cisco web security appliance (wsa), secure email and web manager, secure email gateway +1 more +3 moreCisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities5.4 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive...8.6 High
- tecrail responsive filemanagerIn Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting in RCE.9.8 Critical
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5,...6.4 Medium
- google androidIn hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements due to...7.8 High
- embyEmby Server versions < 4.6.0.50 is vulnerable to Cross Site Scripting (XSS) vulnerability via a...6.1 Medium
- py-pdf pypdf, pypdf2 project pypdf2 +1 moreInfinite Loop when a comment isn't followed by a character in pypdf6.2 Medium
- xpdfDeadlock in Xpdf 4.04 due to PDF object stream references3.3 Low
- meldekarten generator project generator, jucktnich meldekarten-generator +1 moreCross site scripting (XSS) in meldekarten generator5.3 Medium
cosignopenSUSESecurity update for cosignNo score- ibm cloud pak for securityIBM Cloud Pak for Security information disclosure6.8 Medium
- ibm robotic process automation for cloud pak, robotic process automation +1 moreIBM Robotic Process Automation for Cloud Pak access control5.1 Medium
kubernetes1.24openSUSESecurity update for kubernetes1.24No score- ibm robotic process automation for cloud pak, robotic process automation +1 moreIBM Robotic Process Automation for Cloud Pak security configuration4.0 Medium
- ibm qradar security information and event manager, security qradar siem +1 moreIBM QRadar information disclosure6.5 Medium
- ibm qradar security information and event manager, security qradar siem +1 moreIBM QRadar cross-site scripting4.6 Medium
- apereo cas, central authentication service +1 moreLDAP password leak in Apereo CAS - GHSL-2023-0094.0 Medium
- ibm qradar security information and event manager, security qradar siem +1 moreIBM QRadar information disclosure5.9 Medium
- ibm qradar security information and event manager, security qradar siem +1 moreIBM QRadar security bypass4.3 Medium
- ibm business automation workflow, cloud pak for business automation +1 moreIBM Business Automation Workflow cross-site scripting6.1 Medium
- cloudexplorer-dev cloudexplorer-lite, fit2cloud cloudexplorer lite +1 moreWeak passwords allowed in cloudexplorer-lite6.5 Medium
- shopwareImproper mail validation in Shopware5.3 Medium
- shopwareDependency configuration exposed in Shopware5.3 Medium
- proofpoint insider threat management, insider threat management server +1 moreITM Server Missing Authorization for URL validation4.3 Medium
- proofpoint insider threat management, insider threat management server +1 moreITM Server Missing Authorization for Agent Config6.5 Medium
- proofpoint insider threat management, insider threat management server +1 moreITM Server Missing Authorization in SOAP Endpoints4.6 Medium
- plantuml, plantuml plantuml/plantuml, fedoraproject fedora +2 moreServer-Side Request Forgery (SSRF) in plantuml/plantuml7.2 High
- proofpoint insider threat managementITM Windows Agent Insecure Filesystem Permissions5.5 Medium
- plantuml, plantuml plantuml/plantuml, fedoraproject fedora +2 moreImproper Access Control in plantuml/plantuml5.3 Medium
- m-files serverDenial of service condition in M-Files Server7.5 High
- unknown wpbrutalai, wp brutal ai project brutal ai +1 moreWP Brutal AI < 2.0.1 - Admin+ Reflected XSS6.1 Medium
- codecolorer project codecolorerCodeColorer < 0.10.1 – Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown gravity forms google sheet connector, gsheetconnector-gravityforms-pro, gsheetconnector gravity forms google sheets connector +2 moreGravity Forms Google Sheet Connector < 1.3.5 - Access Code Update via CSRF6.5 Medium
- catalystconnect zoho crm client portal, unknown catalyst connect zoho crm client portal +1 moreCatalyst Connect Zoho CRM Client Portal < 2.1.0 - Reflected XSS6.1 Medium
- iqonic kivicareKiviCare Management System < 3.2.1 - Reflected Cross-Site Scripting6.1 Medium
- iqonic kivicareKiviCare Management System < 3.2.1 - Multiple CSRF8.8 High
- ultimatelysocial usm premium, unknown ultimate-premium-plugin +1 moreUSM Premium < 16.3 - Admin+ Stored XSS4.8 Medium
- iqonic kivicareKiviCare Management System < 3.2.1 - Subscriber+ Sensitive Information Disclosure6.5 Medium
- ncrafts formcraftFormCraft Premium < 3.9.7 - Admin+ SQLi7.2 High
- advancedfilemanager file manager advanced shortcode, unknown file-manager-advanced-shortcode +1 moreFile Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode9.8 Critical
- etoilewebdesign ultimate product catalogUltimate Product Catalog < 5.2.6 - Admin+ Stored XSS4.8 Medium
- unknown wp inventory manager, wp inventory manager +1 moreWP Inventory Manager < 2.1.0.14 - Inventory Items Deletion via CSRF8.1 High
- unknown accordion & faq, helpiewp accordion \& faq +1 moreAccordion & FAQ < 1.9.9 - Reflected XSS6.1 Medium
- kanban for wordpress boards for wordpress, kanbanwp kanban boards for wordpress +1 moreKanban Boards for WordPress < 2.5.21 - Admin+ Stored XSS4.8 Medium
- kunal nagar custom 404 proCustom 404 Pro < 3.8.1 - Multiple SQL Injection9.8 Critical
- editorial calendar project calendar, marketing fire editorial calendar +1 moreEditorial Calendar < 3.8.3 - Contributor+ Stored XSS5.4 Medium
- strategy11 formidable formsFormidable Forms < 6.3.1 - Subscriber+ Remote Code Execution8.8 High
- unknown wpbrutalai, wp brutal ai project brutal ai +1 moreWP Brutal AI < 2.0.0 - SQL Injection via CSRF9.8 Critical
- wedevs wp erp, unknown wp erp | complete hr solution with recruitment & job listings | woocommerce crm & accounting +1 moreWP ERP < 1.12.4 - Admin+ SQL Injection7.2 High
- unknown responsive css editorResponsive CSS EDITOR <= 1.0 - Admin+ SQLi7.2 High
- Show moreLoading…