CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- nec corporation aterm wg2600hp, aterm wg2600hp2, nec aterm wf300hp firmware +31 more +33 moreImproper Neutralization of Special Elements used in an OS Command vulnerability in NEC...7.2 High
- nec corporation aterm wg2600hp, aterm wg2600hp2, nec aterm wf300hp firmware +31 more +33 moreImproper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation...4.8 Medium
- nec corporation aterm wg2600hp, aterm wg2600hp2, nec aterm wf300hp firmware +31 more +33 moreImproper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation...5.4 Medium
- nec corporation aterm wg2600hp, aterm wg2600hp2, nec aterm wf300hp firmware +31 more +33 moreImproper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation...4.3 Medium
- h3c magic, magic b1st firmware +1 moreA stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a...7.5 High
- h3c magic, magic b1st firmware +1 moreA stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to...7.5 High
- h3c magic, magic b1st firmware +1 moreA stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to...7.5 High
- h3c magic, magic b1st firmware +1 moreA stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to...7.5 High
- h3c magic, magic b1st firmware +1 moreA stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to...7.5 High
- h3c magic, magic b1st firmware +1 moreA stack overflow in the UpdateWanMode function of H3C Magic B1STV100R012 allows attackers to...7.5 High
- h3c magic, magic b1st firmware +1 moreA stack overflow in the EditWlanMacList function of H3C Magic B1STV100R012 allows attackers to...7.5 High
- h3c magic, magic b1st firmware +1 moreA stack overflow in the EditMacList function of H3C Magic B1STV100R012 allows attackers to cause...7.5 High
- h3c magic, magic b1st firmware +1 moreA stack overflow in the AddMacList function of H3C Magic B1STV100R012 allows attackers to cause a...7.5 High
- h3c magic, magic b1st firmware +1 moreA stack overflow in the Edit_BasicSSID function of H3C Magic B1STV100R012 allows attackers to...7.5 High
- traggoTraggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request.7.5 High
- 7-eleven hello cup, led message cup +1 moreAn unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message...6.5 Medium
- chemexChemex through 3.7.1 is vulnerable to arbitrary file upload.9.8 Critical
- guantang equipment management system project equipment management systemGuantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload.7.2 High
- phpgurukul hostel management systemPHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS) via Add New...6.1 Medium
- hospital management system project management systemPHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).6.1 Medium
- small crm project crmPHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting (XSS).6.1 Medium
- phpgurukul hostel management systemPHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).6.1 Medium
- linux kernelA flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister()...4.7 Medium
- churchcrmMultiple cross-site scripting (XSS) vulnerabilities were discovered in Church CRM v4.5.3 in...6.1 Medium
- oretnom23 lost and found information systemLost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability...9.8 Critical
- linux kernelAn issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c. Lacks...5.5 Medium
- linux kernelA null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver....5.5 Medium
- webkul bagistoBagisto v1.5.1 is vulnerable to Server-Side Template Injection (SSTI).8.8 High
- linux kernelA NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This...5.5 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreNull pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c4.7 Medium
- d-link dsl-224 firmware version 3.0.10, dsl-224 firmware +1 moreD-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts9.8 Critical
- d-link dsl-224 firmware version 3.0.10, dsl-224 firmware +1 moreD-Link DSL-224 firmware version 3.0.10 post authentication command execution8.8 High
- d-link dsl-g256dg, dlink dsl-g256dg firmware, d-link dsl-g256dg firmware version vbz 1.00.27 +2 moreD-Link DSL-G256DG firmware version vBZ_1.00.27 Authentication Bypass9.8 Critical
- librecadA Buffer Overflow vulnerability in importshp plugin in LibreCAD 2.2.0 allows attackers to obtain...5.5 Medium
- d-link dir-823g, dlink dir-823g firmware +1 moreD-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates...7.5 High
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1,...6.5 Medium
- samsung searchwidgetImproper access control vulnerability in SearchWidget prior to version 3.3 in China models allows...4.4 Medium
- samsung exynos, samsung mobile devices +1 moreHeap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows...8.8 High
- samsung android, samsung mobile devices +1 moreImproper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows...6.1 Medium
- samsung android, samsung mobile devices +1 moreImproper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1...2.4 Low
- cisco duoCisco Duo Two-Factor Authentication for macOS Authentication Bypass Vulnerability6.2 Medium
- cisco telepresence video communication server, telepresence video communication server (vcs) expressway +1 moreCisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities9.6 Critical
- cisco small business smart and managed switches, sf200-24 firmware, sf200-24fp firmware +59 more +61 moreA vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart...4.8 Medium
- cisco anyconnect secure mobility client, secure client +1 moreA vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software...7.8 High
- cisco secure workloadA vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated, remote...4.3 Medium
- cisco web security appliance (wsa), secure email and web manager, secure email gateway +1 more +3 moreCisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities5.4 Medium
- cisco secure email and web manager, secure email gateway, web security appliance +2 moreMultiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for...6.1 Medium
- cisco unified communications manager, unified communications manager / cisco unity connection +1 moreA vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications...6.8 Medium
- cisco unified communications manager im and presence serviceA vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM ...7.5 High
- cisco telepresence video communication server, telepresence video communication server (vcs) expressway +1 moreMultiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication...9.6 Critical
- Show moreLoading…