CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- user registration \& login and user management system with admin panel project registration \& login and user management system with admin panelA Cross Site Scripting vulnerability in PHPgurukl User Registration Login and User Management...6.1 Medium
- gibbonedu gibbonMultiple Cross-Site Scripting (XSS) vulnerabilities have been identified in Gibbon v25.0.0, which...6.1 Medium
- gibbonedu gibbonGibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the...9.8 Critical
- online hotel management system project hotel management systemitsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to SQL Injection....9.8 Critical
- online hotel management system project hotel management systemitsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to Cross Site...6.1 Medium
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 more +4 moreImagemagick: heap-buffer-overflow in coders/tiff.c6.2 Medium
- orthanc-server orthancOrthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite...8.8 High
- gira knx ip router, knx ip router firmware +1 moreThe web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 allows a remote...7.5 High
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreOut-of-bounds read when setting hmac data4.4 Medium
- libtifflibtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted...5.5 Medium
- d-link dir-823g, dlink dir-823g firmware +1 moreD-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates...9.8 Critical
- d-link dir-823g, dlink dir-823g firmware +1 moreAn OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows...9.8 Critical
- d-link dir-823g, dlink dir-823g firmware +1 moreD-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates...9.8 Critical
- libtifflibtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect...5.5 Medium
- ericsson network managerEricsson Network Manager (ENM), versions prior to 22.1, contains a vulnerability in the...6.8 Medium
- ericsson network managerEricsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST...4.8 Medium
- ucopia weblib, wireless appliance firmware +1 moreAn issue was discovered in Weblib Ucopia before 6.0.13. OS Command Injection injection can occur,...9.8 Critical
- ucopia weblib, wireless appliance firmware +1 moreAn issue was discovered in Weblib Ucopia before 6.0.13. The SSH Server has Insecure Permissions.7.5 High
- easy-parse project easy-parseeasy-parse XML External Entity Injection vulnerability7.5 High
- py-xml project py-xmlpy-xml XML External Entity Injection vulnerability7.5 High
- requests-xml project requests-xmlrequests-xml XML External Entity Injection vulnerability7.5 High
- parse-community parse-serverParse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollution9.8 Critical
- alerton bcm-web, honeywell alerton bcm-web firmware +1 more** UNSUPPPORTED WHEN ASSIGNED ** ** UNSUPPORTED WHEN ASSIGNED ** [An attacker can capture an...8.3 High
- linux kernel, netapp h300s, h410c +3 more +5 moreUse-after-free in Linux kernel's netfilter subsystem7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreUse after free in io_uring in the Linux Kernel7.8 High
- debian linux, linux kernel +1 moreOut-of-bounds write in Linux kernel's ipvlan network driver7.8 High
- ruijie rg-bcr860, rg-bcr860 firmware +1 moreRuijie RG-BCR860 Network Diagnostic Page os command injection4.7 Medium
drupal/tacjsPackagistThis module enables sites to comply with the European cookie law using tarteaucitron.js. The module doesn't sufficiently filter user-supplied text leading to a Cross Site Scripting (XSS) vulnerability…No score- ibos, ibos oa +1 moreIBOS OA Interview Management Export export&interviews=x actionExport sql injection5.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.2 High
drupal/expandable_formatterPackagistThis module enables you to render a field in an expandable/collapsible region. The module doesn't sufficiently sanitize the field content when displaying it to an end user. This vulnerability is mitig…No scoredrupal/libraries_uiPackagistThis module enables a UI to display all libraries provided by modules and themes on the Drupal site. The module doesn't sufficiently protect the libraries reporting page. It curently is using the 'acc…No scoredrupal/search_autocompletePackagistThis module enables you to use complex autocompletion in forms. The module doesn't sufficiently filter text in the data it exposes, allowing a malicious user to enter specially crafted tags to exploit…No scoredrupal/mailchimpPackagistThis module provides integration with Mailchimp, a popular email delivery service. A route related to OAuth authentication is not protected against a Cross Site Request Forgery attack.No scoredrupal/gridstackPackagistThis module enables you to create dynamic layouts and add sample color palettes for color selection hints via its UI. The module doesn't sufficiently sanitize the module's settings in certain scenario…No scoredrupal/gdpr_alertPackagistThis module enables you to define configurable GDPR alert messages. The module doesn't sufficiently filter user-supplied text leading to a Cross Site Scripting (XSS) vulnerability. This vulnerability…No score- abb txpert hub coretec 4 firmware, hitachi energy txpert hub coretec 4 +1 moreA vulnerability exists that can be exploited by an authenticated client that is connected to the...9.0 Critical
- ibm informix jdbc, informix jdbc driver +1 moreIBM Informix JDBC code execution6.3 Medium
- amazon aws-dataallAWS data.all vulnerable to RCE through user injection of Python Commands8.0 High
- denkgroot spina, spinacms spinacms/spina +1 moreCross-site Scripting (XSS) - Stored in spinacms/spina3.5 Low
- canonical accountsservice, ubuntu linux, canonical ltd. accountservice +2 moreIn Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free...8.1 High
- linux kernel, netapp h300s, h410c +3 more +5 morePrivilege escalation with IO_RING_OP_CLOSE in the Linux Kernel7.8 High
- bkg ntrip professional caster, bund bkg professional ntripcaster +1 moreReflected XSS in BKG Ntrip Professional Caster version <=2.0.444.7 Medium
xonoticMageia,xonotic-dataMageia +1 moreUpdated xonotic packages fix security vulnerabilityNo score- git-commit-info project git-commit-infogit-commit-info vulnerable to Command Injection9.8 Critical
- 2inc snow monkey formsDirectory traversal vulnerability in Snow Monkey Forms versions v5.1.0 and earlier allows a...9.1 Critical
- subscribe2 project subscribe2, wedevs subscribe2 – form, email subscribers & newsletters +1 moreSubscribe2 <= 10.40 - Missing Authorization4.3 Medium
- subscribe2 project subscribe2, wedevs subscribe2 – form, email subscribers & newsletters +1 moreSubscribe2 <= 10.40 - Cross-Site Request Forgery4.3 Medium
- apple macosThis issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13....5.5 Medium
- salonbookingsystem salon booking system, wordpresschef salon booking system – free version +1 moreSalon Booking System <= 8.4.6 - Cross-Site Request Forgery to Admin Role Change to Customer, User Meta Update via save_customer5.4 Medium
- Show moreLoading…