CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- xwiki, xwiki xwiki-platform +1 moreCode injection in icon themes of XWiki Platform10.0 Critical
- simplephpscripts classified ads script, classified ads script php +1 moreSimplePHPscripts Classified Ads Script URL Parameter preview.php cross site scripting3.5 Low
- ovarro tbox lt2, tbox ms-cpu32, tbox ms-cpu32-s2 +7 more +9 moreCVE-2023-366075.3 Medium
- xwiki commons, xwiki-commons +1 moreHTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml9.1 Critical
- enalean tuleapUser access not updated with privilege change in Tuleap4.1 Medium
- palantir foundry issues, com.palantir.issues:issues +1 moreIssues notification metadata lacks authorization3.5 Low
- palantir foundry workspace-server, com.palantir.workspace:workspace +1 moreFoundry workspace-server Developer Mode Authorization Bypass4.3 Medium
xonoticopenSUSESecurity update for xonoticNo score- labring sealosImproperly configured permissions in Sealos10.0 Critical
- medtronic paceart optimaMedtronic Paceart MSMQ Deserialization of Untrusted Data9.8 Critical
- rails action packActionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to4.0 Medium
safeurl-pythonPyPISafeURL-Python's hostname blocklist does not block FQDNsNo score- jetbrains teamcityJetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a...6.5 Medium
xmlpullOSS-FuzzSecurity exception in jaz.Zer.reportFindingNo scorejdomOSS-FuzzSecurity exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrfNo scorehtmlunitOSS-FuzzSecurity exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrfNo score- sanchitkmr shopping websiteSourceCodester Shopping Website forgot-password.php sql injection6.3 Medium
- sanchitkmr shopping websiteSourceCodester Shopping Website index.php sql injection6.3 Medium
buildahopenSUSESecurity update for buildahNo scorebuildahSUSESecurity update for buildahNo score- apache software foundation airflow jdbc provider, apache apache-airflow-providers-jdbc +1 moreApache Airflow JDBC Provider: RCE Vulnerability8.8 High
- cyberlord92 active directory integration / ldap integration, miniorange active directory integration \/ ldap integration +1 moreActive Directory Integration / LDAP Integration <= 4.1.5 - Authenticated (Subscriber+) LDAP Injection7.6 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.7 Medium
- cyberlord92 miniorange social login and register (discord, google, twitter, linkedin), miniorange wordpress social login and register \(discord\, google\, twitter\, linkedin\) +1 moreWordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass9.8 Critical
- kaizencoders short urlThe Short URL plugin for WordPress is vulnerable to stored Cross-Site Scripting via the 'comment'...4.4 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability6.3 Medium
- synck mailform pro cgiMailform Pro CGI 4.3.1.2 and earlier allows a remote unauthenticated attacker to cause a denial...7.5 High
linuxUbuntu,linux-awsUbuntu,linux-aws-hweUbuntu +10 more +12 morelinux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon regressionNo score- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability3.1 Low
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability7.5 High
- nixos calamares-nixos-extensions`calamares-nixos-extensions` LUKS keyfile exposure7.9 High
- mediawikiAn issue was discovered in the Cargo extension for MediaWiki through 1.39.3. It allows one to...6.1 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In Special...6.1 Medium
- mediawikiAn issue was discovered in the Cargo extension for MediaWiki through 1.39.3. XSS can occur in...6.1 Medium
- mediawikiAn issue was discovered in the GoogleAnalyticsMetrics extension for MediaWiki through 1.39.3. The...6.1 Medium
- veritas netbackup applianceIn Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an...6.5 Medium
- ruby-lang uriURI gem has ReDoS vulnerability5.3 Medium
- iliasILIAS 7.21 allows stored Cross Site Scripting (XSS).5.4 Medium
- iliasThe password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows...9.8 Critical
- iliasILIAS 7.21 and 8.0_beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting (XSS).6.1 Medium
- stw-mobile-machines tcg-4, tcg-4lite, tcg-4 firmware +1 more +3 moreSTW (aka Sensor-Technik Wiedemann) TCG-4 Connectivity Module DeploymentPackage_v3.03r0-Impala and...9.8 Critical
- ikuai8 ikuaiosAn unauthorized command injection vulnerability exists in the ActionLogin function of the webman...9.8 Critical
- play with docker project with dockerPlay With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker...9.8 Critical
- mcl-collection mcl-net, mcl-net firmware +1 moreA Directory Browsing vulnerability in MCL-Net version 4.3.5.8788 webserver running on default...5.3 Medium
- odysseycs ithacalabs turnitin ltiThe "Submission Web Form" of Turnitin LTI tool/plugin version 1.3 is affected by HTML Injection...5.4 Medium
- property cloud platform management center project cloud platform management centerProperty Cloud Platform Management Center 1.0 is vulnerable to error-based SQL injection.9.8 Critical
- secnet annet ac centralized management platformAnnet AC Centralized Management Platform 1.02.040 is vulnerable to Stored Cross-Site Scripting ...4.8 Medium
- telegramTelegram v9.6.3 on iOS allows attackers to hide critical information on the User Interface via...5.3 Medium
- video management system project management systemAn issue was discovered with the JSESSION IDs in Xiamen Si Xin Communication Technology Video...8.8 High
- Show moreLoading…