CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- campcodes retro cellphone online store, retro cellphone online store project cellphone online store +1 moreCampcodes Retro Cellphone Online Store edit_product.php sql injection4.7 Medium
- newspicks, inc. "newspicks" app for android, "newspicks" app for ios, uzabase newspicks +2 more"NewsPicks" App for Android versions 10.4.5 and earlier and "NewsPicks" App for iOS versions 10.4...5.5 Medium
- flatnest project flatnestflatnest Prototype Pollution vulnerability7.3 High
- mitsubishi electric corporation melsec-f series fx3g-14mr/ds, melsec-f series fx3g-14mr/es, melsec-f series fx3g-14mr/es-a +297 more +299 moreAuthentication Bypass Vulnerability in MELSEC-F Series main module7.5 High
- wavlink wl-wn531ax2, wl-wn531ax2 firmware +1 moreImproper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526...7.2 High
- wavlink wl-wn531ax2, wl-wn531ax2 firmware +1 moreWL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative...7.2 High
- wavlink wl-wn531ax2 firmware, wavlink technology ltd. wl-wn531ax2 +1 moreImproper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a...6.5 Medium
- wavlink wl-wn531ax2 firmware, wavlink technology ltd. wl-wn531ax2 +1 moreExposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to...8.1 High
- wavlink wl-wn531ax2, wl-wn531ax2 firmware +1 moreClient-side enforcement of server-side security issue exists in WL-WN531AX2 firmware versions...7.2 High
- implem inc. pleasanter (community edition and enterprise edition), pleasanter +1 moreDirectory traversal vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39...6.5 Medium
- implem inc. pleasanter (community edition and enterprise edition), pleasanter +1 moreStored cross-site scripting vulnerability in Pleasanter (Community Edition and Enterprise Edition...5.4 Medium
- zoom, zoom communications inc. clients, zoom meetings +7 more +9 moreExposure of information intended to be encrypted by some Zoom clients may lead to disclosure of...5.3 Medium
- cyberlord92 web3 – crypto wallet login & nft token gating, miniorange web3 - crypto wallet login \& nft token gating +1 moreWeb3 – Crypto wallet Login & NFT token gating <= 2.6.0 - Authentication Bypass9.8 Critical
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreSP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change8.8 High
- stylemixthemes bookit, stellarwp bookit — booking & appointment calendar +1 moreBookIt <= 2.3.7 - Authentication Bypass9.8 Critical
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq5.2 Medium
- hnswlib project hnswlibhnswlib Double Free vulnerability6.5 Medium
- pacparser project pacparserpacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly...5.9 Medium
- misp-project mispIn MISP before 2.4.172, title_for_layout is not properly sanitized in Correlations,...5.4 Medium
- misp-project mispMISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can...7.5 High
- mediawikiAn issue was discovered in the ProofreadPage (aka Proofread Page) extension for MediaWiki through...5.3 Medium
- mediawikiAn issue was discovered in the DoubleWiki extension for MediaWiki through 1.39.3. includes...5.4 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In certain...9.8 Critical
- mediawikiMediaWiki Cross-site Scripting vulnerability6.1 Medium
- mediawikiAn issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. Because it...5.3 Medium
- mediawikiAn issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through...5.3 Medium
- joplin project joplinJoplin Cross-site Scripting vulnerability6.1 Medium
- joplin project joplinJoplin Cross-site Scripting vulnerability6.1 Medium
- codekopA broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows...7.5 High
- multilaser re170, re170 firmware +1 moreA Stored Cross-Site Scripting (XSS) vulnerability was found in Multilaser RE 170 using firmware 2...5.4 Medium
- intelbras sg 2404 mr, sg 2404 mr firmware +1 moreAn authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an...7.5 High
- maxprintisp maxlink 1200g, maxlink 1200g firmware +1 moreMaxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool...8.8 High
- angular-ui-notification project angular-ui-notificationangular-ui-notification Cross-site Scripting vulnerability6.1 Medium
- debian linux, linux kernel, fedora +6 more +8 moreCrash due to a null pointer dereference in the dn_nsp_send function6.5 Medium
- sophos web applianceReflected cross site scripting (XSS) vulnerability was discovered in Sophos Web Appliance v4.3.9...4.8 Medium
- perimeter81 xpc helpertoolcom.perimeter81.osx.HelperTool in Perimeter81 10.0.0.19 on macOS allows Local Privilege...7.8 High
- gira knx ip router, knx ip router firmware +1 moreThe web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a ...6.1 Medium
- pipreqs project pipreqspipreqs vulnerable to Dependency Confusion9.8 Critical
- bosch bis, building integration system +1 moreImproper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0...8.1 High
- malwarebytes, malwarebytes endpoint detection and response +1 moreIn Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend...5.5 Medium
- malwarebytes, malwarebytes endpoint detection and response +1 moreThe Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable...7.8 High
- libtiff, fedora, red hat enterprise linux 6 +3 more +5 moreLibtiff: null pointer dereference in tif_dir.c5.5 Medium
- qemuQemu: 9pfs: improper access control on special files6.0 Medium
- malwarebytes anti-exploitMalwarebytes Anti-Exploit 4.4.0.220 is vulnerable to arbitrary file deletion and denial of...7.1 High
- linux kernelIncorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation10.0 Critical
- linux kernel, fedoraproject fedora, redhat enterprise linux +4 more +6 moreA hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6...5.7 Medium
- sem-cms semcmsFile Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and...9.8 Critical
- simplephpscripts classified ads script, classified ads script php +1 moreSimplePHPscripts Classified Ads Script HTTP POST Request user.php cross site scripting3.5 Low
- xwiki, xwiki xwiki-platform +1 moreUpgrading doesn't prevent exploiting vulnerable XWiki documents10.0 Critical
- xwiki, xwiki xwiki-platform +1 moreCode injection through NotificationRSSService in XWiki Platform10.0 Critical
- Show moreLoading…