nanopb — nanopb Nanopb before 0.3.1 allows size_t overflows in pb_dec_bytes and pb_dec_string. 2023-06-17 not yet calculated CVE-2014-125106
MISC
MISC
MISC mozilla — firefox
  A compromised child process could have injected XBL Bindings into privileged CSS rules, resulting in arbitrary code execution and a sandbox escape. This vulnerability affects Firefox < 70. 2023-06-19 not yet calculated CVE-2019-25136
MISC
MISC ebcms — ebcms File upload vulnerability in ebCMS v.1.1.0 allows a remote attacker to execute arbitrary code via the upload type parameter. 2023-06-20 not yet calculated CVE-2020-20067
MISC dwsurvey — dwsurvey Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via thequltemld parameter of the qu-multi-fillblank!answers.action file. 2023-06-20 not yet calculated CVE-2020-20070
MISC kilo — kilo Buffer Overflow vulnerability in Antirez Kilo before commit 7709a04ae8520c5b04d261616098cebf742f5a23 allows a remote attacker to cause a denial of service via the editorUpdateRow function in kilo.c. 2023-06-20 not yet calculated CVE-2020-20335
MISC wuzhicms — wuzhicms SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle() function in admin/content.php. 2023-06-20 not yet calculated CVE-2020-20413
MISC opencart — opencart SQL injection vulnerability in OpenCart v.2.2.00 thru 3.0.3.2 allows a remote attacker to execute arbitrary code via the Fba plugin function in upload/admin/index.php. 2023-06-20 not yet calculated CVE-2020-20491
MISC yzcms — yzcms Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary code via the token check function. 2023-06-20 not yet calculated CVE-2020-20502
MISC
MISC joyplus-cms — joyplus-cms SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of the goodbad() function. 2023-06-20 not yet calculated CVE-2020-20636
MISC nodcms — nodcms Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain access to senstivie information via a crafted script to the address parameter. 2023-06-20 not yet calculated CVE-2020-20697
MISC vim — vim Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter. 2023-06-20 not yet calculated CVE-2020-20703
MISC pluckcms — pluckcms File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the save_file() parameter. 2023-06-20 not yet calculated CVE-2020-20718
MISC taocms — taocms Cross Site Scripting vulnerability in taogogo taoCMS v.2.5 beta5.1 allows remote attacker to execute arbitrary code via the name field in admin.php. 2023-06-20 not yet calculated CVE-2020-20725
MISC gilacms — gilacms Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the cm/update_rows/user parameter. 2023-06-20 not yet calculated CVE-2020-20726
MISC ljcms — ljcms File Upload vulnerability in LJCMS v.4.3.R60321 allows a remote attacker to execute arbitrary code via the ljcms/index.php parameter. 2023-06-20 not yet calculated CVE-2020-20735
MISC pluckcms — pluckcms An issue discovered in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary php code via the hidden parameter to admin.php when editing a page. 2023-06-20 not yet calculated CVE-2020-20918
MISC pluckcms — pluckcms File upload vulnerability in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary code and access sensitive information via the theme.php file. 2023-06-20 not yet calculated CVE-2020-20919
MISC pluckcms — pluckcms File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcan_restoreitem.php file. 2023-06-20 not yet calculated CVE-2020-20969
MISC zrlog — zrlog Cross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote attacker to execute arbitrary code via the nickame parameter of the /post/addComment function. 2023-06-20 not yet calculated CVE-2020-21052
MISC typora — typora Cross Site Scripting vulnerability in Typora v.0.9.79 allows a remote attacker to execute arbitrary code via the mermaid sytax. 2023-06-20 not yet calculated CVE-2020-21058
MISC liufee_cms — liufee_cms File Upload vulenrability in liufee CMS v.2.0.7.1 allows a remote attacker to execute arbitrary code via the image suffix function. 2023-06-20 not yet calculated CVE-2020-21174
MISC yiicms — yiicms Cross Site Scripting vulnerability in YiiCMS v.1.0 allows a remote attacker to execute arbitrary code via the news function. 2023-06-20 not yet calculated CVE-2020-21246
MISC hongcms — hongcms Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges via the updateusers parameter. 2023-06-20 not yet calculated CVE-2020-21252
MISC easysoft — zentaopms Cross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to execute arbitrary code via the lastComment parameter. 2023-06-20 not yet calculated CVE-2020-21268
MISC wuzhicms — wuzhicms
  An issue in WUZHI CMS v.4.1.0 allows a remote attacker to execute arbitrary code via the set_chache method of the functioncommon.func.php file. 2023-06-20 not yet calculated CVE-2020-21325
MISC greencms — greencms Cross Site Request Forgery vulnerability in GreenCMS v.2.3 allows an attacker to gain privileges via the adduser function of index.php. 2023-06-20 not yet calculated CVE-2020-21366
MISC phpmywind — phpmywind SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function. 2023-06-20 not yet calculated CVE-2020-21400
MISC nucleuscms — nucleuscms File Upload vulnerability in NucleusCMS v.3.71 allows a remote attacker to execute arbitrary code via the /nucleus/plugins/skinfiles/?dir=rsd parameter. 2023-06-20 not yet calculated CVE-2020-21474
MISC alluxio — alluxio Cross Site Scripting vulnerability in Alluxio v.1.8.1 allows a remote attacker to executea arbitrary code via the path parameter in the browse board component. 2023-06-20 not yet calculated CVE-2020-21485
MISC phpok — phpok SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the _userlist function in framerwork/phpok_call.php file. 2023-06-20 not yet calculated CVE-2020-21486
MISC feehicms — feehicms File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component. 2023-06-20 not yet calculated CVE-2020-21489
MISC apple — macos
  A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.6, macOS Monterey 12.3, Security Update 2022-004 Catalina. A remote user may cause an unexpected app termination or arbitrary code execution 2023-06-23 not yet calculated CVE-2022-22630
MISC
MISC
MISC semver — semver Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range. 2023-06-21 not yet calculated CVE-2022-25883
MISC
MISC
MISC
MISC
MISC
MISC riello ups — netman-204 There is a CSRF vulnerability on Netman-204 version 02.05. An attacker could manage to change administrator passwords through a Cross Site Request Forgery due to the lack of proper validation on the CRSF token. This vulnerability could allow a remote attacker to access the administrator panel, being able to modify different parameters that are critical for industrial operations. 2023-06-21 not yet calculated CVE-2022-3372
MISC apple — ios_and_ipados
  This issue was addressed with improved data protection. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to read sensitive location information 2023-06-23 not yet calculated CVE-2022-42792
MISC apple — macos
  A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. A user may accidentally add a participant to a Shared Album by pressing the Delete key 2023-06-23 not yet calculated CVE-2022-42807
MISC apple — macos
  An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13, macOS Big Sur 11.7.3. An app may be able to access mail folder attachments through a temporary directory used during compression 2023-06-23 not yet calculated CVE-2022-42834
MISC
MISC
MISC apple — macos
  This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Monterey 12.6.1, macOS Big Sur 11.7.1, macOS Ventura 13. An app may be able to modify protected parts of the file system 2023-06-23 not yet calculated CVE-2022-42860
MISC
MISC
MISC temenos_cwx — temenos_cwx An access control issue in Registration.aspx of Temenos CWX 8.5.6 allows authenticated attackers to escalate privileges and perform arbitrary Administrative commands. 2023-06-21 not yet calculated CVE-2022-45287
MISC
MISC
MISC apple — ios_and_ipados
  A logic issue was addressed with improved checks. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to bypass certain Privacy preferences 2023-06-23 not yet calculated CVE-2022-46715
MISC apple — macos
  A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Monterey 12.6.2. An app may be able to read sensitive location information 2023-06-23 not yet calculated CVE-2022-46718
MISC
MISC
MISC
MISC wordpress — wordpress Auth. (author+) Broken Access Control vulnerability leading to Arbitrary File Deletion in Nabil Lemsieh Easy Media Replace plugin <= 0.1.3 versions. 2023-06-19 not yet calculated CVE-2022-46850
MISC wordpress — wordpress Unauth. SQL Injection (SQLi) vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin <= 3.1.23 versions. 2023-06-19 not yet calculated CVE-2022-47586
MISC wordpress — wordpress Auth. (subscriber+) SQL Injection (SQLi) vulnerability in RapidLoad RapidLoad Power-Up for Autoptimize plugin <= 1.6.35 versions. 2023-06-22 not yet calculated CVE-2022-47593
MISC wordpress — wordpress Unauth. SQL Injection (SQLi) vulnerability in InspireUI MStore API plugin <= 3.9.7 versions. 2023-06-23 not yet calculated CVE-2022-47614
MISC huawei — emui
  Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 2023-06-19 not yet calculated CVE-2022-48486
MISC huawei — emui
  Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 2023-06-19 not yet calculated CVE-2022-48487
MISC huawei — harmonyos
  Vulnerability of bypassing the default desktop security controls.Successful exploitation of this vulnerability may cause unauthorized modifications to the desktop. 2023-06-19 not yet calculated CVE-2022-48488
MISC huawei — emui
  Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 2023-06-19 not yet calculated CVE-2022-48489
MISC huawei — emui
  Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 2023-06-19 not yet calculated CVE-2022-48490
MISC huawei — harmonyos
  Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vulnerability can lead to ads and other windows to display at any time. 2023-06-19 not yet calculated CVE-2022-48491
MISC huawei — emui Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 2023-06-19 not yet calculated CVE-2022-48492
MISC huawei — emui
  Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 2023-06-19 not yet calculated CVE-2022-48493
MISC huawei — harmonyos
  Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to become pre-authorized. 2023-06-19 not yet calculated CVE-2022-48494
MISC huawei — harmonyos
  Vulnerability of unauthorized access to foreground app information.Successful exploitation of this vulnerability may cause foreground app information to be obtained. 2023-06-19 not yet calculated CVE-2022-48495
MISC huawei — harmonyos
  Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to become pre-authorized. 2023-06-19 not yet calculated CVE-2022-48496
MISC huawei — emui
  Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 2023-06-19 not yet calculated CVE-2022-48497
MISC huawei — emui
  Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 2023-06-19 not yet calculated CVE-2022-48498
MISC huawei — emui
  Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 2023-06-19 not yet calculated CVE-2022-48499
MISC huawei — emui
  Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 2023-06-19 not yet calculated CVE-2022-48500
MISC huawei — harmonyos
  Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. 2023-06-19 not yet calculated CVE-2022-48501
MISC dominion_voting_systems — imagecast_precinct/imagecast_evolution A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolution (ICE) scanners allows anyone to determine the order in which ballots were cast from public ballot-level data, allowing deanonymization of voted ballots, in several types of scenarios. This issue was observed for use of the following versions of Democracy Suite: 5.2, 5.4-NM, 5.5, 5.5-A, 5.5-B, 5.5-C, 5.5-D, 5.7-A, 5.10, 5.10A, 5.15. NOTE: the Democracy Suite 5.17 EAC Certificate of Conformance mentions “Improved pseudo random number algorithm,” which may be relevant. 2023-06-19 not yet calculated CVE-2022-48506
MISC
MISC
MISC
MISC wordpress — wordpress
  The Responsive Tabs For WPBakery Page Builder (formerly Visual Composer) WordPress plugin through 1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks 2023-06-19 not yet calculated CVE-2023-0368
MISC wordpress — wordpress
  The SlideOnline WordPress plugin through 1.2.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks 2023-06-19 not yet calculated CVE-2023-0489
MISC silicon_labs — z/ip_gateway A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory. 2023-06-21 not yet calculated CVE-2023-0969
MISC silicon_labs — z/ip_gateway Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with invasive physical access to a Z-Wave controller device to overwrite global memory and potentially execute arbitrary code. 2023-06-21 not yet calculated CVE-2023-0970
MISC silicon_labs — z/ip_gateway A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered. 2023-06-21 not yet calculated CVE-2023-0971
MISC silicon_labs — z/ip_gateway Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution. 2023-06-21 not yet calculated CVE-2023-0972
MISC yoga_class_registration_system — yoga_class_registration_system Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators. 2023-06-24 not yet calculated CVE-2023-1721
MISC
MISC yoga_class_registration_system — yoga_class_registration_system Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators. 2023-06-24 not yet calculated CVE-2023-1722
MISC
MISC ladybirdweb — faveo_helpdesk_for_linux Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS. 2023-06-24 not yet calculated CVE-2023-1724
MISC
MISC orangescrum — orangescrum_for_linux OrangeScrum version 2.0.11 allows an external attacker to remotely obtain AWS instance credentials. This is possible because the application does not properly validate the HTML content to be converted to PDF. 2023-06-23 not yet calculated CVE-2023-1783
MISC
MISC cloudflare — warp_client_for_windows Cloudflare WARP client for Windows (up to v2023.3.381.0) allowed a malicious actor to remotely access the warp-svc.exe binary due to an insufficient access control policy on an IPC Named Pipe. This would have enabled an attacker to trigger WARP connect and disconnect commands, as well as obtaining network diagnostics and application configuration from the target’s device. It is important to note that in order to exploit this, a set of requirements would need to be met, such as the target’s device must’ve been reachable on port 445, allowed authentication with NULL sessions or otherwise having knowledge of the target’s credentials. 2023-06-20 not yet calculated CVE-2023-1862
MISC
MISC
MISC chromium — libwebp There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.  2023-06-20 not yet calculated CVE-2023-1999
MISC vmware — vcenter_server The vCenter Server contains a heap overflow vulnerability due to the usage of uninitialized memory in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may exploit heap-overflow vulnerability to execute arbitrary code on the underlying operating system that hosts vCenter Server. 2023-06-22 not yet calculated CVE-2023-20892
MISC vmware — vcenter_server The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may exploit this issue to execute arbitrary code on the underlying operating system that hosts vCenter Server. 2023-06-22 not yet calculated CVE-2023-20893
MISC vmware — vcenter_server The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bound write by sending a specially crafted packet leading to memory corruption. 2023-06-22 not yet calculated CVE-2023-20894
MISC vmware — vcenter_server The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger a memory corruption vulnerability which may bypass authentication. 2023-06-22 not yet calculated CVE-2023-20895
MISC vmware — vcenter_server The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds read by sending a specially crafted packet leading to denial-of-service of certain services (vmcad, vmdird, and vmafdd). 2023-06-22 not yet calculated CVE-2023-20896
MISC wordpress — wordpress
  The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin. 2023-06-19 not yet calculated CVE-2023-2221
MISC hcl_software — bigfix_osd_bare_metal_server A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use transparent or opaque layers to trick a user into clicking on a button or link on another page to perform a redirect to an attacker-controlled domain. 2023-06-22 not yet calculated CVE-2023-23343
MISC hcl_software — bigfix_webui_insights A permission issue in BigFix WebUI Insights site version 14 allows an authenticated, unprivileged operator to access an administrator page. 2023-06-23 not yet calculated CVE-2023-23344
MISC apple — macos
  The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Big Sur 11.7.3, macOS Ventura 13.2. An app may be able to execute arbitrary code with kernel privileges 2023-06-23 not yet calculated CVE-2023-23516
MISC
MISC
MISC apple — macos
  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution 2023-06-23 not yet calculated CVE-2023-23539
MISC wordpress — wordpress
  The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations. 2023-06-19 not yet calculated CVE-2023-2359
MISC js_help_desk — js_help_desk Authorization Bypass Through User-Controlled Key vulnerability in JS Help Desk js-support-ticket allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk: from n/a through 2.7.7. 2023-06-23 not yet calculated CVE-2023-23679
MISC wordpress — wordpress Cross-Site Request Forgery (CSRF) vulnerability in Muneeb Form Builder plugin <= 1.9.9.0 versions. 2023-06-22 not yet calculated CVE-2023-23795
MISC wordpress — wordpress Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Qumos MojoPlug Slide Panel plugin <= 1.1.2 versions. 2023-06-22 not yet calculated CVE-2023-23807
MISC wordpress — wordpress Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Neil Gee Smoothscroller plugin <= 1.0.0 versions. 2023-06-22 not yet calculated CVE-2023-23811
MISC wordpress — wordpress
  The QuBot WordPress plugin before 1.1.6 doesn’t filter user input on chat, leading to bad code inserted on it be reflected on the user dashboard. 2023-06-19 not yet calculated CVE-2023-2399
MISC devolutions — server
  Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access. 2023-06-20 not yet calculated CVE-2023-2400
MISC wordpress — wordpress
  The QuBot WordPress plugin before 1.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). 2023-06-19 not yet calculated CVE-2023-2401
MISC gl.inet — gl-e750_mudi A vulnerability in GL.iNET GL-E750 Mudi before firmware v3.216 allows authenticated attackers to execute arbitrary code via a crafted POST request. 2023-06-21 not yet calculated CVE-2023-24261
MISC wordpress — wordpress
  The QueryWall: Plug’n Play Firewall WordPress plugin through 1.1.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin. 2023-06-19 not yet calculated CVE-2023-2492
MISC autodesk — autocad/maya A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Exploitation of this vulnerability may lead to code execution. 2023-06-23 not yet calculated CVE-2023-25003
MISC nokia — airscale_asika_single_ran_devices An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. Nokia Single RAN commissioning procedures do not change (factory-time installed) default SSH public/private key values that are specific to a network operator. As a result, the CSP internal BTS network SSH server (disabled by default) continues to apply the default SSH public/private key values. These keys don’t give access to BTS, because service user authentication is username/password-based on top of SSH. Nokia factory installed default SSH keys are meant to be changed from operator-specific values during the BTS deployment commissioning phase. However, before the 21B release, BTS commissioning manuals did not provide instructions to change default SSH keys (to BTS operator-specific values). This leads to a possibility for malicious operations staff (inside a CSP network) to attempt MITM exploitation of BTS service user access, during the moments that SSH is enabled for Nokia service personnel to perform troubleshooting activities. 2023-06-16 not yet calculated CVE-2023-25187
MISC
MISC
MISC wordpress — wordpress
  The Integration for Contact Form 7 and Zoho CRM, Bigin WordPress plugin before 1.2.4 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) 2023-06-19 not yet calculated CVE-2023-2527
MISC papercut — ng/mf A Cross-Site Request Forgery (CSRF) vulnerability has been identified in PaperCut NG/MF, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. This could be exploited if the target is an admin with a current login session. Exploiting this would typically involve the possibility of deceiving an admin into clicking a specially crafted malicious link, potentially leading to unauthorized changes. 2023-06-20 not yet calculated CVE-2023-2533
MISC
MISC libtiff — libtiff libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753. 2023-06-21 not yet calculated CVE-2023-25435
MISC vaadin — vaadin When adding non-visible components to the UI in server side, content is sent to the browser in Vaadin 10.0.0 through 10.0.22, 11.0.0 through 14.10.0, 15.0.0 through 22.0.28, 23.0.0 through 23.3.12, 24.0.0 through 24.0.5 and 24.1.0.alpha1 to 24.1.0.beta1, resulting in potential information disclosure. 2023-06-22 not yet calculated CVE-2023-25499
MISC
MISC vaadin — vaadin Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1.0.alpha1 to 24.1.0.rc2, resulting in potential information disclosure of class and method names in RPC responses by sending modified requests. 2023-06-22 not yet calculated CVE-2023-25500
MISC
MISC nvidia — jetson_agx_xavier_series/jetson_xavier_nx NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and loss of integrity. 2023-06-23 not yet calculated CVE-2023-25515
MISC nvidia — jetson_agx_xavier_series/jetson_xavier_nx NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and loss of integrity. 2023-06-23 not yet calculated CVE-2023-25518
MISC nvidia — multiple_products NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resulting in denial of service. 2023-06-23 not yet calculated CVE-2023-25520
MISC mozilla — firefox
  The return value from `gfx::SourceSurfaceSkia::Map()` wasn’t being verified which could have potentially lead to a null pointer dereference. This vulnerability affects Firefox < 110. 2023-06-19 not yet calculated CVE-2023-25733
MISC
MISC mozilla — firefox
  An invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior. This vulnerability affects Firefox < 110. 2023-06-19 not yet calculated CVE-2023-25736
MISC
MISC mozilla — firefox_for_android
  A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 110.1.0. 2023-06-19 not yet calculated CVE-2023-25747
MISC
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-25936
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-25937
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-25938
MISC wordpress — wordpress
  The Custom Base Terms WordPress plugin before 1.0.3 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) 2023-06-19 not yet calculated CVE-2023-2600
MISC advantech — r-seenet Advantech R-SeeNet versions 2.4.22 is installed with a hidden root-level user that is not available in the users list. This hidden user has a password that cannot be changed by users. 2023-06-22 not yet calculated CVE-2023-2611
MISC sync — word-wrap All versions of the package word-wrap are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of an insecure regular expression within the result variable. 2023-06-22 not yet calculated CVE-2023-26115
MISC
MISC
MISC open-xchange_ software_gmbh — ox_app_suite Default permissions for a properties file were too permissive. Local system users could read potentially sensitive information. We updated the default permissions for noreply.properties set during package installation. No publicly available exploits are known. 2023-06-20 not yet calculated CVE-2023-26427
MISC
MISC
MISC
MISC open-xchange_ software_gmbh — ox_app_suite Attackers can successfully request arbitrary snippet IDs, including E-Mail signatures of other users within the same context. Signatures of other users could be read even though they are not explicitly shared. We improved permission handling when requesting snippets that are not explicitly shared with other users. No publicly available exploits are known. 2023-06-20 not yet calculated CVE-2023-26428
MISC
MISC
MISC
MISC open-xchange_ software_gmbh — ox_app_suite Control characters were not removed when exporting user feedback content. This allowed attackers to include unexpected content via user feedback and potentially break the exported data structure. We now drop all control characters that are not whitespace character during the export. No publicly available exploits are known. 2023-06-20 not yet calculated CVE-2023-26429
MISC
MISC
MISC
MISC open-xchange_ software_gmbh — ox_app_suite IPv4-mapped IPv6 addresses did not get recognized as “local” by the code and a connection attempt is made. Attackers with access to user accounts could use this to bypass existing deny-list functionality and trigger requests to restricted network infrastructure to gain insight about topology and running services. We now respect possible IPV4-mapped IPv6 addresses when checking if contained in a deny-list. No publicly available exploits are known. 2023-06-20 not yet calculated CVE-2023-26431
MISC
MISC
MISC
MISC open-xchange_ software_gmbh — ox_app_suite When adding an external mail account, processing of SMTP “capabilities” responses are not limited to plausible sizes. Attacker with access to a rogue SMTP service could trigger requests that lead to excessive resource usage and eventually service unavailability. We now limit accepted SMTP server response to reasonable length/size. No publicly available exploits are known. 2023-06-20 not yet calculated CVE-2023-26432
MISC
MISC
MISC
MISC open-xchange_ software_gmbh — ox_app_suite When adding an external mail account, processing of IMAP “capabilities” responses are not limited to plausible sizes. Attacker with access to a rogue IMAP service could trigger requests that lead to excessive resource usage and eventually service unavailability. We now limit accepted IMAP server response to reasonable length/size. No publicly available exploits are known. 2023-06-20 not yet calculated CVE-2023-26433
MISC
MISC
MISC
MISC open-xchange_ software_gmbh — ox_app_suite When adding an external mail account, processing of POP3 “capabilities” responses are not limited to plausible sizes. Attacker with access to a rogue POP3 service could trigger requests that lead to excessive resource usage and eventually service unavailability. We now limit accepted POP3 server response to reasonable length/size. No publicly available exploits are known. 2023-06-20 not yet calculated CVE-2023-26434
MISC
MISC
MISC
MISC open-xchange_ software_gmbh — ox_app_suite It was possible to call filesystem and network references using the local LibreOffice instance using manipulated ODT documents. Attackers could discover restricted network topology and services as well as including local files with read permissions of the open-xchange system user. This was limited to specific file-types, like images. We have improved existing content filters and validators to avoid including any local resources. No publicly available exploits are known. 2023-06-20 not yet calculated CVE-2023-26435
MISC
MISC
MISC
MISC open-xchange_ software_gmbh — ox_app_suite Attackers with access to the “documentconverterws” API were able to inject serialized Java objects, that were not properly checked during deserialization. Access to this API endpoint is restricted to local networks by default. Arbitrary code could be injected that is being executed when processing the request. A check has been introduced to restrict processing of legal and expected classes for this API. We now log a warning in case there are attempts to inject illegal classes. No publicly available exploits are known. 2023-06-20 not yet calculated CVE-2023-26436
MISC
MISC
MISC
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in OneWebsite WP Repost plugin <= 0.1 versions. 2023-06-22 not yet calculated CVE-2023-26534
MISC wordpress — wordpress Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Max Chirkov Advanced Text Widget plugin <= 2.1.2 versions. 2023-06-22 not yet calculated CVE-2023-26539
MISC wordpress — wordpress
  The Conditional Menus WordPress plugin before 1.2.1 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin 2023-06-19 not yet calculated CVE-2023-2654
MISC wordpress — wordpress
  The File Renaming on Upload WordPress plugin before 2.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) 2023-06-19 not yet calculated CVE-2023-2684
MISC pluckcms — pluckcms An issue discovered in /admin.php in Pluck CMS 4.7.15 through 4.7.16-dev5 allows remote attackers to run arbitrary code via manage file functionality. 2023-06-22 not yet calculated CVE-2023-27083
MISC wordpress — wordpress
  The SupportCandy WordPress plugin before 3.1.7 does not properly sanitise and escape the `id` parameter for an Agent in the REST API before using it in an SQL statement, leading to an SQL Injection exploitable by users with a role as low as Subscriber. 2023-06-19 not yet calculated CVE-2023-2719
MISC makves — dcap An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via a crafted web request to the product API. 2023-06-21 not yet calculated CVE-2023-27243
MISC
MISC
MISC omron_corporation — multiple_products
  FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues — (1)Plaintext communication, and (2)No authentication required. When FINS messages are intercepted, the contents may be retrieved. When arbitrary FINS messages are injected, any commands may be executed on, or the system information may be retrieved from, the affected device. Affected products and versions are as follows: SYSMAC CS-series CPU Units, all versions, SYSMAC CJ-series CPU Units, all versions, SYSMAC CP-series CPU Units, all versions, SYSMAC NJ-series CPU Units, all versions, SYSMAC NX1P-series CPU Units, all versions, SYSMAC NX102-series CPU Units, all versions, and SYSMAC NX7 Database Connection CPU Units (Ver.1.16 or later) 2023-06-19 not yet calculated CVE-2023-27396
MISC
MISC
MISC
MISC
MISC
MISC
MISC wordpress — wordpress
  Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Shazzad Hossain Khan W4 Post List plugin <= 2.4.4 versions. 2023-06-22 not yet calculated CVE-2023-27413
MISC wordpress — wordpress
  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Popup Box Team Popup box plugin <= 3.4.4 versions. 2023-06-21 not yet calculated CVE-2023-27414
MISC wordpress — wordpress
  The AI ChatBot WordPress plugin before 4.5.5 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. 2023-06-19 not yet calculated CVE-2023-2742
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NTZApps CRM Memberships plugin <= 1.6 versions. 2023-06-23 not yet calculated CVE-2023-27427
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Automattic – Jetpack CRM team Jetpack CRM plugin <= 5.4.4 versions. 2023-06-21 not yet calculated CVE-2023-27429
MISC wordpress — wordpress
  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WpSimpleTools Manage Upload Limit plugin <= 1.0.4 versions. 2023-06-21 not yet calculated CVE-2023-27432
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gl_SPICE New Adman plugin <= 1.6.8 versions. 2023-06-21 not yet calculated CVE-2023-27439
MISC wordpress — wordpress
  Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Grant Kimball Simple Vimeo Shortcode plugin <= 2.9.1 versions. 2023-06-21 not yet calculated CVE-2023-27443
MISC wordpress — wordpress
  Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Teplitsa of social technologies Leyka plugin <= 3.29.2 versions. 2023-06-21 not yet calculated CVE-2023-27450
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wow-Company Button Generator – easily Button Builder plugin <= 2.3.3 versions. 2023-06-22 not yet calculated CVE-2023-27452
MISC wordpress — wordpress
  The Upload Resume WordPress plugin through 1.2.0 does not validate the captcha parameter when uploading a resume via the resume_upload_form shortcode, allowing unauthenticated visitors to upload arbitrary media files to the site. 2023-06-19 not yet calculated CVE-2023-2751
MISC wordpress — wordpress
  Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Paul Ryley Site Reviews plugin <= 6.5.1 versions. 2023-06-22 not yet calculated CVE-2023-27612
MISC wordpress — wordpress
  Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in AGILELOGIX Store Locator WordPress plugin <= 1.4.9 versions. 2023-06-22 not yet calculated CVE-2023-27618
MISC wordpress — wordpress
  Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Paul Ryley Site Reviews plugin <= 6.5.1 versions. 2023-06-22 not yet calculated CVE-2023-27629
MISC wordpress — wordpress
  Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in mmrs151 Daily Prayer Time plugin <= 2023.05.04 versions. 2023-06-22 not yet calculated CVE-2023-27631
MISC wordpress — wordpress
  The Social Share, Social Login and Social Comments WordPress plugin before 7.13.52 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. 2023-06-19 not yet calculated CVE-2023-2779
MISC
MISC autodesk_installer
  A maliciously crafted DLL file can be forced to write beyond allocated boundaries in the Autodesk installer when parsing the DLL files and could lead to a Privilege Escalation vulnerability. 2023-06-23 not yet calculated CVE-2023-27908
MISC apple — macos
  A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, tvOS 16.5. An app may be able to execute arbitrary code with kernel privileges 2023-06-23 not yet calculated CVE-2023-27930
MISC
MISC
MISC
MISC apple — macos
  The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6. A sandboxed app may be able to observe system-wide network connections 2023-06-23 not yet calculated CVE-2023-27940
MISC
MISC
MISC apple — airpods_firmware_update
  An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 5E133. When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones. 2023-06-23 not yet calculated CVE-2023-27964
MISC hcl_software — bigfix_osd_bare_metal_server The OSD Bare Metal Server uses a cryptographic algorithm that is no longer considered sufficiently secure. 2023-06-22 not yet calculated CVE-2023-28006
MISC hcl_software — bigfix_osd_bare_metal_server Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain. 2023-06-22 not yet calculated CVE-2023-28016
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28026
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28027
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28028
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable 2023-06-23 not yet calculated CVE-2023-28029
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28030
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28031
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28032
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28033
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28034
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28035
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28036
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28039
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28040
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28041
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28042
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28044
MISC wordpress — wordpress
  The SupportCandy WordPress plugin before 3.1.7 does not properly sanitise and escape the agents[] parameter in the set_add_agent_leaves AJAX function before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin. 2023-06-19 not yet calculated CVE-2023-2805
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28050
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28052
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28054
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28056
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28058
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28059
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28060
MISC dell — cpg_bios Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 not yet calculated CVE-2023-28061
MISC dell — cpg_bios Dell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service. 2023-06-23 not yet calculated CVE-2023-28064
MISC dell — multiple_products Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability leading to privilege escalation. 2023-06-23 not yet calculated CVE-2023-28065
MISC dell — multiple_products Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder leading to permanent Denial of Service (DOS). 2023-06-23 not yet calculated CVE-2023-28071
MISC dell — cpg_bios Dell BIOS contains an improper authentication vulnerability. A locally authenticated malicious user may potentially exploit this vulnerability by bypassing certain authentication mechanisms in order to elevate privileges on the system. 2023-06-23 not yet calculated CVE-2023-28073
MISC pegasystems — pega_platform
  Pega platform clients who are using versions 6.1 through 8.8.3 and have upgraded from a version prior to 8.x may be utilizing default credentials. 2023-06-22 not yet calculated CVE-2023-28094
MISC wordpress — wordpress
  The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks to all admin when setting chatbot and all client when using chatbot 2023-06-19 not yet calculated CVE-2023-2811
MISC wordpress — wordpress
  The Ultimate Dashboard WordPress plugin before 3.7.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) 2023-06-19 not yet calculated CVE-2023-2812
MISC wordpress — wordpress
  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Aakif Kadiwala Tags Cloud Manager plugin <= 1.0.0 versions. 2023-06-22 not yet calculated CVE-2023-28166
MISC wordpress — wordpress
  Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in WP Chill Brilliance theme <= 1.3.1 versions. 2023-06-22 not yet calculated CVE-2023-28171
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in eLightUp eRocket plugin <= 1.2.4 versions. 2023-06-22 not yet calculated CVE-2023-28174
MISC apple — multiple_products This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to bypass Privacy preferences 2023-06-23 not yet calculated CVE-2023-28191
MISC
MISC
MISC
MISC
MISC
MISC apple — multiple_products This issue was addressed with improved state management. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, tvOS 16.5. An app firewall setting may not take effect after exiting the Settings app 2023-06-23 not yet calculated CVE-2023-28202
MISC
MISC
MISC
MISC apple — multiple_products An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, Safari 16.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited. 2023-06-23 not yet calculated CVE-2023-28204
MISC
MISC
MISC
MISC
MISC
MISC wordpress — wordpress
  Auth. (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Yudlee themes Mediciti Lite theme <= 1.3.0 versions. 2023-06-22 not yet calculated CVE-2023-28418
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Prism Tech Studios Modern Footnotes plugin <= 1.4.15 versions. 2023-06-22 not yet calculated CVE-2023-28423
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SMTP2GO – Email Made Easy plugin <= 1.4.2 versions. 2023-06-22 not yet calculated CVE-2023-28496
MISC wordpress — wordpress
  Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in WP Job Portal WP Job Portal – A Complete Job Board plugin <= 2.0.0 versions. 2023-06-22 not yet calculated CVE-2023-28534
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Drew Phillips VigilanTor plugin <= 1.3.10 versions. 2023-06-22 not yet calculated CVE-2023-28695
MISC wordpress — wordpress
  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ignazio Scimone Albo Pretorio On line plugin <= 4.6 versions. 2023-06-22 not yet calculated CVE-2023-28750
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions. 2023-06-23 not yet calculated CVE-2023-28751
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Grade Us, Inc. Review Stream plugin <= 1.6.5 versions. 2023-06-22 not yet calculated CVE-2023-28774
MISC wordpress — wordpress
  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin <= 1.0.15 versions. 2023-06-22 not yet calculated CVE-2023-28776
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BestWebSoft Pagination plugin <= 1.2.2 versions. 2023-06-22 not yet calculated CVE-2023-28778
MISC wordpress — wordpress
  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Contest Gallery plugin <= 21.1.2 versions. 2023-06-22 not yet calculated CVE-2023-28784
MISC zscaler — client_connector A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this parameter, which would redirect the user after auth and send the authorization token to the redirected domain.  2023-06-22 not yet calculated CVE-2023-28799
MISC
MISC
MISC
MISC
MISC
MISC zscaler — client_connector When using local accounts for administration, the redirect url parameter was not encoded correctly, allowing for an XSS attack providing admin login. 2023-06-22 not yet calculated CVE-2023-28800
MISC
MISC
MISC
MISC
MISC
MISC ibm — spectrum_protect_backup-archive_client IBM Spectrum Protect Backup-Archive Client 8.1.0.0 through 8.1.17.2 may allow a local user to escalate their privileges due to improper access controls. IBM X-Force ID: 251767. 2023-06-22 not yet calculated CVE-2023-28956
MISC
MISC wordpress — wordpress
  The Google Map Shortcode WordPress plugin through 3.1.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin 2023-06-19 not yet calculated CVE-2023-2899
MISC wordpress — wordpress
  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Dream-Theme The7 plugin <= 11.6.0 versions. 2023-06-23 not yet calculated CVE-2023-29100
MISC subnet_solutions — powersystem_center SUBNET PowerSYSTEM Center versions 2020 U10 and prior are vulnerable to replay attacks which may result in a denial-of-service condition or a loss of data integrity. 2023-06-19 not yet calculated CVE-2023-29158
MISC mozilla — multiple_products_for_macos
  An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crash. *This bug only affects Firefox and Thunderbird for macOS. Other operating systems are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10. 2023-06-19 not yet calculated CVE-2023-29531
MISC
MISC
MISC
MISC mozilla — multiple_products_for_windows
  A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the write-lock requested by the service does not work on a SMB server. *Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10. 2023-06-19 not yet calculated CVE-2023-29532
MISC
MISC
MISC
MISC mozilla — firefox_for_android
  Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks. *This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 112 and Focus for Android < 112. 2023-06-19 not yet calculated CVE-2023-29534
MISC
MISC
MISC
MISC
MISC
MISC
MISC
MISC mozilla — multiple_products_for_windows
  A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code. *This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10. 2023-06-19 not yet calculated CVE-2023-29542
MISC
MISC
MISC
MISC
MISC mozilla — multiple_products_for_windows
  Similar to CVE-2023-28163, this time when choosing ‘Save Link As’, suggested filenames containing environment variable names would have resolved those in the context of the current user. *This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10. 2023-06-19 not yet calculated CVE-2023-29545
MISC
MISC
MISC
MISC mozilla — multiple_products_for_android
  When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden, potentially leaking sensitive information. *This bug only affects Firefox for Android. Other operating systems are unaffected.* This vulnerability affects Firefox for Android < 112 and Focus for Android < 112. 2023-06-19 not yet calculated CVE-2023-29546
MISC
MISC gbcom_lac — web_control_center Cross Site Scripting (XSS) vulnerability in GBCOM LAC WEB Control Center version lac-1.3.x, allows attackers to create an arbitrary device. 2023-06-22 not yet calculated CVE-2023-29707
MISC
MISC wavlink — wn579x3
  An issue was discovered in /cgi-bin/adm.cgi in WavLink WavRouter version RPT70HA1.x, allows attackers to force a factory reset via crafted payload. 2023-06-22 not yet calculated CVE-2023-29708
MISC
MISC wildix — wsg24poe An issue was discovered in /cgi-bin/login_rj.cgi in Wildix WSG24POE version 103SP7D190822, allows attackers to bypass authentication. 2023-06-22 not yet calculated CVE-2023-29709
MISC
MISC interlink — psg-5124 An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafted GET request. 2023-06-22 not yet calculated CVE-2023-29711
MISC
MISC dtstack taier — dtstack taier An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method. 2023-06-23 not yet calculated CVE-2023-29860
MISC fortra — globalscape_eft
  Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited 2023-06-22 not yet calculated CVE-2023-2989
MISC
MISC fortra — globalscape_eft
  Fortra Globalscape EFT versions before 8.1.0.16 suffer from a denial of service vulnerability, where a compressed message that decompresses to itself can cause infinite recursion and crash the service 2023-06-22 not yet calculated CVE-2023-2990
MISC
MISC fortra — globalscape_eft
  Fortra Globalscape EFT’s administration server suffers from an information disclosure vulnerability where the serial number of the harddrive that Globalscape is installed on can be remotely determined via a “trial extension request” message 2023-06-22 not yet calculated CVE-2023-2991
MISC
MISC laravel-s — laravel-s laravel-s 3.7.35 is vulnerable to Local File Inclusion via /src/Illuminate/Laravel.php. 2023-06-22 not yet calculated CVE-2023-29931
MISC linux — kernel
  A flaw was found in the IPv6 module of the Linux kernel. The arg.result was not used consistently in fib6_rule_lookup, sometimes holding rt6_info and other times fib6_info. This was not accounted for in other parts of the code where rt6_info was expected unconditionally, potentially leading to a kernel panic in fib6_rule_suppress. 2023-06-19 not yet calculated CVE-2023-3022
MISC
MISC magnussolution — magnusbilling Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request. 2023-06-23 not yet calculated CVE-2023-30258
MISC
MISC raspap — raspap-webgui Command injection vulnerability in RaspAP raspap-webgui 2.8.8 and earlier allows remote attackers to run arbitrary commands via crafted POST request to hostapd settings form. 2023-06-23 not yet calculated CVE-2023-30260
MISC
MISC neox_contact_center — neox_contact_center Cross Site Scripting (XSS) vulnerability in Neox Contact Center 2.3.9, via the serach_sms_api_name parameter to the SMA API search. 2023-06-22 not yet calculated CVE-2023-30347
MISC libcoap_library — libcoap_library Buffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive information via malformed pdu. 2023-06-23 not yet calculated CVE-2023-30362
MISC
MISC wordpress — wordpress
  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPForms WPForms Lite (wpforms-lite), WPForms WPForms Pro (wpforms) plugins <= 1.8.1.2 versions. 2023-06-22 not yet calculated CVE-2023-30500
MISC
MISC ricoh_company — printer_driver_packager_nx
  The driver installation package created by Printer Driver Packager NX v1.0.02 to v1.1.25 fails to detect its modification and may spawn an unexpected process with the administrative privilege. If a non-administrative user modifies the driver installation package and runs it on the target PC, an arbitrary program may be executed with the administrative privilege. 2023-06-19 not yet calculated CVE-2023-30759
MISC
MISC
MISC silicon_labs — unify_gateway Description: A vulnerability in SiLabs Unify Gateway 1.3.1 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution. 2023-06-21 not yet calculated CVE-2023-3110
MISC hashicorp — terraform_enterprise Terraform Enterprise since v202207-1 did not properly implement authorization rules for agent pools, allowing the workspace to be targeted by unauthorized agents. This authorization flaw could potentially allow a workspace to access resources from a separate, higher-privileged workspace in the same organization that targeted an agent pool. This vulnerability, CVE-2023-3114, is fixed in Terraform Enterprise v202306-1. 2023-06-22 not yet calculated CVE-2023-3114
MISC wordpress — wordpress
  Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WPBakery Page Builder plugin <= 6.13.0 versions. 2023-06-22 not yet calculated CVE-2023-31213
MISC fuji_electric/hakko_electronics — v-server/v-server_lite Stack-based buffer overflow vulnerability in V-Server v4.0.15.0 and V-Server Lite v4.0.15.0 and earlier allows an attacker to execute arbitrary code by having user open a specially crafted VPR file. 2023-06-19 not yet calculated CVE-2023-31239
MISC
MISC grafana — grafana Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app. 2023-06-22 not yet calculated CVE-2023-3128
MISC sick_ag — eventcam_app A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security (TLS) in the SICK EventCam App. This lack of encryption in the communication channel can lead to the unauthorized disclosure of sensitive information. The attacker can exploit this weakness to eavesdrop on the communication between the EventCam App and the Client, and potentially manipulate the data being transmitted. 2023-06-19 not yet calculated CVE-2023-31410
MISC
MISC
MISC sick_ag — eventcam_app A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication. The lack of authentication in the API allows the attacker to potentially compromise the functionality of the EventCam App. 2023-06-19 not yet calculated CVE-2023-31411
MISC
MISC
MISC oracle — apache/streampipes
  A REST interface in Apache StreamPipes (versions 0.69.0 to 0.91.0) was not properly restricted to admin-only access. This allowed a non-admin user with valid login credentials to elevate privileges beyond the initially assigned roles. The issue is resolved by upgrading to StreamPipes 0.92.0. 2023-06-23 not yet calculated CVE-2023-31469
MISC sage — x3 Sage X3 version 12.14.0.50-0 is vulnerable to CSV Injection. 2023-06-22 not yet calculated CVE-2023-31867
MISC
MISC sage — x3 Sage X3 version 12.14.0.50-0 is vulnerable to Cross Site Scripting (XSS). Some parts of the Web application are dynamically built using user’s inputs. Yet, those inputs are not verified nor filtered by the application, so they mathed the expected format. Therefore, when HTML/JavaScript code is injected into those fields, this code will be saved by the application and executed by the web browser of the user viewing the web page. Several injection points have been identified on the application. The major one requires the user to be authenticated with a common account, he can then target an Administrator. All others endpoints need the malicious user to be authenticated as an Administrator. Therefore, the impact is diminished. 2023-06-22 not yet calculated CVE-2023-31868
MISC
MISC linux — kernel
  A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic. 2023-06-23 not yet calculated CVE-2023-3212
MISC
MISC linux — kernel
  An issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference. 2023-06-20 not yet calculated CVE-2023-3220
MISC fuji_electric/hakko_electronics — tellus/tellus_lite
  Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32538 and CVE-2023-32273. 2023-06-19 not yet calculated CVE-2023-32201
MISC
MISC mozilla — firefox
  Service workers could reveal script base URL due to dynamic `import()`. This vulnerability affects Firefox < 113. 2023-06-19 not yet calculated CVE-2023-32208
MISC
MISC mozilla — firefox
  A maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox < 113. 2023-06-19 not yet calculated CVE-2023-32209
MISC
MISC mozilla — firefox
  Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately privileged principal. In certain circumstances it might have been possible to cause a document to be loaded with a higher privileged principal than intended. This vulnerability affects Firefox < 113. 2023-06-19 not yet calculated CVE-2023-32210
MISC
MISC mozilla — multiple_products
  Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note: This attack only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11. 2023-06-19 not yet calculated CVE-2023-32214
MISC
MISC
MISC
MISC mozilla — firefox
  Memory safety bugs present in Firefox 112. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 113. 2023-06-19 not yet calculated CVE-2023-32216
MISC
MISC wordpress — wordpress Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in xtemos WoodMart theme <= 7.2.1 versions. 2023-06-22 not yet calculated CVE-2023-32239
MISC fuji_electric/hakko_electronics — tellus/tellus_lite
  Access of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution. 2023-06-19 not yet calculated CVE-2023-32270
MISC
MISC fuji_electric/hakko_electronics — tellus/tellus_lite
  Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32538 and CVE-2023-32201. 2023-06-19 not yet calculated CVE-2023-32273
MISC
MISC enphase — installer_toolkit Enphase Installer Toolkit versions 3.27.0 has hard coded credentials embedded in binary code in the Android application. An attacker can exploit this and gain access to sensitive information. 2023-06-20 not yet calculated CVE-2023-32274
MISC fuji_electric/hakko_electronics — tellus/tellus_lite
  Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution. 2023-06-19 not yet calculated CVE-2023-32276
MISC
MISC fuji_electric/hakko_electronics — tellus/tellus_lite
  Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM file may lead to information disclosure and/or arbitrary code execution. 2023-06-19 not yet calculated CVE-2023-32288
MISC
MISC nextcloud — security-advisories Nextcloud Server is a data storage system for Nextcloud, a self-hosted productivity platform. When multiple requests are sent in parallel, all of them were executed even if the amount of faulty requests succeeded the limit by the time the response was sent to the client. This allowed someone to send as many requests the server could handle in parallel to bruteforce protected details instead of the configured limit, default 8. Nextcloud Server versions 25.0.7 and 26.0.2 and Nextcloud Enterprise Server versions 21.0.9.12, 22.2.10.12, 23.0.12.7, 24.0.12.2, 25.0.7 and 26.0.2 contain patches for this issue. 2023-06-22 not yet calculated CVE-2023-32320
MISC
MISC
MISC apple — itunes_for_windows
  A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to gain elevated privileges 2023-06-23 not yet calculated CVE-2023-32351
MISC apple — macos
  A logic issue was addressed with improved checks. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may bypass Gatekeeper checks 2023-06-23 not yet calculated CVE-2023-32352
MISC
MISC
MISC
MISC
MISC apple — itunes_for_windows
  A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to elevate privileges 2023-06-23 not yet calculated CVE-2023-32353
MISC apple — multiple_products
  An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5. An app may be able to disclose kernel memory 2023-06-23 not yet calculated CVE-2023-32354
MISC
MISC
MISC apple — macos
  A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to modify protected parts of the file system 2023-06-23 not yet calculated CVE-2023-32355
MISC
MISC
MISC apple — multiple_products
  An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to retain access to system configuration files even after its permission is revoked 2023-06-23 not yet calculated CVE-2023-32357
MISC
MISC
MISC
MISC
MISC
MISC apple — macos
  An authentication issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An unauthenticated user may be able to access recently printed documents 2023-06-23 not yet calculated CVE-2023-32360
MISC
MISC
MISC apple — macos
  A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Ventura 13.4. An app may be able to bypass Privacy preferences 2023-06-23 not yet calculated CVE-2023-32363
MISC apple — multiple_products
  The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, iOS 15.7.6 and iPadOS 15.7.6. Shake-to-undo may allow a deleted photo to be re-surfaced without authentication 2023-06-23 not yet calculated CVE-2023-32365
MISC
MISC apple — multiple_products
  This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. An app may be able to access user-sensitive data 2023-06-23 not yet calculated CVE-2023-32367
MISC
MISC apple — multiple_products
  An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Monterey 12.6.6. Processing a 3D model may result in disclosure of process memory 2023-06-23 not yet calculated CVE-2023-32368
MISC
MISC
MISC
MISC
MISC apple — multiple_products
  The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. An app may be able to break out of its sandbox 2023-06-23 not yet calculated CVE-2023-32371
MISC
MISC apple — multiple_products
  An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, tvOS 16.5. Processing an image may result in disclosure of process memory 2023-06-23 not yet calculated CVE-2023-32372
MISC
MISC
MISC
MISC apple — multiple_products A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, Safari 16.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. 2023-06-23 not yet calculated CVE-2023-32373
MISC
MISC
MISC
MISC
MISC
MISC apple — macos_venture/macos_monterey An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.4, macOS Monterey 12.6.6. Processing a 3D model may result in disclosure of process memory 2023-06-23 not yet calculated CVE-2023-32375
MISC
MISC apple — multiple_products This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, tvOS 16.5. An app may be able to modify protected parts of the file system 2023-06-23 not yet calculated CVE-2023-32376
MISC
MISC
MISC
MISC apple — multiple_products An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. Processing a 3D model may lead to arbitrary code execution 2023-06-23 not yet calculated CVE-2023-32380
MISC
MISC
MISC apple — multiple_products An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. Processing a 3D model may result in disclosure of process memory 2023-06-23 not yet calculated CVE-2023-32382
MISC
MISC
MISC apple — multiple_products A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. Processing an image may lead to arbitrary code execution 2023-06-23 not yet calculated CVE-2023-32384
MISC
MISC
MISC
MISC
MISC
MISC
MISC apple — multiple_products A denial-of-service issue was addressed with improved memory handling. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. Opening a PDF file may lead to unexpected app termination 2023-06-23 not yet calculated CVE-2023-32385
MISC
MISC apple — multiple_products A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to observe unprotected user data 2023-06-23 not yet calculated CVE-2023-32386
MISC
MISC
MISC apple — multiple_products A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A remote attacker may be able to cause unexpected app termination or arbitrary code execution 2023-06-23 not yet calculated CVE-2023-32387
MISC
MISC
MISC apple — multiple_products A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to bypass Privacy preferences 2023-06-23 not yet calculated CVE-2023-32388
MISC
MISC
MISC
MISC
MISC
MISC apple — multiple_products This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, tvOS 16.5. An app may be able to disclose kernel memory 2023-06-23 not yet calculated CVE-2023-32389
MISC
MISC
MISC
MISC apple — multiple_products The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup 2023-06-23 not yet calculated CVE-2023-32390
MISC
MISC
MISC apple — multiple_products The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6. A shortcut may be able to use sensitive data with certain actions without prompting the user 2023-06-23 not yet calculated CVE-2023-32391
MISC
MISC
MISC
MISC apple — multiple_products A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to read sensitive location information 2023-06-23 not yet calculated CVE-2023-32392
MISC
MISC
MISC
MISC
MISC
MISC apple — multiple_products The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, tvOS 16.5. A person with physical access to a device may be able to view contact information from the lock screen 2023-06-23 not yet calculated CVE-2023-32394
MISC
MISC
MISC
MISC apple — multiple_products A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to modify protected parts of the file system 2023-06-23 not yet calculated CVE-2023-32395
MISC
MISC
MISC apple — multiple_products A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6. An app may be able to modify protected parts of the file system 2023-06-23 not yet calculated CVE-2023-32397
MISC
MISC
MISC
MISC apple — multiple_products A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to execute arbitrary code with kernel privileges 2023-06-23 not yet calculated CVE-2023-32398
MISC
MISC
MISC
MISC
MISC
MISC
MISC apple — multiple_products The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, tvOS 16.5. An app may be able to read sensitive location information 2023-06-23 not yet calculated CVE-2023-32399
MISC
MISC
MISC
MISC apple — multiple_products This issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5. Entitlements and privacy permissions granted to this app may be used by a malicious app 2023-06-23 not yet calculated CVE-2023-32400
MISC
MISC
MISC apple — multiple_products An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, Safari 16.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information 2023-06-23 not yet calculated CVE-2023-32402
MISC
MISC
MISC
MISC
MISC apple — multiple_products This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to read sensitive location information 2023-06-23 not yet calculated CVE-2023-32403
MISC
MISC
MISC
MISC
MISC
MISC
MISC apple — multiple_products This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5. An app may be able to bypass Privacy preferences 2023-06-23 not yet calculated CVE-2023-32404
MISC
MISC
MISC apple — multiple_products A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to gain root privileges 2023-06-23 not yet calculated CVE-2023-32405
MISC
MISC
MISC apple — multiple_products A logic issue was addressed with improved state management. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to bypass Privacy preferences 2023-06-23 not yet calculated CVE-2023-32407
MISC
MISC
MISC
MISC
MISC
MISC
MISC apple — multiple_products The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Monterey 12.6.6. An app may be able to read sensitive location information 2023-06-23 not yet calculated CVE-2023-32408
MISC
MISC
MISC
MISC
MISC
MISC apple — multiple_products The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, Safari 16.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited. 2023-06-23 not yet calculated CVE-2023-32409
MISC
MISC
MISC
MISC
MISC apple — multiple_products An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6. An app may be able to leak sensitive kernel state 2023-06-23 not yet calculated CVE-2023-32410
MISC
MISC
MISC
MISC apple — multiple_products This issue was addressed with improved entitlements. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to bypass Privacy preferences 2023-06-23 not yet calculated CVE-2023-32411
MISC
MISC
MISC
MISC
MISC apple — multiple_products A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A remote attacker may be able to cause unexpected app termination or arbitrary code execution 2023-06-23 not yet calculated CVE-2023-32412
MISC
MISC
MISC
MISC
MISC
MISC
MISC apple — multiple_products A race condition was addressed with improved state handling. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to gain root privileges 2023-06-23 not yet calculated CVE-2023-32413
MISC
MISC
MISC
MISC
MISC
MISC
MISC apple — macos The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.4. An app may be able to break out of its sandbox 2023-06-23 not yet calculated CVE-2023-32414
MISC apple — multiple_products This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, tvOS 16.5. An app may be able to read sensitive location information 2023-06-23 not yet calculated CVE-2023-32415
MISC
MISC
MISC apple — watchos This issue was addressed by restricting options offered on a locked device. This issue is fixed in watchOS 9.5. An attacker with physical access to a locked Apple Watch may be able to view user photos or contacts via accessibility features 2023-06-23 not yet calculated CVE-2023-32417
MISC apple — ios/ipados The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.5 and iPadOS 16.5. A remote attacker may be able to cause arbitrary code execution 2023-06-23 not yet calculated CVE-2023-32419
MISC apple — multiple_products An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, tvOS 16.5. An app may be able to cause unexpected system termination or read kernel memory 2023-06-23 not yet calculated CVE-2023-32420
MISC
MISC
MISC
MISC apple — multiple_products This issue was addressed by adding additional SQLite logging restrictions. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, tvOS 16.5. An app may be able to bypass Privacy preferences 2023-06-23 not yet calculated CVE-2023-32422
MISC
MISC
MISC apple — multiple_products A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, Safari 16.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information 2023-06-23 not yet calculated CVE-2023-32423
MISC
MISC
MISC
MISC
MISC apple — multiple_products An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Big Sur 11.7.8, macOS Monterey 12.6.7, macOS Ventura 13.4.1, watchOS 9.5.2. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7. 2023-06-23 not yet calculated CVE-2023-32434
MISC
MISC
MISC
MISC
MISC
MISC
MISC apple — multiple_products A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.4, iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7. 2023-06-23 not yet calculated CVE-2023-32435
MISC
MISC
MISC
MISC apple — multiple_products A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, Safari 16.5.1, macOS Ventura 13.4.1, iOS 15.7.7 and iPadOS 15.7.7. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. 2023-06-23 not yet calculated CVE-2023-32439
MISC
MISC
MISC
MISC dell — powerstore Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An attacker can trick a high privileged user to install a malicious binary by bypassing the existing cryptographic signature checks 2023-06-22 not yet calculated CVE-2023-32449
MISC dell — vxrail Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to degraded performance and system malfunction. 2023-06-23 not yet calculated CVE-2023-32463
MISC dell — vxrail Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim’s traffic to view or modify a victim’s data in transit. 2023-06-23 not yet calculated CVE-2023-32464
MISC dell — cpg_bios Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability to perform arbitrary code execution. 2023-06-23 not yet calculated CVE-2023-32480
MISC fuji_electric/hakko_electronics — tellus/tellus_lite
  Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32273 and CVE-2023-32201. 2023-06-19 not yet calculated CVE-2023-32538
MISC
MISC fuji_electric/hakko_electronics — tellus/tellus_lite
  Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution. 2023-06-19 not yet calculated CVE-2023-32542
MISC
MISC advantech — r-seenet Advantech R-SeeNet versions 2.4.22 allows low-level users to access and load the content of local files. 2023-06-22 not yet calculated CVE-2023-3256
MISC dynamic — linq Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute arbitrary code and commands when untrusted input to methods including Where, Select, OrderBy is parsed. 2023-06-22 not yet calculated CVE-2023-32571
MISC
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPExperts Password Protected plugin <= 2.6.2 versions. 2023-06-23 not yet calculated CVE-2023-32580
MISC subnet_solutions — powersystem_center SUBNET PowerSYSTEM Center versions 2020 U10 and prior contain a cross-site scripting vulnerability that may allow an attacker to inject malicious code into report header graphic files that could propagate out of the system and reach users who are subscribed to email notifications. 2023-06-19 not yet calculated CVE-2023-32659
MISC wordpress — wordpress
  Cross-Site Request Forgery (CSRF) vulnerability in UpdraftPlus.Com, DavidAnderson UpdraftPlus WordPress Backup Plugin <= 1.23.3 versions leads to sitewide Cross-Site Scripting (XSS). 2023-06-22 not yet calculated CVE-2023-32960
MISC admidio — admidio Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9. 2023-06-23 not yet calculated CVE-2023-3302
MISC
CONFIRM admidio — admidio Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9. 2023-06-23 not yet calculated CVE-2023-3303
MISC
CONFIRM admidio — admidio Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9. 2023-06-23 not yet calculated CVE-2023-3304
CONFIRM
MISC c-data — web_management_system A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 of the component User Creation Handler. The manipulation of the argument user/newpassword leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231801 was assigned to this vulnerability. 2023-06-18 not yet calculated CVE-2023-3305
MISC
MISC
MISC ruijie — rg-ew1200g A vulnerability was found in Ruijie RG-EW1200G EW_3.0(1)B11P204. It has been declared as critical. This vulnerability affects unknown code of the file app.09df2a9e44ab48766f5f.js of the component Admin Password Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-231802 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-06-18 not yet calculated CVE-2023-3306
MISC
MISC
MISC minical –minical A vulnerability was found in miniCal 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /booking/show_bookings/. The manipulation of the argument search_query leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231803. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-06-18 not yet calculated CVE-2023-3307
MISC
MISC
MISC whaleal_icefrog — whaleal_icefrog A vulnerability classified as problematic has been found in whaleal IceFrog 1.1.8. Affected is an unknown function of the component Aviator Template Engine. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231804. 2023-06-18 not yet calculated CVE-2023-3308
MISC
MISC
MISC sourcecodester — resort_management_system
  A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file ?page=rooms of the component Manage Room Page. The manipulation of the argument Cottage Number leads to cross site scripting. The attack can be launched remotely. The identifier VDB-231805 was assigned to this vulnerability. 2023-06-18 not yet calculated CVE-2023-3309
MISC
MISC
MISC code-projects — agro-school_management_system
  A vulnerability, which was classified as critical, has been found in code-projects Agro-School Management System 1.0. Affected by this issue is some unknown functionality of the file loaddata.php. The manipulation of the argument subject/course leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-231806 is the identifier assigned to this vulnerability. 2023-06-18 not yet calculated CVE-2023-3310
MISC
MISC
MISC puneethreddyhc — online_shopping_system_advanced A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231807. 2023-06-18 not yet calculated CVE-2023-3311
MISC
MISC
MISC linux — kernel
  A vulnerability was found in drivers/cpufreq/qcom-cpufreq-hw.c in cpufreq subsystem in the Linux Kernel. This flaw, during device unbind will lead to double release problem leading to denial of service. 2023-06-19 not yet calculated CVE-2023-3312
MISC jenkins — jenkins
  Missing permission checks in Jenkins Team Concert Plugin 2.4.1 and earlier allow attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. 2023-06-19 not yet calculated CVE-2023-3315
MISC libtiff — libtiff A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones. 2023-06-19 not yet calculated CVE-2023-3316
MISC linux — kernel
  A use-after-free flaw was found in mt7921_check_offload_capability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 sub-component in the Linux Kernel. This flaw could allow an attacker to crash the system after ‘features’ memory release. This vulnerability could even lead to a kernel information leak problem. 2023-06-23 not yet calculated CVE-2023-3317
MISC sourcecodester — resort_management_system
  A vulnerability was found in SourceCodester Resort Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231937 was assigned to this vulnerability. 2023-06-19 not yet calculated CVE-2023-3318
MISC
MISC
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gVectors Display Custom Fields – wpView plugin <= 1.3.0 versions. 2023-06-19 not yet calculated CVE-2023-33213
MISC freebsd — freebsd
  pam_krb5 authenticates a user by essentially running kinit with the password, getting a ticket-granting ticket (tgt) from the Kerberos KDC (Key Distribution Center) over the network, as a way to verify the password. However, if a keytab is not provisioned on the system, pam_krb5 has no way to validate the response from the KDC, and essentially trusts the tgt provided over the network as being valid. In a non-default FreeBSD installation that leverages pam_krb5 for authentication and does not have a keytab provisioned, an attacker that is able to control both the password and the KDC responses can return a valid tgt, allowing authentication to occur for any user on the system. 2023-06-22 not yet calculated CVE-2023-3326
MISC urlnorm_crate — urlnorm_crate The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to lib.rs. 2023-06-21 not yet calculated CVE-2023-33289
MISC
MISC
MISC fortinet — fortinac
  A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions of 8.x allows attacker to execute unauthorized code or commands via specifically crafted request on inter-server communication port. Note FortiNAC versions 8.x will not be fixed. 2023-06-23 not yet calculated CVE-2023-33299
MISC wordpress — wordpress Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin <= 4.0.2 versions. 2023-06-22 not yet calculated CVE-2023-33323
MISC puneethreddyhc — online_shopping_system_advanced A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The attack can be launched remotely. The identifier VDB-232009 was assigned to this vulnerability. 2023-06-20 not yet calculated CVE-2023-3337
MISC
MISC datev_eg — personal-management_system_comfort/comfort_plus A reflected cross-site scripting (XSS) vulnerability in DATEV eG Personal-Management System Comfort/Comfort Plus v15.1.0 to v16.1.1 P4 allows attackers to steal targeted users’ login data by sending a crafted link. 2023-06-22 not yet calculated CVE-2023-33387
MISC
MISC
MISC code-projects — agro-school_management_system
  A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file exam-delete.php. The manipulation of the argument test_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232015. 2023-06-21 not yet calculated CVE-2023-3339
MISC
MISC
MISC sourcecodester — online_school_fees_system
  A vulnerability was found in SourceCodester Online School Fees System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ajx.php of the component GET Parameter Handler. The manipulation of the argument name_startsWith leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-232016. 2023-06-20 not yet calculated CVE-2023-3340
MISC
MISC
MISC blogengine.net — blogengine.net Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect. 2023-06-21 not yet calculated CVE-2023-33405
MISC craft_cms — craft_cms Craft CMS through 4.4.9 is vulnerable to HTML Injection. 2023-06-20 not yet calculated CVE-2023-33495
MISC
MISC ros2 — ros2 ROS2 (Robot Operating System 2) Foxy Fitzroy ROS_VERSION=2 and ROS_PYTHON_VERSION=3 are vulnerable to Denial-of-Service (DoS) attacks. A malicious user potentially exploited the vulnerability remotely and crashed the ROS2 nodes. 2023-06-23 not yet calculated CVE-2023-33565
MISC
MISC sourcecodester — enrollment_system_project
  Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the username and password fields during the login process, enabling an attacker to inject malicious SQL code. 2023-06-21 not yet calculated CVE-2023-33584
MISC
MISC
MISC
MISC user_registration/login_and_user_management_system — user_registration/login_and_user_management_system User Registration & Login and User Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/search-result.php. 2023-06-21 not yet calculated CVE-2023-33591
MISC
MISC broadleaf — broadleaf Broadleaf 5.x and 6.x (including 5.2.25-GA and 6.2.6-GA) was discovered to contain a cross-site scripting (XSS) vulnerability via a customer signup with a crafted email address. This is fixed in 6.2.6.1-GA. 2023-06-21 not yet calculated CVE-2023-33725
MISC wavlink — wn579x3
  A vulnerability classified as critical has been found in Wavlink WN579X3 up to 20230615. Affected is an unknown function of the file /cgi-bin/adm.cgi of the component Ping Test. The manipulation of the argument pingIp leads to injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-232236. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-06-23 not yet calculated CVE-2023-3380
MISC
MISC
MISC sourcecodester — online_school_fees_system
  A vulnerability classified as problematic was found in SourceCodester Online School Fees System 1.0. Affected by this vulnerability is an unknown functionality of the file /paysystem/datatable.php of the component GET Parameter Handler. The manipulation of the argument doj leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-232237 was assigned to this vulnerability. 2023-06-23 not yet calculated CVE-2023-3381
MISC
MISC
MISC sourcecodester — game_result_matrix_system
  A vulnerability, which was classified as problematic, has been found in SourceCodester Game Result Matrix System 1.0. Affected by this issue is some unknown functionality of the file /dipam/save-delegates.php of the component GET Parameter Handler. The manipulation of the argument del_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-232238 is the identifier assigned to this vulnerability. 2023-06-23 not yet calculated CVE-2023-3382
MISC
MISC
MISC sourcecodester — game_result_matrix_system
  A vulnerability, which was classified as critical, was found in SourceCodester Game Result Matrix System 1.0. This affects an unknown part of the file /dipam/athlete-profile.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232239. 2023-06-23 not yet calculated CVE-2023-3383
MISC
MISC
MISC ibm — spss_modeler IBM SPSS Modeler on Windows 17.0, 18.0, 18.2.2, 18.3, 18.4, and 18.5 requires the end user to have access to the server SSL key which could allow a local user to decrypt and obtain sensitive information. IBM X-Force ID: 256117. 2023-06-22 not yet calculated CVE-2023-33842
MISC
MISC enphase — envoy Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands. 2023-06-20 not yet calculated CVE-2023-33869
MISC sourcecodester — human_resource_management_system
  A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file detailview.php. The manipulation of the argument employeeid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-232288. 2023-06-23 not yet calculated CVE-2023-3391
MISC
MISC
MISC fossbilling — fossbilling
  Code Injection in GitHub repository fossbilling/fossbilling prior to 0.5.1. 2023-06-23 not yet calculated CVE-2023-3393
MISC
MISC fossbilling — fossbilling
  Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1. 2023-06-23 not yet calculated CVE-2023-3394
MISC
MISC wordpress — wordpress
  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Robin Wilson bbp style pack plugin <= 5.5.5 versions. 2023-06-22 not yet calculated CVE-2023-33997
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi Telegram Bot & Channel plugin <= 3.6.2 versions. 2023-06-22 not yet calculated CVE-2023-34006
MISC wordpress — wordpress
  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Premium Addons for Elementor Premium Addons PRO plugin <= 2.8.24 versions. 2023-06-23 not yet calculated CVE-2023-34012
MISC wordpress — wordpress
  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Andy Moyle Church Admin plugin <= 3.7.29 versions. 2023-06-23 not yet calculated CVE-2023-34021
MISC wordpress — wordpress
  Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin <= 1.0.7 versions. 2023-06-22 not yet calculated CVE-2023-34028
MISC flask-appbuilder — flask-appbuilder Flask-AppBuilder is an application development framework, built on top of Flask. Prior to version 4.3.2, an authenticated malicious actor with Admin privileges, could by adding a special character on the add, edit User forms trigger a database error, this error is surfaced back to this actor on the UI. On certain database engines this error can include the entire user row including the pbkdf2:sha256 hashed password. This vulnerability has been fixed in version 4.3.2. 2023-06-22 not yet calculated CVE-2023-34110
MISC
MISC
MISC
MISC huawei — harmonyos
  Vulnerability of unauthorized calling on HUAWEI phones and tablets.Successful exploitation of this vulnerability may affect availability. 2023-06-19 not yet calculated CVE-2023-34155
MISC huawei — harmonyos
  Vulnerability of services denied by early fingerprint APIs on HarmonyOS products.Successful exploitation of this vulnerability may cause services to be denied. 2023-06-19 not yet calculated CVE-2023-34156
MISC huawei — harmonyos
  Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled. 2023-06-19 not yet calculated CVE-2023-34158
MISC huawei — harmonyos
  Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects availability and confidentiality. 2023-06-19 not yet calculated CVE-2023-34159
MISC huawei — harmonyos
  Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled. 2023-06-19 not yet calculated CVE-2023-34160
MISC huawei — harmonyos
  nappropriate authorization vulnerability in the SettingsProvider module.Successful exploitation of this vulnerability may cause features to perform abnormally. 2023-06-19 not yet calculated CVE-2023-34161
MISC huawei — harmonyos
  Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail. 2023-06-19 not yet calculated CVE-2023-34162
MISC huawei — harmonyos
  Permission control vulnerability in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally. 2023-06-19 not yet calculated CVE-2023-34163
MISC huawei — harmonyos
  Vulnerability of system restart triggered by abnormal callbacks passed to APIs.Successful exploitation of this vulnerability may cause the system to restart. 2023-06-19 not yet calculated CVE-2023-34166
MISC huawei — harmonyos
  Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled. 2023-06-19 not yet calculated CVE-2023-34167
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Overnight Quick/Bulk Order Form for WooCommerce plugin <= 3.5.7 versions. 2023-06-22 not yet calculated CVE-2023-34170
MISC mongoose — mongoose The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. 2023-06-23 not yet calculated CVE-2023-34188
MISC
MISC
MISC progress — openedge_management/openedge_explorer In Progress OpenEdge OEM (OpenEdge Management) and OEE (OpenEdge Explorer) before 12.7, a remote user (who has any OEM or OEE role) could perform a URL injection attack to change identity or role membership, e.g., escalate to admin. This affects OpenEdge LTS before 11.7.16, 12.x before 12.2.12, and 12.3.x through 12.6.x before 12.7. 2023-06-23 not yet calculated CVE-2023-34203
MISC openprinting — cups OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data right before. This is a use-after-free bug that impacts the entire cupsd process. The exact cause of this issue is the function `httpClose(con->http)` being called in `scheduler/client.c`. The problem is that httpClose always, provided its argument is not null, frees the pointer at the end of the call, only for cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function `cupsdAcceptClient` if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address (HostNameLookups Double is set in `cupsd.conf`) which fails to resolve, or if CUPS is compiled with TCP wrappers and the connection is refused by rules from `/etc/hosts.allow` and `/etc/hosts.deny`. Version 2.4.6 has a patch for this issue. 2023-06-22 not yet calculated CVE-2023-34241
MISC
MISC
MISC
MISC glpi-project — glpi-agent The GLPI Agent is a generic management agent. Prior to version 1.5, if glpi-agent is running remoteinventory task against an Unix platform with ssh command, an administrator user on the remote can manage to inject a command in a specific workflow the agent would run with the privileges it uses. In the case, the agent is running with administration privileges, a malicious user could gain high privileges on the computer glpi-agent is running on. A malicious user could also disclose all remote accesses the agent is configured with for remoteinventory task. This vulnerability has been patched in glpi-agent 1.5. 2023-06-23 not yet calculated CVE-2023-34254
MISC
MISC oracle — apache/accumulo
  Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1. 2023-06-21 not yet calculated CVE-2023-34340
MISC
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kanban for WordPress Kanban Boards for WordPress plugin <= 2.5.20 versions. 2023-06-22 not yet calculated CVE-2023-34368
MISC wordpress — wordpress Cross-Site Request Forgery (CSRF) vulnerability in Dylan James Zephyr Project Manager plugin <= 3.3.93 versions. 2023-06-19 not yet calculated CVE-2023-34373
MISC mozilla — multiple_products
  The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts and permission dialogs from attacks that exploit human response time delays. If a malicious page elicited user clicks in precise locations immediately before navigating to a site with a certificate error and made the renderer extremely busy at the same time, it could create a gap between when the error page was loaded and when the display actually refreshed. With the right timing the elicited clicks could land in that gap and activate the button that overrides the certificate error for that site. This vulnerability affects Firefox ESR < 102.12, Firefox < 114, and Thunderbird < 102.12. 2023-06-19 not yet calculated CVE-2023-34414
MISC
MISC
MISC
MISC mozilla — firefox
  When choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox would load that document in the same process as the site that issued the redirect. This bypassed the site-isolation protections against Spectre-like attacks on sites that host an “open redirect”. Firefox no longer follows HTTP redirects to data: URLs. This vulnerability affects Firefox < 114. 2023-06-19 not yet calculated CVE-2023-34415
MISC
MISC mozilla — multiple_products
  Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 102.12, Firefox < 114, and Thunderbird < 102.12. 2023-06-19 not yet calculated CVE-2023-34416
MISC
MISC
MISC
MISC mozilla — firefox
  Memory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 114. 2023-06-19 not yet calculated CVE-2023-34417
MISC
MISC tauri-apps — tauri Tauri is a framework for building binaries for all major desktop platforms. The 1.4.0 release includes a regression on the Filesystem scope check for dotfiles on Unix. Previously dotfiles were not implicitly allowed by the glob wildcard scopes (eg. `$HOME/*`), but a regression was introduced when a configuration option for this behavior was implemented. Only Tauri applications using wildcard scopes in the `fs` endpoint are affected. The regression has been patched on version 1.4.1. 2023-06-23 not yet calculated CVE-2023-34460
MISC
MISC
MISC
MISC pybb — pybb PyBB is an open source bulletin board. A manual code review of the PyBB bulletin board server has revealed that a vulnerability could have been exploited in which users could submit any type of HTML tag, and have said tag run. For example, a malicious `<a>` that looks like “`<a href=javascript:alert (1)>xss</a>“` could have been used to run code through JavaScript on the client side. The problem has been patched as of commit `5defd92`, and users are advised to upgrade. Attackers do need posting privilege in order to exploit this vulnerability. This vulnerability is present within the 0.1.0 release, and users are advised to upgrade to 0.1.1. Users unable to upgrade may be able to work around the attack by either; Removing the ability to create posts, removing the `|safe` tag from the Jinja2 template titled “post.html” in templates or by adding manual validation of links in the post creation section. 2023-06-19 not yet calculated CVE-2023-34461
MISC
MISC netty — netty Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the `SniHandler` to allocate 16MB of heap. The `SniHandler` class is a handler that waits for the TLS handshake to configure a `SslHandler` according to the indicated server name by the `ClientHello` record. For this matter it allocates a `ByteBuf` using the value defined in the `ClientHello` record. Normally the value of the packet should be smaller than the handshake packet but there are not checks done here and the way the code is written, it is possible to craft a packet that makes the `SslClientHelloHandler`. This vulnerability has been fixed in version 4.1.94.Final. 2023-06-22 not yet calculated CVE-2023-34462
MISC
MISC xwiki — xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 2.2.1 until versions 14.4.8, 14.10.5, and 15.1RC1 of org.xwiki.platform:xwiki-platform-web and any version prior to 14.4.8, 14.10.5, and 15.1.RC1 of org.xwiki.platform:xwiki-platform-web-templates, any user who can edit a document in a wiki like the user profile can create a stored cross-site scripting attack. The attack occurs by putting plain HTML code into that document and then tricking another user to visit that document with the `displaycontent` or `rendercontent` template and plain output syntax. If a user with programming rights is tricked into visiting such a URL, arbitrary actions be performed with this user’s rights, impacting the confidentiality, integrity, and availability of the whole XWiki installation. This has been patched in XWiki 14.4.8, 14.10.5 and 15.1RC1 by setting the content type of the response to plain text when the output syntax is not an HTML syntax. 2023-06-23 not yet calculated CVE-2023-34464
MISC
MISC
MISC xwiki — xwiki-platform XWiki Platform is a generic wiki platform. Starting in version 11.8-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.2, `Mail.MailConfig` can be edited by any logged-in user by default. Consequently, they can change the mail obfuscation configuration and view and edit the mail sending configuration, including the smtp domain name and credentials. The problem has been patched in XWiki 14.4.8, 14.10.6, and 15.1. As a workaround, the rights of the `Mail.MailConfig` page can be manually updated so that only a set of trusted users can view, edit and delete it (e.g., the `XWiki.XWikiAdminGroup` group). 2023-06-23 not yet calculated CVE-2023-34465
MISC
MISC
MISC
MISC
MISC xwiki — xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 5.0-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, tags from pages not viewable to the current user are leaked by the tags API. This information can also be exploited to infer the document reference of non-viewable pages. This vulnerability has been patched in XWiki 14.4.8, 14.10.4, and 15.0-rc-1. 2023-06-23 not yet calculated CVE-2023-34466
MISC
MISC xwiki — xwiki-platform XWiki Platform is a generic wiki platform. Starting in version 3.5-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, the mail obfuscation configuration was not fully taken into account. While the mail displayed to the end user was obfuscated, the rest response was also containing the mail unobfuscated and users were able to filter and sort on the unobfuscated, allowing them to infer the mail content. The consequence was the possibility to retrieve the email addresses of all users even when obfuscated. This has been patched in XWiki 14.4.8, 14.10.4, and 15.0-rc-1. 2023-06-23 not yet calculated CVE-2023-34467
MISC
MISC
MISC langchain — langchain Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt. 2023-06-20 not yet calculated CVE-2023-34541
MISC wafu — keyless_smart_lock An issue was discovered in WAFU Keyless Smart Lock v1.0 allows attackers to unlock a device via code replay attack. 2023-06-22 not yet calculated CVE-2023-34553
MISC netgear — R6250 netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication. 2023-06-20 not yet calculated CVE-2023-34563
MISC
MISC aeotec — wallmote_switch A vulnerability in Aeotec WallMote Switch firmware v2.3 allows attackers to cause a Denial of Service (DoS) via a crafted Z-Wave message. 2023-06-20 not yet calculated CVE-2023-34596
MISC
MISC fibaro — motion_sensor A vulnerability in Fibaro Motion Sensor firmware v3.4 allows attackers to cause a Denial of Service (DoS) via a crafted Z-Wave message. 2023-06-20 not yet calculated CVE-2023-34597
MISC
MISC adiscon — loganalyzer Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection. 2023-06-20 not yet calculated CVE-2023-34600
MISC
MISC jeesite — jeesite Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component ${businessTable} at /act/ActDao.xml. 2023-06-22 not yet calculated CVE-2023-34601
MISC jeecgboot — jeecgboot JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController. 2023-06-19 not yet calculated CVE-2023-34602
MISC jeecgboot — jeecgboot JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController. 2023-06-19 not yet calculated CVE-2023-34603
MISC kioware_for_windows — kioware_for_windows KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function window.print() which can then be used to open an unprivileged command prompt. 2023-06-19 not yet calculated CVE-2023-34641
MISC
MISC kioware_for_windows — kioware_for_windows KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function showDirectoryPicker() which can then be used to open an unprivileged command prompt. 2023-06-19 not yet calculated CVE-2023-34642
MISC
MISC eyoucms — eyoucms A stored cross-site scripting (XSS) vulnerability in Eyoucms v1.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the web_recordnum parameter. 2023-06-19 not yet calculated CVE-2023-34657
MISC elenos — etg150_fm_transmitter Improper Access Control leads to privilege escalation affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user’s role in the user profile. An attack could occur over the public Internet in some cases. 2023-06-23 not yet calculated CVE-2023-34671
MISC
MISC elenos — etg150_fm_transmitter Improper Access Control leads to adding a high-privilege user affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user’s role within the admin profile. An attack could occur over the public Internet in some cases. 2023-06-23 not yet calculated CVE-2023-34672
MISC
MISC elenos — etg150_fm_transmitter Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases. 2023-06-23 not yet calculated CVE-2023-34673
MISC
MISC dmarcts-report-viewer — dmarcts-report-viewer Cross site scripting (XSS) vulnerabiliy in dmarcts-report-viewer dashboard versions 1.1 and thru commit 8a1d882b4c481a05e296e9b38a7961e912146a0f, allows unauthenticated attackers to execute arbitrary code via the org_name or domain values. 2023-06-22 not yet calculated CVE-2023-34796
MISC
MISC topdesk — topdesk XML Signature Wrapping (XSW) in SAML-based Single Sign-on feature in TOPdesk v12.10.12 allows bad actors with credentials to authenticate with the Identity Provider (IP) to impersonate any TOPdesk user via SAML Response manipulation. 2023-06-22 not yet calculated CVE-2023-34923
MISC
MISC casdoor — casdoor Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password. This vulnerability allows attackers to arbitrarily change the victim user’s password via supplying a crafted URL. 2023-06-22 not yet calculated CVE-2023-34927
MISC
MISC
MISC onlyoffice — community_server Onlyoffice Community Server before v12.5.2 was discovered to contain a remote code execution (RCE) vulnerability via the component UploadProgress.ashx. 2023-06-22 not yet calculated CVE-2023-34939
MISC
MISC
MISC oracle — apache/tomcat
  A regression in the fix for bug 66512 in Apache Tomcat 11.0.0-M5, 10.1.8, 9.0.74 and 8.5.88 meant that, if a response did not include any HTTP headers no AJP SEND_HEADERS messare woudl be sent for the response which in turn meant that at least one AJP proxy (mod_proxy_ajp) would use the response headers from the previous request leading to an information leak. 2023-06-21 not yet calculated CVE-2023-34981
MISC oracle — apache/airflow
  In Apache Airflow, some potentially sensitive values were being shown to the user in certain situations. This vulnerability is mitigated by the fact configuration is not shown in the UI by default (only if `[webserver] expose_config` is set to `non-sensitive-only`), and not all uncensored values are actually sentitive. This issue affects Apache Airflow: from 2.5.0 before 2.6.2. Users are recommended to update to version 2.6.2 or later. 2023-06-19 not yet calculated CVE-2023-35005
MISC
MISC
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MagePeople Team Booking and Rental Manager for Bike plugin <= 1.2.1 versions. 2023-06-23 not yet calculated CVE-2023-35048
MISC wordpress — wordpress
  Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin <= 3.0.7 versions. 2023-06-22 not yet calculated CVE-2023-35090
MISC wordpress — wordpress
  Broken Access Control vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin <= 3.0.8 versions allows any logged-in users, such as subscribers to view the “Orders” of the plugin and get the data related to the order like email, username, and more. 2023-06-22 not yet calculated CVE-2023-35093
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Flothemes Flo Forms – Easy Drag & Drop Form Builder plugin <= 1.0.40 versions. 2023-06-20 not yet calculated CVE-2023-35095
MISC wordpress — wordpress
  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Internet Marketing Dojo WP Affiliate Links plugin <= 0.1.1 versions. 2023-06-20 not yet calculated CVE-2023-35097
MISC wordpress — wordpress
  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in John Brien WordPress NextGen GalleryView plugin <= 0.5.5 versions. 2023-06-20 not yet calculated CVE-2023-35098
MISC moodle — moodle
  Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8 and 3.11 to 3.11.14. 2023-06-22 not yet calculated CVE-2023-35131
MISC moodle — moodle
  A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions. 2023-06-22 not yet calculated CVE-2023-35132
MISC moodle — moodle
  An issue in the logic used to check 0.0.0.0 against the cURL blocked hosts lists resulted in an SSRF risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions. 2023-06-22 not yet calculated CVE-2023-35133
MISC xwiki — xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 2.40m-2 and prior to versions 14.4.8, 14.10.4, and 15.0, any user with view rights on any document can execute code with programming rights, leading to remote code execution by crafting an url with a dangerous payload. The problem has been patched in XWiki 15.0, 14.10.4 and 14.4.8. 2023-06-23 not yet calculated CVE-2023-35150
MISC
MISC
MISC xwiki — xwiki-platform XWiki Platform is a generic wiki platform. Starting in version 7.3-milestone-1 and prior to versions 14.4.8, 14.10.6, and 15.1, ny user can call a REST endpoint and obtain the obfuscated passwords, even when the mail obfuscation is activated. The issue has been patched in XWiki 14.4.8, 14.10.6, and 15.1. There is no known workaround. 2023-06-23 not yet calculated CVE-2023-35151
MISC
MISC
MISC xwiki — xwiki-platform XWiki Platform is a generic wiki platform. Starting in version 12.9-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.1, any logged in user can add dangerous content in their first name field and see it executed with programming rights. Leading to rights escalation. The vulnerability has been fixed on XWiki 14.4.8, 14.10.6, and 15.1. As a workaround, one may apply the patch manually. 2023-06-23 not yet calculated CVE-2023-35152
MISC
MISC
MISC
MISC
MISC xwiki — xwiki-platform XWiki Platform is a generic wiki platform. Starting in version 5.4.4 and prior to versions 14.4.8, 14.10.4, and 15.0, a stored cross-site scripting vulnerability can be exploited by users with edit rights by adding a `AppWithinMinutes.FormFieldCategoryClass` class on a page and setting the payload on the page title. Then, any user visiting `/xwiki/bin/view/AppWithinMinutes/ClassEditSheet` executes the payload. The issue has been patched in XWiki 14.4.8, 14.10.4, and 15.0. As a workaround, update `AppWithinMinutes.ClassEditSheet` with a patch. 2023-06-23 not yet calculated CVE-2023-35153
MISC
MISC
MISC knowagelabs — knowage-server Knowage is an open source analytics and business intelligence suite. Starting in version 6.0.0 and prior to version 8.1.8, an attacker can register and activate their account without having to click on the link included in the email, allowing them access to the application as a normal user. This issue has been patched in version 8.1.8. 2023-06-23 not yet calculated CVE-2023-35154
MISC xwiki — xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). For instance, the following URL execute an `alter` on the browser: `<xwiki-host>/xwiki/bin/view/Main/?viewer=share&send=1&target=&target=%3Cimg+src+onerror%3Dalert%28document.domain%29%3E+%3Cimg+src+onerror%3Dalert%28document.domain%29%3E+%3Crenniepak%40intigriti.me%3E&includeDocument=inline&message=I+wanted+to+share+this+page+with+you.`, where `<xwiki-host>` is the URL of your XWiki installation. The vulnerability has been patched in XWiki 15.0-rc-1, 14.10.4, and 14.4.8. 2023-06-23 not yet calculated CVE-2023-35155
MISC
MISC xwiki — xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It’s possible to exploit the delete template to perform a XSS, e.g. by using URL such as: > xwiki/bin/get/FlamingoThemes/Cerulean?xpage=xpart&vm=delete.vm&xredirect=javascript:alert(document.domain). This vulnerability exists since XWiki 6.0-rc-1. The vulnerability has been patched in XWiki 14.10.6 and 15.1. Note that a partial patch has been provided in 14.10.5 but wasn’t enough to entirely fix the vulnerability. 2023-06-23 not yet calculated CVE-2023-35156
MISC
MISC
MISC
MISC
MISC
MISC
MISC xwiki — xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It’s possible to perform an XSS by forging a request to a delete attachment action with a specific attachment name. Now this XSS can be exploited only if the attacker knows the CSRF token of the user, or if the user ignores the warning about the missing CSRF token. The vulnerability has been patched in XWiki 15.1-rc-1 and XWiki 14.10.6. 2023-06-23 not yet calculated CVE-2023-35157
MISC
MISC
MISC xwiki — xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It’s possible to exploit the restore template to perform a XSS, e.g. by using URL such as: > /xwiki/bin/view/XWiki/Main?xpage=restore&showBatch=true&xredirect=javascript:alert(document.domain). This vulnerability exists since XWiki 9.4-rc-1. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1. 2023-06-23 not yet calculated CVE-2023-35158
MISC
MISC
MISC
MISC xwiki — xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It’s possible to exploit the deletespace template to perform a XSS, e.g. by using URL such as: > xwiki/bin/deletespace/Sandbox/?xredirect=javascript:alert(document.domain). This vulnerability exists since XWiki 3.4-milestone-1. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1. 2023-06-23 not yet calculated CVE-2023-35159
MISC
MISC
MISC
MISC xwiki — xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It’s possible to exploit the resubmit template to perform a XSS, e.g. by using URL such as: > xwiki/bin/view/XWiki/Main xpage=resubmit&resubmit=javascript:alert(document.domain)&xback=javascript:alert(document.domain). This vulnerability exists since XWiki 2.5-milestone-2. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1. 2023-06-23 not yet calculated CVE-2023-35160
MISC
MISC
MISC
MISC xwiki — xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It’s possible to exploit the DeleteApplication page to perform a XSS, e.g. by using URL such as: > xwiki/bin/view/AppWithinMinutes/DeleteApplication?appName=Menu&resolve=true&xredirect=javascript:alert(document.domain). This vulnerability exists since XWiki 6.2-milestone-1. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1. 2023-06-23 not yet calculated CVE-2023-35161
MISC
MISC
MISC
MISC xwiki — xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It’s possible to exploit the previewactions template to perform a XSS, e.g. by using URL such as: > <hostname>/xwiki/bin/get/FlamingoThemes/Cerulean xpage=xpart&vm=previewactions.vm&xcontinue=javascript:alert(document.domain). This vulnerability exists since XWiki 6.1-rc-1. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1. 2023-06-23 not yet calculated CVE-2023-35162
MISC
MISC
MISC
MISC vegaprotocol — vega Vega is a decentralized trading platform that allows pseudo-anonymous trading of derivatives on a blockchain. Prior to version 0.71.6, a vulnerability exists that allows a malicious validator to trick the Vega network into re-processing past Ethereum events from Vega’s Ethereum bridge. For example, a deposit to the collateral bridge for 100USDT that credits a party’s general account on Vega, can be re-processed 50 times resulting in 5000USDT in that party’s general account. This is without depositing any more than the original 100USDT on the bridge. Despite this exploit requiring access to a validator’s Vega key, a validator key can be obtained at the small cost of 3000VEGA, the amount needed to announce a new node onto the network. A patch is available in version 0.71.6. No known workarounds are available, however there are mitigations in place should this vulnerability be exploited. There are monitoring alerts for `mainnet1` in place to identify any issues of this nature including this vulnerability being exploited. The validators have the ability to stop the bridge thus stopping any withdrawals should this vulnerability be exploited. 2023-06-23 not yet calculated CVE-2023-35163
MISC
MISC
MISC aws — cloud_development_kit AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages `aws-cdk-lib` 2.0.0 until 2.80.0 and `@aws-cdk/aws-eks` 1.57.0 until 1.202.0, `eks.Cluster` and `eks.FargateCluster` constructs create two roles, `CreationRole` and `default MastersRole`, that have an overly permissive trust policy. The first, referred to as the `CreationRole`, is used by lambda handlers to create the cluster and deploy Kubernetes resources (e.g `KubernetesManifest`, `HelmChart`, …) onto it. Users with CDK version higher or equal to 1.62.0 (including v2 users) may be affected. The second, referred to as the `default MastersRole`, is provisioned only if the `mastersRole` property isn’t provided and has permissions to execute `kubectl` commands on the cluster. Users with CDK version higher or equal to 1.57.0 (including v2 users) may be affected. The issue has been fixed in `@aws-cdk/aws-eks` v1.202.0 and `aws-cdk-lib` v2.80.0. These versions no longer use the account root principal. Instead, they restrict the trust policy to the specific roles of lambda handlers that need it. There is no workaround available for CreationRole. To avoid creating the `default MastersRole`, use the `mastersRole` property to explicitly provide a role. 2023-06-23 not yet calculated CVE-2023-35165
MISC
MISC xwiki — xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It’s possible to execute any wiki content with the right of the TipsPanel author by creating a tip UI extension. This has been patched in XWiki 15.1-rc-1 and 14.10.5. 2023-06-20 not yet calculated CVE-2023-35166
MISC
MISC
MISC remult — remult Remult is a CRUD framework for full-stack TypeScript. If you used the apiPrefilter option of the `@Entity` decorator, by setting it to a function that returns a filter that prevents unauthorized access to data, an attacker who knows the `id` of an entity instance is not authorized to access, can gain read, update and delete access to it. The issue is fixed in version 0.20.6. As a workaround, set the `apiPrefilter` option to a filter object instead of a function. 2023-06-23 not yet calculated CVE-2023-35167
MISC
MISC
MISC webklex — php-imap PHP-IMAP is a wrapper for common IMAP communication without the need to have the php-imap module installed / enabled. Prior to version 5.3.0, an unsanitized attachment filename allows any unauthenticated user to leverage a directory traversal vulnerability, which results in a remote code execution vulnerability. Every application that stores attachments with `Attachment::save()` without providing a `$filename` or passing unsanitized user input is affected by this attack. An attacker can send an email with a malicious attachment to the inbox, which gets crawled with `webklex/php-imap` or `webklex/laravel-imap`. Prerequisite for the vulnerability is that the script stores the attachments without providing a `$filename`, or providing an unsanitized `$filename`, in `src/Attachment::save(string $path, string $filename = null)`. In this case, where no `$filename` gets passed into the `Attachment::save()` method, the package would use a series of unsanitized and insecure input values from the mail as fallback. Even if a developer passes a `$filename` into the `Attachment::save()` method, e.g. by passing the name or filename of the mail attachment itself (from email headers), the input values never get sanitized by the package. There is also no restriction about the file extension (e.g. “.php”) or the contents of a file. This allows an attacker to upload malicious code of any type and content at any location where the underlying user has write permissions. The attacker can also overwrite existing files and inject malicious code into files that, e.g. get executed by the system via cron or requests. Version 5.3.0 contains a patch for this issue. 2023-06-23 not yet calculated CVE-2023-35169
MISC
MISC
MISC
MISC
MISC nextcloud — server/enterprise_server NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Starting in version 26.0.0 and prior to version 26.0.2, an attacker could supply a URL that redirects an unsuspecting victim from a legitimate domain to an attacker’s site. Nextcloud Server and Nextcloud Enterprise Server 26.0.2 contain a patch for this issue. No known workarounds are available. 2023-06-23 not yet calculated CVE-2023-35171
MISC
MISC
MISC nextcloud — server/enterprise_server NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 21.0.0 until 21.0.9.12, 22.0.0 until 22.2.10.12, 23.0.0 until 23.0.12.7, 24.0.0 until 24.0.12.2, 25.0.0 until 25.0.7, and 26.0.0 until 26.0.2, an attacker can bruteforce the password reset links. Nextcloud Server n 25.0.7 and 26.0.2 and Nextcloud Enterprise Server 21.0.9.12, 22.2.10.12, 23.0.12.7, 24.0.12.2, 25.0.7, and 26.0.2 contain a patch for this issue. No known workarounds are available. 2023-06-23 not yet calculated CVE-2023-35172
MISC
MISC
MISC nextcloud — end-to-end_encryption_app Nextcloud End-to-end encryption app provides all the necessary APIs to implement End-to-End encryption on the client side. By providing an invalid meta data file, an attacker can make previously dropped files inaccessible. It is recommended that the Nextcloud End-to-end encryption app is upgraded to version 1.12.4 that contains the fix. 2023-06-23 not yet calculated CVE-2023-35173
MISC
MISC
MISC livebook-dev — livebook Livebook is a web application for writing interactive and collaborative code notebooks. On Windows, it is possible to open a `livebook://` link from a browser which opens Livebook Desktop and triggers arbitrary code execution on victim’s machine. Any user using Livebook Desktop on Windows is potentially vulnerable to arbitrary code execution when they expect Livebook to be opened from browser. This vulnerability has been fixed in version 0.8.2 and 0.9.3. 2023-06-22 not yet calculated CVE-2023-35174
MISC
MISC
MISC
MISC
MISC progess – whatsup_gold In Progress WhatsUp Gold before 23.0.0, an SNMP-related application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim’s browser, aka XSS. 2023-06-23 not yet calculated CVE-2023-35759
MISC wordpress — wordpress
  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Alain Gonzalez Google Map Shortcode plugin <= 3.1.2 versions. 2023-06-19 not yet calculated CVE-2023-35772
MISC wordpress — wordpress
  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Backup Solutions WP Backup Manager plugin <= 1.13.1 versions. 2023-06-19 not yet calculated CVE-2023-35775
MISC wordpress — wordpress
  Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Beplus Sermon’e – Sermons Online plugin <= 1.0.0 versions. 2023-06-19 not yet calculated CVE-2023-35776
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Seed Webs Seed Fonts plugin <= 2.3.1 versions. 2023-06-19 not yet calculated CVE-2023-35779
MISC safe — softwarez_fme_server A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation when editing a network-based resource connection, resulting in the unauthorized reading and writing of arbitrary files. Successful exploitation requires an attacker to have access to a user account with write privileges. FME Flow 2023.0 is also a fixed version. 2023-06-23 not yet calculated CVE-2023-35801
MISC
MISC
CONFIRM sugarcrm — enterprise An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. An Unrestricted File Upload vulnerability has been identified in the Notes module. By using crafted requests, custom PHP code can be injected and executed through the Notes module because of missing input validation. Regular user privileges can be used to exploit this vulnerability. Editions other than Enterprise are also affected. 2023-06-17 not yet calculated CVE-2023-35808
MISC sugarcrm — enterprise An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Bean Manipulation vulnerability has been identified in the REST API. By using a crafted request, custom PHP code can be injected through the REST API because of missing input validation. Regular user privileges can be used to exploit this vulnerability. Editions other than Enterprise are also affected. 2023-06-17 not yet calculated CVE-2023-35809
MISC sugarcrm — enterprise An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Second-Order PHP Object Injection vulnerability has been identified in the DocuSign module. By using crafted requests, custom PHP code can be injected and executed through the DocuSign module because of missing input validation. Admin user privileges are required to exploit this vulnerability. Editions other than Enterprise are also affected. 2023-06-17 not yet calculated CVE-2023-35810
MISC sugarcrm — enterprise An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. Two SQL Injection vectors have been identified in the REST API. By using crafted requests, custom SQL code can be injected through the REST API because of missing input validation. Regular user privileges can use used for exploitation. Editions other than Enterprise are also affected. 2023-06-17 not yet calculated CVE-2023-35811
MISC sitecore — multiple_products Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3. 2023-06-17 not yet calculated CVE-2023-35813
MISC linux — kernel
  An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c. 2023-06-18 not yet calculated CVE-2023-35823
MISC
MISC
MISC
MISC linux — kernel
  An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c. 2023-06-18 not yet calculated CVE-2023-35824
MISC
MISC
MISC
MISC linux — kernel
  An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c. 2023-06-18 not yet calculated CVE-2023-35826
MISC
MISC
MISC
MISC linux — kernel
  An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c. 2023-06-18 not yet calculated CVE-2023-35827
MISC
MISC linux — kernel
  An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c. 2023-06-18 not yet calculated CVE-2023-35828
MISC
MISC
MISC
MISC linux — kernel
  An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c. 2023-06-18 not yet calculated CVE-2023-35829
MISC
MISC
MISC
MISC solon — solon Solon before 2.3.3 allows Deserialization of Untrusted Data. 2023-06-19 not yet calculated CVE-2023-35839
MISC
MISC elfinder — elfinder _joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector. 2023-06-19 not yet calculated CVE-2023-35840
MISC
MISC
MISC
MISC nocodb — nocodb NocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the /download route. This vulnerability could allow an attacker to access sensitive files and data on the server, including configuration files, source code, and other sensitive information. 2023-06-19 not yet calculated CVE-2023-35843
MISC
MISC
MISC lightdash — lightdash packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intended file extension (.csv or .png) is used. 2023-06-19 not yet calculated CVE-2023-35844
MISC
MISC
MISC
MISC picotcp — picotcp VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performing port filtering. 2023-06-19 not yet calculated CVE-2023-35846
MISC picotcp — picotcp VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero). 2023-06-19 not yet calculated CVE-2023-35847
MISC picotcp — picotcp VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member. 2023-06-19 not yet calculated CVE-2023-35848
MISC picotcp — picotcp VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet. 2023-06-19 not yet calculated CVE-2023-35849
MISC suricata — suricata
  In Suricata before 6.0.13 (when there is an adversary who controls an external source of rules), a dataset filename, that comes from a rule, may trigger absolute or relative directory traversal, and lead to write access to a local filesystem. This is addressed in 6.0.13 by requiring allow-absolute-filenames and allow-write (in the datasets rules configuration section) if an installation requires traversal/writing in this situation. 2023-06-19 not yet calculated CVE-2023-35852
MISC
MISC
MISC
MISC suricata — suricata
  In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section. 2023-06-19 not yet calculated CVE-2023-35853
MISC
MISC
MISC zoho — manageengine_adselfservice_plus Zoho ManageEngine ADSelfService Plus through 6113 has an authentication bypass that can be exploited to steal the domain controller session token for identity spoofing, thereby achieving the privileges of the domain controller administrator. 2023-06-20 not yet calculated CVE-2023-35854
MISC
MISC counter-strike — counter-strike A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client’s machine by modifying the lservercfgfile console variable. 2023-06-19 not yet calculated CVE-2023-35855
MISC nintendo — multiple_mario_kart_wii_versions A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to execute arbitrary code on a client’s machine via a crafted packet. 2023-06-19 not yet calculated CVE-2023-35856
MISC siren — investigate In Siren Investigate before 13.2.2, session keys remain active even after logging out. 2023-06-19 not yet calculated CVE-2023-35857
MISC
MISC libcoap — libcoap libcoap 4.3.1 contains a buffer over-read via the function coap_parse_oscore_conf_mem at coap_oscore.c. 2023-06-19 not yet calculated CVE-2023-35862
MISC
MISC
MISC wordpress — wordpress
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Vadym K. Extra User Details plugin <= 0.5 versions. 2023-06-20 not yet calculated CVE-2023-35878
MISC wordpress — wordpress
  Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Team Heateor Super Socializer plugin <= 7.13.52 versions. 2023-06-20 not yet calculated CVE-2023-35882
MISC wordpress — wordpress
  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in EventPrime plugin <= 3.0.5 versions. 2023-06-20 not yet calculated CVE-2023-35884
MISC cloudpanel_2 — cloudpanel_2 CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication. 2023-06-20 not yet calculated CVE-2023-35885
MISC wordpress — wordpress
  Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce PayPal Payments plugin <= 2.0.4 versions. 2023-06-22 not yet calculated CVE-2023-35917
MISC wordpress — wordpress
  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Bulk Stock Management plugin <= 2.2.33 versions. 2023-06-22 not yet calculated CVE-2023-35918
MISC intellectualsites — fastasyncworldedit FastAsyncWorldEdit (FAWE) is designed for efficient world editing. This vulnerability enables the attacker to select a region with the `Infinity` keyword (case-sensitive!) and executes any operation. This has a possibility of bringing the performing server down. This issue has been fixed in version 2.6.3. 2023-06-23 not yet calculated CVE-2023-35925
MISC
MISC
MISC backstage — backstage Backstage is an open platform for building developer portals. The Backstage scaffolder-backend plugin uses a templating library that requires sandbox, as it by design allows for code injection. The library used for this sandbox so far has been `vm2`, but in light of several past vulnerabilities and existing vulnerabilities that may not have a fix, the plugin has switched to using a different sandbox library. A malicious actor with write access to a registered scaffolder template could manipulate the template in a way that allows for remote code execution on the scaffolder-backend instance. This was only exploitable in the template YAML definition itself and not by user input data. This is vulnerability is fixed in version 1.15.0 of `@backstage/plugin-scaffolder-backend`. 2023-06-22 not yet calculated CVE-2023-35926
MISC
MISC
MISC nextcloud — server/enterprise_server NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 21.0.0 until 21.0.9.12, 22.0.0 until 22.2.10.12, 23.0.0 until 23.0.12.7, 24.0.0 until 24.0.12.2, 25.0.0 until 25.0.7, and 26.0.0 until 26.0.2, when two server are registered as trusted servers for each other and successfully exchanged the share secrets, the malicious server could modify or delete VCards in the system addressbook on the origin server. This would impact the available and shown information in certain places, such as the user search and avatar menu. If a manipulated user modifies their own data in the personal settings the entry is fixed again. Nextcloud Server n 25.0.7 and 26.0.2 and Nextcloud Enterprise Server 21.0.9.12, 22.2.10.12, 23.0.12.7, 24.0.12.2, 25.0.7, and 26.0.2 contain a patch for this issue. A workaround is available. Remove all trusted servers in the “Administration” > “Sharing” settings `…/index.php/settings/admin/sharing`. Afterwards, trigger a recreation of the local system addressbook with the following `occ dav:sync-system-addressbook`. 2023-06-23 not yet calculated CVE-2023-35927
MISC
MISC
MISC nextcloud — server/enterprise_server Nextcloud Server is a space for data storage on Nextcloud, a self-hosted productivity playform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 19.0.0 until 19.0.13.9, 20.0.0 until 20.0.14.14, 21.0.0 until 21.0.9.12, 22.0.0 until 22.2.10.12, 23.0.0 until 23.0.12.7, 24.0.0 until 24.0.12.2, 25.0.0 until 25.0.7, and 26.0.0 until 26.0.2, a user could use this functionality to get access to the login credentials of another user and take over their account. This issue has been patched in Nextcloud Server versions 25.0.7 and 26.0.2 and NextCloud Enterprise Server versions 19.0.13.9, 20.0.14.14, 21.0.9.12, 22.2.10.12, 23.0.12.7, 24.0.12.2, 25.0.7, and 26.0.2. Three workarounds are available. Disable app files_external. Change config setting “Allow users to mount external storage” to disabled in “Administration” > “External storage” settings `…/index.php/settings/admin/externalstorages`. Change config setting to disallow users to create external storages in “Administration” > “External storage” settings `…/index.php/settings/admin/externalstorages` with the types FTP, Nextcloud, SFTP, and/or WebDAV. 2023-06-23 not yet calculated CVE-2023-35928
MISC
MISC
MISC shescape — shescape Shescape is a simple shell escape library for JavaScript. An attacker may be able to get read-only access to environment variables. This bug has been patched in version 1.7.1. 2023-06-23 not yet calculated CVE-2023-35931
MISC
MISC
MISC
MISC jcvi — jcvi jcvi is a Python library to facilitate genome assembly, annotation, and comparative genomics. A configuration injection happens when user input is considered by the application in an unsanitized format and can reach the configuration file. A malicious user may craft a special payload that may lead to a command injection. The impact of a configuration injection may vary. Under some conditions, it may lead to command injection if there is for instance shell code execution from the configuration file values. This vulnerability does not currently have a fix. 2023-06-23 not yet calculated CVE-2023-35932
MISC
MISC eyoucms — eyoucms There is a storage type cross site scripting (XSS) vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3 2023-06-22 not yet calculated CVE-2023-36093
MISC funadmin — funadmin funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install. 2023-06-22 not yet calculated CVE-2023-36097
MISC sqlite3 — sqlite3 sqlite3 v3.40.1 was discovered to contain a segmentation violation at /sqlite3_aflpp/shell.c. 2023-06-23 not yet calculated CVE-2023-36191
MISC sngrep — sngrep Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_ws_check_packet at /src/capture.c. 2023-06-23 not yet calculated CVE-2023-36192
MISC gifsicle — gifsicle Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguity_error component at /src/clp.c. 2023-06-23 not yet calculated CVE-2023-36193
MISC libming_ listswf — libming_ listswf libming listswf 0.4.7 was discovered to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function at parser.c. 2023-06-22 not yet calculated CVE-2023-36239
MISC flvmeta — flvmeta FLVMeta v1.2.1 was discovered to contain a buffer overflow via the xml_on_metadata_tag_only function at dump_xml.c. 2023-06-22 not yet calculated CVE-2023-36243
MISC libredwg — libredwg
  LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c. 2023-06-23 not yet calculated CVE-2023-36271
MISC libredwg — libredwg
  LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c. 2023-06-23 not yet calculated CVE-2023-36272
MISC libredwg — libredwg
  LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c. 2023-06-23 not yet calculated CVE-2023-36273
MISC libredwg — libredwg
  LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_write_TF at bits.c. 2023-06-23 not yet calculated CVE-2023-36274
MISC webkul — qloapps An unauthenticated Time-Based SQL injection found in Webkul QloApps 1.6.0 via GET parameter date_from, date_to, and id_product allows a remote attacker to bypass a web application’s authentication and authorization mechanisms and retrieve the contents of an entire database. 2023-06-23 not yet calculated CVE-2023-36284
MISC webkul — qloapps An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user’s session cookie and then impersonate that user via POST controller parameter. 2023-06-23 not yet calculated CVE-2023-36287
MISC webkul — qloapps An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user’s session cookie and then impersonate that user via GET configure parameter. 2023-06-23 not yet calculated CVE-2023-36288
MISC webkul — qloapps An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user’s session cookie and then impersonate that user via POST email_create and back parameter. 2023-06-23 not yet calculated CVE-2023-36289
MISC codekop — codekop
  A Cross-Site Request Forgery (CSRF) in POS Codekop v2.0 allows attackers to escalate privileges. 2023-06-23 not yet calculated CVE-2023-36345
MISC codekop — codekop
  POS Codekop v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the nm_member parameter at print.php. 2023-06-23 not yet calculated CVE-2023-36346
MISC codekop — codekop
  POS Codekop v2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the filename parameter. 2023-06-23 not yet calculated CVE-2023-36348
MISC tp-link — multiple_products
  TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlTimeSchedRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request. 2023-06-22 not yet calculated CVE-2023-36354
MISC tp-link — multiple_products
  TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request. 2023-06-22 not yet calculated CVE-2023-36355
MISC tp-link — multiple_products
  TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component /userRpm/VirtualServerRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request. 2023-06-22 not yet calculated CVE-2023-36356
MISC tp-link — multiple_products
  An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause a Denial of Service (DoS) via a crafted GET request. 2023-06-22 not yet calculated CVE-2023-36357
MISC tp-link — multiple_products
  TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request. 2023-06-22 not yet calculated CVE-2023-36358
MISC tp-link — multiple_products
  TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request. 2023-06-22 not yet calculated CVE-2023-36359
MISC monetdb_server — monetdb_server
  An issue in the rel_sequences component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. 2023-06-22 not yet calculated CVE-2023-36362
MISC monetdb_server — monetdb_server
  An issue in the __nss_database_lookup component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. 2023-06-22 not yet calculated CVE-2023-36363
MISC monetdb_server — monetdb_server
  An issue in the rel_deps component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. 2023-06-22 not yet calculated CVE-2023-36364
MISC monetdb_server — monetdb_server
  An issue in the sql_trans_copy_key component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. 2023-06-22 not yet calculated CVE-2023-36365
MISC monetdb_server — monetdb_server
  An issue in the log_create_delta component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause Denial of Service (DoS) via crafted SQL statements. 2023-06-22 not yet calculated CVE-2023-36366
MISC monetdb_server — monetdb_server
  An issue in the BLOBcmp component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. 2023-06-22 not yet calculated CVE-2023-36367
MISC monetdb_server — monetdb_server
  An issue in the cs_bind_ubat component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. 2023-06-22 not yet calculated CVE-2023-36368
MISC monetdb_server — monetdb_server
  An issue in the list_append component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. 2023-06-22 not yet calculated CVE-2023-36369
MISC monetdb_server — monetdb_server
  An issue in the gc_col component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. 2023-06-22 not yet calculated CVE-2023-36370
MISC monetdb_server — monetdb_server
  An issue in the GDKfree component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. 2023-06-22 not yet calculated CVE-2023-36371
MISC