CVE-2023 records published in June 2023

This page lists the 2,054 CVE-2023 records published in June 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 17 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.

Critical
26813.0% of these records
Listed in CISA KEV
170.8% of these records
Reported exploited
1under 0.1% of these records
Detection signal
693.4% of these records
Exploit code
1075.2% of these records
Actionable vendor fix
1,55675.8% of these records

Figures as of 2026-10-24 13:46 UTC. Records published in June 2023 have had from about 40 months to about 41 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2023 records published in June 2023, newest first: records 1 to 1,000 of 2,054
CVE Summary CVSS EPSS Published Signals
CVE-2023-37365Hnswlib init_index double free6.5v3.10.6%2023-06-30Fix
CVE-2023-37360Pacparser pacparser_find_proxy vulnerability6.1v3.10.4%2023-06-30Fix
CVE-2023-37307MISP cross-site scripting5.4v3.10.5%2023-06-30
CVE-2023-37306MISP information disclosure through error messages7.5v3.10.5%2023-06-30
CVE-2023-37305mediawiki observable discrepancy5.3v3.10.6%2023-06-30Fix
CVE-2023-37304mediawiki cross-site scripting5.4v3.10.5%2023-06-30Fix
CVE-2023-37303mediawiki improper check for exceptional conditions9.8v3.11.0%2023-06-30Fix
CVE-2023-37302MediaWiki cross-site scripting6.1v3.10.7%2023-06-30Fix
CVE-2023-37301mediawiki inadequate encryption strength5.3v3.10.3%2023-06-30Fix
CVE-2023-37300mediawiki incorrect authorization5.3v3.10.7%2023-06-30Fix
CVE-2023-37299Joplin cross-site scripting6.1v3.10.6%2023-06-30Fix
CVE-2023-37298Joplin cross-site scripting6.1v3.10.6%2023-06-30Fix
CVE-2023-36812Remote code execution in OpenTSDB9.8CNA v3.116.5%2023-06-30MetasploitExploit codeFix
CVE-2023-36810Quadratic runtime with malformed PDF missing xref marker in pypdf6.2CNA v3.10.6%2023-06-30Fix
CVE-2023-36807Infinite loop when reading malformed objects in pypdf6.2CNA v3.10.6%2023-06-30Fix
CVE-2023-36539Zoom Video Communications Zoom Clients missing cryptographic step5.3CNA v3.10.5%2023-06-30
CVE-2023-36477Persistent cross-site scripting (XSS) through CKEditor Configuration pages in XWiki Platform9.1CNA v3.10.9%2023-06-30Fix
CVE-2023-36347Codekop endpoint excel.php of POS improper authentication7.5v3.134.3%2023-06-30Nuclei
CVE-2023-36146Multilaser RE170 cross-site scripting5.4v3.10.5%2023-06-30Exploit code
CVE-2023-36144Intelbras Sg 2404 Mr An authentication bypass7.5v3.136.5%2023-06-30NucleiExploit code
CVE-2023-36143Maxprintisp Maxlink 1200g OS command injection8.8v3.12.7%2023-06-30Exploit code
CVE-2023-35947Path traversal vulnerabilities in handling of Tar archives in Gradle6.9CNA v3.10.5%2023-06-30Fix
CVE-2023-35946Dependency cache path traversal in Gradle6.9CNA v3.10.3%2023-06-30Fix
CVE-2023-35178HP LaserJet Pro buffer overflow8.8v3.10.4%2023-06-30Fix
CVE-2023-35177HP LaserJet Pro out-of-bounds write8.8v3.10.4%2023-06-30Fix
CVE-2023-35176HP LaserJet Pro buffer overflow8.8v3.10.4%2023-06-30Fix
CVE-2023-35175HP LaserJet Pro server-side request forgery9.8v3.11.4%2023-06-30Fix
CVE-2023-34840Angular-ui-notification cross-site scripting6.1v3.10.6%2023-06-30Exploit code
CVE-2023-33336Sophos Web Appliance cross-site scripting4.8v3.10.6%2023-06-30
CVE-2023-33298Perimeter81 Xpc Helpertool command injection7.8v3.10.6%2023-06-30Fix
CVE-2023-33276Gira Knx IP Router cross-site scripting6.1v3.10.5%2023-06-30
CVE-2023-32622WAVLINK Wl-wn531ax2 Firmware improper neutralization7.2v3.10.7%2023-06-30Fix
CVE-2023-32621WAVLINK WL-WN531AX2 unrestricted file upload7.2v3.10.7%2023-06-30Fix
CVE-2023-32620WAVLINK Wl-wn531ax2 Firmware improper authentication6.5v3.10.3%2023-06-30Fix
CVE-2023-32613WAVLINK Wl-wn531ax2 Firmware resource exposure8.1v3.10.3%2023-06-30Fix
CVE-2023-32612WAVLINK Wl-wn531ax2 Firmware client-side enforcement of server-side security7.2v3.10.7%2023-06-30Fix
CVE-2023-32608Implem Pleasanter path traversal6.5v3.11.2%2023-06-30Fix
CVE-2023-32607Implem Pleasanter stored cross-site scripting5.4v3.10.5%2023-06-30Fix
CVE-2023-31543Pipreqs uncontrolled search path9.8v3.11.2%2023-06-30Fix
CVE-2023-30589Node.js Node llhttp vulnerable to HTTP request smuggling7.5NVD v3.13.9%2023-06-30Fix
CVE-2023-29241Bosch Building Integration System cybersecurity guidebook vulnerability8.1CNA v3.10.4%2023-06-30Fix
CVE-2023-29147Malwarebytes authentication bypass by spoofing5.5v3.10.3%2023-06-30Fix
CVE-2023-29145Malwarebytes weak password recovery7.8v3.10.3%2023-06-30Fix
CVE-2023-28387"NewsPicks" App hard-coded credentials5.5v3.10.2%2023-06-30Fix
CVE-2023-27469Malwarebytes Anti-exploit link following7.1v3.10.4%2023-06-30Fix
CVE-2023-26299HP PC products using AMI UEFI Firmware time-of-check time-of-use race condition7.0v3.10.1%2023-06-30Fix
CVE-2023-26135flatnest prototype pollution9.8v3.10.9%2023-06-30
CVE-2023-22816Limited Post-authentication remote command injection in My Cloud Products6.0CNA v3.10.9%2023-06-30Fix
CVE-2023-22815Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices6.2CNA v3.11.3%2023-06-30Fix
CVE-2023-3493Improper neutralization of formula elements in a CSV file in FOSSBilling/FOSSBilling8.0v3.10.5%2023-06-30Fix
CVE-2023-3491Unrestricted upload of file with dangerous type in FOSSBilling/FOSSBilling8.8v3.10.9%2023-06-30Fix
CVE-2023-3490SQL injection in FOSSBilling/FOSSBilling9.8v3.10.9%2023-06-30Fix
CVE-2023-3485Insecure default Authorization in Temporal Server3.0CNA v3.10.2%2023-06-30Fix
CVE-2023-3479Cross-site scripting (XSS) Reflected in hestiacp/hestiacp6.1v3.11.3%2023-06-30NucleiFix
CVE-2023-3478IBOS OA Add User edit&op=member actionEdit SQL injection7.2v3.10.8%2023-06-30
CVE-2023-3477RocketSoft Rocket LMS Contact form store cross-site scripting6.1v3.10.4%2023-06-30
CVE-2023-3476SimplePHPscripts GuestBook Script URL parameter preview.php cross-site scripting6.1v3.10.4%2023-06-30
CVE-2023-3475SimplePHPscripts Event Script URL parameter preview.php cross-site scripting6.1v3.10.4%2023-06-30
CVE-2023-3474SimplePHPscripts Simple Blog URL parameter preview.php cross-site scripting6.1v3.10.4%2023-06-30
CVE-2023-3473Campcodes Retro Cellphone Online Store edit_product.php SQL injection9.8v3.10.8%2023-06-30
CVE-2023-3469Cross-site scripting (XSS) Reflected in thorsten/phpMyFAQ4.8v3.10.6%2023-06-30Fix
CVE-2023-3338kernel crash due to a null pointer dereference in the dn_nsp_send function6.5NVD v3.18.5%2023-06-30Exploit codeFix
CVE-2023-3249Web3 Crypto wallet Login and NFT token gating WordPress plugin authentication bypass9.8CNA v3.11.1%2023-06-30Fix
CVE-2023-3063SP Project and Document Manager WordPress plugin insecure direct object reference8.8CNA v3.10.7%2023-06-30Fix
CVE-2023-2908LibTIFF: Null pointer dereference in tif_dir.c5.5NVD v3.10.4%2023-06-30Fix
CVE-2023-2846Authentication bypass vulnerability in MELSEC-F Series main module7.5CNA v3.11.3%2023-06-30
CVE-2023-2834BookIt WordPress plugin authentication bypass9.8CNA v3.11.9%2023-06-30Fix
CVE-2023-1206kernel resource exhaustion5.7NVD v3.10.6%2023-06-30Exploit codeKCVFix
CVE-2023-37256mediawiki cross-site scripting6.1v3.10.5%2023-06-29Fix
CVE-2023-37255mediawiki cross-site scripting6.1v3.10.5%2023-06-29Fix
CVE-2023-37254mediawiki cross-site scripting6.1v3.10.5%2023-06-29Fix
CVE-2023-37251mediawiki cross-site scripting6.1v3.10.4%2023-06-29Fix
CVE-2023-37237Veritas Netbackup Appliance incorrect permission assignment7.2v3.10.6%2023-06-29Fix
CVE-2023-36617ruby-lang URI regular expression denial of service5.3v3.11.7%2023-06-29Fix
CVE-2023-36607Ovarro TBox API commands missing authorization5.3v3.10.5%2023-06-29Fix
CVE-2023-36488ILIAS cross-site scripting5.4v3.10.4%2023-06-29Fix
CVE-2023-36487ILIAS weak password recovery9.8v3.11.0%2023-06-29Fix
CVE-2023-36484ILIAS cross-site scripting6.1v3.10.4%2023-06-29Fix
CVE-2023-36476`calamares-nixos-extensions` LUKS keyfile exposure7.9CNA v3.10.3%2023-06-29Fix
CVE-2023-36471XWiki Commons HTML sanitizer vulnerability9.1CNA v3.11.0%2023-06-29Fix
CVE-2023-36470Code injection in icon themes of XWiki Platform10.0CNA v3.11.9%2023-06-29Fix
CVE-2023-36469Code injection through NotificationRSSService in XWiki Platform10.0CNA v3.182.0%2023-06-29Fix
CVE-2023-36468Upgrading doesn't prevent exploiting vulnerable XWiki documents10.0CNA v3.11.9%2023-06-29Fix
CVE-2023-35938User access not updated with privilege change in Tuleap4.1CNA v3.10.6%2023-06-29Fix
CVE-2023-35830Stw-mobile-machines Tcg-4lite missing authentication9.8v3.11.3%2023-06-29Fix
CVE-2023-34849Ikuai8 Ikuaios unauthorized command injection9.8v3.12.9%2023-06-29
CVE-2023-34844Play With Docker container privileged mode vulnerability9.8v3.10.9%2023-06-29
CVE-2023-34843Traggo path traversal7.5NVD v3.17.2%2023-06-29Nuclei
CVE-2023-34834Mcl-collection MCL-Net files accessible to external parties5.3v3.14.0%2023-06-29Exploit code
CVE-2023-34831Odysseycs Ithacalabs Turnitin Lti cross-site scripting5.4v3.10.4%2023-06-29
CVE-2023-34738Chemex unrestricted file upload9.8v3.10.8%2023-06-29
CVE-2023-34735Property Cloud Platform Management Center SQL injection9.8v3.10.7%2023-06-29
CVE-2023-34734Secnet Annet Ac Centralized Management Platform cross-site scripting4.8v3.10.4%2023-06-29
CVE-2023-34658Telegram clickjacking5.3v3.10.4%2023-06-29
CVE-2023-34656Video Management System session fixation8.8v3.10.7%2023-06-29
CVE-2023-34648User Registration & Login And User Management System With Admin Panel cross-site scripting6.1v3.10.4%2023-06-29
CVE-2023-34599gibbonedu gibbon cross-site scripting6.1NVD v3.11.9%2023-06-29Nuclei
CVE-2023-34598gibbonedu gibbon path traversal9.8v3.147.2%2023-06-29NucleiExploit code
CVE-2023-34487Online Hotel Management System SQL injection9.8v3.10.9%2023-06-29
CVE-2023-34486Online Hotel Management System cross-site scripting6.1v3.10.7%2023-06-29
CVE-2023-33661ChurchCRM cross-site scripting6.1v3.10.5%2023-06-29
CVE-2023-33466orthanc-server orthanc code injection8.8v3.14.2%2023-06-29Fix
CVE-2023-33277Gira Knx IP Router path traversal7.5v3.11.3%2023-06-29
CVE-2023-33190labring sealos improper configuration of RBAC permissions obtaining cluster control permissions10.0CNA v3.10.7%2023-06-29Fix
CVE-2023-32610SYNCK GRAPHICA Mailform Pro CGI regular expression denial of service7.5v3.11.3%2023-06-29Fix
CVE-2023-31222Medtronic Paceart MSMQ deserialization of untrusted data9.8CNA v3.128.5%2023-06-29Fix
CVE-2023-30955Foundry Workspace-server Developer Mode authorization bypass4.3CNA v3.10.4%2023-06-29Fix
CVE-2023-30946Issues notification metadata lacks authorization3.5CNA v3.10.4%2023-06-29Fix
CVE-2023-26966libtiff buffer overflow5.5v3.10.4%2023-06-29Fix
CVE-2023-26616D-Link Dir-823g Firmware buffer overflow9.8v3.11.3%2023-06-29
CVE-2023-26613D-Link Dir-823g Firmware OS command injection9.8v3.131.4%2023-06-29
CVE-2023-26612D-Link Dir-823g Firmware buffer overflow9.8v3.11.3%2023-06-29
CVE-2023-26085Arm Nn Android Neural Networks Driver out-of-bounds read7.8v3.10.3%2023-06-29Fix
CVE-2023-25433libtiff buffer overflow5.5v3.10.4%2023-06-29Fix
CVE-2023-22886Apache Airflow JDBC Provider: RCE8.8v3.11.5%2023-06-29Fix
CVE-2023-3465SimplePHPscripts Classified Ads Script HTTP POST request user.php cross-site scripting6.1v3.10.5%2023-06-29
CVE-2023-3464SimplePHPscripts Classified Ads Script URL parameter preview.php cross-site scripting6.1v3.10.5%2023-06-29
CVE-2023-3458SourceCodester Shopping Website forgot-password.php SQL injection9.8v3.10.9%2023-06-29
CVE-2023-3457SourceCodester Shopping Website index.php SQL injection9.8v3.10.9%2023-06-29
CVE-2023-3447Active Directory Integration / LDAP Integration WordPress plugin LDAP injection7.5NVD v3.10.5%2023-06-29Fix
CVE-2023-2982WordPress Social Login and Register plugin authentication bypass9.8CNA v3.146.2%2023-06-29NucleiExploit codeFix
CVE-2023-1602Short URL WordPress plugin stored cross-site scripting4.8v3.10.4%2023-06-29Fix
CVE-2023-36475parse-community parse-server parse Server vulnerable to remote code execution9.8CNA v3.13.2%2023-06-28Fix
CVE-2023-36474Interactsh server settings make users vulnerable to Subdomain takeover8.2CNA v3.10.5%2023-06-28Fix
CVE-2023-36467awslabs aws-dataall AWS data.all vulnerable to RCE through user injection of Python commands8.0CNA v3.11.2%2023-06-28Fix
CVE-2023-34937H3C Magic B1ST UpdateSnat function stack-based buffer overflow7.5v3.10.8%2023-06-28
CVE-2023-34936H3C Magic B1ST UpdateMacClone function stack-based buffer overflow7.5v3.10.8%2023-06-28
CVE-2023-34935H3C Magic B1ST AddWlanMacList function stack-based buffer overflow7.5v3.10.8%2023-06-28
CVE-2023-34934H3C Magic B1ST Edit_BasicSSID_5G function stack-based buffer overflow7.5v3.10.8%2023-06-28
CVE-2023-34933H3C Magic B1ST UpdateWanParams function stack-based buffer overflow7.5v3.10.8%2023-06-28
CVE-2023-34932H3C Magic B1ST UpdateWanMode function stack-based buffer overflow7.5v3.10.8%2023-06-28
CVE-2023-34931H3C Magic B1ST EditWlanMacList function stack-based buffer overflow7.5v3.10.8%2023-06-28
CVE-2023-34930H3C Magic B1ST EditMacList function stack-based buffer overflow7.5v3.10.8%2023-06-28
CVE-2023-34929H3C Magic B1ST AddMacList function stack-based buffer overflow7.5v3.10.8%2023-06-28
CVE-2023-34928H3C Magic B1ST Edit_BasicSSID function stack-based buffer overflow7.5v3.11.3%2023-06-28
CVE-2023-347617-eleven Led Message Cup missing authentication6.5v3.10.5%2023-06-28
CVE-2023-34736Guantang Equipment Management System unrestricted file upload7.2v3.10.8%2023-06-28
CVE-2023-34652PHPGurukul Hostel Management System cross-site scripting6.1v3.10.5%2023-06-28
CVE-2023-34651Hospital Management System cross-site scripting6.1v3.10.5%2023-06-28
CVE-2023-34650Small CRM cross-site scripting6.1v3.10.5%2023-06-28
CVE-2023-34647PHPGurukul Hostel Management System cross-site scripting6.1v3.10.4%2023-06-28
CVE-2023-33592oretnom23 Lost and Found Information System SQL injection9.8v3.13.8%2023-06-28Exploit code
CVE-2023-33570Webkul Bagisto code injection8.8v3.11.1%2023-06-28
CVE-2023-32623Monkey Wrench Snow Monkey Forms path traversal9.1v3.11.5%2023-06-28Fix
CVE-2023-32224D-Link DSL-224 firmware improper restriction of excessive authentication attempts9.8v3.11.4%2023-06-28
CVE-2023-32223D-Link DSL-224 firmware post authentication command execution8.8v3.11.8%2023-06-28
CVE-2023-32222D-Link Dsl-g256dg firmware version vBZ_1. authentication bypass9.8v3.11.9%2023-06-28
CVE-2023-30259LibreCAD importshp plugin buffer overflow5.5v3.10.3%2023-06-28Fix
CVE-2023-27866IBM Informix JDBC code execution6.3CNA v3.11.0%2023-06-28Fix
CVE-2023-26615D-Link Dir-823g Firmware weak password recovery7.5v3.10.9%2023-06-28
CVE-2023-26134git-commit-info vulnerable to command injection9.8v3.13.6%2023-06-28Fix
CVE-2023-21518Samsung Mobile Samsung SearchWidget improper access control4.4CNA v3.10.2%2023-06-28Fix
CVE-2023-21517Samsung Exynos Heap out-of-bounds write8.8CNA v3.11.6%2023-06-28Fix
CVE-2023-21513Samsung Mobile Devices CC Mode improper privilege management6.1CNA v3.10.4%2023-06-28Fix
CVE-2023-21512Samsung Mobile Devices improper privilege management2.4CNA v3.10.2%2023-06-28Fix
CVE-2023-21237Android Pixel information disclosure5.5v3.10.3%2023-06-28KEVFix
CVE-2023-21236Android aoc.c out-of-bounds write6.7v3.10.1%2023-06-28Fix
CVE-2023-21226Android SAEMM_ContextManagement.c out-of-bounds read7.5v3.10.4%2023-06-28Fix
CVE-2023-21225Android incorrect authorization7.8v3.10.1%2023-06-28Fix
CVE-2023-21224Android ss_MmConManagement.c out-of-bounds read7.5v3.10.5%2023-06-28Fix
CVE-2023-21223Android LPP_CommonUtil.c out-of-bounds read7.5v3.10.4%2023-06-28Fix
CVE-2023-21222Android storage.c out-of-bounds write6.7v3.10.1%2023-06-28Fix
CVE-2023-21220Android cleartext transmission of sensitive information7.5v3.10.3%2023-06-28Fix
CVE-2023-21219Android cleartext transmission of sensitive information7.5v3.10.3%2023-06-28Fix
CVE-2023-21214Android p2p_iface.cpp out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21213Android sta_iface.cpp out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21212Android multiple files out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21211Android multiple files out-of-bounds read5.5v3.10.1%2023-06-28Fix
CVE-2023-21210Android sta_iface.cpp out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21209Android sta_iface.cpp out-of-bounds read6.7v3.10.1%2023-06-28Fix
CVE-2023-21208Android sta_iface.cpp out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21207Android sta_iface.cpp out-of-bounds read6.7v3.10.1%2023-06-28Fix
CVE-2023-21206Android sta_iface.cpp out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21205Android sta_iface.cpp out-of-bounds read5.5v3.10.1%2023-06-28Fix
CVE-2023-21204Android multiple files out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21203Android sta_iface.cpp out-of-bounds read6.7v3.10.1%2023-06-28Fix
CVE-2023-21202Android btm_devctl.cc out-of-bounds read4.5v3.10.1%2023-06-28Fix
CVE-2023-21201Android btif_sdp_server.cc out-of-bounds read7.5v3.10.5%2023-06-28Fix
CVE-2023-21200Android btm_iso_impl.h out-of-bounds read5.5v3.10.1%2023-06-28Fix
CVE-2023-21199Android btu_hcif.cc out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21198Android btif_sdp_server.cc out-of-bounds read5.5v3.10.1%2023-06-28Fix
CVE-2023-21197Android btm_acl.cc out-of-bounds read7.5v3.10.4%2023-06-28Fix
CVE-2023-21196Android btm_ble_batchscan.cc out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21195Android btm_ble_gap.cc out-of-bounds read4.5v3.10.1%2023-06-28Fix
CVE-2023-21194Android gatt_utils.cc out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21193Android VideoFrame.h information disclosure7.5v3.10.4%2023-06-28Fix
CVE-2023-21192Android InputMethodManagerService.java privilege escalation7.8v3.10.1%2023-06-28Fix
CVE-2023-21191Android NotificationManagerService.java privilege escalation7.8v3.10.1%2023-06-28Fix
CVE-2023-21190Android btm_acl.cc information disclosure5.0v3.10.1%2023-06-28Fix
CVE-2023-21189Android LockTaskController.java privilege escalation7.3v3.10.1%2023-06-28Fix
CVE-2023-21188Android btm_ble_gap.cc out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21187Android UsbAccessoryUriActivity.java privilege escalation7.8v3.10.1%2023-06-28Fix
CVE-2023-21186Android Dns.cpp out-of-bounds read7.5v3.10.5%2023-06-28Fix
CVE-2023-21185Android missing authorization7.8v3.10.1%2023-06-28Fix
CVE-2023-21184Android CarrierPrivilegesTracker.java insecure permissions7.8v3.10.1%2023-06-28Fix
CVE-2023-21183Android ForegroundUtils.java privilege escalation7.8v3.10.1%2023-06-28Fix
CVE-2023-21182Android VendorVideoAPI.cpp out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21181Android btm_ble_gap.cc out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21180Android parser.c out-of-bounds read7.5v3.10.5%2023-06-28Fix
CVE-2023-21179Android XmlUtil.java privilege escalation7.8v3.10.1%2023-06-28Fix
CVE-2023-21178Android KeyUtil.cpp information disclosure4.1v3.10.1%2023-06-28Fix
CVE-2023-21177Android WindowManagerService.java information disclosure5.5v3.10.1%2023-06-28Fix
CVE-2023-21176Android utils.rs denial of service4.4v3.10.1%2023-06-28Fix
CVE-2023-21175Android DataUsageSummary.java privilege escalation7.8v3.10.1%2023-06-28Fix
CVE-2023-21174Android BillingCycleSettings.java privilege escalation7.8v3.10.1%2023-06-28Fix
CVE-2023-21173Android DataUsageList.java information disclosure5.5v3.10.1%2023-06-28Exploit codeFix
CVE-2023-21172Android WifiCallingSettings.java privilege escalation7.8v3.10.1%2023-06-28Fix
CVE-2023-21171Android InputDispatcher.cpp privilege escalation6.7v3.10.1%2023-06-28Fix
CVE-2023-21170Android ComposerCommandEngine.h out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21169Android p2p_iface.cpp out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21168Android ColorConverter.cpp out-of-bounds read5.5v3.10.1%2023-06-28Fix
CVE-2023-21167Android DevicePolicyManagerService.java crash5.5v3.10.1%2023-06-28Fix
CVE-2023-21161Android simdata.cpp out-of-bounds write6.7v3.10.1%2023-06-28Fix
CVE-2023-21160Android protocolmiscbuilder.cpp out-of-bounds read5.5v3.10.1%2023-06-28Fix
CVE-2023-21159Android simdata.cpp out-of-bounds write6.7v3.10.1%2023-06-28Fix
CVE-2023-21158Android miscdata.cpp out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21157Android wlandata.cpp out-of-bounds write6.7v3.10.1%2023-06-28Fix
CVE-2023-21156Android protocolmiscbulider.cpp out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21155Android protocolmiscbuilder.cpp out-of-bounds read5.5v3.10.1%2023-06-28Fix
CVE-2023-21154Android protocolmiscbuilder.cpp out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21153Android imsservice.cpp out-of-bounds read6.7v3.10.1%2023-06-28Fix
CVE-2023-21152Android face_stats_analyzer.cc out-of-bounds read5.5v3.10.1%2023-06-28Fix
CVE-2023-21151Android the Google BMS kernel module out-of-bounds write6.7v3.10.1%2023-06-28Fix
CVE-2023-21150Android hal_socket.c out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21149Android ShannonRcsService.java privilege escalation7.8v3.10.1%2023-06-28Fix
CVE-2023-21148Android protocolimsbuilder.cpp out-of-bounds read4.4v3.10.1%2023-06-28Fix
CVE-2023-21147Android lwis_device_i2c.c use-after-free7.8v3.10.1%2023-06-28Fix
CVE-2023-21146Android use-after-free6.7v3.10.1%2023-06-28Fix
CVE-2023-21066Android cd_codec.c out-of-bounds write9.8v3.10.5%2023-06-28Fix
CVE-2023-20199Cisco Duo Two-Factor Authentication for macOS authentication bypass6.2CNA v3.10.3%2023-06-28Fix
CVE-2023-20192Cisco Expressway Series and Cisco TelePresence Video Communication Server privilege escalation9.6CNA v3.10.7%2023-06-28Fix
CVE-2023-20188Cisco Small Business Smart and Managed Switches cross-site scripting4.8CNA v3.10.5%2023-06-28
CVE-2023-20178Cisco Secure Client incorrect default permissions7.8CNA v3.15.4%2023-06-28Exploit codeFix
CVE-2023-20136Cisco Secure Workload incorrect use of privileged APIs4.3CNA v3.10.5%2023-06-28Fix
CVE-2023-20120Cisco Web Security Appliance (WSA) cross-site scripting5.4CNA v3.10.5%2023-06-28Fix
CVE-2023-20119Cisco Secure Email and Web Manager cross-site scripting6.1CNA v3.10.5%2023-06-28Fix
CVE-2023-20116Cisco Unified Communications Manager infinite loop6.8CNA v3.10.6%2023-06-28Fix
CVE-2023-20108Cisco Unified Communications Manager IM and Presence Service excessive memory allocation7.5CNA v3.10.9%2023-06-28Fix
CVE-2023-20105Cisco TelePresence Video Communication Server (VCS) Expressway privilege escalation9.6CNA v3.10.9%2023-06-28Fix
CVE-2023-20028Cisco Web Security Appliance (WSA) cross-site scripting5.4CNA v3.10.5%2023-06-28Fix
CVE-2023-20006Cisco Adaptive Security Appliance (ASA) Software incorrect numeric conversion8.6CNA v3.10.9%2023-06-28Fix
CVE-2023-3450Ruijie RG-BCR860 Network Diagnostic page os command injection7.2v3.150.4%2023-06-28Exploit code
CVE-2023-3449IBOS OA Interview Management Export export&interviews=x actionExport SQL injection7.2v3.10.9%2023-06-28
CVE-2023-3445Cross-site scripting (XSS) Stored in spinacms/Spina4.8v3.10.6%2023-06-28Fix
CVE-2023-3439Linux Kernel (mctp) use-after-free4.7NVD v3.10.3%2023-06-28Fix
CVE-2023-3427Salon Booking System WordPress plugin cross-site request forgery4.3v3.10.3%2023-06-28Fix
CVE-2023-3407Subscribe2 WordPress plugin cross-site request forgery4.3v3.10.3%2023-06-28Fix
CVE-2023-3390Linux kernel netfilter subsystem use-after-free7.8NVD v3.10.9%2023-06-28Exploit codeFix
CVE-2023-3389Linux kernel A use-after-free7.8NVD v3.10.7%2023-06-28Fix
CVE-2023-3359kernel null pointer dereference5.5NVD v3.10.2%2023-06-28Fix
CVE-2023-3358Linux kernel A null pointer dereference5.5NVD v3.10.2%2023-06-28Fix
CVE-2023-3357Linux kernel A null pointer dereference5.5NVD v3.10.2%2023-06-28Fix
CVE-2023-3355kernel null pointer dereference in submit_lookup_cmds in drivers/gpu/drm/msm/msm_gem_submit.c5.5NVD v3.10.3%2023-06-28Fix
CVE-2023-3333NEC Aterm WG2600HP2 OS command vulnerability in NEC Corporation improper neutralization7.2v3.10.7%2023-06-28
CVE-2023-3332NEC Aterm WG2600HP2 NEC Corporation Aterm cross-site scripting4.8v3.10.3%2023-06-28
CVE-2023-3331NEC Aterm WG2600HP2 NEC Corporation Aterm path traversal5.4v3.10.5%2023-06-28
CVE-2023-3330NEC Aterm WG2600HP2 NEC Corporation path traversal4.3v3.10.5%2023-06-28
CVE-2023-3243Alerton BCM-WEB authentication bypass by spoofing8.3CNA v3.10.6%2023-06-28
CVE-2023-3138libX11 memory corruption7.5NVD v3.11.7%2023-06-28Fix
CVE-2023-3090Out-of-bounds write in Linux Kernel's ipvlan network driver7.8NVD v3.10.5%2023-06-28Fix
CVE-2023-3034Reflected XSS in BKG NTRIP Professional Caster version6.1v3.10.4%2023-06-28Fix
CVE-2023-2625Hitachi Energy TXpert Hub CoreTec 4 OS command injection9.0CNA v3.10.5%2023-06-28Fix
CVE-2023-2232GitLab regular expression denial of service6.5CNA v3.11.6%2023-06-28Fix
CVE-2023-1844Subscribe2 WordPress plugin missing authorization4.3CNA v3.10.5%2023-06-28Fix
CVE-2023-1295Privilege escalation with IO_RING_OP_CLOSE in the Linux kernel7.0NVD v3.10.2%2023-06-28Fix
CVE-2023-36464Infinite loop when a comment isn't followed by a character in pypdf6.2CNA v3.10.4%2023-06-27Fix
CVE-2023-36463Cross-site scripting (XSS) in meldekarten generator5.3CNA v3.10.4%2023-06-27Fix
CVE-2023-36002Proofpoint Insider Threat Management ITM server missing authorization for URL validation4.3CNA v3.10.3%2023-06-27Fix
CVE-2023-36000Proofpoint Insider Threat Management ITM server missing authorization for Agent Config6.5CNA v3.10.3%2023-06-27Fix
CVE-2023-35998Proofpoint Insider Threat Management ITM server missing authorization in SOAP endpoints4.6CNA v3.10.2%2023-06-27Fix
CVE-2023-35800Stormshield Endpoint Security incorrect permission assignment4.3v3.10.4%2023-06-27Fix
CVE-2023-35799Stormshield Endpoint Security incorrect permission assignment5.5v3.10.2%2023-06-27Fix
CVE-2023-35798Airflow Apache ODBC and MSSQL Providers arbitrary file read4.3v3.11.3%2023-06-27Fix
CVE-2023-34839Issabel PBX cross-site request forgery6.8v3.10.7%2023-06-27Exploit code
CVE-2023-34838Escanav Escan Management Console Microworld Technologies cross-site scripting5.4NVD v3.10.8%2023-06-27
CVE-2023-34837Escanav Escan Management Console Microworld Technologies cross-site scripting5.4v3.10.8%2023-06-27Exploit code
CVE-2023-34836Escanav Escan Management Console Microworld Technologies cross-site scripting5.4v3.10.8%2023-06-27Exploit code
CVE-2023-34835Escanav Escan Management Console Microworld Technologies cross-site scripting5.4NVD v3.10.8%2023-06-27
CVE-2023-34830I-doit cross-site scripting5.4v3.10.7%2023-06-27Exploit code
CVE-2023-34395Apache Airflow ODBC Provider: Remote code execution7.8v3.10.8%2023-06-27Fix
CVE-2023-34240Weak passwords allowed in CloudExplorer-Lite6.5CNA v3.10.5%2023-06-27Fix
CVE-2023-34099Improper mail validation in Shopware5.3CNA v3.10.6%2023-06-27Fix
CVE-2023-34098Dependency configuration exposed in Shopware5.3CNA v3.10.6%2023-06-27Fix
CVE-2023-32339IBM Business Automation Workflow cross-site scripting6.1CNA v3.10.5%2023-06-27Fix
CVE-2023-30993IBM Cloud Pak for Security information disclosure6.8CNA v3.10.6%2023-06-27Fix
CVE-2023-29068Autodesk products out-of-bounds write7.8v3.10.2%2023-06-27Fix
CVE-2023-28857LDAP password leak in Apereo CAS GHSL-2023-0097.5NVD v3.10.5%2023-06-27Fix
CVE-2023-26276IBM QRadar information disclosure5.9CNA v3.10.4%2023-06-27Fix
CVE-2023-26274IBM QRadar cross-site scripting4.6CNA v3.10.4%2023-06-27Fix
CVE-2023-26273IBM QRadar SIEM improper input validation4.3CNA v3.10.4%2023-06-27Fix
CVE-2023-25004Autodesk products integer overflow7.8v3.10.2%2023-06-27Fix
CVE-2023-25002Autodesk 3ds Max use-after-free7.8v3.10.3%2023-06-27Fix
CVE-2023-25001Navisworks use-after-free7.8v3.10.3%2023-06-27Fix
CVE-2023-23468IBM Robotic Process Automation for Cloud Pak access control5.1CNA v3.10.2%2023-06-27Fix
CVE-2023-22834Palantir Contour analysis creation vulnerability2.7CNA v3.10.4%2023-06-27Fix
CVE-2023-22593IBM Robotic Process Automation for Cloud Pak security configuration4.0CNA v3.10.2%2023-06-27Fix
CVE-2023-3436Deadlock in Xpdf due to PDF object stream references3.3CNA v3.10.2%2023-06-27Fix
CVE-2023-3432Server-side request forgery (SSRF) in PlantUML/PlantUML10.0v3.10.9%2023-06-27Fix
CVE-2023-3431Improper access control in PlantUML/PlantUML5.3v3.10.9%2023-06-27Fix
CVE-2023-3423Weak password requirements in CloudExplorer-Dev/CloudExplorer-Lite8.8v3.10.8%2023-06-27Fix
CVE-2023-3412Image Map Pro WordPress plugin stored cross-site scripting5.4v3.10.4%2023-06-27
CVE-2023-3411Image Map Pro WordPress plugin cross-site request forgery4.3v3.10.3%2023-06-27
CVE-2023-3405Denial of service condition in M-Files Server7.5CNA v3.10.8%2023-06-27Fix
CVE-2023-3371EmbedPress WordPress plugin sensitive information exposure7.5v3.10.5%2023-06-27Fix
CVE-2023-3132MainWP Child WordPress plugin information disclosure via Back-Up files7.5v3.10.7%2023-06-27Fix
CVE-2023-2996Jetpack WordPress plugin Author+ arbitrary file manipulation via API8.8NVD v3.14.8%2023-06-27Fix
CVE-2023-2877Formidable Forms WordPress plugin Subscriber+ remote code execution8.8NVD v3.122.5%2023-06-27Exploit codeFix
CVE-2023-2842WP Inventory Manager WordPress plugin Inventory Items deletion via CSRF8.1NVD v3.10.4%2023-06-27Fix
CVE-2023-2818Proofpoint Insider Threat Management ITM Windows Agent Insecure Filesystem Permissions5.5CNA v3.10.2%2023-06-27Fix
CVE-2023-2795CodeColorer Admin+ stored cross-site scripting4.8NVD v3.10.4%2023-06-27Fix
CVE-2023-2744WP ERP WordPress plugin Admin+ SQL injection7.2NVD v3.12.6%2023-06-27Exploit codeFix
CVE-2023-2743WP ERP WordPress plugin reflected cross-site scripting6.1NVD v3.10.5%2023-06-27Fix
CVE-2023-2711Ultimate Product Catalog WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2023-06-27Fix
CVE-2023-2628KiviCare Management System WordPress plugin Multiple CSRF8.8NVD v3.10.4%2023-06-27Fix
CVE-2023-2627KiviCare Management System WordPress plugin Subscriber+ Unauthorised AJAX Calls4.3NVD v3.10.2%2023-06-27Fix
CVE-2023-2624KiviCare Management System WordPress plugin reflected cross-site scripting6.1NVD v3.11.2%2023-06-27NucleiFix
CVE-2023-2623KiviCare Management System WordPress plugin Subscriber+ sensitive information disclosure6.5NVD v3.10.8%2023-06-27Fix
CVE-2023-2605WP Brutal AI WordPress plugin Admin+ reflected XSS6.1NVD v3.10.5%2023-06-27Fix
CVE-2023-2601WP Brutal AI WordPress plugin SQL injection via CSRF9.8NVD v3.11.8%2023-06-27Fix
CVE-2023-2592FormCraft Premium WordPress plugin Admin+ SQLi7.2NVD v3.10.9%2023-06-27Fix
CVE-2023-2580Meow Apps AI Engine plugin plugin settings stored cross-site scripting4.8NVD v3.10.5%2023-06-27Fix
CVE-2023-2482Responsive CSS EDITOR WordPress plugin Admin+ SQLi7.2NVD v3.10.9%2023-06-27
CVE-2023-2326Gravity Forms Google Sheet Connector WordPress plugin access code update via CSRF6.5NVD v3.10.3%2023-06-27Fix
CVE-2023-2178Aajoda Testimonials WordPress plugin Admin+ stored XSS4.8NVD v3.10.8%2023-06-27NucleiFix
CVE-2023-2068File Manager Advanced Shortcode WordPress plugin unauthenticated remote code execution9.8NVD v3.139.6%2023-06-27MetasploitExploit codeFix
CVE-2023-2032Custom 404 Pro WordPress plugin Multiple SQL injection9.8NVD v3.10.9%2023-06-27Fix
CVE-2023-1891Accordion and FAQ WordPress plugin reflected XSS6.1NVD v3.10.5%2023-06-27Fix
CVE-2023-1166USM Premium WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2023-06-27Fix
CVE-2023-0873Kanban Boards for WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2023-06-27Fix
CVE-2023-0588Catalyst Connect Zoho CRM Client Portal WordPress plugin reflected XSS6.1NVD v3.10.5%2023-06-27Fix
CVE-2023-36675mediawiki cross-site scripting6.1v3.10.8%2023-06-26Fix
CVE-2023-36662Techtime User Management cross-site scripting5.4v3.10.3%2023-06-26Fix
CVE-2023-36631Malwarebytes Binisoft Windows Firewall Control rules interface improper access control7.8v3.10.7%2023-06-26
CVE-2023-36301Talend DATA Catalog path traversal7.5v3.10.9%2023-06-26Fix
CVE-2023-36252Ateme Flamingo XL insufficient session expiration8.8v3.10.9%2023-06-26
CVE-2023-35933OpenFGA denial of service die to circular relationship5.9CNA v3.11.1%2023-06-26Fix
CVE-2023-35930LookupResources may return partial results in spicedb3.7CNA v3.10.4%2023-06-26Fix
CVE-2023-35695Trend Micro Moibile Security for Enterprise sensitive information in log files7.5v3.11.5%2023-06-26Fix
CVE-2023-35168DataEase user database access incorrect permission assignment6.5CNA v3.10.7%2023-06-26Fix
CVE-2023-35164Unauthorized users can manipulate a dashboard created by an administrator in DataEase6.3CNA v3.10.4%2023-06-26Fix
CVE-2023-34924H3C Magic B1STW out-of-bounds write7.5v3.10.9%2023-06-26Exploit code
CVE-2023-34463Unauthorized users can delete applications in DataEase8.1CNA v3.10.7%2023-06-26Fix
CVE-2023-34422Lenovo XClarity Administrator improper input validation6.5CNA v3.10.5%2023-06-26Fix
CVE-2023-34421Lenovo XClarity Administrator improper input validation6.5CNA v3.10.5%2023-06-26Fix
CVE-2023-34420Lenovo XClarity Administrator OS command injection7.2CNA v3.11.3%2023-06-26Fix
CVE-2023-34418Lenovo XClarity Administrator SQL injection8.1CNA v3.10.5%2023-06-26Fix
CVE-2023-34148Trend Micro Apex One improper privilege management7.8v3.10.2%2023-06-26Fix
CVE-2023-34147Trend Micro Apex One improper privilege management7.8v3.10.2%2023-06-26Fix
CVE-2023-34146Trend Micro Apex One improper privilege management7.8v3.10.2%2023-06-26Fix
CVE-2023-34145Trend Micro Apex One An untrusted search path7.8v3.10.3%2023-06-26Fix
CVE-2023-34144Trend Micro Apex One An untrusted search path7.8v3.10.3%2023-06-26Fix
CVE-2023-33580PHPGurukul Student Study Center Management System cross-site scripting4.8v3.13.7%2023-06-26Exploit code
CVE-2023-33404BlogEngine.NET unrestricted file upload9.8v3.125.8%2023-06-26Exploit code
CVE-2023-33176Blind SSRF when Uploading Presentation in BigBlueButton4.8CNA v3.10.5%2023-06-26Fix
CVE-2023-32605Trend Micro Apex Central cross-site scripting5.4v3.10.3%2023-06-26Fix
CVE-2023-32604Trend Micro Apex Central cross-site scripting5.4v3.10.3%2023-06-26Fix
CVE-2023-32557Trend Micro Apex One path traversal9.8v3.11.2%2023-06-26Fix
CVE-2023-32556Trend Micro Apex One link following5.5v3.10.3%2023-06-26Fix
CVE-2023-32555Trend Micro Apex One time-of-check time-of-use race condition7.0v3.10.2%2023-06-26Fix
CVE-2023-32554Trend Micro Apex One time-of-check time-of-use race condition7.0v3.10.2%2023-06-26Fix
CVE-2023-32553Trend Micro Apex One An improper access control5.3v3.10.5%2023-06-26Fix
CVE-2023-32552Trend Micro Apex One An improper access control5.3v3.10.6%2023-06-26Fix
CVE-2023-32537Trend Micro Apex Central cross-site scripting5.4v3.10.3%2023-06-26Fix
CVE-2023-32536Trend Micro Apex Central cross-site scripting5.4v3.10.3%2023-06-26Fix
CVE-2023-32535Trend Micro Apex Central cross-site scripting6.1v3.11.9%2023-06-26Fix
CVE-2023-32534Trend Micro Apex Central cross-site scripting6.1v3.10.7%2023-06-26Fix
CVE-2023-32533Trend Micro Apex Central cross-site scripting6.1v3.11.9%2023-06-26Fix
CVE-2023-32532Trend Micro Apex Central cross-site scripting6.1v3.11.9%2023-06-26Fix
CVE-2023-32531Trend Micro Apex Central cross-site scripting6.1v3.11.9%2023-06-26Fix
CVE-2023-32530Trend Micro Apex Central SQL injection8.8v3.12.4%2023-06-26Fix
CVE-2023-32529Trend Micro Apex Central SQL injection8.8v3.12.2%2023-06-26Fix
CVE-2023-32528Trend Micro Moibile Security for Enterprise code injection8.8v3.13.0%2023-06-26Fix
CVE-2023-32527Trend Micro Moibile Security for Enterprise code injection8.8v3.12.9%2023-06-26Fix
CVE-2023-32526Trend Micro Moibile Security for Enterprise unrestricted file upload6.5v3.12.0%2023-06-26Fix
CVE-2023-32525Trend Micro Moibile Security for Enterprise unrestricted file upload6.5v3.12.0%2023-06-26Fix
CVE-2023-32524Trend Micro Moibile Security for Enterprise improper authentication8.8v3.12.6%2023-06-26Fix
CVE-2023-32523Trend Micro Moibile Security for Enterprise improper authentication8.8v3.12.6%2023-06-26Fix
CVE-2023-32522Trend Micro Mobile Security specific dll path traversal8.1v3.13.3%2023-06-26Fix
CVE-2023-32521Trend Micro Mobile Security specific service dll path traversal9.1v3.166.8%2023-06-26Fix
CVE-2023-30945Palantir Video History Server filename handling path traversal9.8CNA v3.10.7%2023-06-26Fix
CVE-2023-30902Trend Micro Apex One privilege escalation5.5v3.10.1%2023-06-26Fix
CVE-2023-30261Openwb command injection9.8v3.131.7%2023-06-26
CVE-2023-29459Redbull Fc Red Bull Salzburg SQL injection6.1v3.10.6%2023-06-26
CVE-2023-29438SimpleModal Contact Form (SMCF) WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-26
CVE-2023-29437Connections Business Directory WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-06-26Fix
CVE-2023-29436IFrame Shortcode WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-06-26Fix
CVE-2023-29435Cryptocurrency All-in-One WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-06-26
CVE-2023-29434Optin Forms WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-26Fix
CVE-2023-29430TheRoof WordPress theme cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-26Fix
CVE-2023-29427Amelia WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-26Fix
CVE-2023-29424ShiftController Employee Shift Scheduling WordPress plugin cross-site scripting (XSS)4.8NVD v3.10.4%2023-06-26Fix
CVE-2023-29423Cancel order request WooCommerce WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-26Fix
CVE-2023-29093Conditional extra fees for woocommerce WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-26Fix
CVE-2023-28992Coupon Affiliates WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-26Fix
CVE-2023-28991Order date time for WooCommerce WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-26Fix
CVE-2023-28988Direct checkout, Add to cart redirect for Woocommerce WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-26Fix
CVE-2023-28929Trend Micro Security (Consumer) uncontrolled search path7.8v3.10.4%2023-06-26Fix
CVE-2023-28485WeKan file preview stored cross-site scripting5.4v3.11.0%2023-06-26
CVE-2023-27082pluck-cms Pluck /admin.php cross-site scripting4.8v3.10.6%2023-06-26
CVE-2023-25307Mrpack-install vulnerable to path traversal with dependency7.8v3.10.6%2023-06-26Fix
CVE-2023-25306Multimc path traversal7.5v3.11.1%2023-06-26
CVE-2023-22359Tribe29 Checkmk observable discrepancy4.3v3.10.5%2023-06-26Fix
CVE-2023-3422Google Chrome Guest view use-after-free8.8v3.10.7%2023-06-26Fix
CVE-2023-3421Google Chrome Media use-after-free8.8v3.11.2%2023-06-26Fix
CVE-2023-3420Google Chrome V8 type confusion8.8v3.156.2%2023-06-26Fix
CVE-2023-3398Denial of service in jgraph/drawio7.5v3.11.0%2023-06-26Fix
CVE-2023-3113Lenovo XClarity Administrator LXCA's Common Information Model XML external entity injection8.2CNA v3.10.5%2023-06-26
CVE-2023-2993Lenovo System Management Module (SMM) improper preservation of permissions5.4CNA v3.10.3%2023-06-26Fix
CVE-2023-2992Lenovo System Management Module (SMM) SMM v1 denial of service7.5CNA v3.10.6%2023-06-26Fix
CVE-2023-2290Lenovo ThinkPad out-of-bounds write6.4CNA v3.10.2%2023-06-26Fix
CVE-2023-2005Tenable Plugin Feed ID #202306261202 Fixes privilege escalation6.3CNA v3.10.4%2023-06-26Fix
CVE-2023-1620WAGO: DoS in multiple products in multiple versions using Codesys4.9v3.10.9%2023-06-26Fix
CVE-2023-1619WAGO: DoS in multiple versions of multiple products4.9CNA v3.10.8%2023-06-26Fix
CVE-2023-1150WAGO: Series 750-3x/-8x prone to MODBUS server DoS7.5CNA v3.10.9%2023-06-26Fix
CVE-2023-36666INEX Ixp Manager cross-site scripting6.1v3.10.4%2023-06-25
CVE-2023-36664Artifex Ghostscript files accessible to external parties7.8NVD v3.13.9%2023-06-25Exploit codeFix
CVE-2023-36663it-novum openITCOCKPIT SQL injection8.8v3.10.7%2023-06-25Fix
CVE-2023-36661Shibboleth Xmltooling server-side request forgery7.5v3.12.9%2023-06-25MetasploitExploit codeKCVFix
CVE-2023-36660nettle out-of-bounds write9.8NVD v3.11.0%2023-06-25Fix
CVE-2023-36632Python uncontrolled recursion7.5v3.11.6%2023-06-25Fix
CVE-2023-36630MGT-COMMERCE CloudPanel unrestricted file upload8.8v3.10.9%2023-06-25Fix
CVE-2023-36612Basecamp path traversal7.5v3.11.1%2023-06-25
CVE-2023-3396Campcodes Retro Cellphone Online Store index.php SQL injection6.5v3.10.6%2023-06-25
CVE-2023-3388Beautiful Cookie Consent Banner WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.184.3%2023-06-24NucleiFix
CVE-2023-3387Lana Text to Image WordPress plugin stored cross-site scripting5.4v3.10.5%2023-06-24Fix
CVE-2023-3197MStore API WordPress plugin unauthenticated SQL injection9.8CNA v3.13.9%2023-06-24NucleiFix
CVE-2023-1724Faveo Helpdesk Enterprise privilege escalation via stored XSS5.4NVD v3.10.5%2023-06-24
CVE-2023-1722Yoga Class Registration System class thumbnail upload vulnerability8.8NVD v3.10.4%2023-06-24
CVE-2023-1721Yoga Class Registration System RCE7.2NVD v3.11.0%2023-06-24
CVE-2023-36348Codekop missing authorization8.8v3.16.4%2023-06-23Exploit code
CVE-2023-36346Codekop cross-site scripting6.1v3.15.3%2023-06-23NucleiExploit code
CVE-2023-36345Codekop POS cross-site request forgery8.8v3.11.0%2023-06-23
CVE-2023-36289Webkul QloApps cross-site scripting6.1v3.11.2%2023-06-23Nuclei
CVE-2023-36288Webkul QloApps cross-site scripting5.4v3.10.4%2023-06-23
CVE-2023-36287Webkul QloApps cross-site scripting6.1v3.11.2%2023-06-23Nuclei
CVE-2023-36284Webkul QloApps SQL injection7.5v3.13.2%2023-06-23Nuclei
CVE-2023-36274GNU LibreDWG out-of-bounds write8.8v3.10.9%2023-06-23Fix
CVE-2023-36273GNU LibreDWG out-of-bounds write8.8v3.10.7%2023-06-23Fix
CVE-2023-36272GNU LibreDWG out-of-bounds write8.8v3.10.9%2023-06-23Fix
CVE-2023-36271GNU LibreDWG out-of-bounds write8.8v3.10.9%2023-06-23Fix
CVE-2023-36193Lcdf Gifsicle out-of-bounds write7.8v3.10.3%2023-06-23Fix
CVE-2023-36192irontec sngrep out-of-bounds write7.8v3.10.3%2023-06-23Fix
CVE-2023-35932jcvi vulnerable to Configuration injection due to unsanitized user input7.1CNA v3.11.9%2023-06-23Fix
CVE-2023-35931Shescape potential environment variable exposure on Windows with CMD3.1CNA v3.10.8%2023-06-23Fix
CVE-2023-35928Nextcloud user scoped external storage can be used to gather credentials of other users8.5CNA v3.11.0%2023-06-23Fix
CVE-2023-35927Nextcloud system addressbooks can be modified by malicious trusted server7.6CNA v3.10.8%2023-06-23Fix
CVE-2023-35925FastAsyncWorldEdit vulnerable to uncontrolled resource consumption6.2CNA v3.10.3%2023-06-23Fix
CVE-2023-35801Safe Fme Server Safe software path traversal8.1v3.11.5%2023-06-23Exploit codeFix
CVE-2023-35759Progress WhatsUp Gold cross-site scripting6.1v3.12.1%2023-06-23Fix
CVE-2023-35173End-to-End encrypted file-drops can be made inaccessible5.7CNA v3.10.5%2023-06-23Fix
CVE-2023-35172Nextcloud Server password reset endpoint is not brute force protected8.7CNA v3.10.9%2023-06-23Fix
CVE-2023-35171Nextcloud Server vulnerable to open redirect on Unsupported browser warning4.1CNA v3.10.6%2023-06-23Fix
CVE-2023-35169php-imap vulnerable to RCE through a directory traversal9.1CNA v3.13.2%2023-06-23Fix
CVE-2023-35167Remult apiPrefilter entity option improper access control5.0CNA v3.10.5%2023-06-23Fix
CVE-2023-35165AWS CDK EKS overly permissive trust policies6.6CNA v3.10.9%2023-06-23Fix
CVE-2023-35163Vega's validators able to submit duplicate transactions6.0CNA v3.10.5%2023-06-23Fix
CVE-2023-35162xwiki-platform XPlatform Wiki vulnerable to cross-site scripting9.7CNA v3.12.4%2023-06-23NucleiFix
CVE-2023-35161XWiki Platform vulnerable to reflected cross-site scripting9.7CNA v3.12.4%2023-06-23NucleiFix
CVE-2023-35160XWiki Platform vulnerable to reflected cross-site scripting9.7CNA v3.12.3%2023-06-23NucleiFix
CVE-2023-35159XWiki Platform vulnerable to reflected cross-site scripting9.7CNA v3.12.2%2023-06-23NucleiFix
CVE-2023-35158XWiki Platform vulnerable to reflected cross-site scripting9.7CNA v3.12.0%2023-06-23NucleiFix
CVE-2023-35157XWiki Platform vulnerable to reflected cross-site scripting via delattachment action8.5CNA v3.10.6%2023-06-23Fix
CVE-2023-35156XWiki Platform vulnerable to reflected cross-site scripting9.7CNA v3.12.1%2023-06-23NucleiFix
CVE-2023-35155XWiki Platform vulnerable to cross-site scripting in target parameter via share page by email8.8CNA v3.11.5%2023-06-23NucleiFix
CVE-2023-35154Knowage-Server vulnerable to account validation bypass7.2CNA v3.10.4%2023-06-23Fix
CVE-2023-35153XWiki Platform vulnerable to stored cross-site scripting in ClassEditSheet page via name parameters9.1CNA v3.10.7%2023-06-23Fix
CVE-2023-35152XWiki Platform vulnerable to privilege escalation (PR) from account through like LiveTableResults10.0CNA v3.11.0%2023-06-23Fix
CVE-2023-35151XWiki Platform may show email addresses in clear in REST results7.5CNA v3.10.7%2023-06-23Fix
CVE-2023-35150XWiki Platform vulnerable to privilege escalation (PR) from view right via Invitation application9.9CNA v3.177.7%2023-06-23Fix
CVE-2023-35048Booking and Rental Manager WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-23Fix
CVE-2023-34673Elenos ETG150 Memcached service information disclosure6.5v3.10.7%2023-06-23
CVE-2023-34672Elenos ETG150 improper preservation of permissions8.8v3.10.7%2023-06-23
CVE-2023-34671Elenos ETG150 Fm improper access control8.8v3.10.9%2023-06-23
CVE-2023-34467XWiki Platform may retrieve email addresses of all users7.5CNA v3.11.0%2023-06-23Fix
CVE-2023-34466XWiki Platform's tags on non-viewable pages can be revealed to users4.3CNA v3.10.6%2023-06-23Fix
CVE-2023-34465XWiki Platform's Mail.MailConfig can be edited by any user with edit rights10.0CNA v3.10.9%2023-06-23Fix
CVE-2023-34464XWiki vulnerable to stored cross-site scripting9.1CNA v3.10.7%2023-06-23Fix
CVE-2023-34460Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles4.8CNA v3.10.6%2023-06-23Fix
CVE-2023-34254glpi-project glpi-agent remote inventory task command injection when using SSH command mode7.7CNA v3.10.8%2023-06-23Fix
CVE-2023-34203Progress Openedge Management injection8.8v3.11.1%2023-06-23
CVE-2023-34188Cesanta Mongoose improper quantity validation7.5v3.11.0%2023-06-23Fix
CVE-2023-34021Church Admin WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-23Fix
CVE-2023-34012Premium Addons PRO WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-23Fix
CVE-2023-33299Fortinet FortiNAC deserialization of untrusted data9.6CNA v3.124.3%2023-06-23Fix
CVE-2023-33141Microsoft Yet Another Reverse Proxy (YARP) denial of service7.5CNA v3.12.2%2023-06-23Fix
CVE-2023-32580Password Protected WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-23Fix
CVE-2023-32480Dell CPG BIOS improper input validation6.8CNA v3.10.3%2023-06-23Fix
CVE-2023-32464Dell EMC VxRail Appliance improper certificate validation2.7CNA v3.10.2%2023-06-23Fix
CVE-2023-32463Dell EMC VxRail Appliance denial of service3.4CNA v3.10.5%2023-06-23Fix
CVE-2023-32439Apple Multiple Products WebKit type confusion8.8v3.124.0%2023-06-23KEVFix
CVE-2023-32435Apple Multiple Products WebKit memory corruption8.8v3.123.0%2023-06-23KEVKCVFix
CVE-2023-32434Apple Multiple Products integer overflow7.8v3.151.5%2023-06-23KEVExploit codeKCVFix
CVE-2023-32423Apple macOS buffer overflow6.5v3.10.8%2023-06-23Fix
CVE-2023-32422Apple iOS, iPadOS, macOS and tvOS SQLite logging vulnerability5.5v3.10.7%2023-06-23Exploit codeFix
CVE-2023-32420Apple macOS out-of-bounds read7.1v3.10.2%2023-06-23Fix
CVE-2023-32419Apple iOS and iPadOS arbitrary code execution9.8v3.11.1%2023-06-23Fix
CVE-2023-32417Apple watchOS lock screen accessibility features information disclosure2.4v3.10.3%2023-06-23Fix
CVE-2023-32415Apple macOS insecure storage of sensitive information5.5v3.10.3%2023-06-23Fix
CVE-2023-32414Apple macOS inadequate encryption strength8.6v3.10.2%2023-06-23Fix
CVE-2023-32413Apple macOS race condition7.0v3.10.5%2023-06-23Exploit codeFix
CVE-2023-32412Apple macOS use-after-free9.8v3.11.6%2023-06-23Fix
CVE-2023-32411Apple iOS, iPadOS, macOS and tvOS Privacy preferences vulnerability5.5v3.10.2%2023-06-23Fix
CVE-2023-32410Apple macOS out-of-bounds read5.5v3.10.2%2023-06-23Fix
CVE-2023-32409Apple Multiple Products WebKit sandbox escape8.6v3.116.5%2023-06-23KEVFix
CVE-2023-32408Apple macOS information disclosure5.5v3.10.2%2023-06-23Fix
CVE-2023-32407Apple macOS incorrect default permissions5.5v3.10.9%2023-06-23Exploit codeFix
CVE-2023-32405Apple macOS incorrect default permissions7.8v3.10.2%2023-06-23Fix
CVE-2023-32404Apple macOS incorrect default permissions5.5v3.10.2%2023-06-23Fix
CVE-2023-32403Apple macOS out-of-bounds read5.5v3.10.2%2023-06-23Fix
CVE-2023-32402Apple macOS out-of-bounds read6.5v3.10.7%2023-06-23Fix
CVE-2023-32400Apple macOS improper preservation of permissions5.5v3.10.2%2023-06-23Fix
CVE-2023-32399Apple macOS incorrect default permissions5.5v3.10.2%2023-06-23Fix
CVE-2023-32398Apple macOS use-after-free7.8v3.10.2%2023-06-23Fix
CVE-2023-32397Apple macOS out-of-bounds write7.5v3.10.8%2023-06-23Fix
CVE-2023-32395Apple macOS out-of-bounds write5.5v3.10.3%2023-06-23Fix
CVE-2023-32394Apple macOS resource exposure2.4v3.10.3%2023-06-23Fix
CVE-2023-32392Apple macOS sensitive information in log files5.5v3.10.2%2023-06-23Fix
CVE-2023-32391Apple macOS out-of-bounds read4.6v3.10.3%2023-06-23Fix
CVE-2023-32390Apple macOS out-of-bounds read2.4v3.10.3%2023-06-23Fix
CVE-2023-32389Apple macOS out-of-bounds read5.5v3.10.2%2023-06-23Fix
CVE-2023-32388Apple macOS improper preservation of permissions5.5v3.10.2%2023-06-23Fix
CVE-2023-32387Apple macOS use-after-free9.8v3.11.7%2023-06-23Fix
CVE-2023-32386Apple macOS out-of-bounds read3.3v3.10.2%2023-06-23Fix
CVE-2023-32385Apple macOS resource exhaustion5.5v3.10.2%2023-06-23Fix
CVE-2023-32384Apple macOS buffer overflow7.8v3.10.3%2023-06-23Fix
CVE-2023-32382Apple macOS out-of-bounds read5.5v3.10.2%2023-06-23Fix
CVE-2023-32380Apple macOS out-of-bounds write7.8v3.10.3%2023-06-23Fix
CVE-2023-32376This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to modify protected parts of the file system.5.5v3.10.2%2023-06-23Fix
CVE-2023-32375Apple macOS out-of-bounds read5.5v3.10.2%2023-06-23Fix
CVE-2023-32373Apple Multiple Products WebKit use-after-free8.8v3.112.2%2023-06-23KEVFix
CVE-2023-32372Apple macOS out-of-bounds read5.5v3.10.2%2023-06-23Fix
CVE-2023-32371Apple macOS sandbox escape6.3v3.10.2%2023-06-23Fix
CVE-2023-32369Apple macOS logic flaw6.0v3.10.7%2023-06-23Fix
CVE-2023-32368Apple macOS out-of-bounds read5.5v3.10.3%2023-06-23Fix
CVE-2023-32367Apple iOS, iPadOS and macOS information disclosure5.5v3.10.2%2023-06-23Fix
CVE-2023-32365Apple iOS and iPadOS Shake to Undo improper authentication2.4v3.10.3%2023-06-23Fix
CVE-2023-32363Apple macOS out-of-bounds read5.5v3.10.2%2023-06-23Fix
CVE-2023-32360Apple macOS out-of-bounds read5.5v3.10.3%2023-06-23Fix
CVE-2023-32357Apple macOS out-of-bounds read7.1v3.10.2%2023-06-23Fix
CVE-2023-32355Apple macOS improper preservation of permissions5.5v3.10.3%2023-06-23Fix
CVE-2023-32354Apple watchOS out-of-bounds read5.5v3.10.3%2023-06-23Fix
CVE-2023-32353Apple iTunes incorrect authorization7.8v3.10.7%2023-06-23Exploit codeFix
CVE-2023-32352Apple macOS insecure direct object reference5.5v3.10.2%2023-06-23Fix
CVE-2023-32351Apple iTunes incorrect default permissions7.8v3.10.3%2023-06-23Fix
CVE-2023-31469Apache StreamPipes: Privilege escalation through non-admin user8.8v3.11.1%2023-06-23Fix
CVE-2023-30362libcoap coap_send function buffer overflow7.5v3.10.8%2023-06-23Fix
CVE-2023-30260RaspAP raspap-webgui command injection8.8v3.12.5%2023-06-23Fix
CVE-2023-30258MagnusSolution MagnusBilling command injection9.8v3.194.3%2023-06-23NucleiMetasploitEmerging ThreatsExploit code
CVE-2023-29860DTStack Taier /Taier/API/tenant/listTenant interface insecure permissions7.5v3.10.6%2023-06-23
CVE-2023-29100The7 WordPress theme cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-23Fix
CVE-2023-28751Wp Ultimate Review WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-23Fix
CVE-2023-28204Apple Multiple Products WebKit out-of-bounds read6.5v3.114.3%2023-06-23KEVFix
CVE-2023-28202Apple macOS weak password recovery5.5v3.10.2%2023-06-23Fix
CVE-2023-28191Apple macOS origin validation error5.5v3.10.2%2023-06-23Fix
CVE-2023-28073Dell CPG BIOS improper authentication8.2CNA v3.10.2%2023-06-23Fix
CVE-2023-28071Dell Command Update (DCU) denial of service6.3CNA v3.10.2%2023-06-23Fix
CVE-2023-28065Dell Command Update (DCU) privilege escalation6.7CNA v3.10.2%2023-06-23Fix
CVE-2023-28064Dell CPG BIOS out-of-bounds write3.5CNA v3.10.3%2023-06-23Fix
CVE-2023-28061Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28060Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28059Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28058Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28056Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28054Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28052Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28050Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28044Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28042Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28041Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28040Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28039Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28036Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28035Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28034Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28033Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28032Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28031Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28030Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28029Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28028Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28027Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-28026Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-27964Apple AirPods Firmware Update E authentication bypass by spoofing5.4v3.18.2%2023-06-23Fix
CVE-2023-27940Apple iOS and iPadOS sandbox network permissions vulnerability6.3v3.10.3%2023-06-23Fix
CVE-2023-27930Apple macOS type confusion7.8v3.10.5%2023-06-23Fix
CVE-2023-27908Autodesk installer uncontrolled search path7.8v3.10.2%2023-06-23Fix
CVE-2023-27427CRM Memberships WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-23Fix
CVE-2023-25938Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-25937Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-25936Dell CPG BIOS improper input validation5.1CNA v3.10.2%2023-06-23Fix
CVE-2023-25520NVIDIA Jetson AGX Xavier series denial of service4.4CNA v3.10.2%2023-06-23Fix
CVE-2023-25518NVIDIA Jetson AGX Xavier series, Jetson Xavier NX improper channel restriction7.1CNA v3.10.3%2023-06-23Fix
CVE-2023-25515NVIDIA GPU Display Driver untrusted pointer dereference7.8CNA v3.10.2%2023-06-23Fix
CVE-2023-25003AutoCAD, Maya out-of-bounds read7.8v3.10.3%2023-06-23Fix
CVE-2023-23679JS Help Desk Best Help Desk and Support WordPress plugin insecure direct object references (IDOR)8.8v3.10.5%2023-06-23Fix
CVE-2023-23539Apple macOS buffer overflow7.8v3.10.4%2023-06-23Fix
CVE-2023-23516Apple macOS out-of-bounds write7.8v3.10.2%2023-06-23Fix
CVE-2023-23344HCL BigFix WebUI Insights is susceptible to a lack of sufficient authorization3.0CNA v3.10.4%2023-06-23Fix
CVE-2023-3394Session fixation in FOSSBilling/FOSSBilling5.4v3.10.5%2023-06-23Fix
CVE-2023-3393Code injection in FOSSBilling/FOSSBilling7.2v3.11.0%2023-06-23Fix
CVE-2023-3391SourceCodester Human Resource Management System detailview.php SQL injection9.8v3.10.7%2023-06-23
CVE-2023-3383SourceCodester Game Result Matrix System GET parameter athlete-profile.php SQL injection9.8v3.10.8%2023-06-23
CVE-2023-3382SourceCodester Game Result Matrix System GET parameter save-delegates.php cross-site scripting6.1v3.10.6%2023-06-23
CVE-2023-3381SourceCodester Online School Fees System GET parameter datatable.php cross-site scripting6.1v3.10.6%2023-06-23
CVE-2023-3380Wavlink WN579X3 Ping Test adm.cgi injection9.8v3.13.9%2023-06-23Nuclei
CVE-2023-3317Linux kernel use-after-free7.1NVD v3.10.2%2023-06-23Fix
CVE-2023-3304Improper access control in Admidio/Admidio5.4v3.10.4%2023-06-23Fix
CVE-2023-3303Improper access control in Admidio/Admidio3.5NVD v3.10.4%2023-06-23Fix
CVE-2023-3302Improper neutralization of formula elements in a CSV file in Admidio/Admidio7.8v3.10.5%2023-06-23Fix
CVE-2023-3212Linux kernel (gfs2 file system) gfs2 file system in the null pointer dereference4.4NVD v3.10.3%2023-06-23Fix
CVE-2023-1783OrangeScrum AWS credentials leak via PDF Rendering7.6v3.10.6%2023-06-23
CVE-2023-36371Monetdb resource exhaustion7.5v3.10.7%2023-06-22
CVE-2023-36370Monetdb resource exhaustion7.5v3.10.7%2023-06-22
CVE-2023-36369Monetdb resource exhaustion7.5v3.10.7%2023-06-22
CVE-2023-36368Monetdb resource exhaustion7.5v3.10.7%2023-06-22
CVE-2023-36367Monetdb resource exhaustion7.5v3.10.7%2023-06-22
CVE-2023-36366Monetdb resource exhaustion7.5v3.10.7%2023-06-22
CVE-2023-36365Monetdb resource exhaustion7.5v3.10.7%2023-06-22
CVE-2023-36364Monetdb SQL injection7.5v3.10.8%2023-06-22
CVE-2023-36363Monetdb SQL injection7.5v3.10.8%2023-06-22
CVE-2023-36362Monetdb SQL injection7.5v3.10.8%2023-06-22
CVE-2023-36359TP-Link Tl-wr941nd buffer overflow7.5v3.10.8%2023-06-22
CVE-2023-36358TP-Link Tl-wr743nd buffer overflow7.7v3.10.7%2023-06-22
CVE-2023-36357TP-Link Tl-wr941nd resource exhaustion7.7v3.10.8%2023-06-22
CVE-2023-36356TP-Link Tl-wr941nd out-of-bounds read7.7v3.10.7%2023-06-22
CVE-2023-36355TP-Link TL-WR940N buffer overflow9.9v3.131.7%2023-06-22Exploit code
CVE-2023-36354TP-Link Tl-wr941nd buffer overflow7.5v3.10.8%2023-06-22
CVE-2023-36243FLVMeta buffer overflow7.8v3.10.3%2023-06-22Fix
CVE-2023-36239Libming buffer overflow8.8v3.10.7%2023-06-22
CVE-2023-36097funadmin fuadmin vulnerable to insecure file upload9.8v3.10.9%2023-06-22
CVE-2023-36093EyouCMS cross-site scripting5.4v3.10.4%2023-06-22
CVE-2023-35926Insecure sandbox in Backstage Scaffolder plugin8.1CNA v3.11.9%2023-06-22Fix
CVE-2023-35918WooCommerce Bulk Stock Management WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-22Fix
CVE-2023-35917WooCommerce PayPal Payments WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-06-22Fix
CVE-2023-35174Livebook Desktop protocol handler OS command injection8.6CNA v3.11.0%2023-06-22Fix
CVE-2023-35133Moodle: Ssrf risk due to insufficient check on the curl blocked hosts7.5NVD v3.10.8%2023-06-22Fix
CVE-2023-35132Moodle: Minor SQL injection risk on mnet sso access control page6.3NVD v3.10.8%2023-06-22Fix
CVE-2023-35131Moodle: Xss risk on groups page6.1NVD v3.10.7%2023-06-22Fix
CVE-2023-35093MasterStudy LMS WordPress plugin broken access control6.5v3.10.6%2023-06-22Fix
CVE-2023-35090MasterStudy LMS WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-06-22Fix
CVE-2023-34939OnlyOffice path traversal9.8v3.15.0%2023-06-22
CVE-2023-34927Casdoor cross-site request forgery6.5v3.13.1%2023-06-22Exploit code
CVE-2023-34923Topdesk incorrect authorization8.1v3.10.7%2023-06-22
CVE-2023-34796Techsneeze Dmarc Report dmarcts-report-viewer dashboard versions cross-site scripting6.1v3.10.7%2023-06-22
CVE-2023-34601Jeesite SQL injection9.8v3.10.7%2023-06-22
CVE-2023-34553Wafucn Wafu Keyless Smart Lock authentication bypass by replay6.5v3.10.3%2023-06-22
CVE-2023-34462netty netty-handler SniHandler 16MB allocation6.5CNA v3.12.5%2023-06-22Fix
CVE-2023-34368Kanban Boards for WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-22Fix
CVE-2023-34241CUPS vulnerable to use-after-free in cupsdAcceptClient5.3CNA v3.11.4%2023-06-22Fix
CVE-2023-34170Quick/Bulk Order Form for WooCommerce WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-22Fix
CVE-2023-34110Flask-AppBuilder vulnerable to possible disclosure of sensitive information on user error2.7CNA v3.10.7%2023-06-22Fix
CVE-2023-34028WOLF WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-06-22Fix
CVE-2023-34006Telegram Bot and Channel WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-22Fix
CVE-2023-33997bbp style pack WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-22Fix
CVE-2023-33842IBM SPSS Modeler information disclosure6.2CNA v3.10.2%2023-06-22Fix
CVE-2023-33387Datev Eg Personal-management System Comfort/comfort Plus reflected cross-site scripting6.1v3.10.5%2023-06-22Fix
CVE-2023-33323ARMember WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-22Fix
CVE-2023-32960UpdraftPlus WordPress plugin cross-site request forgery (CSRF)6.1NVD v3.10.2%2023-06-22Fix
CVE-2023-32571Dynamic Linq vulnerable to remote code execution9.8v3.134.9%2023-06-22Exploit codeFix
CVE-2023-32449Dell PowerStore improper signature verification7.2CNA v3.10.1%2023-06-22Fix
CVE-2023-32320Nextcloud Server's brute force protection allows someone to send more requests than intended8.7CNA v3.10.9%2023-06-22Fix
CVE-2023-32239WoodMart WordPress theme cross-site scripting (XSS)5.4v3.10.4%2023-06-22Fix
CVE-2023-31868Sage X3 cross-site scripting5.4v3.10.3%2023-06-22
CVE-2023-31867Sage X3 CSV injection7.2v3.10.8%2023-06-22
CVE-2023-31213WPBakery Page Builder WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-06-22Fix
CVE-2023-30500WordPress WPForms plugins reflected cross-site scripting (XSS)6.1v3.10.4%2023-06-22Fix
CVE-2023-30347Stl Neox Dial Centre Neox Contact Center cross-site scripting4.8v3.10.5%2023-06-22Exploit code
CVE-2023-29931Laravels laravel-s vulnerable to local file inclusion9.8v3.10.9%2023-06-22Fix
CVE-2023-29711Interlink Psg-5124 origin validation error9.8v3.170.3%2023-06-22
CVE-2023-29709Wildix WSG24POE authentication bypass7.5v3.10.7%2023-06-22
CVE-2023-29708WAVLINK Wavrouter App incorrect authorization7.5v3.114.2%2023-06-22
CVE-2023-29707Gbcom Lac Web Control Center cross-site scripting4.8v3.10.4%2023-06-22
CVE-2023-28956IBM Spectrum Protect Backup-Archive Client privilege escalation8.4CNA v3.10.2%2023-06-22Fix
CVE-2023-28800Zscaler Client Connector output encoding missing in redrurl parameter8.1CNA v3.10.5%2023-06-22Fix
CVE-2023-28799Zscaler Client Connector improper type validation8.2CNA v3.10.4%2023-06-22Fix
CVE-2023-28784Contest Gallery WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-22Fix
CVE-2023-28778Pagination by BestWebSoft WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-22Fix
CVE-2023-28776Continuous Image Carousel With Lightbox WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-22Fix
CVE-2023-28774Review Stream WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-22Fix
CVE-2023-28750Albo Pretorio Online WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-22Fix
CVE-2023-28695VigilanTor WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-22Fix
CVE-2023-28534WP Job Portal WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-06-22Fix
CVE-2023-28496SMTP2GO WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-22Fix
CVE-2023-28423Modern Footnotes WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-22Fix
CVE-2023-28418Mediciti Lite WordPress theme cross-site scripting (XSS)5.4NVD v3.10.4%2023-06-22
CVE-2023-28174eRocket WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-22Fix
CVE-2023-28171Brilliance WordPress theme cross-site scripting (XSS)5.4v3.10.4%2023-06-22
CVE-2023-28166Tags Cloud Manager WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-22
CVE-2023-28094Pegasystems Pega Platform default password8.1CNA v3.10.5%2023-06-22Fix
CVE-2023-28016HCL BigFix OSD Bare Metal Server is affected by a host header injection3.1CNA v3.10.3%2023-06-22Fix
CVE-2023-28006HCL BigFix OSD Bare Metal Server is affected by a weak cryptographic algorithm7.0CNA v3.10.1%2023-06-22Fix
CVE-2023-27631Daily Prayer Time WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-06-22Fix
CVE-2023-27629Site Reviews WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-06-22Fix
CVE-2023-27618Store Locator WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-22Fix
CVE-2023-27612Site Reviews WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-06-22Fix
CVE-2023-27452Button Generator easily Button Builder WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-22Fix
CVE-2023-27413W4 Post List WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-06-22Fix
CVE-2023-27083pluck-cms Pluck unrestricted file upload7.2v3.11.2%2023-06-22
CVE-2023-26539Advanced Text Widget WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-22
CVE-2023-26534WP Repost WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-22
CVE-2023-26115word-wrap vulnerable to regular expression denial of service7.5v3.11.7%2023-06-22Fix
CVE-2023-25500Vaadin vulnerable to possible information disclosure of class and method names in RPC response3.5CNA v3.10.5%2023-06-22Fix
CVE-2023-25499Vaadin possible information disclosure in non visible components5.7CNA v3.10.6%2023-06-22Fix
CVE-2023-23811Smoothscroller WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-22Fix
CVE-2023-23807MojoPlug Slide Panel WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-22
CVE-2023-23795Form Builder WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-06-22
CVE-2023-23343HCL BigFix OSD Bare Metal Server is affected by a clickjacking2.4CNA v3.10.3%2023-06-22Fix
CVE-2023-20896VMware vCenter Server (vCenter Server) out-of-bounds read5.9CNA v3.10.9%2023-06-22Fix
CVE-2023-20895VMware vCenter Server (vCenter Server) out-of-bounds write8.1CNA v3.11.4%2023-06-22Fix
CVE-2023-20894VMware vCenter Server (vCenter Server) out-of-bounds write8.1CNA v3.133.9%2023-06-22Fix
CVE-2023-20893VMware vCenter Server (vCenter Server) use-after-free8.1CNA v3.11.2%2023-06-22Fix
CVE-2023-20892VMware vCenter Server DCERPC protocol implementation out-of-bounds write8.1CNA v3.11.8%2023-06-22Fix
CVE-2023-3326FreeBSD network authentication attack via pam_krb59.8v3.11.1%2023-06-22Fix
CVE-2023-3256Advantech R-SeeNet external control of file name or path8.1v3.10.6%2023-06-22Fix
CVE-2023-3128Grafana vulnerable to authentication bypass by spoofing9.4CNA v3.14.0%2023-06-22Fix
CVE-2023-3114Terraform Enterprise Agent Pool Controls Allowed Unauthorized Workspaces to Target an Agent Pool5.0CNA v3.10.4%2023-06-22Fix
CVE-2023-2991Fortra Globalscape Administration Server information disclosure5.3NVD v3.10.6%2023-06-22Fix
CVE-2023-2990Fortra Globalscape Administration Server denial of service7.5NVD v3.10.9%2023-06-22Fix
CVE-2023-2989Fortra Globalscape Administration Server Out-of-bounds Memory Read9.1NVD v3.11.0%2023-06-22Fix
CVE-2023-2611Advantech R-SeeNet use of hard-coded credentials9.8v3.10.7%2023-06-22Fix
CVE-2023-34981Apache Tomcat: AJP response header mix-up7.5v3.11.1%2023-06-21Fix
CVE-2023-34340Apache Accumulo: Accumulo may incorrectly validate cached credentials9.8v3.11.4%2023-06-21Fix
CVE-2023-33725Broadleaf vulnerable to cross-site scripting6.1v3.10.5%2023-06-21Fix
CVE-2023-33591User Registration and Login and User Management System admin search result page cross-site scripting6.1v3.10.4%2023-06-21
CVE-2023-33584Enrollment System SQL injection9.8v3.114.2%2023-06-21Exploit code
CVE-2023-33405BlogEngine.NET open redirect6.1v3.131.3%2023-06-21NucleiExploit code
CVE-2023-33289Urlnorm regular expression denial of service7.5v3.11.2%2023-06-21
CVE-2023-27450Leyka WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-21Fix
CVE-2023-27443Simple Vimeo Shortcode WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-06-21
CVE-2023-27439New Adman WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-21
CVE-2023-27432Manage Upload Limit WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-21
CVE-2023-27429Jetpack CRM WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-21Fix
CVE-2023-27414Popup box WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-21Fix
CVE-2023-27243Makves Dcap An improper access control7.5v3.10.3%2023-06-21
CVE-2023-25435libtiff buffer overflow5.5v3.10.3%2023-06-21Fix
CVE-2023-24261GL.iNet Gl-e750 OS command injection7.2v3.118.8%2023-06-21
CVE-2023-3339code-projects Agro-School Management System exam-delete.php SQL injection7.5v3.10.6%2023-06-21
CVE-2023-3110Buffer overflow in S0 Decryption on Unify Gateway9.6CNA v3.10.4%2023-06-21
CVE-2023-2911ISC BIND 9 stale-answer resolver out-of-bounds write7.5CNA v3.12.5%2023-06-21Fix
CVE-2023-2829ISC BIND 9 synth-from-dnssec option denial of service7.5CNA v3.10.9%2023-06-21Fix
CVE-2023-2828ISC BIND 9 named's configured cache size limit can be significantly exceeded7.5CNA v3.13.8%2023-06-21Fix
CVE-2023-0972Buffer overflow in S0 Decryption on Z/IP Gatweay9.6CNA v3.10.4%2023-06-21
CVE-2023-0971Command authentication bypass in Z/IP Gateway9.6CNA v3.10.3%2023-06-21
CVE-2023-0970Serial API buffer overflow in Z/IP Gateway7.1CNA v3.10.3%2023-06-21
CVE-2023-0969Global read overflow in Z/IP Gateway3.5CNA v3.10.3%2023-06-21
CVE-2023-0026Juniper Networks Junos OS Routing protocol daemon improper input validation7.5CNA v3.10.6%2023-06-21Fix
CVE-2023-35885MGT-COMMERCE CloudPanel cookie reliance without validation9.8v3.175.3%2023-06-20NucleiEmerging ThreatsExploit codeFix
CVE-2023-35884EventPrime WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-20Fix
CVE-2023-35882Super Socializer WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-06-20Fix
CVE-2023-35878Extra User Details WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-20Fix
CVE-2023-35854Zoho ManageEngine ADSelfService Plus missing authentication9.8v3.16.0%2023-06-20Exploit code
CVE-2023-35166xwiki-platform privilege escalation (PR) from account through TipsPanel10.0CNA v3.162.2%2023-06-20Fix
CVE-2023-35098NextGen GalleryView WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-20
CVE-2023-35097WP Affiliate Links WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-20
CVE-2023-35095Flo Forms WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-20Fix
CVE-2023-34600Adiscon Loganalyzer SQL injection9.8v3.123.7%2023-06-20Exploit code
CVE-2023-34597Fibaro Fgms-001 denial of service6.5v3.10.6%2023-06-20
CVE-2023-34596Aeotech Zw130-a denial of service6.5v3.10.6%2023-06-20
CVE-2023-34563NETGEAR R6250 Firmware buffer overflow9.8v3.113.9%2023-06-20Fix
CVE-2023-34541Langchain vulnerable to arbitrary code execution9.8v3.10.9%2023-06-20Fix
CVE-2023-33869Enphase Envoy OS command injection9.8v3.11.1%2023-06-20Exploit codeFix
CVE-2023-33495Craft CMS vulnerable to HTML injection6.1v3.10.5%2023-06-20Fix
CVE-2023-32274Enphase Installer Toolkit Android App use of hard-coded credentials7.5v3.10.6%2023-06-20Fix
CVE-2023-26436OX App Suite code injection7.1CNA v3.11.3%2023-06-20Fix
CVE-2023-26435OX App Suite server-side request forgery5.0CNA v3.10.8%2023-06-20Fix
CVE-2023-26434OX App Suite resource exhaustion4.3CNA v3.11.1%2023-06-20Fix
CVE-2023-26433OX App Suite resource exhaustion4.3CNA v3.11.1%2023-06-20Fix
CVE-2023-26432OX App Suite resource exhaustion4.3CNA v3.11.1%2023-06-20Fix
CVE-2023-26431OX App Suite server-side request forgery5.0CNA v3.10.8%2023-06-20Fix
CVE-2023-26429OX App Suite command injection3.5CNA v3.10.8%2023-06-20Fix
CVE-2023-26428OX App Suite insecure direct object reference6.5CNA v3.11.0%2023-06-20Fix
CVE-2023-26427OX App Suite insecure storage of sensitive information3.2CNA v3.10.3%2023-06-20Fix
CVE-2023-3340SourceCodester Online School Fees System GET parameter ajx.php SQL injection9.8v3.10.8%2023-06-20
CVE-2023-3337PuneethReddyHC Online Shopping System Advanced Admin Registration reg.php improper authentication9.8v3.10.7%2023-06-20
CVE-2023-3325CMS Commander WordPress plugin authorization bypass9.8v3.10.6%2023-06-20Fix
CVE-2023-3320WP Sticky Social WordPress plugin cross-site request forgery8.8v3.12.3%2023-06-20Exploit codeFix
CVE-2023-3220Linux kernel null pointer dereference5.5NVD v3.10.2%2023-06-20Fix
CVE-2023-2533PaperCut NG/MF cross-site request forgery (CSRF)8.8v3.129.2%2023-06-20KEVEmerging ThreatsFix
CVE-2023-2400Devolutions Server incomplete cleanup2.7v3.10.4%2023-06-20Fix
CVE-2023-1999Chromium libwebp There exists a use-after-free5.3CNA v3.11.0%2023-06-20Fix
CVE-2023-1862Remote access to warp-svc.exe in Cloudflare WARP7.3CNA v3.10.8%2023-06-20Fix
CVE-2023-35866KeePassXC incorrect authorization5.5v3.10.2%2023-06-19
CVE-2023-35862libcoap out-of-bounds read6.5v3.10.8%2023-06-19
CVE-2023-35857Siren Investigate insufficient session expiration9.8v3.10.6%2023-06-19Fix
CVE-2023-35856Nintendo Mario Kart Wii buffer overflow9.8v3.11.1%2023-06-19
CVE-2023-35855Valve Software Counter-strike buffer overflow9.8v3.11.1%2023-06-19
CVE-2023-35853OISF suricata code injection9.8v3.11.0%2023-06-19Fix
CVE-2023-35852OISF suricata path traversal7.5v3.11.1%2023-06-19Fix
CVE-2023-35849Virtualsquare Picotcp improper check for exceptional conditions7.5v3.10.6%2023-06-19
CVE-2023-35848Virtualsquare Picotcp incorrect calculation7.5v3.10.7%2023-06-19
CVE-2023-35847Virtualsquare Picotcp uninitialized resource use7.5v3.10.7%2023-06-19
CVE-2023-35846VirtualSquare PicoTCP port filtering vulnerability7.5v3.10.7%2023-06-19
CVE-2023-35844Lightdash path traversal7.5v3.16.3%2023-06-19NucleiExploit code
CVE-2023-35843nocodb path traversal7.5v3.18.9%2023-06-19NucleiExploit code
CVE-2023-35840elFinder vulnerable to path traversal in LocalVolumeDriver connector6.5v3.11.9%2023-06-19Exploit codeFix
CVE-2023-35839Solon vulnerable to deserialization of untrusted data9.8v3.11.1%2023-06-19Fix
CVE-2023-35779Seed Fonts WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-19Fix
CVE-2023-35776Sermon'e Sermons Online WordPress plugin cross-site scripting (XSS)5.4v3.10.5%2023-06-19
CVE-2023-35775WP Backup Manager WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-19
CVE-2023-35772Google Map Shortcode WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-19
CVE-2023-35005Apache Airflow: Information disclosure on configuration view6.5v3.11.5%2023-06-19Fix
CVE-2023-34657EyouCMS A stored cross-site scripting4.8v3.10.4%2023-06-19
CVE-2023-34642Kioware OS command injection7.8v3.10.3%2023-06-19Fix
CVE-2023-34641KioWare for Windows dialog box blacklist filter vulnerability7.8v3.10.2%2023-06-19Fix
CVE-2023-34603JeecgBoot vulnerable to SQL injection in queryFilterTableDictInfo7.5v3.10.7%2023-06-19Fix
CVE-2023-34602JeecgBoot vulnerable to SQL injection in queryTableDictItemsByCode7.5v3.10.7%2023-06-19Fix
CVE-2023-34461Cross-site scripting (XSS) Availability in PyBB4.6CNA v3.10.3%2023-06-19Fix
CVE-2023-34417Mozilla Firefox memory safety bugs9.8v3.10.8%2023-06-19Fix
CVE-2023-34416Mozilla Firefox ESR memory safety bugs9.8v3.10.9%2023-06-19Fix
CVE-2023-34415Mozilla Firefox open redirect6.1v3.10.4%2023-06-19Fix
CVE-2023-34414Mozilla Firefox ESR improper certificate validation3.1v3.10.9%2023-06-19Fix
CVE-2023-34373Zephyr Project Manager WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-06-19Fix
CVE-2023-34167Vulnerability of spoofing trustlists of Huawei desktop5.3v3.10.3%2023-06-19Fix
CVE-2023-34166Huawei HarmonyOS vulnerability of system restart triggered by abnormal callbacks passed to APIs7.5v3.10.4%2023-06-19Fix
CVE-2023-34163Huawei HarmonyOS permission control vulnerability in the window management module7.5v3.10.4%2023-06-19Fix
CVE-2023-34162Huawei HarmonyOS version update determination vulnerability in the user profile module7.5v3.10.4%2023-06-19Fix
CVE-2023-34161Huawei HarmonyOS inappropriate authorization vulnerability in the SettingsProvider module7.5v3.10.4%2023-06-19Fix
CVE-2023-34160Huawei HarmonyOS authentication bypass by spoofing5.3v3.10.3%2023-06-19Fix
CVE-2023-34159Huawei HarmonyOS improper permission control vulnerability in the Notepad app9.8v3.10.5%2023-06-19Fix
CVE-2023-34158Huawei HarmonyOS authentication bypass by spoofing5.3v3.10.3%2023-06-19Fix
CVE-2023-34156Vulnerability of services denied by early fingerprint APIs on HarmonyOS products5.3v3.10.4%2023-06-19Fix
CVE-2023-34155Vulnerability of unauthorized calling on Huawei phones and tablets7.5v3.10.4%2023-06-19Fix
CVE-2023-33213wpView WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-19
CVE-2023-32659SUBNET PowerSYSTEM Center cross-site scripting6.1v3.10.4%2023-06-19Fix
CVE-2023-32542Fuji Electric TELLUS and TELLUS Lite TELLUS v4.0.15.0 and out-of-bounds read7.8v3.10.3%2023-06-19Fix
CVE-2023-32538FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS and TELLUS Lite stack-based buffer overflow7.8v3.10.3%2023-06-19Fix
CVE-2023-32288FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS and TELLUS Lite out-of-bounds read7.8v3.10.3%2023-06-19Fix
CVE-2023-32276FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS and TELLUS Lite stack-based buffer overflow7.8v3.10.3%2023-06-19Fix
CVE-2023-32273FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS and TELLUS Lite stack-based buffer overflow7.8v3.10.3%2023-06-19Fix
CVE-2023-32270FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS and TELLUS Lite out-of-bounds access7.8v3.10.2%2023-06-19Fix
CVE-2023-32216Mozilla Firefox out-of-bounds write9.8v3.10.8%2023-06-19Fix
CVE-2023-32214Mozilla Firefox denial of service7.5v3.10.9%2023-06-19Fix
CVE-2023-32210Mozilla Firefox principal privilege handling vulnerability6.5v3.10.5%2023-06-19Fix
CVE-2023-32209Mozilla Firefox out-of-bounds write7.5v3.10.8%2023-06-19Fix
CVE-2023-32208Mozilla Firefox service workers vulnerability5.3v3.10.5%2023-06-19Fix
CVE-2023-32201FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS and TELLUS Lite stack-based buffer overflow7.8v3.10.3%2023-06-19Fix
CVE-2023-31411SICK EventCam App missing authentication9.8CNA v3.10.9%2023-06-19
CVE-2023-31410SICK EventCam App cleartext transmission of sensitive information9.8CNA v3.10.3%2023-06-19
CVE-2023-31239FUJI ELECTRIC CO., LTD. and Hakko Electronics V-Server and V-Server Lite stack-based buffer overflow7.8v3.10.3%2023-06-19Fix
CVE-2023-30759Ricoh Printer Driver Packager NX insufficient verification of data authenticity7.8v3.10.1%2023-06-19Fix
CVE-2023-29546When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden, potentially leaking sensitive information. *This bug only affects Firefox for Android. Other operating systems are unaffected.* This vulnerability affects Firefox for Android <6.5v3.10.5%2023-06-19Fix
CVE-2023-29545Mozilla Firefox Save Link As filename suggestion vulnerability6.5v3.10.6%2023-06-19Fix
CVE-2023-29542Mozilla Firefox file extension security check security feature bypass9.8v3.10.9%2023-06-19Fix
CVE-2023-29534Mozilla Firefox spoofing9.1v3.10.7%2023-06-19Fix
CVE-2023-29532Mozilla Firefox Maintenance Service vulnerability5.5v3.10.2%2023-06-19Fix
CVE-2023-29531Mozilla Firefox out-of-bounds write9.8v3.11.0%2023-06-19Fix
CVE-2023-29158SUBNET PowerSYSTEM Center authentication bypass by capture-replay9.1v3.10.6%2023-06-19Fix
CVE-2023-27992Zyxel Multiple NAS Devices command injection9.8CNA v3.182.8%2023-06-19KEVFix
CVE-2023-27396Multiple OMRON products which implement FINS protocol missing authentication9.8v3.11.4%2023-06-19Fix
CVE-2023-25747Mozilla Firefox potential use-after-free7.5v3.10.6%2023-06-19Fix
CVE-2023-25736Mozilla Firefox undefined behavior9.8v3.10.7%2023-06-19Fix
CVE-2023-25733Mozilla Firefox unchecked return value7.5v3.10.6%2023-06-19Fix
CVE-2023-3318SourceCodester Resort Management System cross-site scripting5.4v3.10.6%2023-06-19
CVE-2023-3316libtiff A null pointer dereference6.5NVD v3.11.1%2023-06-19Fix
CVE-2023-3315Jenkins Team Concert Plugin missing authorization4.3v3.10.5%2023-06-19Fix
CVE-2023-3312Linux kernel qcom-cpufreq-hw driver double free7.5NVD v3.10.9%2023-06-19Fix
CVE-2023-3022Linux Kernel (IPv6) type confusion5.5NVD v3.10.2%2023-06-19Fix
CVE-2023-2907Marksoft SQL command improper neutralization9.8CNA v3.10.6%2023-06-19
CVE-2023-2899Google Map Shortcode WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-06-19
CVE-2023-2812Ultimate Dashboard WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2023-06-19Fix
CVE-2023-2811AI ChatBot WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.4%2023-06-19Fix
CVE-2023-2805SupportCandy WordPress plugin Admin+ SQLi7.2NVD v3.10.9%2023-06-19Fix
CVE-2023-2779Social Share, Social Login and Social Comments reflected cross-site scripting6.1NVD v3.16.0%2023-06-19NucleiExploit codeFix
CVE-2023-2751Upload Resume WordPress plugin Captcha bypass5.3NVD v3.10.5%2023-06-19
CVE-2023-2742AI ChatBot WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.5%2023-06-19Fix
CVE-2023-2719SupportCandy WordPress plugin Subscriber+ SQLi8.8NVD v3.11.2%2023-06-19Fix
CVE-2023-2684File Renaming on Upload WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.4%2023-06-19Fix
CVE-2023-2654Conditional Menus WordPress plugin reflected XSS6.1NVD v3.10.5%2023-06-19Fix
CVE-2023-2600Custom Base Terms WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2023-06-19Fix
CVE-2023-2527Integration for Contact Form 7 and Zoho CRM, Bigin WordPress plugin Admin+ SQLi4.8NVD v3.10.4%2023-06-19Fix
CVE-2023-2492QueryWall: Plug'n Play Firewall WordPress plugin Admin+ SQLi7.2NVD v3.10.9%2023-06-19
CVE-2023-2401QuBot WordPress plugin qubotchat Admin+ stored XSS4.8NVD v3.10.4%2023-06-19Fix
CVE-2023-2399Qudata QuBot chat stored cross-site scripting6.1NVD v3.10.5%2023-06-19Fix
CVE-2023-2359Revolution Slider WordPress plugin Author+ remote code execution8.8NVD v3.12.5%2023-06-19Fix
CVE-2023-2221WP Custom Cursors WordPress plugin Admin+ SQLi7.2NVD v3.10.9%2023-06-19Fix
CVE-2023-0489SlideOnline WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-06-19
CVE-2023-0368Responsive Tabs For WPBakery Page Builder WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-06-19
CVE-2023-35829Linux kernel race condition7.0v3.10.4%2023-06-18Fix
CVE-2023-35828Linux kernel race condition7.0v3.10.5%2023-06-18Exploit codeFix
CVE-2023-35827Linux kernel race condition7.0NVD v3.10.2%2023-06-18Fix
CVE-2023-35826Linux kernel race condition7.0v3.10.2%2023-06-18Fix
CVE-2023-35824Linux kernel race condition7.0v3.10.2%2023-06-18Fix
CVE-2023-35823Linux kernel race condition7.0v3.10.2%2023-06-18Fix
CVE-2023-3311PuneethReddyHC online-shopping-system-advanced addsuppliers.php cross-site scripting5.4v3.10.6%2023-06-18
CVE-2023-3310code-projects Agro-School Management System loaddata.php SQL injection8.8v3.10.7%2023-06-18
CVE-2023-3309SourceCodester Resort Reservation System Manage Room page ?page=rooms cross-site scripting5.4v3.10.6%2023-06-18
CVE-2023-3308whaleal IceFrog Aviator Template Engine deserialization8.8v3.11.1%2023-06-18
CVE-2023-3307miniCal SQL injection8.8v3.10.9%2023-06-18
CVE-2023-3306Ruijie RG-EW1200G Admin Password app.09df2a9e44ab48766f5f.js access control9.8v3.123.1%2023-06-18KCV
CVE-2023-3305CData Web Management System C-DATA Web Management System User Creation access control7.5v3.10.8%2023-06-18
CVE-2023-35813Sitecore Experience Commerce code injection9.8NVD v3.186.7%2023-06-17NucleiEmerging ThreatsExploit codeFix
CVE-2023-35811SugarCRM SQL injection8.8v3.11.0%2023-06-17Fix
CVE-2023-35810SugarCRM PHP object injection7.2v3.11.2%2023-06-17Fix
CVE-2023-35809SugarCRM code injection8.8v3.11.3%2023-06-17Fix
CVE-2023-35808SugarCRM unrestricted file upload8.8v3.11.3%2023-06-17Fix
CVE-2023-28295Microsoft Publisher remote code execution7.8CNA v3.10.7%2023-06-17Fix
CVE-2023-28287Microsoft Publisher remote code execution7.8CNA v3.10.7%2023-06-17Fix
CVE-2023-3295Unlimited Elements For Elementor WordPress plugin arbitrary file upload8.8v3.11.3%2023-06-17Fix
CVE-2023-35790libjxl integer underflow7.5v3.10.8%2023-06-16Fix
CVE-2023-35789rabbitmq-c insufficiently protected credentials5.5v3.10.2%2023-06-16Fix
CVE-2023-35788Linux kernel out-of-bounds write7.8v3.10.5%2023-06-16Fix
CVE-2023-35784OpenBSD LibreSSL double free9.8v3.10.9%2023-06-16Fix
CVE-2023-35783Ke_search (aka Faceted Search) vulnerable to cross-site scripting6.1v3.10.3%2023-06-16Fix
CVE-2023-35782Ipandlanguageredirect extension vulnerable to SQL injection9.8v3.10.5%2023-06-16Fix
CVE-2023-35708Progress MOVEit Transfer SQL injection9.8v3.196.7%2023-06-16Reported exploitedNucleiFix
CVE-2023-34845Bludit unrestricted file upload5.4v3.10.8%2023-06-16Exploit code
CVE-2023-34832TP-Link Archer AX10 buffer overflow9.8v3.11.4%2023-06-16
CVE-2023-34795xlsxio use-after-free7.8v3.10.4%2023-06-16
CVE-2023-34733Vw Discover Media Infotainment System improper check for exceptional conditions6.8v3.10.5%2023-06-16
CVE-2023-34660JeecgBoot jeecg-boot unrestricted file upload6.5v3.10.6%2023-06-16
CVE-2023-34659JeecgBoot jeecg-boot SQL injection9.8v3.112.5%2023-06-16Nuclei
CVE-2023-34645jflyfox jfinal_cms path traversal7.5v3.10.8%2023-06-16
CVE-2023-34548Simple Customer Relationship Management SQL injection9.8v3.10.9%2023-06-16
CVE-2023-34475ImageMagick use-after-free5.5NVD v3.10.4%2023-06-16Fix
CVE-2023-34474ImageMagick heap-based buffer overflow5.5NVD v3.10.4%2023-06-16Fix
CVE-2023-34459OpenZeppelin Contracts Merkle multiproof verification improper integrity check validation5.3CNA v3.10.4%2023-06-16Fix
CVE-2023-34165Huawei HarmonyOS unauthorized access5.3v3.10.3%2023-06-16Fix
CVE-2023-34157Huawei HarmonyOS authentication bypass by spoofing10.0CNA v3.10.4%2023-06-16Fix
CVE-2023-34154Huawei HarmonyOS incorrect permission assignment8.2v3.10.3%2023-06-16Fix
CVE-2023-33438Wolterskluwer Teammate+ stored cross-site scripting5.4v3.10.5%2023-06-16
CVE-2023-33307Fortinet FortiOS A null pointer dereference6.4CNA v3.10.6%2023-06-16Fix
CVE-2023-33306Fortinet FortiOS A null pointer dereference6.2CNA v3.10.8%2023-06-16Fix
CVE-2023-32754Thinking Software Efence SQL injection9.8CNA v3.11.0%2023-06-16Fix
CVE-2023-32753ITPison OMICARD EDM arbitrary file upload9.8CNA v3.10.9%2023-06-16
CVE-2023-32752L7 Networks InstantScan and InstantQoS arbitrary file upload9.8CNA v3.10.9%2023-06-16
CVE-2023-32028Microsoft SQL OLE DB remote code execution7.8CNA v3.10.7%2023-06-16Fix
CVE-2023-32027Microsoft ODBC Driver for SQL server remote code execution7.8CNA v3.10.6%2023-06-16Fix
CVE-2023-32026Microsoft ODBC Driver for SQL server remote code execution7.8CNA v3.10.7%2023-06-16Fix
CVE-2023-32025Microsoft ODBC Driver for SQL server remote code execution7.8CNA v3.10.6%2023-06-16Fix
CVE-2023-30905HPE MC990 X RMC firmware incorrect default permissions7.8v3.10.2%2023-06-16Fix
CVE-2023-30904HPE Insight Remote Support hard-coded credentials5.5v3.10.2%2023-06-16Fix
CVE-2023-30903HPE HP-UX resource exhaustion5.5v3.10.2%2023-06-16Fix
CVE-2023-30625rudder-server vulnerable to SQL injection8.8NVD v3.185.8%2023-06-16NucleiMetasploitExploit codeFix
CVE-2023-30453Teamlead Reminder cross-site scripting5.4v3.10.3%2023-06-16
CVE-2023-302234D Server A improper authentication7.5v3.11.1%2023-06-16
CVE-2023-302224D Server An information disclosure7.5v3.11.2%2023-06-16
CVE-2023-29356Microsoft ODBC Driver for SQL server remote code execution7.8CNA v3.10.6%2023-06-16Fix
CVE-2023-29349Microsoft ODBC and OLE DB remote code execution7.8CNA v3.10.6%2023-06-16Fix
CVE-2023-27420Arya Multipurpose WordPress theme cross-site scripting (XSS)6.1NVD v3.10.4%2023-06-16
CVE-2023-26541asMember WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-16
CVE-2023-26537WP No External Links WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-16
CVE-2023-26527Debug Assistant WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-16Fix
CVE-2023-26515Simple Slug Translate WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-16Fix
CVE-2023-26013Strong Testimonials WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-06-16Fix
CVE-2023-25974wp2syslog WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-16
CVE-2023-25963JS Job Manager WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-06-16Fix
CVE-2023-25645UP T2 4K incorrect default permissions7.7v3.10.3%2023-06-16Fix
CVE-2023-25366Siglent Sds 1104x-e origin validation error9.8v3.10.4%2023-06-16
CVE-2023-25188Nokia Asika Airscale improper privilege management7.8v3.10.1%2023-06-16Fix
CVE-2023-25187Nokia Asika Airscale hard-coded credentials7.0v3.11.0%2023-06-16Exploit codeFix
CVE-2023-25186Nokia Asika Airscale path traversal2.8NVD v3.10.2%2023-06-16Fix
CVE-2023-25185Nokia Asika Airscale improper privilege management7.8v3.10.1%2023-06-16Fix
CVE-2023-24243CData Arc server-side request forgery7.5v3.14.0%2023-06-16NucleiFix
CVE-2023-20885CF workflows leak credentials in system audit logs6.5CNA v3.10.5%2023-06-16Fix
CVE-2023-3294Cross-site scripting (XSS) DOM in saleor/React-storefront6.1NVD v3.10.5%2023-06-16
CVE-2023-3293Cross-site scripting (XSS) Stored in salesagility/suitecrm-core4.8NVD v3.10.5%2023-06-16Fix
CVE-2023-3291Heap-based buffer overflow in gpac/gpac3.3NVD v3.10.4%2023-06-16Fix
CVE-2023-3268Linux Kernel out-of-bounds read7.1NVD v3.10.5%2023-06-16Fix
CVE-2023-3195ImageMagick stack-based buffer overflow5.5NVD v3.10.5%2023-06-16Fix
CVE-2023-2831Mattermost denial of service while unescaping a Markdown string4.3CNA v3.10.7%2023-06-16
CVE-2023-2797Path traversal in GitHub plugin's code preview feature3.1CNA v3.10.5%2023-06-16
CVE-2023-2793Mattermost stack exhaustion in PreparePostForClientWithEmbedsAndImages6.5CNA v3.10.6%2023-06-16
CVE-2023-2792Mattermost ephemeral messages return private channel contents in permalink previews6.5CNA v3.10.6%2023-06-16
CVE-2023-2791Mattermost playbooks lets you edit arbitrary posts4.3CNA v3.10.4%2023-06-16Fix
CVE-2023-2788Mattermost deactivated user can retain access using oauth2 API6.2CNA v3.10.5%2023-06-16
CVE-2023-2787Mattermost collapsed Reply Threads APIs leak message contents from private channels6.5CNA v3.10.5%2023-06-16
CVE-2023-2786Mattermost channel commands execution doesn't properly verify permissions4.3CNA v3.10.4%2023-06-16
CVE-2023-2785Mattermost specially crafted search query can cause large log entries in postgres4.3CNA v3.10.6%2023-06-16
CVE-2023-2784Apps Framework allows install requests from regular members via an internal path4.2CNA v3.10.3%2023-06-16
CVE-2023-2783App Framework does not checks for the secret provided in the incoming webhook request4.3CNA v3.10.4%2023-06-16Fix
CVE-2023-2431Kubernetes bypass of seccomp profile enforcement3.4CNA v3.10.3%2023-06-16Fix
CVE-2023-35030Liferay Portal and Liferay DXP vulnerable to CSRF via the Layout module8.8CNA v3.10.4%2023-06-15Fix
CVE-2023-35029Liferay Portal and Liferay DXP vulnerable to open redirect via the Layout module6.1CNA v3.10.5%2023-06-15Fix
CVE-2023-34880CmsEasy path traversal9.8v3.11.1%2023-06-15
CVE-2023-34852PublicCMS incorrect permission assignment9.8v3.11.0%2023-06-15Exploit code
CVE-2023-34833ThinkAdmin component /api/upload.php arbitrary file upload6.1v3.10.5%2023-06-15Fix
CVE-2023-34800D-Link Go-rt-ac750 OS command injection9.8v3.129.3%2023-06-15
CVE-2023-34797Temenos Cwx Registration page missing authorization5.4v3.10.4%2023-06-15
CVE-2023-34666PHPGurukul Cyber Cafe Management System cross-site scripting6.1v3.10.7%2023-06-15
CVE-2023-34626Piwigo SQL injection4.3v3.10.5%2023-06-15
CVE-2023-34455Snappy-java's unchecked chunk length leads to DoS7.5CNA v3.11.8%2023-06-15Fix
CVE-2023-34454Snappy-java's integer overflow vulnerability in compress leads to DoS5.9CNA v3.11.5%2023-06-15Fix
CVE-2023-34453Snappy-java's integer overflow vulnerability in shuffle leads to DoS5.9CNA v3.11.7%2023-06-15Fix
CVE-2023-34242Cilium vulnerable to information leakage via incorrect ReferenceGrant handling3.4CNA v3.10.3%2023-06-15Fix
CVE-2023-33243Starface weak password hash8.1v3.14.4%2023-06-15Exploit code
CVE-2023-32229Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanently damaged when enabling the Stream security option (signing of the video stream) with option MD5, SHA-1 or SHA-256.4.9CNA v3.10.6%2023-06-15Fix
CVE-2023-31672Ai-dev Ailinear SQL injection9.8v3.10.9%2023-06-15
CVE-2023-29322Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.5%2023-06-15Fix
CVE-2023-29321Adobe Animate FLA files use-after-free arbitrary code execution7.8CNA v3.10.5%2023-06-15Fix
CVE-2023-29307Adobe Experience Manager open redirect on AEM Target5.4CNA v3.10.5%2023-06-15Fix
CVE-2023-29304Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.5%2023-06-15Fix
CVE-2023-29302Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.5%2023-06-15Fix
CVE-2023-29297Adobe Magento Commerce admin-to-admin stored XSS via cache poisoning9.1CNA v3.11.4%2023-06-15Fix
CVE-2023-29296Adobe Magento Open Source allows incorrect authorization4.3CNA v3.10.6%2023-06-15Fix
CVE-2023-29295Adobe Magento Commerce insecure direct object reference (IDOR) in Create Quote function4.3CNA v3.10.6%2023-06-15Fix
CVE-2023-29294Bypass Purchase Order Approval using Company User in Adobe Commerce B2B4.3CNA v3.10.7%2023-06-15Fix
CVE-2023-29293Adobe Commerce improper input validation2.7CNA v3.11.0%2023-06-15Fix
CVE-2023-29292Adobe Magento Commerce server side request forgery (SSRF) in FedEx carrier integration configuration4.9CNA v3.11.0%2023-06-15Fix
CVE-2023-29291Adobe Magento Commerce server side request forgery (SSRF) in USPS carrier integration configuration4.9CNA v3.11.1%2023-06-15Fix
CVE-2023-29290Adobe Commerce Guest Cart Shipping Address Overwrite IDOR5.3CNA v3.10.6%2023-06-15Fix