CVE-2023 records published in June 2023
This page lists the 2,054 CVE-2023 records published in June 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 17 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.
- Critical
- 26813.0% of these records
- Listed in CISA KEV
- 170.8% of these records
- Reported exploited
- 1under 0.1% of these records
- Detection signal
- 693.4% of these records
- Exploit code
- 1075.2% of these records
- Actionable vendor fix
- 1,55675.8% of these records
Figures as of 2026-10-24 13:46 UTC. Records published in June 2023 have had from about 40 months to about 41 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-37365 | Hnswlib init_index double free | 6.5v3.1 | 0.6% | 2023-06-30 | Fix |
| CVE-2023-37360 | Pacparser pacparser_find_proxy vulnerability | 6.1v3.1 | 0.4% | 2023-06-30 | Fix |
| CVE-2023-37307 | MISP cross-site scripting | 5.4v3.1 | 0.5% | 2023-06-30 | |
| CVE-2023-37306 | MISP information disclosure through error messages | 7.5v3.1 | 0.5% | 2023-06-30 | |
| CVE-2023-37305 | mediawiki observable discrepancy | 5.3v3.1 | 0.6% | 2023-06-30 | Fix |
| CVE-2023-37304 | mediawiki cross-site scripting | 5.4v3.1 | 0.5% | 2023-06-30 | Fix |
| CVE-2023-37303 | mediawiki improper check for exceptional conditions | 9.8v3.1 | 1.0% | 2023-06-30 | Fix |
| CVE-2023-37302 | MediaWiki cross-site scripting | 6.1v3.1 | 0.7% | 2023-06-30 | Fix |
| CVE-2023-37301 | mediawiki inadequate encryption strength | 5.3v3.1 | 0.3% | 2023-06-30 | Fix |
| CVE-2023-37300 | mediawiki incorrect authorization | 5.3v3.1 | 0.7% | 2023-06-30 | Fix |
| CVE-2023-37299 | Joplin cross-site scripting | 6.1v3.1 | 0.6% | 2023-06-30 | Fix |
| CVE-2023-37298 | Joplin cross-site scripting | 6.1v3.1 | 0.6% | 2023-06-30 | Fix |
| CVE-2023-36812 | Remote code execution in OpenTSDB | 9.8CNA v3.1 | 16.5% | 2023-06-30 | MetasploitExploit codeFix |
| CVE-2023-36810 | Quadratic runtime with malformed PDF missing xref marker in pypdf | 6.2CNA v3.1 | 0.6% | 2023-06-30 | Fix |
| CVE-2023-36807 | Infinite loop when reading malformed objects in pypdf | 6.2CNA v3.1 | 0.6% | 2023-06-30 | Fix |
| CVE-2023-36539 | Zoom Video Communications Zoom Clients missing cryptographic step | 5.3CNA v3.1 | 0.5% | 2023-06-30 | |
| CVE-2023-36477 | Persistent cross-site scripting (XSS) through CKEditor Configuration pages in XWiki Platform | 9.1CNA v3.1 | 0.9% | 2023-06-30 | Fix |
| CVE-2023-36347 | Codekop endpoint excel.php of POS improper authentication | 7.5v3.1 | 34.3% | 2023-06-30 | Nuclei |
| CVE-2023-36146 | Multilaser RE170 cross-site scripting | 5.4v3.1 | 0.5% | 2023-06-30 | Exploit code |
| CVE-2023-36144 | Intelbras Sg 2404 Mr An authentication bypass | 7.5v3.1 | 36.5% | 2023-06-30 | NucleiExploit code |
| CVE-2023-36143 | Maxprintisp Maxlink 1200g OS command injection | 8.8v3.1 | 2.7% | 2023-06-30 | Exploit code |
| CVE-2023-35947 | Path traversal vulnerabilities in handling of Tar archives in Gradle | 6.9CNA v3.1 | 0.5% | 2023-06-30 | Fix |
| CVE-2023-35946 | Dependency cache path traversal in Gradle | 6.9CNA v3.1 | 0.3% | 2023-06-30 | Fix |
| CVE-2023-35178 | HP LaserJet Pro buffer overflow | 8.8v3.1 | 0.4% | 2023-06-30 | Fix |
| CVE-2023-35177 | HP LaserJet Pro out-of-bounds write | 8.8v3.1 | 0.4% | 2023-06-30 | Fix |
| CVE-2023-35176 | HP LaserJet Pro buffer overflow | 8.8v3.1 | 0.4% | 2023-06-30 | Fix |
| CVE-2023-35175 | HP LaserJet Pro server-side request forgery | 9.8v3.1 | 1.4% | 2023-06-30 | Fix |
| CVE-2023-34840 | Angular-ui-notification cross-site scripting | 6.1v3.1 | 0.6% | 2023-06-30 | Exploit code |
| CVE-2023-33336 | Sophos Web Appliance cross-site scripting | 4.8v3.1 | 0.6% | 2023-06-30 | |
| CVE-2023-33298 | Perimeter81 Xpc Helpertool command injection | 7.8v3.1 | 0.6% | 2023-06-30 | Fix |
| CVE-2023-33276 | Gira Knx IP Router cross-site scripting | 6.1v3.1 | 0.5% | 2023-06-30 | |
| CVE-2023-32622 | WAVLINK Wl-wn531ax2 Firmware improper neutralization | 7.2v3.1 | 0.7% | 2023-06-30 | Fix |
| CVE-2023-32621 | WAVLINK WL-WN531AX2 unrestricted file upload | 7.2v3.1 | 0.7% | 2023-06-30 | Fix |
| CVE-2023-32620 | WAVLINK Wl-wn531ax2 Firmware improper authentication | 6.5v3.1 | 0.3% | 2023-06-30 | Fix |
| CVE-2023-32613 | WAVLINK Wl-wn531ax2 Firmware resource exposure | 8.1v3.1 | 0.3% | 2023-06-30 | Fix |
| CVE-2023-32612 | WAVLINK Wl-wn531ax2 Firmware client-side enforcement of server-side security | 7.2v3.1 | 0.7% | 2023-06-30 | Fix |
| CVE-2023-32608 | Implem Pleasanter path traversal | 6.5v3.1 | 1.2% | 2023-06-30 | Fix |
| CVE-2023-32607 | Implem Pleasanter stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-06-30 | Fix |
| CVE-2023-31543 | Pipreqs uncontrolled search path | 9.8v3.1 | 1.2% | 2023-06-30 | Fix |
| CVE-2023-30589 | Node.js Node llhttp vulnerable to HTTP request smuggling | 7.5NVD v3.1 | 3.9% | 2023-06-30 | Fix |
| CVE-2023-29241 | Bosch Building Integration System cybersecurity guidebook vulnerability | 8.1CNA v3.1 | 0.4% | 2023-06-30 | Fix |
| CVE-2023-29147 | Malwarebytes authentication bypass by spoofing | 5.5v3.1 | 0.3% | 2023-06-30 | Fix |
| CVE-2023-29145 | Malwarebytes weak password recovery | 7.8v3.1 | 0.3% | 2023-06-30 | Fix |
| CVE-2023-28387 | "NewsPicks" App hard-coded credentials | 5.5v3.1 | 0.2% | 2023-06-30 | Fix |
| CVE-2023-27469 | Malwarebytes Anti-exploit link following | 7.1v3.1 | 0.4% | 2023-06-30 | Fix |
| CVE-2023-26299 | HP PC products using AMI UEFI Firmware time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2023-06-30 | Fix |
| CVE-2023-26135 | flatnest prototype pollution | 9.8v3.1 | 0.9% | 2023-06-30 | |
| CVE-2023-22816 | Limited Post-authentication remote command injection in My Cloud Products | 6.0CNA v3.1 | 0.9% | 2023-06-30 | Fix |
| CVE-2023-22815 | Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices | 6.2CNA v3.1 | 1.3% | 2023-06-30 | Fix |
| CVE-2023-3493 | Improper neutralization of formula elements in a CSV file in FOSSBilling/FOSSBilling | 8.0v3.1 | 0.5% | 2023-06-30 | Fix |
| CVE-2023-3491 | Unrestricted upload of file with dangerous type in FOSSBilling/FOSSBilling | 8.8v3.1 | 0.9% | 2023-06-30 | Fix |
| CVE-2023-3490 | SQL injection in FOSSBilling/FOSSBilling | 9.8v3.1 | 0.9% | 2023-06-30 | Fix |
| CVE-2023-3485 | Insecure default Authorization in Temporal Server | 3.0CNA v3.1 | 0.2% | 2023-06-30 | Fix |
| CVE-2023-3479 | Cross-site scripting (XSS) Reflected in hestiacp/hestiacp | 6.1v3.1 | 1.3% | 2023-06-30 | NucleiFix |
| CVE-2023-3478 | IBOS OA Add User edit&op=member actionEdit SQL injection | 7.2v3.1 | 0.8% | 2023-06-30 | |
| CVE-2023-3477 | RocketSoft Rocket LMS Contact form store cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-30 | |
| CVE-2023-3476 | SimplePHPscripts GuestBook Script URL parameter preview.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-30 | |
| CVE-2023-3475 | SimplePHPscripts Event Script URL parameter preview.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-30 | |
| CVE-2023-3474 | SimplePHPscripts Simple Blog URL parameter preview.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-30 | |
| CVE-2023-3473 | Campcodes Retro Cellphone Online Store edit_product.php SQL injection | 9.8v3.1 | 0.8% | 2023-06-30 | |
| CVE-2023-3469 | Cross-site scripting (XSS) Reflected in thorsten/phpMyFAQ | 4.8v3.1 | 0.6% | 2023-06-30 | Fix |
| CVE-2023-3338 | kernel crash due to a null pointer dereference in the dn_nsp_send function | 6.5NVD v3.1 | 8.5% | 2023-06-30 | Exploit codeFix |
| CVE-2023-3249 | Web3 Crypto wallet Login and NFT token gating WordPress plugin authentication bypass | 9.8CNA v3.1 | 1.1% | 2023-06-30 | Fix |
| CVE-2023-3063 | SP Project and Document Manager WordPress plugin insecure direct object reference | 8.8CNA v3.1 | 0.7% | 2023-06-30 | Fix |
| CVE-2023-2908 | LibTIFF: Null pointer dereference in tif_dir.c | 5.5NVD v3.1 | 0.4% | 2023-06-30 | Fix |
| CVE-2023-2846 | Authentication bypass vulnerability in MELSEC-F Series main module | 7.5CNA v3.1 | 1.3% | 2023-06-30 | |
| CVE-2023-2834 | BookIt WordPress plugin authentication bypass | 9.8CNA v3.1 | 1.9% | 2023-06-30 | Fix |
| CVE-2023-1206 | kernel resource exhaustion | 5.7NVD v3.1 | 0.6% | 2023-06-30 | Exploit codeKCVFix |
| CVE-2023-37256 | mediawiki cross-site scripting | 6.1v3.1 | 0.5% | 2023-06-29 | Fix |
| CVE-2023-37255 | mediawiki cross-site scripting | 6.1v3.1 | 0.5% | 2023-06-29 | Fix |
| CVE-2023-37254 | mediawiki cross-site scripting | 6.1v3.1 | 0.5% | 2023-06-29 | Fix |
| CVE-2023-37251 | mediawiki cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-29 | Fix |
| CVE-2023-37237 | Veritas Netbackup Appliance incorrect permission assignment | 7.2v3.1 | 0.6% | 2023-06-29 | Fix |
| CVE-2023-36617 | ruby-lang URI regular expression denial of service | 5.3v3.1 | 1.7% | 2023-06-29 | Fix |
| CVE-2023-36607 | Ovarro TBox API commands missing authorization | 5.3v3.1 | 0.5% | 2023-06-29 | Fix |
| CVE-2023-36488 | ILIAS cross-site scripting | 5.4v3.1 | 0.4% | 2023-06-29 | Fix |
| CVE-2023-36487 | ILIAS weak password recovery | 9.8v3.1 | 1.0% | 2023-06-29 | Fix |
| CVE-2023-36484 | ILIAS cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-29 | Fix |
| CVE-2023-36476 | `calamares-nixos-extensions` LUKS keyfile exposure | 7.9CNA v3.1 | 0.3% | 2023-06-29 | Fix |
| CVE-2023-36471 | XWiki Commons HTML sanitizer vulnerability | 9.1CNA v3.1 | 1.0% | 2023-06-29 | Fix |
| CVE-2023-36470 | Code injection in icon themes of XWiki Platform | 10.0CNA v3.1 | 1.9% | 2023-06-29 | Fix |
| CVE-2023-36469 | Code injection through NotificationRSSService in XWiki Platform | 10.0CNA v3.1 | 82.0% | 2023-06-29 | Fix |
| CVE-2023-36468 | Upgrading doesn't prevent exploiting vulnerable XWiki documents | 10.0CNA v3.1 | 1.9% | 2023-06-29 | Fix |
| CVE-2023-35938 | User access not updated with privilege change in Tuleap | 4.1CNA v3.1 | 0.6% | 2023-06-29 | Fix |
| CVE-2023-35830 | Stw-mobile-machines Tcg-4lite missing authentication | 9.8v3.1 | 1.3% | 2023-06-29 | Fix |
| CVE-2023-34849 | Ikuai8 Ikuaios unauthorized command injection | 9.8v3.1 | 2.9% | 2023-06-29 | |
| CVE-2023-34844 | Play With Docker container privileged mode vulnerability | 9.8v3.1 | 0.9% | 2023-06-29 | |
| CVE-2023-34843 | Traggo path traversal | 7.5NVD v3.1 | 7.2% | 2023-06-29 | Nuclei |
| CVE-2023-34834 | Mcl-collection MCL-Net files accessible to external parties | 5.3v3.1 | 4.0% | 2023-06-29 | Exploit code |
| CVE-2023-34831 | Odysseycs Ithacalabs Turnitin Lti cross-site scripting | 5.4v3.1 | 0.4% | 2023-06-29 | |
| CVE-2023-34738 | Chemex unrestricted file upload | 9.8v3.1 | 0.8% | 2023-06-29 | |
| CVE-2023-34735 | Property Cloud Platform Management Center SQL injection | 9.8v3.1 | 0.7% | 2023-06-29 | |
| CVE-2023-34734 | Secnet Annet Ac Centralized Management Platform cross-site scripting | 4.8v3.1 | 0.4% | 2023-06-29 | |
| CVE-2023-34658 | Telegram clickjacking | 5.3v3.1 | 0.4% | 2023-06-29 | |
| CVE-2023-34656 | Video Management System session fixation | 8.8v3.1 | 0.7% | 2023-06-29 | |
| CVE-2023-34648 | User Registration & Login And User Management System With Admin Panel cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-29 | |
| CVE-2023-34599 | gibbonedu gibbon cross-site scripting | 6.1NVD v3.1 | 1.9% | 2023-06-29 | Nuclei |
| CVE-2023-34598 | gibbonedu gibbon path traversal | 9.8v3.1 | 47.2% | 2023-06-29 | NucleiExploit code |
| CVE-2023-34487 | Online Hotel Management System SQL injection | 9.8v3.1 | 0.9% | 2023-06-29 | |
| CVE-2023-34486 | Online Hotel Management System cross-site scripting | 6.1v3.1 | 0.7% | 2023-06-29 | |
| CVE-2023-33661 | ChurchCRM cross-site scripting | 6.1v3.1 | 0.5% | 2023-06-29 | |
| CVE-2023-33466 | orthanc-server orthanc code injection | 8.8v3.1 | 4.2% | 2023-06-29 | Fix |
| CVE-2023-33277 | Gira Knx IP Router path traversal | 7.5v3.1 | 1.3% | 2023-06-29 | |
| CVE-2023-33190 | labring sealos improper configuration of RBAC permissions obtaining cluster control permissions | 10.0CNA v3.1 | 0.7% | 2023-06-29 | Fix |
| CVE-2023-32610 | SYNCK GRAPHICA Mailform Pro CGI regular expression denial of service | 7.5v3.1 | 1.3% | 2023-06-29 | Fix |
| CVE-2023-31222 | Medtronic Paceart MSMQ deserialization of untrusted data | 9.8CNA v3.1 | 28.5% | 2023-06-29 | Fix |
| CVE-2023-30955 | Foundry Workspace-server Developer Mode authorization bypass | 4.3CNA v3.1 | 0.4% | 2023-06-29 | Fix |
| CVE-2023-30946 | Issues notification metadata lacks authorization | 3.5CNA v3.1 | 0.4% | 2023-06-29 | Fix |
| CVE-2023-26966 | libtiff buffer overflow | 5.5v3.1 | 0.4% | 2023-06-29 | Fix |
| CVE-2023-26616 | D-Link Dir-823g Firmware buffer overflow | 9.8v3.1 | 1.3% | 2023-06-29 | |
| CVE-2023-26613 | D-Link Dir-823g Firmware OS command injection | 9.8v3.1 | 31.4% | 2023-06-29 | |
| CVE-2023-26612 | D-Link Dir-823g Firmware buffer overflow | 9.8v3.1 | 1.3% | 2023-06-29 | |
| CVE-2023-26085 | Arm Nn Android Neural Networks Driver out-of-bounds read | 7.8v3.1 | 0.3% | 2023-06-29 | Fix |
| CVE-2023-25433 | libtiff buffer overflow | 5.5v3.1 | 0.4% | 2023-06-29 | Fix |
| CVE-2023-22886 | Apache Airflow JDBC Provider: RCE | 8.8v3.1 | 1.5% | 2023-06-29 | Fix |
| CVE-2023-3465 | SimplePHPscripts Classified Ads Script HTTP POST request user.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-06-29 | |
| CVE-2023-3464 | SimplePHPscripts Classified Ads Script URL parameter preview.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-06-29 | |
| CVE-2023-3458 | SourceCodester Shopping Website forgot-password.php SQL injection | 9.8v3.1 | 0.9% | 2023-06-29 | |
| CVE-2023-3457 | SourceCodester Shopping Website index.php SQL injection | 9.8v3.1 | 0.9% | 2023-06-29 | |
| CVE-2023-3447 | Active Directory Integration / LDAP Integration WordPress plugin LDAP injection | 7.5NVD v3.1 | 0.5% | 2023-06-29 | Fix |
| CVE-2023-2982 | WordPress Social Login and Register plugin authentication bypass | 9.8CNA v3.1 | 46.2% | 2023-06-29 | NucleiExploit codeFix |
| CVE-2023-1602 | Short URL WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-06-29 | Fix |
| CVE-2023-36475 | parse-community parse-server parse Server vulnerable to remote code execution | 9.8CNA v3.1 | 3.2% | 2023-06-28 | Fix |
| CVE-2023-36474 | Interactsh server settings make users vulnerable to Subdomain takeover | 8.2CNA v3.1 | 0.5% | 2023-06-28 | Fix |
| CVE-2023-36467 | awslabs aws-dataall AWS data.all vulnerable to RCE through user injection of Python commands | 8.0CNA v3.1 | 1.2% | 2023-06-28 | Fix |
| CVE-2023-34937 | H3C Magic B1ST UpdateSnat function stack-based buffer overflow | 7.5v3.1 | 0.8% | 2023-06-28 | |
| CVE-2023-34936 | H3C Magic B1ST UpdateMacClone function stack-based buffer overflow | 7.5v3.1 | 0.8% | 2023-06-28 | |
| CVE-2023-34935 | H3C Magic B1ST AddWlanMacList function stack-based buffer overflow | 7.5v3.1 | 0.8% | 2023-06-28 | |
| CVE-2023-34934 | H3C Magic B1ST Edit_BasicSSID_5G function stack-based buffer overflow | 7.5v3.1 | 0.8% | 2023-06-28 | |
| CVE-2023-34933 | H3C Magic B1ST UpdateWanParams function stack-based buffer overflow | 7.5v3.1 | 0.8% | 2023-06-28 | |
| CVE-2023-34932 | H3C Magic B1ST UpdateWanMode function stack-based buffer overflow | 7.5v3.1 | 0.8% | 2023-06-28 | |
| CVE-2023-34931 | H3C Magic B1ST EditWlanMacList function stack-based buffer overflow | 7.5v3.1 | 0.8% | 2023-06-28 | |
| CVE-2023-34930 | H3C Magic B1ST EditMacList function stack-based buffer overflow | 7.5v3.1 | 0.8% | 2023-06-28 | |
| CVE-2023-34929 | H3C Magic B1ST AddMacList function stack-based buffer overflow | 7.5v3.1 | 0.8% | 2023-06-28 | |
| CVE-2023-34928 | H3C Magic B1ST Edit_BasicSSID function stack-based buffer overflow | 7.5v3.1 | 1.3% | 2023-06-28 | |
| CVE-2023-34761 | 7-eleven Led Message Cup missing authentication | 6.5v3.1 | 0.5% | 2023-06-28 | |
| CVE-2023-34736 | Guantang Equipment Management System unrestricted file upload | 7.2v3.1 | 0.8% | 2023-06-28 | |
| CVE-2023-34652 | PHPGurukul Hostel Management System cross-site scripting | 6.1v3.1 | 0.5% | 2023-06-28 | |
| CVE-2023-34651 | Hospital Management System cross-site scripting | 6.1v3.1 | 0.5% | 2023-06-28 | |
| CVE-2023-34650 | Small CRM cross-site scripting | 6.1v3.1 | 0.5% | 2023-06-28 | |
| CVE-2023-34647 | PHPGurukul Hostel Management System cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-28 | |
| CVE-2023-33592 | oretnom23 Lost and Found Information System SQL injection | 9.8v3.1 | 3.8% | 2023-06-28 | Exploit code |
| CVE-2023-33570 | Webkul Bagisto code injection | 8.8v3.1 | 1.1% | 2023-06-28 | |
| CVE-2023-32623 | Monkey Wrench Snow Monkey Forms path traversal | 9.1v3.1 | 1.5% | 2023-06-28 | Fix |
| CVE-2023-32224 | D-Link DSL-224 firmware improper restriction of excessive authentication attempts | 9.8v3.1 | 1.4% | 2023-06-28 | |
| CVE-2023-32223 | D-Link DSL-224 firmware post authentication command execution | 8.8v3.1 | 1.8% | 2023-06-28 | |
| CVE-2023-32222 | D-Link Dsl-g256dg firmware version vBZ_1. authentication bypass | 9.8v3.1 | 1.9% | 2023-06-28 | |
| CVE-2023-30259 | LibreCAD importshp plugin buffer overflow | 5.5v3.1 | 0.3% | 2023-06-28 | Fix |
| CVE-2023-27866 | IBM Informix JDBC code execution | 6.3CNA v3.1 | 1.0% | 2023-06-28 | Fix |
| CVE-2023-26615 | D-Link Dir-823g Firmware weak password recovery | 7.5v3.1 | 0.9% | 2023-06-28 | |
| CVE-2023-26134 | git-commit-info vulnerable to command injection | 9.8v3.1 | 3.6% | 2023-06-28 | Fix |
| CVE-2023-21518 | Samsung Mobile Samsung SearchWidget improper access control | 4.4CNA v3.1 | 0.2% | 2023-06-28 | Fix |
| CVE-2023-21517 | Samsung Exynos Heap out-of-bounds write | 8.8CNA v3.1 | 1.6% | 2023-06-28 | Fix |
| CVE-2023-21513 | Samsung Mobile Devices CC Mode improper privilege management | 6.1CNA v3.1 | 0.4% | 2023-06-28 | Fix |
| CVE-2023-21512 | Samsung Mobile Devices improper privilege management | 2.4CNA v3.1 | 0.2% | 2023-06-28 | Fix |
| CVE-2023-21237 | Android Pixel information disclosure | 5.5v3.1 | 0.3% | 2023-06-28 | KEVFix |
| CVE-2023-21236 | Android aoc.c out-of-bounds write | 6.7v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21226 | Android SAEMM_ContextManagement.c out-of-bounds read | 7.5v3.1 | 0.4% | 2023-06-28 | Fix |
| CVE-2023-21225 | Android incorrect authorization | 7.8v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21224 | Android ss_MmConManagement.c out-of-bounds read | 7.5v3.1 | 0.5% | 2023-06-28 | Fix |
| CVE-2023-21223 | Android LPP_CommonUtil.c out-of-bounds read | 7.5v3.1 | 0.4% | 2023-06-28 | Fix |
| CVE-2023-21222 | Android storage.c out-of-bounds write | 6.7v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21220 | Android cleartext transmission of sensitive information | 7.5v3.1 | 0.3% | 2023-06-28 | Fix |
| CVE-2023-21219 | Android cleartext transmission of sensitive information | 7.5v3.1 | 0.3% | 2023-06-28 | Fix |
| CVE-2023-21214 | Android p2p_iface.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21213 | Android sta_iface.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21212 | Android multiple files out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21211 | Android multiple files out-of-bounds read | 5.5v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21210 | Android sta_iface.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21209 | Android sta_iface.cpp out-of-bounds read | 6.7v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21208 | Android sta_iface.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21207 | Android sta_iface.cpp out-of-bounds read | 6.7v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21206 | Android sta_iface.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21205 | Android sta_iface.cpp out-of-bounds read | 5.5v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21204 | Android multiple files out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21203 | Android sta_iface.cpp out-of-bounds read | 6.7v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21202 | Android btm_devctl.cc out-of-bounds read | 4.5v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21201 | Android btif_sdp_server.cc out-of-bounds read | 7.5v3.1 | 0.5% | 2023-06-28 | Fix |
| CVE-2023-21200 | Android btm_iso_impl.h out-of-bounds read | 5.5v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21199 | Android btu_hcif.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21198 | Android btif_sdp_server.cc out-of-bounds read | 5.5v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21197 | Android btm_acl.cc out-of-bounds read | 7.5v3.1 | 0.4% | 2023-06-28 | Fix |
| CVE-2023-21196 | Android btm_ble_batchscan.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21195 | Android btm_ble_gap.cc out-of-bounds read | 4.5v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21194 | Android gatt_utils.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21193 | Android VideoFrame.h information disclosure | 7.5v3.1 | 0.4% | 2023-06-28 | Fix |
| CVE-2023-21192 | Android InputMethodManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21191 | Android NotificationManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21190 | Android btm_acl.cc information disclosure | 5.0v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21189 | Android LockTaskController.java privilege escalation | 7.3v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21188 | Android btm_ble_gap.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21187 | Android UsbAccessoryUriActivity.java privilege escalation | 7.8v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21186 | Android Dns.cpp out-of-bounds read | 7.5v3.1 | 0.5% | 2023-06-28 | Fix |
| CVE-2023-21185 | Android missing authorization | 7.8v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21184 | Android CarrierPrivilegesTracker.java insecure permissions | 7.8v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21183 | Android ForegroundUtils.java privilege escalation | 7.8v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21182 | Android VendorVideoAPI.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21181 | Android btm_ble_gap.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21180 | Android parser.c out-of-bounds read | 7.5v3.1 | 0.5% | 2023-06-28 | Fix |
| CVE-2023-21179 | Android XmlUtil.java privilege escalation | 7.8v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21178 | Android KeyUtil.cpp information disclosure | 4.1v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21177 | Android WindowManagerService.java information disclosure | 5.5v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21176 | Android utils.rs denial of service | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21175 | Android DataUsageSummary.java privilege escalation | 7.8v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21174 | Android BillingCycleSettings.java privilege escalation | 7.8v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21173 | Android DataUsageList.java information disclosure | 5.5v3.1 | 0.1% | 2023-06-28 | Exploit codeFix |
| CVE-2023-21172 | Android WifiCallingSettings.java privilege escalation | 7.8v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21171 | Android InputDispatcher.cpp privilege escalation | 6.7v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21170 | Android ComposerCommandEngine.h out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21169 | Android p2p_iface.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21168 | Android ColorConverter.cpp out-of-bounds read | 5.5v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21167 | Android DevicePolicyManagerService.java crash | 5.5v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21161 | Android simdata.cpp out-of-bounds write | 6.7v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21160 | Android protocolmiscbuilder.cpp out-of-bounds read | 5.5v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21159 | Android simdata.cpp out-of-bounds write | 6.7v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21158 | Android miscdata.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21157 | Android wlandata.cpp out-of-bounds write | 6.7v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21156 | Android protocolmiscbulider.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21155 | Android protocolmiscbuilder.cpp out-of-bounds read | 5.5v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21154 | Android protocolmiscbuilder.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21153 | Android imsservice.cpp out-of-bounds read | 6.7v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21152 | Android face_stats_analyzer.cc out-of-bounds read | 5.5v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21151 | Android the Google BMS kernel module out-of-bounds write | 6.7v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21150 | Android hal_socket.c out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21149 | Android ShannonRcsService.java privilege escalation | 7.8v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21148 | Android protocolimsbuilder.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21147 | Android lwis_device_i2c.c use-after-free | 7.8v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21146 | Android use-after-free | 6.7v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2023-21066 | Android cd_codec.c out-of-bounds write | 9.8v3.1 | 0.5% | 2023-06-28 | Fix |
| CVE-2023-20199 | Cisco Duo Two-Factor Authentication for macOS authentication bypass | 6.2CNA v3.1 | 0.3% | 2023-06-28 | Fix |
| CVE-2023-20192 | Cisco Expressway Series and Cisco TelePresence Video Communication Server privilege escalation | 9.6CNA v3.1 | 0.7% | 2023-06-28 | Fix |
| CVE-2023-20188 | Cisco Small Business Smart and Managed Switches cross-site scripting | 4.8CNA v3.1 | 0.5% | 2023-06-28 | |
| CVE-2023-20178 | Cisco Secure Client incorrect default permissions | 7.8CNA v3.1 | 5.4% | 2023-06-28 | Exploit codeFix |
| CVE-2023-20136 | Cisco Secure Workload incorrect use of privileged APIs | 4.3CNA v3.1 | 0.5% | 2023-06-28 | Fix |
| CVE-2023-20120 | Cisco Web Security Appliance (WSA) cross-site scripting | 5.4CNA v3.1 | 0.5% | 2023-06-28 | Fix |
| CVE-2023-20119 | Cisco Secure Email and Web Manager cross-site scripting | 6.1CNA v3.1 | 0.5% | 2023-06-28 | Fix |
| CVE-2023-20116 | Cisco Unified Communications Manager infinite loop | 6.8CNA v3.1 | 0.6% | 2023-06-28 | Fix |
| CVE-2023-20108 | Cisco Unified Communications Manager IM and Presence Service excessive memory allocation | 7.5CNA v3.1 | 0.9% | 2023-06-28 | Fix |
| CVE-2023-20105 | Cisco TelePresence Video Communication Server (VCS) Expressway privilege escalation | 9.6CNA v3.1 | 0.9% | 2023-06-28 | Fix |
| CVE-2023-20028 | Cisco Web Security Appliance (WSA) cross-site scripting | 5.4CNA v3.1 | 0.5% | 2023-06-28 | Fix |
| CVE-2023-20006 | Cisco Adaptive Security Appliance (ASA) Software incorrect numeric conversion | 8.6CNA v3.1 | 0.9% | 2023-06-28 | Fix |
| CVE-2023-3450 | Ruijie RG-BCR860 Network Diagnostic page os command injection | 7.2v3.1 | 50.4% | 2023-06-28 | Exploit code |
| CVE-2023-3449 | IBOS OA Interview Management Export export&interviews=x actionExport SQL injection | 7.2v3.1 | 0.9% | 2023-06-28 | |
| CVE-2023-3445 | Cross-site scripting (XSS) Stored in spinacms/Spina | 4.8v3.1 | 0.6% | 2023-06-28 | Fix |
| CVE-2023-3439 | Linux Kernel (mctp) use-after-free | 4.7NVD v3.1 | 0.3% | 2023-06-28 | Fix |
| CVE-2023-3427 | Salon Booking System WordPress plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2023-06-28 | Fix |
| CVE-2023-3407 | Subscribe2 WordPress plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2023-06-28 | Fix |
| CVE-2023-3390 | Linux kernel netfilter subsystem use-after-free | 7.8NVD v3.1 | 0.9% | 2023-06-28 | Exploit codeFix |
| CVE-2023-3389 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.7% | 2023-06-28 | Fix |
| CVE-2023-3359 | kernel null pointer dereference | 5.5NVD v3.1 | 0.2% | 2023-06-28 | Fix |
| CVE-2023-3358 | Linux kernel A null pointer dereference | 5.5NVD v3.1 | 0.2% | 2023-06-28 | Fix |
| CVE-2023-3357 | Linux kernel A null pointer dereference | 5.5NVD v3.1 | 0.2% | 2023-06-28 | Fix |
| CVE-2023-3355 | kernel null pointer dereference in submit_lookup_cmds in drivers/gpu/drm/msm/msm_gem_submit.c | 5.5NVD v3.1 | 0.3% | 2023-06-28 | Fix |
| CVE-2023-3333 | NEC Aterm WG2600HP2 OS command vulnerability in NEC Corporation improper neutralization | 7.2v3.1 | 0.7% | 2023-06-28 | |
| CVE-2023-3332 | NEC Aterm WG2600HP2 NEC Corporation Aterm cross-site scripting | 4.8v3.1 | 0.3% | 2023-06-28 | |
| CVE-2023-3331 | NEC Aterm WG2600HP2 NEC Corporation Aterm path traversal | 5.4v3.1 | 0.5% | 2023-06-28 | |
| CVE-2023-3330 | NEC Aterm WG2600HP2 NEC Corporation path traversal | 4.3v3.1 | 0.5% | 2023-06-28 | |
| CVE-2023-3243 | Alerton BCM-WEB authentication bypass by spoofing | 8.3CNA v3.1 | 0.6% | 2023-06-28 | |
| CVE-2023-3138 | libX11 memory corruption | 7.5NVD v3.1 | 1.7% | 2023-06-28 | Fix |
| CVE-2023-3090 | Out-of-bounds write in Linux Kernel's ipvlan network driver | 7.8NVD v3.1 | 0.5% | 2023-06-28 | Fix |
| CVE-2023-3034 | Reflected XSS in BKG NTRIP Professional Caster version | 6.1v3.1 | 0.4% | 2023-06-28 | Fix |
| CVE-2023-2625 | Hitachi Energy TXpert Hub CoreTec 4 OS command injection | 9.0CNA v3.1 | 0.5% | 2023-06-28 | Fix |
| CVE-2023-2232 | GitLab regular expression denial of service | 6.5CNA v3.1 | 1.6% | 2023-06-28 | Fix |
| CVE-2023-1844 | Subscribe2 WordPress plugin missing authorization | 4.3CNA v3.1 | 0.5% | 2023-06-28 | Fix |
| CVE-2023-1295 | Privilege escalation with IO_RING_OP_CLOSE in the Linux kernel | 7.0NVD v3.1 | 0.2% | 2023-06-28 | Fix |
| CVE-2023-36464 | Infinite loop when a comment isn't followed by a character in pypdf | 6.2CNA v3.1 | 0.4% | 2023-06-27 | Fix |
| CVE-2023-36463 | Cross-site scripting (XSS) in meldekarten generator | 5.3CNA v3.1 | 0.4% | 2023-06-27 | Fix |
| CVE-2023-36002 | Proofpoint Insider Threat Management ITM server missing authorization for URL validation | 4.3CNA v3.1 | 0.3% | 2023-06-27 | Fix |
| CVE-2023-36000 | Proofpoint Insider Threat Management ITM server missing authorization for Agent Config | 6.5CNA v3.1 | 0.3% | 2023-06-27 | Fix |
| CVE-2023-35998 | Proofpoint Insider Threat Management ITM server missing authorization in SOAP endpoints | 4.6CNA v3.1 | 0.2% | 2023-06-27 | Fix |
| CVE-2023-35800 | Stormshield Endpoint Security incorrect permission assignment | 4.3v3.1 | 0.4% | 2023-06-27 | Fix |
| CVE-2023-35799 | Stormshield Endpoint Security incorrect permission assignment | 5.5v3.1 | 0.2% | 2023-06-27 | Fix |
| CVE-2023-35798 | Airflow Apache ODBC and MSSQL Providers arbitrary file read | 4.3v3.1 | 1.3% | 2023-06-27 | Fix |
| CVE-2023-34839 | Issabel PBX cross-site request forgery | 6.8v3.1 | 0.7% | 2023-06-27 | Exploit code |
| CVE-2023-34838 | Escanav Escan Management Console Microworld Technologies cross-site scripting | 5.4NVD v3.1 | 0.8% | 2023-06-27 | |
| CVE-2023-34837 | Escanav Escan Management Console Microworld Technologies cross-site scripting | 5.4v3.1 | 0.8% | 2023-06-27 | Exploit code |
| CVE-2023-34836 | Escanav Escan Management Console Microworld Technologies cross-site scripting | 5.4v3.1 | 0.8% | 2023-06-27 | Exploit code |
| CVE-2023-34835 | Escanav Escan Management Console Microworld Technologies cross-site scripting | 5.4NVD v3.1 | 0.8% | 2023-06-27 | |
| CVE-2023-34830 | I-doit cross-site scripting | 5.4v3.1 | 0.7% | 2023-06-27 | Exploit code |
| CVE-2023-34395 | Apache Airflow ODBC Provider: Remote code execution | 7.8v3.1 | 0.8% | 2023-06-27 | Fix |
| CVE-2023-34240 | Weak passwords allowed in CloudExplorer-Lite | 6.5CNA v3.1 | 0.5% | 2023-06-27 | Fix |
| CVE-2023-34099 | Improper mail validation in Shopware | 5.3CNA v3.1 | 0.6% | 2023-06-27 | Fix |
| CVE-2023-34098 | Dependency configuration exposed in Shopware | 5.3CNA v3.1 | 0.6% | 2023-06-27 | Fix |
| CVE-2023-32339 | IBM Business Automation Workflow cross-site scripting | 6.1CNA v3.1 | 0.5% | 2023-06-27 | Fix |
| CVE-2023-30993 | IBM Cloud Pak for Security information disclosure | 6.8CNA v3.1 | 0.6% | 2023-06-27 | Fix |
| CVE-2023-29068 | Autodesk products out-of-bounds write | 7.8v3.1 | 0.2% | 2023-06-27 | Fix |
| CVE-2023-28857 | LDAP password leak in Apereo CAS GHSL-2023-009 | 7.5NVD v3.1 | 0.5% | 2023-06-27 | Fix |
| CVE-2023-26276 | IBM QRadar information disclosure | 5.9CNA v3.1 | 0.4% | 2023-06-27 | Fix |
| CVE-2023-26274 | IBM QRadar cross-site scripting | 4.6CNA v3.1 | 0.4% | 2023-06-27 | Fix |
| CVE-2023-26273 | IBM QRadar SIEM improper input validation | 4.3CNA v3.1 | 0.4% | 2023-06-27 | Fix |
| CVE-2023-25004 | Autodesk products integer overflow | 7.8v3.1 | 0.2% | 2023-06-27 | Fix |
| CVE-2023-25002 | Autodesk 3ds Max use-after-free | 7.8v3.1 | 0.3% | 2023-06-27 | Fix |
| CVE-2023-25001 | Navisworks use-after-free | 7.8v3.1 | 0.3% | 2023-06-27 | Fix |
| CVE-2023-23468 | IBM Robotic Process Automation for Cloud Pak access control | 5.1CNA v3.1 | 0.2% | 2023-06-27 | Fix |
| CVE-2023-22834 | Palantir Contour analysis creation vulnerability | 2.7CNA v3.1 | 0.4% | 2023-06-27 | Fix |
| CVE-2023-22593 | IBM Robotic Process Automation for Cloud Pak security configuration | 4.0CNA v3.1 | 0.2% | 2023-06-27 | Fix |
| CVE-2023-3436 | Deadlock in Xpdf due to PDF object stream references | 3.3CNA v3.1 | 0.2% | 2023-06-27 | Fix |
| CVE-2023-3432 | Server-side request forgery (SSRF) in PlantUML/PlantUML | 10.0v3.1 | 0.9% | 2023-06-27 | Fix |
| CVE-2023-3431 | Improper access control in PlantUML/PlantUML | 5.3v3.1 | 0.9% | 2023-06-27 | Fix |
| CVE-2023-3423 | Weak password requirements in CloudExplorer-Dev/CloudExplorer-Lite | 8.8v3.1 | 0.8% | 2023-06-27 | Fix |
| CVE-2023-3412 | Image Map Pro WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-06-27 | |
| CVE-2023-3411 | Image Map Pro WordPress plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2023-06-27 | |
| CVE-2023-3405 | Denial of service condition in M-Files Server | 7.5CNA v3.1 | 0.8% | 2023-06-27 | Fix |
| CVE-2023-3371 | EmbedPress WordPress plugin sensitive information exposure | 7.5v3.1 | 0.5% | 2023-06-27 | Fix |
| CVE-2023-3132 | MainWP Child WordPress plugin information disclosure via Back-Up files | 7.5v3.1 | 0.7% | 2023-06-27 | Fix |
| CVE-2023-2996 | Jetpack WordPress plugin Author+ arbitrary file manipulation via API | 8.8NVD v3.1 | 4.8% | 2023-06-27 | Fix |
| CVE-2023-2877 | Formidable Forms WordPress plugin Subscriber+ remote code execution | 8.8NVD v3.1 | 22.5% | 2023-06-27 | Exploit codeFix |
| CVE-2023-2842 | WP Inventory Manager WordPress plugin Inventory Items deletion via CSRF | 8.1NVD v3.1 | 0.4% | 2023-06-27 | Fix |
| CVE-2023-2818 | Proofpoint Insider Threat Management ITM Windows Agent Insecure Filesystem Permissions | 5.5CNA v3.1 | 0.2% | 2023-06-27 | Fix |
| CVE-2023-2795 | CodeColorer Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.4% | 2023-06-27 | Fix |
| CVE-2023-2744 | WP ERP WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 2.6% | 2023-06-27 | Exploit codeFix |
| CVE-2023-2743 | WP ERP WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-06-27 | Fix |
| CVE-2023-2711 | Ultimate Product Catalog WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-06-27 | Fix |
| CVE-2023-2628 | KiviCare Management System WordPress plugin Multiple CSRF | 8.8NVD v3.1 | 0.4% | 2023-06-27 | Fix |
| CVE-2023-2627 | KiviCare Management System WordPress plugin Subscriber+ Unauthorised AJAX Calls | 4.3NVD v3.1 | 0.2% | 2023-06-27 | Fix |
| CVE-2023-2624 | KiviCare Management System WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.2% | 2023-06-27 | NucleiFix |
| CVE-2023-2623 | KiviCare Management System WordPress plugin Subscriber+ sensitive information disclosure | 6.5NVD v3.1 | 0.8% | 2023-06-27 | Fix |
| CVE-2023-2605 | WP Brutal AI WordPress plugin Admin+ reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-06-27 | Fix |
| CVE-2023-2601 | WP Brutal AI WordPress plugin SQL injection via CSRF | 9.8NVD v3.1 | 1.8% | 2023-06-27 | Fix |
| CVE-2023-2592 | FormCraft Premium WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 0.9% | 2023-06-27 | Fix |
| CVE-2023-2580 | Meow Apps AI Engine plugin plugin settings stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2023-06-27 | Fix |
| CVE-2023-2482 | Responsive CSS EDITOR WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 0.9% | 2023-06-27 | |
| CVE-2023-2326 | Gravity Forms Google Sheet Connector WordPress plugin access code update via CSRF | 6.5NVD v3.1 | 0.3% | 2023-06-27 | Fix |
| CVE-2023-2178 | Aajoda Testimonials WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.8% | 2023-06-27 | NucleiFix |
| CVE-2023-2068 | File Manager Advanced Shortcode WordPress plugin unauthenticated remote code execution | 9.8NVD v3.1 | 39.6% | 2023-06-27 | MetasploitExploit codeFix |
| CVE-2023-2032 | Custom 404 Pro WordPress plugin Multiple SQL injection | 9.8NVD v3.1 | 0.9% | 2023-06-27 | Fix |
| CVE-2023-1891 | Accordion and FAQ WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-06-27 | Fix |
| CVE-2023-1166 | USM Premium WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-06-27 | Fix |
| CVE-2023-0873 | Kanban Boards for WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-06-27 | Fix |
| CVE-2023-0588 | Catalyst Connect Zoho CRM Client Portal WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-06-27 | Fix |
| CVE-2023-36675 | mediawiki cross-site scripting | 6.1v3.1 | 0.8% | 2023-06-26 | Fix |
| CVE-2023-36662 | Techtime User Management cross-site scripting | 5.4v3.1 | 0.3% | 2023-06-26 | Fix |
| CVE-2023-36631 | Malwarebytes Binisoft Windows Firewall Control rules interface improper access control | 7.8v3.1 | 0.7% | 2023-06-26 | |
| CVE-2023-36301 | Talend DATA Catalog path traversal | 7.5v3.1 | 0.9% | 2023-06-26 | Fix |
| CVE-2023-36252 | Ateme Flamingo XL insufficient session expiration | 8.8v3.1 | 0.9% | 2023-06-26 | |
| CVE-2023-35933 | OpenFGA denial of service die to circular relationship | 5.9CNA v3.1 | 1.1% | 2023-06-26 | Fix |
| CVE-2023-35930 | LookupResources may return partial results in spicedb | 3.7CNA v3.1 | 0.4% | 2023-06-26 | Fix |
| CVE-2023-35695 | Trend Micro Moibile Security for Enterprise sensitive information in log files | 7.5v3.1 | 1.5% | 2023-06-26 | Fix |
| CVE-2023-35168 | DataEase user database access incorrect permission assignment | 6.5CNA v3.1 | 0.7% | 2023-06-26 | Fix |
| CVE-2023-35164 | Unauthorized users can manipulate a dashboard created by an administrator in DataEase | 6.3CNA v3.1 | 0.4% | 2023-06-26 | Fix |
| CVE-2023-34924 | H3C Magic B1STW out-of-bounds write | 7.5v3.1 | 0.9% | 2023-06-26 | Exploit code |
| CVE-2023-34463 | Unauthorized users can delete applications in DataEase | 8.1CNA v3.1 | 0.7% | 2023-06-26 | Fix |
| CVE-2023-34422 | Lenovo XClarity Administrator improper input validation | 6.5CNA v3.1 | 0.5% | 2023-06-26 | Fix |
| CVE-2023-34421 | Lenovo XClarity Administrator improper input validation | 6.5CNA v3.1 | 0.5% | 2023-06-26 | Fix |
| CVE-2023-34420 | Lenovo XClarity Administrator OS command injection | 7.2CNA v3.1 | 1.3% | 2023-06-26 | Fix |
| CVE-2023-34418 | Lenovo XClarity Administrator SQL injection | 8.1CNA v3.1 | 0.5% | 2023-06-26 | Fix |
| CVE-2023-34148 | Trend Micro Apex One improper privilege management | 7.8v3.1 | 0.2% | 2023-06-26 | Fix |
| CVE-2023-34147 | Trend Micro Apex One improper privilege management | 7.8v3.1 | 0.2% | 2023-06-26 | Fix |
| CVE-2023-34146 | Trend Micro Apex One improper privilege management | 7.8v3.1 | 0.2% | 2023-06-26 | Fix |
| CVE-2023-34145 | Trend Micro Apex One An untrusted search path | 7.8v3.1 | 0.3% | 2023-06-26 | Fix |
| CVE-2023-34144 | Trend Micro Apex One An untrusted search path | 7.8v3.1 | 0.3% | 2023-06-26 | Fix |
| CVE-2023-33580 | PHPGurukul Student Study Center Management System cross-site scripting | 4.8v3.1 | 3.7% | 2023-06-26 | Exploit code |
| CVE-2023-33404 | BlogEngine.NET unrestricted file upload | 9.8v3.1 | 25.8% | 2023-06-26 | Exploit code |
| CVE-2023-33176 | Blind SSRF when Uploading Presentation in BigBlueButton | 4.8CNA v3.1 | 0.5% | 2023-06-26 | Fix |
| CVE-2023-32605 | Trend Micro Apex Central cross-site scripting | 5.4v3.1 | 0.3% | 2023-06-26 | Fix |
| CVE-2023-32604 | Trend Micro Apex Central cross-site scripting | 5.4v3.1 | 0.3% | 2023-06-26 | Fix |
| CVE-2023-32557 | Trend Micro Apex One path traversal | 9.8v3.1 | 1.2% | 2023-06-26 | Fix |
| CVE-2023-32556 | Trend Micro Apex One link following | 5.5v3.1 | 0.3% | 2023-06-26 | Fix |
| CVE-2023-32555 | Trend Micro Apex One time-of-check time-of-use race condition | 7.0v3.1 | 0.2% | 2023-06-26 | Fix |
| CVE-2023-32554 | Trend Micro Apex One time-of-check time-of-use race condition | 7.0v3.1 | 0.2% | 2023-06-26 | Fix |
| CVE-2023-32553 | Trend Micro Apex One An improper access control | 5.3v3.1 | 0.5% | 2023-06-26 | Fix |
| CVE-2023-32552 | Trend Micro Apex One An improper access control | 5.3v3.1 | 0.6% | 2023-06-26 | Fix |
| CVE-2023-32537 | Trend Micro Apex Central cross-site scripting | 5.4v3.1 | 0.3% | 2023-06-26 | Fix |
| CVE-2023-32536 | Trend Micro Apex Central cross-site scripting | 5.4v3.1 | 0.3% | 2023-06-26 | Fix |
| CVE-2023-32535 | Trend Micro Apex Central cross-site scripting | 6.1v3.1 | 1.9% | 2023-06-26 | Fix |
| CVE-2023-32534 | Trend Micro Apex Central cross-site scripting | 6.1v3.1 | 0.7% | 2023-06-26 | Fix |
| CVE-2023-32533 | Trend Micro Apex Central cross-site scripting | 6.1v3.1 | 1.9% | 2023-06-26 | Fix |
| CVE-2023-32532 | Trend Micro Apex Central cross-site scripting | 6.1v3.1 | 1.9% | 2023-06-26 | Fix |
| CVE-2023-32531 | Trend Micro Apex Central cross-site scripting | 6.1v3.1 | 1.9% | 2023-06-26 | Fix |
| CVE-2023-32530 | Trend Micro Apex Central SQL injection | 8.8v3.1 | 2.4% | 2023-06-26 | Fix |
| CVE-2023-32529 | Trend Micro Apex Central SQL injection | 8.8v3.1 | 2.2% | 2023-06-26 | Fix |
| CVE-2023-32528 | Trend Micro Moibile Security for Enterprise code injection | 8.8v3.1 | 3.0% | 2023-06-26 | Fix |
| CVE-2023-32527 | Trend Micro Moibile Security for Enterprise code injection | 8.8v3.1 | 2.9% | 2023-06-26 | Fix |
| CVE-2023-32526 | Trend Micro Moibile Security for Enterprise unrestricted file upload | 6.5v3.1 | 2.0% | 2023-06-26 | Fix |
| CVE-2023-32525 | Trend Micro Moibile Security for Enterprise unrestricted file upload | 6.5v3.1 | 2.0% | 2023-06-26 | Fix |
| CVE-2023-32524 | Trend Micro Moibile Security for Enterprise improper authentication | 8.8v3.1 | 2.6% | 2023-06-26 | Fix |
| CVE-2023-32523 | Trend Micro Moibile Security for Enterprise improper authentication | 8.8v3.1 | 2.6% | 2023-06-26 | Fix |
| CVE-2023-32522 | Trend Micro Mobile Security specific dll path traversal | 8.1v3.1 | 3.3% | 2023-06-26 | Fix |
| CVE-2023-32521 | Trend Micro Mobile Security specific service dll path traversal | 9.1v3.1 | 66.8% | 2023-06-26 | Fix |
| CVE-2023-30945 | Palantir Video History Server filename handling path traversal | 9.8CNA v3.1 | 0.7% | 2023-06-26 | Fix |
| CVE-2023-30902 | Trend Micro Apex One privilege escalation | 5.5v3.1 | 0.1% | 2023-06-26 | Fix |
| CVE-2023-30261 | Openwb command injection | 9.8v3.1 | 31.7% | 2023-06-26 | |
| CVE-2023-29459 | Redbull Fc Red Bull Salzburg SQL injection | 6.1v3.1 | 0.6% | 2023-06-26 | |
| CVE-2023-29438 | SimpleModal Contact Form (SMCF) WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-26 | |
| CVE-2023-29437 | Connections Business Directory WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-06-26 | Fix |
| CVE-2023-29436 | IFrame Shortcode WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-06-26 | Fix |
| CVE-2023-29435 | Cryptocurrency All-in-One WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-06-26 | |
| CVE-2023-29434 | Optin Forms WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-26 | Fix |
| CVE-2023-29430 | TheRoof WordPress theme cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-26 | Fix |
| CVE-2023-29427 | Amelia WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-26 | Fix |
| CVE-2023-29424 | ShiftController Employee Shift Scheduling WordPress plugin cross-site scripting (XSS) | 4.8NVD v3.1 | 0.4% | 2023-06-26 | Fix |
| CVE-2023-29423 | Cancel order request WooCommerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-26 | Fix |
| CVE-2023-29093 | Conditional extra fees for woocommerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-26 | Fix |
| CVE-2023-28992 | Coupon Affiliates WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-26 | Fix |
| CVE-2023-28991 | Order date time for WooCommerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-26 | Fix |
| CVE-2023-28988 | Direct checkout, Add to cart redirect for Woocommerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-26 | Fix |
| CVE-2023-28929 | Trend Micro Security (Consumer) uncontrolled search path | 7.8v3.1 | 0.4% | 2023-06-26 | Fix |
| CVE-2023-28485 | WeKan file preview stored cross-site scripting | 5.4v3.1 | 1.0% | 2023-06-26 | |
| CVE-2023-27082 | pluck-cms Pluck /admin.php cross-site scripting | 4.8v3.1 | 0.6% | 2023-06-26 | |
| CVE-2023-25307 | Mrpack-install vulnerable to path traversal with dependency | 7.8v3.1 | 0.6% | 2023-06-26 | Fix |
| CVE-2023-25306 | Multimc path traversal | 7.5v3.1 | 1.1% | 2023-06-26 | |
| CVE-2023-22359 | Tribe29 Checkmk observable discrepancy | 4.3v3.1 | 0.5% | 2023-06-26 | Fix |
| CVE-2023-3422 | Google Chrome Guest view use-after-free | 8.8v3.1 | 0.7% | 2023-06-26 | Fix |
| CVE-2023-3421 | Google Chrome Media use-after-free | 8.8v3.1 | 1.2% | 2023-06-26 | Fix |
| CVE-2023-3420 | Google Chrome V8 type confusion | 8.8v3.1 | 56.2% | 2023-06-26 | Fix |
| CVE-2023-3398 | Denial of service in jgraph/drawio | 7.5v3.1 | 1.0% | 2023-06-26 | Fix |
| CVE-2023-3113 | Lenovo XClarity Administrator LXCA's Common Information Model XML external entity injection | 8.2CNA v3.1 | 0.5% | 2023-06-26 | |
| CVE-2023-2993 | Lenovo System Management Module (SMM) improper preservation of permissions | 5.4CNA v3.1 | 0.3% | 2023-06-26 | Fix |
| CVE-2023-2992 | Lenovo System Management Module (SMM) SMM v1 denial of service | 7.5CNA v3.1 | 0.6% | 2023-06-26 | Fix |
| CVE-2023-2290 | Lenovo ThinkPad out-of-bounds write | 6.4CNA v3.1 | 0.2% | 2023-06-26 | Fix |
| CVE-2023-2005 | Tenable Plugin Feed ID #202306261202 Fixes privilege escalation | 6.3CNA v3.1 | 0.4% | 2023-06-26 | Fix |
| CVE-2023-1620 | WAGO: DoS in multiple products in multiple versions using Codesys | 4.9v3.1 | 0.9% | 2023-06-26 | Fix |
| CVE-2023-1619 | WAGO: DoS in multiple versions of multiple products | 4.9CNA v3.1 | 0.8% | 2023-06-26 | Fix |
| CVE-2023-1150 | WAGO: Series 750-3x/-8x prone to MODBUS server DoS | 7.5CNA v3.1 | 0.9% | 2023-06-26 | Fix |
| CVE-2023-36666 | INEX Ixp Manager cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-25 | |
| CVE-2023-36664 | Artifex Ghostscript files accessible to external parties | 7.8NVD v3.1 | 3.9% | 2023-06-25 | Exploit codeFix |
| CVE-2023-36663 | it-novum openITCOCKPIT SQL injection | 8.8v3.1 | 0.7% | 2023-06-25 | Fix |
| CVE-2023-36661 | Shibboleth Xmltooling server-side request forgery | 7.5v3.1 | 2.9% | 2023-06-25 | MetasploitExploit codeKCVFix |
| CVE-2023-36660 | nettle out-of-bounds write | 9.8NVD v3.1 | 1.0% | 2023-06-25 | Fix |
| CVE-2023-36632 | Python uncontrolled recursion | 7.5v3.1 | 1.6% | 2023-06-25 | Fix |
| CVE-2023-36630 | MGT-COMMERCE CloudPanel unrestricted file upload | 8.8v3.1 | 0.9% | 2023-06-25 | Fix |
| CVE-2023-36612 | Basecamp path traversal | 7.5v3.1 | 1.1% | 2023-06-25 | |
| CVE-2023-3396 | Campcodes Retro Cellphone Online Store index.php SQL injection | 6.5v3.1 | 0.6% | 2023-06-25 | |
| CVE-2023-3388 | Beautiful Cookie Consent Banner WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 84.3% | 2023-06-24 | NucleiFix |
| CVE-2023-3387 | Lana Text to Image WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-06-24 | Fix |
| CVE-2023-3197 | MStore API WordPress plugin unauthenticated SQL injection | 9.8CNA v3.1 | 3.9% | 2023-06-24 | NucleiFix |
| CVE-2023-1724 | Faveo Helpdesk Enterprise privilege escalation via stored XSS | 5.4NVD v3.1 | 0.5% | 2023-06-24 | |
| CVE-2023-1722 | Yoga Class Registration System class thumbnail upload vulnerability | 8.8NVD v3.1 | 0.4% | 2023-06-24 | |
| CVE-2023-1721 | Yoga Class Registration System RCE | 7.2NVD v3.1 | 1.0% | 2023-06-24 | |
| CVE-2023-36348 | Codekop missing authorization | 8.8v3.1 | 6.4% | 2023-06-23 | Exploit code |
| CVE-2023-36346 | Codekop cross-site scripting | 6.1v3.1 | 5.3% | 2023-06-23 | NucleiExploit code |
| CVE-2023-36345 | Codekop POS cross-site request forgery | 8.8v3.1 | 1.0% | 2023-06-23 | |
| CVE-2023-36289 | Webkul QloApps cross-site scripting | 6.1v3.1 | 1.2% | 2023-06-23 | Nuclei |
| CVE-2023-36288 | Webkul QloApps cross-site scripting | 5.4v3.1 | 0.4% | 2023-06-23 | |
| CVE-2023-36287 | Webkul QloApps cross-site scripting | 6.1v3.1 | 1.2% | 2023-06-23 | Nuclei |
| CVE-2023-36284 | Webkul QloApps SQL injection | 7.5v3.1 | 3.2% | 2023-06-23 | Nuclei |
| CVE-2023-36274 | GNU LibreDWG out-of-bounds write | 8.8v3.1 | 0.9% | 2023-06-23 | Fix |
| CVE-2023-36273 | GNU LibreDWG out-of-bounds write | 8.8v3.1 | 0.7% | 2023-06-23 | Fix |
| CVE-2023-36272 | GNU LibreDWG out-of-bounds write | 8.8v3.1 | 0.9% | 2023-06-23 | Fix |
| CVE-2023-36271 | GNU LibreDWG out-of-bounds write | 8.8v3.1 | 0.9% | 2023-06-23 | Fix |
| CVE-2023-36193 | Lcdf Gifsicle out-of-bounds write | 7.8v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-36192 | irontec sngrep out-of-bounds write | 7.8v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-35932 | jcvi vulnerable to Configuration injection due to unsanitized user input | 7.1CNA v3.1 | 1.9% | 2023-06-23 | Fix |
| CVE-2023-35931 | Shescape potential environment variable exposure on Windows with CMD | 3.1CNA v3.1 | 0.8% | 2023-06-23 | Fix |
| CVE-2023-35928 | Nextcloud user scoped external storage can be used to gather credentials of other users | 8.5CNA v3.1 | 1.0% | 2023-06-23 | Fix |
| CVE-2023-35927 | Nextcloud system addressbooks can be modified by malicious trusted server | 7.6CNA v3.1 | 0.8% | 2023-06-23 | Fix |
| CVE-2023-35925 | FastAsyncWorldEdit vulnerable to uncontrolled resource consumption | 6.2CNA v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-35801 | Safe Fme Server Safe software path traversal | 8.1v3.1 | 1.5% | 2023-06-23 | Exploit codeFix |
| CVE-2023-35759 | Progress WhatsUp Gold cross-site scripting | 6.1v3.1 | 2.1% | 2023-06-23 | Fix |
| CVE-2023-35173 | End-to-End encrypted file-drops can be made inaccessible | 5.7CNA v3.1 | 0.5% | 2023-06-23 | Fix |
| CVE-2023-35172 | Nextcloud Server password reset endpoint is not brute force protected | 8.7CNA v3.1 | 0.9% | 2023-06-23 | Fix |
| CVE-2023-35171 | Nextcloud Server vulnerable to open redirect on Unsupported browser warning | 4.1CNA v3.1 | 0.6% | 2023-06-23 | Fix |
| CVE-2023-35169 | php-imap vulnerable to RCE through a directory traversal | 9.1CNA v3.1 | 3.2% | 2023-06-23 | Fix |
| CVE-2023-35167 | Remult apiPrefilter entity option improper access control | 5.0CNA v3.1 | 0.5% | 2023-06-23 | Fix |
| CVE-2023-35165 | AWS CDK EKS overly permissive trust policies | 6.6CNA v3.1 | 0.9% | 2023-06-23 | Fix |
| CVE-2023-35163 | Vega's validators able to submit duplicate transactions | 6.0CNA v3.1 | 0.5% | 2023-06-23 | Fix |
| CVE-2023-35162 | xwiki-platform XPlatform Wiki vulnerable to cross-site scripting | 9.7CNA v3.1 | 2.4% | 2023-06-23 | NucleiFix |
| CVE-2023-35161 | XWiki Platform vulnerable to reflected cross-site scripting | 9.7CNA v3.1 | 2.4% | 2023-06-23 | NucleiFix |
| CVE-2023-35160 | XWiki Platform vulnerable to reflected cross-site scripting | 9.7CNA v3.1 | 2.3% | 2023-06-23 | NucleiFix |
| CVE-2023-35159 | XWiki Platform vulnerable to reflected cross-site scripting | 9.7CNA v3.1 | 2.2% | 2023-06-23 | NucleiFix |
| CVE-2023-35158 | XWiki Platform vulnerable to reflected cross-site scripting | 9.7CNA v3.1 | 2.0% | 2023-06-23 | NucleiFix |
| CVE-2023-35157 | XWiki Platform vulnerable to reflected cross-site scripting via delattachment action | 8.5CNA v3.1 | 0.6% | 2023-06-23 | Fix |
| CVE-2023-35156 | XWiki Platform vulnerable to reflected cross-site scripting | 9.7CNA v3.1 | 2.1% | 2023-06-23 | NucleiFix |
| CVE-2023-35155 | XWiki Platform vulnerable to cross-site scripting in target parameter via share page by email | 8.8CNA v3.1 | 1.5% | 2023-06-23 | NucleiFix |
| CVE-2023-35154 | Knowage-Server vulnerable to account validation bypass | 7.2CNA v3.1 | 0.4% | 2023-06-23 | Fix |
| CVE-2023-35153 | XWiki Platform vulnerable to stored cross-site scripting in ClassEditSheet page via name parameters | 9.1CNA v3.1 | 0.7% | 2023-06-23 | Fix |
| CVE-2023-35152 | XWiki Platform vulnerable to privilege escalation (PR) from account through like LiveTableResults | 10.0CNA v3.1 | 1.0% | 2023-06-23 | Fix |
| CVE-2023-35151 | XWiki Platform may show email addresses in clear in REST results | 7.5CNA v3.1 | 0.7% | 2023-06-23 | Fix |
| CVE-2023-35150 | XWiki Platform vulnerable to privilege escalation (PR) from view right via Invitation application | 9.9CNA v3.1 | 77.7% | 2023-06-23 | Fix |
| CVE-2023-35048 | Booking and Rental Manager WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-23 | Fix |
| CVE-2023-34673 | Elenos ETG150 Memcached service information disclosure | 6.5v3.1 | 0.7% | 2023-06-23 | |
| CVE-2023-34672 | Elenos ETG150 improper preservation of permissions | 8.8v3.1 | 0.7% | 2023-06-23 | |
| CVE-2023-34671 | Elenos ETG150 Fm improper access control | 8.8v3.1 | 0.9% | 2023-06-23 | |
| CVE-2023-34467 | XWiki Platform may retrieve email addresses of all users | 7.5CNA v3.1 | 1.0% | 2023-06-23 | Fix |
| CVE-2023-34466 | XWiki Platform's tags on non-viewable pages can be revealed to users | 4.3CNA v3.1 | 0.6% | 2023-06-23 | Fix |
| CVE-2023-34465 | XWiki Platform's Mail.MailConfig can be edited by any user with edit rights | 10.0CNA v3.1 | 0.9% | 2023-06-23 | Fix |
| CVE-2023-34464 | XWiki vulnerable to stored cross-site scripting | 9.1CNA v3.1 | 0.7% | 2023-06-23 | Fix |
| CVE-2023-34460 | Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles | 4.8CNA v3.1 | 0.6% | 2023-06-23 | Fix |
| CVE-2023-34254 | glpi-project glpi-agent remote inventory task command injection when using SSH command mode | 7.7CNA v3.1 | 0.8% | 2023-06-23 | Fix |
| CVE-2023-34203 | Progress Openedge Management injection | 8.8v3.1 | 1.1% | 2023-06-23 | |
| CVE-2023-34188 | Cesanta Mongoose improper quantity validation | 7.5v3.1 | 1.0% | 2023-06-23 | Fix |
| CVE-2023-34021 | Church Admin WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-23 | Fix |
| CVE-2023-34012 | Premium Addons PRO WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-23 | Fix |
| CVE-2023-33299 | Fortinet FortiNAC deserialization of untrusted data | 9.6CNA v3.1 | 24.3% | 2023-06-23 | Fix |
| CVE-2023-33141 | Microsoft Yet Another Reverse Proxy (YARP) denial of service | 7.5CNA v3.1 | 2.2% | 2023-06-23 | Fix |
| CVE-2023-32580 | Password Protected WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-23 | Fix |
| CVE-2023-32480 | Dell CPG BIOS improper input validation | 6.8CNA v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-32464 | Dell EMC VxRail Appliance improper certificate validation | 2.7CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32463 | Dell EMC VxRail Appliance denial of service | 3.4CNA v3.1 | 0.5% | 2023-06-23 | Fix |
| CVE-2023-32439 | Apple Multiple Products WebKit type confusion | 8.8v3.1 | 24.0% | 2023-06-23 | KEVFix |
| CVE-2023-32435 | Apple Multiple Products WebKit memory corruption | 8.8v3.1 | 23.0% | 2023-06-23 | KEVKCVFix |
| CVE-2023-32434 | Apple Multiple Products integer overflow | 7.8v3.1 | 51.5% | 2023-06-23 | KEVExploit codeKCVFix |
| CVE-2023-32423 | Apple macOS buffer overflow | 6.5v3.1 | 0.8% | 2023-06-23 | Fix |
| CVE-2023-32422 | Apple iOS, iPadOS, macOS and tvOS SQLite logging vulnerability | 5.5v3.1 | 0.7% | 2023-06-23 | Exploit codeFix |
| CVE-2023-32420 | Apple macOS out-of-bounds read | 7.1v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32419 | Apple iOS and iPadOS arbitrary code execution | 9.8v3.1 | 1.1% | 2023-06-23 | Fix |
| CVE-2023-32417 | Apple watchOS lock screen accessibility features information disclosure | 2.4v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-32415 | Apple macOS insecure storage of sensitive information | 5.5v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-32414 | Apple macOS inadequate encryption strength | 8.6v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32413 | Apple macOS race condition | 7.0v3.1 | 0.5% | 2023-06-23 | Exploit codeFix |
| CVE-2023-32412 | Apple macOS use-after-free | 9.8v3.1 | 1.6% | 2023-06-23 | Fix |
| CVE-2023-32411 | Apple iOS, iPadOS, macOS and tvOS Privacy preferences vulnerability | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32410 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32409 | Apple Multiple Products WebKit sandbox escape | 8.6v3.1 | 16.5% | 2023-06-23 | KEVFix |
| CVE-2023-32408 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32407 | Apple macOS incorrect default permissions | 5.5v3.1 | 0.9% | 2023-06-23 | Exploit codeFix |
| CVE-2023-32405 | Apple macOS incorrect default permissions | 7.8v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32404 | Apple macOS incorrect default permissions | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32403 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32402 | Apple macOS out-of-bounds read | 6.5v3.1 | 0.7% | 2023-06-23 | Fix |
| CVE-2023-32400 | Apple macOS improper preservation of permissions | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32399 | Apple macOS incorrect default permissions | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32398 | Apple macOS use-after-free | 7.8v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32397 | Apple macOS out-of-bounds write | 7.5v3.1 | 0.8% | 2023-06-23 | Fix |
| CVE-2023-32395 | Apple macOS out-of-bounds write | 5.5v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-32394 | Apple macOS resource exposure | 2.4v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-32392 | Apple macOS sensitive information in log files | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32391 | Apple macOS out-of-bounds read | 4.6v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-32390 | Apple macOS out-of-bounds read | 2.4v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-32389 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32388 | Apple macOS improper preservation of permissions | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32387 | Apple macOS use-after-free | 9.8v3.1 | 1.7% | 2023-06-23 | Fix |
| CVE-2023-32386 | Apple macOS out-of-bounds read | 3.3v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32385 | Apple macOS resource exhaustion | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32384 | Apple macOS buffer overflow | 7.8v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-32382 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32380 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-32376 | This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to modify protected parts of the file system. | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32375 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32373 | Apple Multiple Products WebKit use-after-free | 8.8v3.1 | 12.2% | 2023-06-23 | KEVFix |
| CVE-2023-32372 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32371 | Apple macOS sandbox escape | 6.3v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32369 | Apple macOS logic flaw | 6.0v3.1 | 0.7% | 2023-06-23 | Fix |
| CVE-2023-32368 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-32367 | Apple iOS, iPadOS and macOS information disclosure | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32365 | Apple iOS and iPadOS Shake to Undo improper authentication | 2.4v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-32363 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32360 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-32357 | Apple macOS out-of-bounds read | 7.1v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32355 | Apple macOS improper preservation of permissions | 5.5v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-32354 | Apple watchOS out-of-bounds read | 5.5v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-32353 | Apple iTunes incorrect authorization | 7.8v3.1 | 0.7% | 2023-06-23 | Exploit codeFix |
| CVE-2023-32352 | Apple macOS insecure direct object reference | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-32351 | Apple iTunes incorrect default permissions | 7.8v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-31469 | Apache StreamPipes: Privilege escalation through non-admin user | 8.8v3.1 | 1.1% | 2023-06-23 | Fix |
| CVE-2023-30362 | libcoap coap_send function buffer overflow | 7.5v3.1 | 0.8% | 2023-06-23 | Fix |
| CVE-2023-30260 | RaspAP raspap-webgui command injection | 8.8v3.1 | 2.5% | 2023-06-23 | Fix |
| CVE-2023-30258 | MagnusSolution MagnusBilling command injection | 9.8v3.1 | 94.3% | 2023-06-23 | NucleiMetasploitEmerging ThreatsExploit code |
| CVE-2023-29860 | DTStack Taier /Taier/API/tenant/listTenant interface insecure permissions | 7.5v3.1 | 0.6% | 2023-06-23 | |
| CVE-2023-29100 | The7 WordPress theme cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-23 | Fix |
| CVE-2023-28751 | Wp Ultimate Review WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-23 | Fix |
| CVE-2023-28204 | Apple Multiple Products WebKit out-of-bounds read | 6.5v3.1 | 14.3% | 2023-06-23 | KEVFix |
| CVE-2023-28202 | Apple macOS weak password recovery | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28191 | Apple macOS origin validation error | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28073 | Dell CPG BIOS improper authentication | 8.2CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28071 | Dell Command Update (DCU) denial of service | 6.3CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28065 | Dell Command Update (DCU) privilege escalation | 6.7CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28064 | Dell CPG BIOS out-of-bounds write | 3.5CNA v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-28061 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28060 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28059 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28058 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28056 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28054 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28052 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28050 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28044 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28042 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28041 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28040 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28039 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28036 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28035 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28034 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28033 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28032 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28031 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28030 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28029 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28028 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28027 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-28026 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-27964 | Apple AirPods Firmware Update E authentication bypass by spoofing | 5.4v3.1 | 8.2% | 2023-06-23 | Fix |
| CVE-2023-27940 | Apple iOS and iPadOS sandbox network permissions vulnerability | 6.3v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-27930 | Apple macOS type confusion | 7.8v3.1 | 0.5% | 2023-06-23 | Fix |
| CVE-2023-27908 | Autodesk installer uncontrolled search path | 7.8v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-27427 | CRM Memberships WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-23 | Fix |
| CVE-2023-25938 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-25937 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-25936 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-25520 | NVIDIA Jetson AGX Xavier series denial of service | 4.4CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-25518 | NVIDIA Jetson AGX Xavier series, Jetson Xavier NX improper channel restriction | 7.1CNA v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-25515 | NVIDIA GPU Display Driver untrusted pointer dereference | 7.8CNA v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-25003 | AutoCAD, Maya out-of-bounds read | 7.8v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-23679 | JS Help Desk Best Help Desk and Support WordPress plugin insecure direct object references (IDOR) | 8.8v3.1 | 0.5% | 2023-06-23 | Fix |
| CVE-2023-23539 | Apple macOS buffer overflow | 7.8v3.1 | 0.4% | 2023-06-23 | Fix |
| CVE-2023-23516 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-23344 | HCL BigFix WebUI Insights is susceptible to a lack of sufficient authorization | 3.0CNA v3.1 | 0.4% | 2023-06-23 | Fix |
| CVE-2023-3394 | Session fixation in FOSSBilling/FOSSBilling | 5.4v3.1 | 0.5% | 2023-06-23 | Fix |
| CVE-2023-3393 | Code injection in FOSSBilling/FOSSBilling | 7.2v3.1 | 1.0% | 2023-06-23 | Fix |
| CVE-2023-3391 | SourceCodester Human Resource Management System detailview.php SQL injection | 9.8v3.1 | 0.7% | 2023-06-23 | |
| CVE-2023-3383 | SourceCodester Game Result Matrix System GET parameter athlete-profile.php SQL injection | 9.8v3.1 | 0.8% | 2023-06-23 | |
| CVE-2023-3382 | SourceCodester Game Result Matrix System GET parameter save-delegates.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-06-23 | |
| CVE-2023-3381 | SourceCodester Online School Fees System GET parameter datatable.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-06-23 | |
| CVE-2023-3380 | Wavlink WN579X3 Ping Test adm.cgi injection | 9.8v3.1 | 3.9% | 2023-06-23 | Nuclei |
| CVE-2023-3317 | Linux kernel use-after-free | 7.1NVD v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2023-3304 | Improper access control in Admidio/Admidio | 5.4v3.1 | 0.4% | 2023-06-23 | Fix |
| CVE-2023-3303 | Improper access control in Admidio/Admidio | 3.5NVD v3.1 | 0.4% | 2023-06-23 | Fix |
| CVE-2023-3302 | Improper neutralization of formula elements in a CSV file in Admidio/Admidio | 7.8v3.1 | 0.5% | 2023-06-23 | Fix |
| CVE-2023-3212 | Linux kernel (gfs2 file system) gfs2 file system in the null pointer dereference | 4.4NVD v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2023-1783 | OrangeScrum AWS credentials leak via PDF Rendering | 7.6v3.1 | 0.6% | 2023-06-23 | |
| CVE-2023-36371 | Monetdb resource exhaustion | 7.5v3.1 | 0.7% | 2023-06-22 | |
| CVE-2023-36370 | Monetdb resource exhaustion | 7.5v3.1 | 0.7% | 2023-06-22 | |
| CVE-2023-36369 | Monetdb resource exhaustion | 7.5v3.1 | 0.7% | 2023-06-22 | |
| CVE-2023-36368 | Monetdb resource exhaustion | 7.5v3.1 | 0.7% | 2023-06-22 | |
| CVE-2023-36367 | Monetdb resource exhaustion | 7.5v3.1 | 0.7% | 2023-06-22 | |
| CVE-2023-36366 | Monetdb resource exhaustion | 7.5v3.1 | 0.7% | 2023-06-22 | |
| CVE-2023-36365 | Monetdb resource exhaustion | 7.5v3.1 | 0.7% | 2023-06-22 | |
| CVE-2023-36364 | Monetdb SQL injection | 7.5v3.1 | 0.8% | 2023-06-22 | |
| CVE-2023-36363 | Monetdb SQL injection | 7.5v3.1 | 0.8% | 2023-06-22 | |
| CVE-2023-36362 | Monetdb SQL injection | 7.5v3.1 | 0.8% | 2023-06-22 | |
| CVE-2023-36359 | TP-Link Tl-wr941nd buffer overflow | 7.5v3.1 | 0.8% | 2023-06-22 | |
| CVE-2023-36358 | TP-Link Tl-wr743nd buffer overflow | 7.7v3.1 | 0.7% | 2023-06-22 | |
| CVE-2023-36357 | TP-Link Tl-wr941nd resource exhaustion | 7.7v3.1 | 0.8% | 2023-06-22 | |
| CVE-2023-36356 | TP-Link Tl-wr941nd out-of-bounds read | 7.7v3.1 | 0.7% | 2023-06-22 | |
| CVE-2023-36355 | TP-Link TL-WR940N buffer overflow | 9.9v3.1 | 31.7% | 2023-06-22 | Exploit code |
| CVE-2023-36354 | TP-Link Tl-wr941nd buffer overflow | 7.5v3.1 | 0.8% | 2023-06-22 | |
| CVE-2023-36243 | FLVMeta buffer overflow | 7.8v3.1 | 0.3% | 2023-06-22 | Fix |
| CVE-2023-36239 | Libming buffer overflow | 8.8v3.1 | 0.7% | 2023-06-22 | |
| CVE-2023-36097 | funadmin fuadmin vulnerable to insecure file upload | 9.8v3.1 | 0.9% | 2023-06-22 | |
| CVE-2023-36093 | EyouCMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-06-22 | |
| CVE-2023-35926 | Insecure sandbox in Backstage Scaffolder plugin | 8.1CNA v3.1 | 1.9% | 2023-06-22 | Fix |
| CVE-2023-35918 | WooCommerce Bulk Stock Management WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-35917 | WooCommerce PayPal Payments WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-06-22 | Fix |
| CVE-2023-35174 | Livebook Desktop protocol handler OS command injection | 8.6CNA v3.1 | 1.0% | 2023-06-22 | Fix |
| CVE-2023-35133 | Moodle: Ssrf risk due to insufficient check on the curl blocked hosts | 7.5NVD v3.1 | 0.8% | 2023-06-22 | Fix |
| CVE-2023-35132 | Moodle: Minor SQL injection risk on mnet sso access control page | 6.3NVD v3.1 | 0.8% | 2023-06-22 | Fix |
| CVE-2023-35131 | Moodle: Xss risk on groups page | 6.1NVD v3.1 | 0.7% | 2023-06-22 | Fix |
| CVE-2023-35093 | MasterStudy LMS WordPress plugin broken access control | 6.5v3.1 | 0.6% | 2023-06-22 | Fix |
| CVE-2023-35090 | MasterStudy LMS WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-34939 | OnlyOffice path traversal | 9.8v3.1 | 5.0% | 2023-06-22 | |
| CVE-2023-34927 | Casdoor cross-site request forgery | 6.5v3.1 | 3.1% | 2023-06-22 | Exploit code |
| CVE-2023-34923 | Topdesk incorrect authorization | 8.1v3.1 | 0.7% | 2023-06-22 | |
| CVE-2023-34796 | Techsneeze Dmarc Report dmarcts-report-viewer dashboard versions cross-site scripting | 6.1v3.1 | 0.7% | 2023-06-22 | |
| CVE-2023-34601 | Jeesite SQL injection | 9.8v3.1 | 0.7% | 2023-06-22 | |
| CVE-2023-34553 | Wafucn Wafu Keyless Smart Lock authentication bypass by replay | 6.5v3.1 | 0.3% | 2023-06-22 | |
| CVE-2023-34462 | netty netty-handler SniHandler 16MB allocation | 6.5CNA v3.1 | 2.5% | 2023-06-22 | Fix |
| CVE-2023-34368 | Kanban Boards for WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-34241 | CUPS vulnerable to use-after-free in cupsdAcceptClient | 5.3CNA v3.1 | 1.4% | 2023-06-22 | Fix |
| CVE-2023-34170 | Quick/Bulk Order Form for WooCommerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-34110 | Flask-AppBuilder vulnerable to possible disclosure of sensitive information on user error | 2.7CNA v3.1 | 0.7% | 2023-06-22 | Fix |
| CVE-2023-34028 | WOLF WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-06-22 | Fix |
| CVE-2023-34006 | Telegram Bot and Channel WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-33997 | bbp style pack WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-33842 | IBM SPSS Modeler information disclosure | 6.2CNA v3.1 | 0.2% | 2023-06-22 | Fix |
| CVE-2023-33387 | Datev Eg Personal-management System Comfort/comfort Plus reflected cross-site scripting | 6.1v3.1 | 0.5% | 2023-06-22 | Fix |
| CVE-2023-33323 | ARMember WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-32960 | UpdraftPlus WordPress plugin cross-site request forgery (CSRF) | 6.1NVD v3.1 | 0.2% | 2023-06-22 | Fix |
| CVE-2023-32571 | Dynamic Linq vulnerable to remote code execution | 9.8v3.1 | 34.9% | 2023-06-22 | Exploit codeFix |
| CVE-2023-32449 | Dell PowerStore improper signature verification | 7.2CNA v3.1 | 0.1% | 2023-06-22 | Fix |
| CVE-2023-32320 | Nextcloud Server's brute force protection allows someone to send more requests than intended | 8.7CNA v3.1 | 0.9% | 2023-06-22 | Fix |
| CVE-2023-32239 | WoodMart WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-31868 | Sage X3 cross-site scripting | 5.4v3.1 | 0.3% | 2023-06-22 | |
| CVE-2023-31867 | Sage X3 CSV injection | 7.2v3.1 | 0.8% | 2023-06-22 | |
| CVE-2023-31213 | WPBakery Page Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-30500 | WordPress WPForms plugins reflected cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-30347 | Stl Neox Dial Centre Neox Contact Center cross-site scripting | 4.8v3.1 | 0.5% | 2023-06-22 | Exploit code |
| CVE-2023-29931 | Laravels laravel-s vulnerable to local file inclusion | 9.8v3.1 | 0.9% | 2023-06-22 | Fix |
| CVE-2023-29711 | Interlink Psg-5124 origin validation error | 9.8v3.1 | 70.3% | 2023-06-22 | |
| CVE-2023-29709 | Wildix WSG24POE authentication bypass | 7.5v3.1 | 0.7% | 2023-06-22 | |
| CVE-2023-29708 | WAVLINK Wavrouter App incorrect authorization | 7.5v3.1 | 14.2% | 2023-06-22 | |
| CVE-2023-29707 | Gbcom Lac Web Control Center cross-site scripting | 4.8v3.1 | 0.4% | 2023-06-22 | |
| CVE-2023-28956 | IBM Spectrum Protect Backup-Archive Client privilege escalation | 8.4CNA v3.1 | 0.2% | 2023-06-22 | Fix |
| CVE-2023-28800 | Zscaler Client Connector output encoding missing in redrurl parameter | 8.1CNA v3.1 | 0.5% | 2023-06-22 | Fix |
| CVE-2023-28799 | Zscaler Client Connector improper type validation | 8.2CNA v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-28784 | Contest Gallery WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-28778 | Pagination by BestWebSoft WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-28776 | Continuous Image Carousel With Lightbox WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-28774 | Review Stream WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-28750 | Albo Pretorio Online WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-28695 | VigilanTor WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-28534 | WP Job Portal WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-28496 | SMTP2GO WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-28423 | Modern Footnotes WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-28418 | Mediciti Lite WordPress theme cross-site scripting (XSS) | 5.4NVD v3.1 | 0.4% | 2023-06-22 | |
| CVE-2023-28174 | eRocket WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-28171 | Brilliance WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-06-22 | |
| CVE-2023-28166 | Tags Cloud Manager WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-22 | |
| CVE-2023-28094 | Pegasystems Pega Platform default password | 8.1CNA v3.1 | 0.5% | 2023-06-22 | Fix |
| CVE-2023-28016 | HCL BigFix OSD Bare Metal Server is affected by a host header injection | 3.1CNA v3.1 | 0.3% | 2023-06-22 | Fix |
| CVE-2023-28006 | HCL BigFix OSD Bare Metal Server is affected by a weak cryptographic algorithm | 7.0CNA v3.1 | 0.1% | 2023-06-22 | Fix |
| CVE-2023-27631 | Daily Prayer Time WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-27629 | Site Reviews WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-27618 | Store Locator WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-27612 | Site Reviews WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-27452 | Button Generator easily Button Builder WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-27413 | W4 Post List WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-27083 | pluck-cms Pluck unrestricted file upload | 7.2v3.1 | 1.2% | 2023-06-22 | |
| CVE-2023-26539 | Advanced Text Widget WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-22 | |
| CVE-2023-26534 | WP Repost WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-22 | |
| CVE-2023-26115 | word-wrap vulnerable to regular expression denial of service | 7.5v3.1 | 1.7% | 2023-06-22 | Fix |
| CVE-2023-25500 | Vaadin vulnerable to possible information disclosure of class and method names in RPC response | 3.5CNA v3.1 | 0.5% | 2023-06-22 | Fix |
| CVE-2023-25499 | Vaadin possible information disclosure in non visible components | 5.7CNA v3.1 | 0.6% | 2023-06-22 | Fix |
| CVE-2023-23811 | Smoothscroller WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-23807 | MojoPlug Slide Panel WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-22 | |
| CVE-2023-23795 | Form Builder WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-06-22 | |
| CVE-2023-23343 | HCL BigFix OSD Bare Metal Server is affected by a clickjacking | 2.4CNA v3.1 | 0.3% | 2023-06-22 | Fix |
| CVE-2023-20896 | VMware vCenter Server (vCenter Server) out-of-bounds read | 5.9CNA v3.1 | 0.9% | 2023-06-22 | Fix |
| CVE-2023-20895 | VMware vCenter Server (vCenter Server) out-of-bounds write | 8.1CNA v3.1 | 1.4% | 2023-06-22 | Fix |
| CVE-2023-20894 | VMware vCenter Server (vCenter Server) out-of-bounds write | 8.1CNA v3.1 | 33.9% | 2023-06-22 | Fix |
| CVE-2023-20893 | VMware vCenter Server (vCenter Server) use-after-free | 8.1CNA v3.1 | 1.2% | 2023-06-22 | Fix |
| CVE-2023-20892 | VMware vCenter Server DCERPC protocol implementation out-of-bounds write | 8.1CNA v3.1 | 1.8% | 2023-06-22 | Fix |
| CVE-2023-3326 | FreeBSD network authentication attack via pam_krb5 | 9.8v3.1 | 1.1% | 2023-06-22 | Fix |
| CVE-2023-3256 | Advantech R-SeeNet external control of file name or path | 8.1v3.1 | 0.6% | 2023-06-22 | Fix |
| CVE-2023-3128 | Grafana vulnerable to authentication bypass by spoofing | 9.4CNA v3.1 | 4.0% | 2023-06-22 | Fix |
| CVE-2023-3114 | Terraform Enterprise Agent Pool Controls Allowed Unauthorized Workspaces to Target an Agent Pool | 5.0CNA v3.1 | 0.4% | 2023-06-22 | Fix |
| CVE-2023-2991 | Fortra Globalscape Administration Server information disclosure | 5.3NVD v3.1 | 0.6% | 2023-06-22 | Fix |
| CVE-2023-2990 | Fortra Globalscape Administration Server denial of service | 7.5NVD v3.1 | 0.9% | 2023-06-22 | Fix |
| CVE-2023-2989 | Fortra Globalscape Administration Server Out-of-bounds Memory Read | 9.1NVD v3.1 | 1.0% | 2023-06-22 | Fix |
| CVE-2023-2611 | Advantech R-SeeNet use of hard-coded credentials | 9.8v3.1 | 0.7% | 2023-06-22 | Fix |
| CVE-2023-34981 | Apache Tomcat: AJP response header mix-up | 7.5v3.1 | 1.1% | 2023-06-21 | Fix |
| CVE-2023-34340 | Apache Accumulo: Accumulo may incorrectly validate cached credentials | 9.8v3.1 | 1.4% | 2023-06-21 | Fix |
| CVE-2023-33725 | Broadleaf vulnerable to cross-site scripting | 6.1v3.1 | 0.5% | 2023-06-21 | Fix |
| CVE-2023-33591 | User Registration and Login and User Management System admin search result page cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-21 | |
| CVE-2023-33584 | Enrollment System SQL injection | 9.8v3.1 | 14.2% | 2023-06-21 | Exploit code |
| CVE-2023-33405 | BlogEngine.NET open redirect | 6.1v3.1 | 31.3% | 2023-06-21 | NucleiExploit code |
| CVE-2023-33289 | Urlnorm regular expression denial of service | 7.5v3.1 | 1.2% | 2023-06-21 | |
| CVE-2023-27450 | Leyka WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-21 | Fix |
| CVE-2023-27443 | Simple Vimeo Shortcode WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-06-21 | |
| CVE-2023-27439 | New Adman WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-21 | |
| CVE-2023-27432 | Manage Upload Limit WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-21 | |
| CVE-2023-27429 | Jetpack CRM WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-21 | Fix |
| CVE-2023-27414 | Popup box WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-21 | Fix |
| CVE-2023-27243 | Makves Dcap An improper access control | 7.5v3.1 | 0.3% | 2023-06-21 | |
| CVE-2023-25435 | libtiff buffer overflow | 5.5v3.1 | 0.3% | 2023-06-21 | Fix |
| CVE-2023-24261 | GL.iNet Gl-e750 OS command injection | 7.2v3.1 | 18.8% | 2023-06-21 | |
| CVE-2023-3339 | code-projects Agro-School Management System exam-delete.php SQL injection | 7.5v3.1 | 0.6% | 2023-06-21 | |
| CVE-2023-3110 | Buffer overflow in S0 Decryption on Unify Gateway | 9.6CNA v3.1 | 0.4% | 2023-06-21 | |
| CVE-2023-2911 | ISC BIND 9 stale-answer resolver out-of-bounds write | 7.5CNA v3.1 | 2.5% | 2023-06-21 | Fix |
| CVE-2023-2829 | ISC BIND 9 synth-from-dnssec option denial of service | 7.5CNA v3.1 | 0.9% | 2023-06-21 | Fix |
| CVE-2023-2828 | ISC BIND 9 named's configured cache size limit can be significantly exceeded | 7.5CNA v3.1 | 3.8% | 2023-06-21 | Fix |
| CVE-2023-0972 | Buffer overflow in S0 Decryption on Z/IP Gatweay | 9.6CNA v3.1 | 0.4% | 2023-06-21 | |
| CVE-2023-0971 | Command authentication bypass in Z/IP Gateway | 9.6CNA v3.1 | 0.3% | 2023-06-21 | |
| CVE-2023-0970 | Serial API buffer overflow in Z/IP Gateway | 7.1CNA v3.1 | 0.3% | 2023-06-21 | |
| CVE-2023-0969 | Global read overflow in Z/IP Gateway | 3.5CNA v3.1 | 0.3% | 2023-06-21 | |
| CVE-2023-0026 | Juniper Networks Junos OS Routing protocol daemon improper input validation | 7.5CNA v3.1 | 0.6% | 2023-06-21 | Fix |
| CVE-2023-35885 | MGT-COMMERCE CloudPanel cookie reliance without validation | 9.8v3.1 | 75.3% | 2023-06-20 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2023-35884 | EventPrime WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-20 | Fix |
| CVE-2023-35882 | Super Socializer WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-06-20 | Fix |
| CVE-2023-35878 | Extra User Details WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-20 | Fix |
| CVE-2023-35854 | Zoho ManageEngine ADSelfService Plus missing authentication | 9.8v3.1 | 6.0% | 2023-06-20 | Exploit code |
| CVE-2023-35166 | xwiki-platform privilege escalation (PR) from account through TipsPanel | 10.0CNA v3.1 | 62.2% | 2023-06-20 | Fix |
| CVE-2023-35098 | NextGen GalleryView WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-20 | |
| CVE-2023-35097 | WP Affiliate Links WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-20 | |
| CVE-2023-35095 | Flo Forms WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-20 | Fix |
| CVE-2023-34600 | Adiscon Loganalyzer SQL injection | 9.8v3.1 | 23.7% | 2023-06-20 | Exploit code |
| CVE-2023-34597 | Fibaro Fgms-001 denial of service | 6.5v3.1 | 0.6% | 2023-06-20 | |
| CVE-2023-34596 | Aeotech Zw130-a denial of service | 6.5v3.1 | 0.6% | 2023-06-20 | |
| CVE-2023-34563 | NETGEAR R6250 Firmware buffer overflow | 9.8v3.1 | 13.9% | 2023-06-20 | Fix |
| CVE-2023-34541 | Langchain vulnerable to arbitrary code execution | 9.8v3.1 | 0.9% | 2023-06-20 | Fix |
| CVE-2023-33869 | Enphase Envoy OS command injection | 9.8v3.1 | 1.1% | 2023-06-20 | Exploit codeFix |
| CVE-2023-33495 | Craft CMS vulnerable to HTML injection | 6.1v3.1 | 0.5% | 2023-06-20 | Fix |
| CVE-2023-32274 | Enphase Installer Toolkit Android App use of hard-coded credentials | 7.5v3.1 | 0.6% | 2023-06-20 | Fix |
| CVE-2023-26436 | OX App Suite code injection | 7.1CNA v3.1 | 1.3% | 2023-06-20 | Fix |
| CVE-2023-26435 | OX App Suite server-side request forgery | 5.0CNA v3.1 | 0.8% | 2023-06-20 | Fix |
| CVE-2023-26434 | OX App Suite resource exhaustion | 4.3CNA v3.1 | 1.1% | 2023-06-20 | Fix |
| CVE-2023-26433 | OX App Suite resource exhaustion | 4.3CNA v3.1 | 1.1% | 2023-06-20 | Fix |
| CVE-2023-26432 | OX App Suite resource exhaustion | 4.3CNA v3.1 | 1.1% | 2023-06-20 | Fix |
| CVE-2023-26431 | OX App Suite server-side request forgery | 5.0CNA v3.1 | 0.8% | 2023-06-20 | Fix |
| CVE-2023-26429 | OX App Suite command injection | 3.5CNA v3.1 | 0.8% | 2023-06-20 | Fix |
| CVE-2023-26428 | OX App Suite insecure direct object reference | 6.5CNA v3.1 | 1.0% | 2023-06-20 | Fix |
| CVE-2023-26427 | OX App Suite insecure storage of sensitive information | 3.2CNA v3.1 | 0.3% | 2023-06-20 | Fix |
| CVE-2023-3340 | SourceCodester Online School Fees System GET parameter ajx.php SQL injection | 9.8v3.1 | 0.8% | 2023-06-20 | |
| CVE-2023-3337 | PuneethReddyHC Online Shopping System Advanced Admin Registration reg.php improper authentication | 9.8v3.1 | 0.7% | 2023-06-20 | |
| CVE-2023-3325 | CMS Commander WordPress plugin authorization bypass | 9.8v3.1 | 0.6% | 2023-06-20 | Fix |
| CVE-2023-3320 | WP Sticky Social WordPress plugin cross-site request forgery | 8.8v3.1 | 2.3% | 2023-06-20 | Exploit codeFix |
| CVE-2023-3220 | Linux kernel null pointer dereference | 5.5NVD v3.1 | 0.2% | 2023-06-20 | Fix |
| CVE-2023-2533 | PaperCut NG/MF cross-site request forgery (CSRF) | 8.8v3.1 | 29.2% | 2023-06-20 | KEVEmerging ThreatsFix |
| CVE-2023-2400 | Devolutions Server incomplete cleanup | 2.7v3.1 | 0.4% | 2023-06-20 | Fix |
| CVE-2023-1999 | Chromium libwebp There exists a use-after-free | 5.3CNA v3.1 | 1.0% | 2023-06-20 | Fix |
| CVE-2023-1862 | Remote access to warp-svc.exe in Cloudflare WARP | 7.3CNA v3.1 | 0.8% | 2023-06-20 | Fix |
| CVE-2023-35866 | KeePassXC incorrect authorization | 5.5v3.1 | 0.2% | 2023-06-19 | |
| CVE-2023-35862 | libcoap out-of-bounds read | 6.5v3.1 | 0.8% | 2023-06-19 | |
| CVE-2023-35857 | Siren Investigate insufficient session expiration | 9.8v3.1 | 0.6% | 2023-06-19 | Fix |
| CVE-2023-35856 | Nintendo Mario Kart Wii buffer overflow | 9.8v3.1 | 1.1% | 2023-06-19 | |
| CVE-2023-35855 | Valve Software Counter-strike buffer overflow | 9.8v3.1 | 1.1% | 2023-06-19 | |
| CVE-2023-35853 | OISF suricata code injection | 9.8v3.1 | 1.0% | 2023-06-19 | Fix |
| CVE-2023-35852 | OISF suricata path traversal | 7.5v3.1 | 1.1% | 2023-06-19 | Fix |
| CVE-2023-35849 | Virtualsquare Picotcp improper check for exceptional conditions | 7.5v3.1 | 0.6% | 2023-06-19 | |
| CVE-2023-35848 | Virtualsquare Picotcp incorrect calculation | 7.5v3.1 | 0.7% | 2023-06-19 | |
| CVE-2023-35847 | Virtualsquare Picotcp uninitialized resource use | 7.5v3.1 | 0.7% | 2023-06-19 | |
| CVE-2023-35846 | VirtualSquare PicoTCP port filtering vulnerability | 7.5v3.1 | 0.7% | 2023-06-19 | |
| CVE-2023-35844 | Lightdash path traversal | 7.5v3.1 | 6.3% | 2023-06-19 | NucleiExploit code |
| CVE-2023-35843 | nocodb path traversal | 7.5v3.1 | 8.9% | 2023-06-19 | NucleiExploit code |
| CVE-2023-35840 | elFinder vulnerable to path traversal in LocalVolumeDriver connector | 6.5v3.1 | 1.9% | 2023-06-19 | Exploit codeFix |
| CVE-2023-35839 | Solon vulnerable to deserialization of untrusted data | 9.8v3.1 | 1.1% | 2023-06-19 | Fix |
| CVE-2023-35779 | Seed Fonts WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2023-35776 | Sermon'e Sermons Online WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2023-06-19 | |
| CVE-2023-35775 | WP Backup Manager WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-19 | |
| CVE-2023-35772 | Google Map Shortcode WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-19 | |
| CVE-2023-35005 | Apache Airflow: Information disclosure on configuration view | 6.5v3.1 | 1.5% | 2023-06-19 | Fix |
| CVE-2023-34657 | EyouCMS A stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-06-19 | |
| CVE-2023-34642 | Kioware OS command injection | 7.8v3.1 | 0.3% | 2023-06-19 | Fix |
| CVE-2023-34641 | KioWare for Windows dialog box blacklist filter vulnerability | 7.8v3.1 | 0.2% | 2023-06-19 | Fix |
| CVE-2023-34603 | JeecgBoot vulnerable to SQL injection in queryFilterTableDictInfo | 7.5v3.1 | 0.7% | 2023-06-19 | Fix |
| CVE-2023-34602 | JeecgBoot vulnerable to SQL injection in queryTableDictItemsByCode | 7.5v3.1 | 0.7% | 2023-06-19 | Fix |
| CVE-2023-34461 | Cross-site scripting (XSS) Availability in PyBB | 4.6CNA v3.1 | 0.3% | 2023-06-19 | Fix |
| CVE-2023-34417 | Mozilla Firefox memory safety bugs | 9.8v3.1 | 0.8% | 2023-06-19 | Fix |
| CVE-2023-34416 | Mozilla Firefox ESR memory safety bugs | 9.8v3.1 | 0.9% | 2023-06-19 | Fix |
| CVE-2023-34415 | Mozilla Firefox open redirect | 6.1v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2023-34414 | Mozilla Firefox ESR improper certificate validation | 3.1v3.1 | 0.9% | 2023-06-19 | Fix |
| CVE-2023-34373 | Zephyr Project Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-06-19 | Fix |
| CVE-2023-34167 | Vulnerability of spoofing trustlists of Huawei desktop | 5.3v3.1 | 0.3% | 2023-06-19 | Fix |
| CVE-2023-34166 | Huawei HarmonyOS vulnerability of system restart triggered by abnormal callbacks passed to APIs | 7.5v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2023-34163 | Huawei HarmonyOS permission control vulnerability in the window management module | 7.5v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2023-34162 | Huawei HarmonyOS version update determination vulnerability in the user profile module | 7.5v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2023-34161 | Huawei HarmonyOS inappropriate authorization vulnerability in the SettingsProvider module | 7.5v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2023-34160 | Huawei HarmonyOS authentication bypass by spoofing | 5.3v3.1 | 0.3% | 2023-06-19 | Fix |
| CVE-2023-34159 | Huawei HarmonyOS improper permission control vulnerability in the Notepad app | 9.8v3.1 | 0.5% | 2023-06-19 | Fix |
| CVE-2023-34158 | Huawei HarmonyOS authentication bypass by spoofing | 5.3v3.1 | 0.3% | 2023-06-19 | Fix |
| CVE-2023-34156 | Vulnerability of services denied by early fingerprint APIs on HarmonyOS products | 5.3v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2023-34155 | Vulnerability of unauthorized calling on Huawei phones and tablets | 7.5v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2023-33213 | wpView WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-19 | |
| CVE-2023-32659 | SUBNET PowerSYSTEM Center cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2023-32542 | Fuji Electric TELLUS and TELLUS Lite TELLUS v4.0.15.0 and out-of-bounds read | 7.8v3.1 | 0.3% | 2023-06-19 | Fix |
| CVE-2023-32538 | FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS and TELLUS Lite stack-based buffer overflow | 7.8v3.1 | 0.3% | 2023-06-19 | Fix |
| CVE-2023-32288 | FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS and TELLUS Lite out-of-bounds read | 7.8v3.1 | 0.3% | 2023-06-19 | Fix |
| CVE-2023-32276 | FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS and TELLUS Lite stack-based buffer overflow | 7.8v3.1 | 0.3% | 2023-06-19 | Fix |
| CVE-2023-32273 | FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS and TELLUS Lite stack-based buffer overflow | 7.8v3.1 | 0.3% | 2023-06-19 | Fix |
| CVE-2023-32270 | FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS and TELLUS Lite out-of-bounds access | 7.8v3.1 | 0.2% | 2023-06-19 | Fix |
| CVE-2023-32216 | Mozilla Firefox out-of-bounds write | 9.8v3.1 | 0.8% | 2023-06-19 | Fix |
| CVE-2023-32214 | Mozilla Firefox denial of service | 7.5v3.1 | 0.9% | 2023-06-19 | Fix |
| CVE-2023-32210 | Mozilla Firefox principal privilege handling vulnerability | 6.5v3.1 | 0.5% | 2023-06-19 | Fix |
| CVE-2023-32209 | Mozilla Firefox out-of-bounds write | 7.5v3.1 | 0.8% | 2023-06-19 | Fix |
| CVE-2023-32208 | Mozilla Firefox service workers vulnerability | 5.3v3.1 | 0.5% | 2023-06-19 | Fix |
| CVE-2023-32201 | FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS and TELLUS Lite stack-based buffer overflow | 7.8v3.1 | 0.3% | 2023-06-19 | Fix |
| CVE-2023-31411 | SICK EventCam App missing authentication | 9.8CNA v3.1 | 0.9% | 2023-06-19 | |
| CVE-2023-31410 | SICK EventCam App cleartext transmission of sensitive information | 9.8CNA v3.1 | 0.3% | 2023-06-19 | |
| CVE-2023-31239 | FUJI ELECTRIC CO., LTD. and Hakko Electronics V-Server and V-Server Lite stack-based buffer overflow | 7.8v3.1 | 0.3% | 2023-06-19 | Fix |
| CVE-2023-30759 | Ricoh Printer Driver Packager NX insufficient verification of data authenticity | 7.8v3.1 | 0.1% | 2023-06-19 | Fix |
| CVE-2023-29546 | When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden, potentially leaking sensitive information. *This bug only affects Firefox for Android. Other operating systems are unaffected.* This vulnerability affects Firefox for Android < | 6.5v3.1 | 0.5% | 2023-06-19 | Fix |
| CVE-2023-29545 | Mozilla Firefox Save Link As filename suggestion vulnerability | 6.5v3.1 | 0.6% | 2023-06-19 | Fix |
| CVE-2023-29542 | Mozilla Firefox file extension security check security feature bypass | 9.8v3.1 | 0.9% | 2023-06-19 | Fix |
| CVE-2023-29534 | Mozilla Firefox spoofing | 9.1v3.1 | 0.7% | 2023-06-19 | Fix |
| CVE-2023-29532 | Mozilla Firefox Maintenance Service vulnerability | 5.5v3.1 | 0.2% | 2023-06-19 | Fix |
| CVE-2023-29531 | Mozilla Firefox out-of-bounds write | 9.8v3.1 | 1.0% | 2023-06-19 | Fix |
| CVE-2023-29158 | SUBNET PowerSYSTEM Center authentication bypass by capture-replay | 9.1v3.1 | 0.6% | 2023-06-19 | Fix |
| CVE-2023-27992 | Zyxel Multiple NAS Devices command injection | 9.8CNA v3.1 | 82.8% | 2023-06-19 | KEVFix |
| CVE-2023-27396 | Multiple OMRON products which implement FINS protocol missing authentication | 9.8v3.1 | 1.4% | 2023-06-19 | Fix |
| CVE-2023-25747 | Mozilla Firefox potential use-after-free | 7.5v3.1 | 0.6% | 2023-06-19 | Fix |
| CVE-2023-25736 | Mozilla Firefox undefined behavior | 9.8v3.1 | 0.7% | 2023-06-19 | Fix |
| CVE-2023-25733 | Mozilla Firefox unchecked return value | 7.5v3.1 | 0.6% | 2023-06-19 | Fix |
| CVE-2023-3318 | SourceCodester Resort Management System cross-site scripting | 5.4v3.1 | 0.6% | 2023-06-19 | |
| CVE-2023-3316 | libtiff A null pointer dereference | 6.5NVD v3.1 | 1.1% | 2023-06-19 | Fix |
| CVE-2023-3315 | Jenkins Team Concert Plugin missing authorization | 4.3v3.1 | 0.5% | 2023-06-19 | Fix |
| CVE-2023-3312 | Linux kernel qcom-cpufreq-hw driver double free | 7.5NVD v3.1 | 0.9% | 2023-06-19 | Fix |
| CVE-2023-3022 | Linux Kernel (IPv6) type confusion | 5.5NVD v3.1 | 0.2% | 2023-06-19 | Fix |
| CVE-2023-2907 | Marksoft SQL command improper neutralization | 9.8CNA v3.1 | 0.6% | 2023-06-19 | |
| CVE-2023-2899 | Google Map Shortcode WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-06-19 | |
| CVE-2023-2812 | Ultimate Dashboard WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-06-19 | Fix |
| CVE-2023-2811 | AI ChatBot WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2023-2805 | SupportCandy WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 0.9% | 2023-06-19 | Fix |
| CVE-2023-2779 | Social Share, Social Login and Social Comments reflected cross-site scripting | 6.1NVD v3.1 | 6.0% | 2023-06-19 | NucleiExploit codeFix |
| CVE-2023-2751 | Upload Resume WordPress plugin Captcha bypass | 5.3NVD v3.1 | 0.5% | 2023-06-19 | |
| CVE-2023-2742 | AI ChatBot WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2023-06-19 | Fix |
| CVE-2023-2719 | SupportCandy WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 1.2% | 2023-06-19 | Fix |
| CVE-2023-2684 | File Renaming on Upload WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2023-2654 | Conditional Menus WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-06-19 | Fix |
| CVE-2023-2600 | Custom Base Terms WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-06-19 | Fix |
| CVE-2023-2527 | Integration for Contact Form 7 and Zoho CRM, Bigin WordPress plugin Admin+ SQLi | 4.8NVD v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2023-2492 | QueryWall: Plug'n Play Firewall WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 0.9% | 2023-06-19 | |
| CVE-2023-2401 | QuBot WordPress plugin qubotchat Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2023-2399 | Qudata QuBot chat stored cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-06-19 | Fix |
| CVE-2023-2359 | Revolution Slider WordPress plugin Author+ remote code execution | 8.8NVD v3.1 | 2.5% | 2023-06-19 | Fix |
| CVE-2023-2221 | WP Custom Cursors WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 0.9% | 2023-06-19 | Fix |
| CVE-2023-0489 | SlideOnline WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-06-19 | |
| CVE-2023-0368 | Responsive Tabs For WPBakery Page Builder WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-06-19 | |
| CVE-2023-35829 | Linux kernel race condition | 7.0v3.1 | 0.4% | 2023-06-18 | Fix |
| CVE-2023-35828 | Linux kernel race condition | 7.0v3.1 | 0.5% | 2023-06-18 | Exploit codeFix |
| CVE-2023-35827 | Linux kernel race condition | 7.0NVD v3.1 | 0.2% | 2023-06-18 | Fix |
| CVE-2023-35826 | Linux kernel race condition | 7.0v3.1 | 0.2% | 2023-06-18 | Fix |
| CVE-2023-35824 | Linux kernel race condition | 7.0v3.1 | 0.2% | 2023-06-18 | Fix |
| CVE-2023-35823 | Linux kernel race condition | 7.0v3.1 | 0.2% | 2023-06-18 | Fix |
| CVE-2023-3311 | PuneethReddyHC online-shopping-system-advanced addsuppliers.php cross-site scripting | 5.4v3.1 | 0.6% | 2023-06-18 | |
| CVE-2023-3310 | code-projects Agro-School Management System loaddata.php SQL injection | 8.8v3.1 | 0.7% | 2023-06-18 | |
| CVE-2023-3309 | SourceCodester Resort Reservation System Manage Room page ?page=rooms cross-site scripting | 5.4v3.1 | 0.6% | 2023-06-18 | |
| CVE-2023-3308 | whaleal IceFrog Aviator Template Engine deserialization | 8.8v3.1 | 1.1% | 2023-06-18 | |
| CVE-2023-3307 | miniCal SQL injection | 8.8v3.1 | 0.9% | 2023-06-18 | |
| CVE-2023-3306 | Ruijie RG-EW1200G Admin Password app.09df2a9e44ab48766f5f.js access control | 9.8v3.1 | 23.1% | 2023-06-18 | KCV |
| CVE-2023-3305 | CData Web Management System C-DATA Web Management System User Creation access control | 7.5v3.1 | 0.8% | 2023-06-18 | |
| CVE-2023-35813 | Sitecore Experience Commerce code injection | 9.8NVD v3.1 | 86.7% | 2023-06-17 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2023-35811 | SugarCRM SQL injection | 8.8v3.1 | 1.0% | 2023-06-17 | Fix |
| CVE-2023-35810 | SugarCRM PHP object injection | 7.2v3.1 | 1.2% | 2023-06-17 | Fix |
| CVE-2023-35809 | SugarCRM code injection | 8.8v3.1 | 1.3% | 2023-06-17 | Fix |
| CVE-2023-35808 | SugarCRM unrestricted file upload | 8.8v3.1 | 1.3% | 2023-06-17 | Fix |
| CVE-2023-28295 | Microsoft Publisher remote code execution | 7.8CNA v3.1 | 0.7% | 2023-06-17 | Fix |
| CVE-2023-28287 | Microsoft Publisher remote code execution | 7.8CNA v3.1 | 0.7% | 2023-06-17 | Fix |
| CVE-2023-3295 | Unlimited Elements For Elementor WordPress plugin arbitrary file upload | 8.8v3.1 | 1.3% | 2023-06-17 | Fix |
| CVE-2023-35790 | libjxl integer underflow | 7.5v3.1 | 0.8% | 2023-06-16 | Fix |
| CVE-2023-35789 | rabbitmq-c insufficiently protected credentials | 5.5v3.1 | 0.2% | 2023-06-16 | Fix |
| CVE-2023-35788 | Linux kernel out-of-bounds write | 7.8v3.1 | 0.5% | 2023-06-16 | Fix |
| CVE-2023-35784 | OpenBSD LibreSSL double free | 9.8v3.1 | 0.9% | 2023-06-16 | Fix |
| CVE-2023-35783 | Ke_search (aka Faceted Search) vulnerable to cross-site scripting | 6.1v3.1 | 0.3% | 2023-06-16 | Fix |
| CVE-2023-35782 | Ipandlanguageredirect extension vulnerable to SQL injection | 9.8v3.1 | 0.5% | 2023-06-16 | Fix |
| CVE-2023-35708 | Progress MOVEit Transfer SQL injection | 9.8v3.1 | 96.7% | 2023-06-16 | Reported exploitedNucleiFix |
| CVE-2023-34845 | Bludit unrestricted file upload | 5.4v3.1 | 0.8% | 2023-06-16 | Exploit code |
| CVE-2023-34832 | TP-Link Archer AX10 buffer overflow | 9.8v3.1 | 1.4% | 2023-06-16 | |
| CVE-2023-34795 | xlsxio use-after-free | 7.8v3.1 | 0.4% | 2023-06-16 | |
| CVE-2023-34733 | Vw Discover Media Infotainment System improper check for exceptional conditions | 6.8v3.1 | 0.5% | 2023-06-16 | |
| CVE-2023-34660 | JeecgBoot jeecg-boot unrestricted file upload | 6.5v3.1 | 0.6% | 2023-06-16 | |
| CVE-2023-34659 | JeecgBoot jeecg-boot SQL injection | 9.8v3.1 | 12.5% | 2023-06-16 | Nuclei |
| CVE-2023-34645 | jflyfox jfinal_cms path traversal | 7.5v3.1 | 0.8% | 2023-06-16 | |
| CVE-2023-34548 | Simple Customer Relationship Management SQL injection | 9.8v3.1 | 0.9% | 2023-06-16 | |
| CVE-2023-34475 | ImageMagick use-after-free | 5.5NVD v3.1 | 0.4% | 2023-06-16 | Fix |
| CVE-2023-34474 | ImageMagick heap-based buffer overflow | 5.5NVD v3.1 | 0.4% | 2023-06-16 | Fix |
| CVE-2023-34459 | OpenZeppelin Contracts Merkle multiproof verification improper integrity check validation | 5.3CNA v3.1 | 0.4% | 2023-06-16 | Fix |
| CVE-2023-34165 | Huawei HarmonyOS unauthorized access | 5.3v3.1 | 0.3% | 2023-06-16 | Fix |
| CVE-2023-34157 | Huawei HarmonyOS authentication bypass by spoofing | 10.0CNA v3.1 | 0.4% | 2023-06-16 | Fix |
| CVE-2023-34154 | Huawei HarmonyOS incorrect permission assignment | 8.2v3.1 | 0.3% | 2023-06-16 | Fix |
| CVE-2023-33438 | Wolterskluwer Teammate+ stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-06-16 | |
| CVE-2023-33307 | Fortinet FortiOS A null pointer dereference | 6.4CNA v3.1 | 0.6% | 2023-06-16 | Fix |
| CVE-2023-33306 | Fortinet FortiOS A null pointer dereference | 6.2CNA v3.1 | 0.8% | 2023-06-16 | Fix |
| CVE-2023-32754 | Thinking Software Efence SQL injection | 9.8CNA v3.1 | 1.0% | 2023-06-16 | Fix |
| CVE-2023-32753 | ITPison OMICARD EDM arbitrary file upload | 9.8CNA v3.1 | 0.9% | 2023-06-16 | |
| CVE-2023-32752 | L7 Networks InstantScan and InstantQoS arbitrary file upload | 9.8CNA v3.1 | 0.9% | 2023-06-16 | |
| CVE-2023-32028 | Microsoft SQL OLE DB remote code execution | 7.8CNA v3.1 | 0.7% | 2023-06-16 | Fix |
| CVE-2023-32027 | Microsoft ODBC Driver for SQL server remote code execution | 7.8CNA v3.1 | 0.6% | 2023-06-16 | Fix |
| CVE-2023-32026 | Microsoft ODBC Driver for SQL server remote code execution | 7.8CNA v3.1 | 0.7% | 2023-06-16 | Fix |
| CVE-2023-32025 | Microsoft ODBC Driver for SQL server remote code execution | 7.8CNA v3.1 | 0.6% | 2023-06-16 | Fix |
| CVE-2023-30905 | HPE MC990 X RMC firmware incorrect default permissions | 7.8v3.1 | 0.2% | 2023-06-16 | Fix |
| CVE-2023-30904 | HPE Insight Remote Support hard-coded credentials | 5.5v3.1 | 0.2% | 2023-06-16 | Fix |
| CVE-2023-30903 | HPE HP-UX resource exhaustion | 5.5v3.1 | 0.2% | 2023-06-16 | Fix |
| CVE-2023-30625 | rudder-server vulnerable to SQL injection | 8.8NVD v3.1 | 85.8% | 2023-06-16 | NucleiMetasploitExploit codeFix |
| CVE-2023-30453 | Teamlead Reminder cross-site scripting | 5.4v3.1 | 0.3% | 2023-06-16 | |
| CVE-2023-30223 | 4D Server A improper authentication | 7.5v3.1 | 1.1% | 2023-06-16 | |
| CVE-2023-30222 | 4D Server An information disclosure | 7.5v3.1 | 1.2% | 2023-06-16 | |
| CVE-2023-29356 | Microsoft ODBC Driver for SQL server remote code execution | 7.8CNA v3.1 | 0.6% | 2023-06-16 | Fix |
| CVE-2023-29349 | Microsoft ODBC and OLE DB remote code execution | 7.8CNA v3.1 | 0.6% | 2023-06-16 | Fix |
| CVE-2023-27420 | Arya Multipurpose WordPress theme cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-16 | |
| CVE-2023-26541 | asMember WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-16 | |
| CVE-2023-26537 | WP No External Links WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-16 | |
| CVE-2023-26527 | Debug Assistant WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-16 | Fix |
| CVE-2023-26515 | Simple Slug Translate WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-16 | Fix |
| CVE-2023-26013 | Strong Testimonials WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-06-16 | Fix |
| CVE-2023-25974 | wp2syslog WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-16 | |
| CVE-2023-25963 | JS Job Manager WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-16 | Fix |
| CVE-2023-25645 | UP T2 4K incorrect default permissions | 7.7v3.1 | 0.3% | 2023-06-16 | Fix |
| CVE-2023-25366 | Siglent Sds 1104x-e origin validation error | 9.8v3.1 | 0.4% | 2023-06-16 | |
| CVE-2023-25188 | Nokia Asika Airscale improper privilege management | 7.8v3.1 | 0.1% | 2023-06-16 | Fix |
| CVE-2023-25187 | Nokia Asika Airscale hard-coded credentials | 7.0v3.1 | 1.0% | 2023-06-16 | Exploit codeFix |
| CVE-2023-25186 | Nokia Asika Airscale path traversal | 2.8NVD v3.1 | 0.2% | 2023-06-16 | Fix |
| CVE-2023-25185 | Nokia Asika Airscale improper privilege management | 7.8v3.1 | 0.1% | 2023-06-16 | Fix |
| CVE-2023-24243 | CData Arc server-side request forgery | 7.5v3.1 | 4.0% | 2023-06-16 | NucleiFix |
| CVE-2023-20885 | CF workflows leak credentials in system audit logs | 6.5CNA v3.1 | 0.5% | 2023-06-16 | Fix |
| CVE-2023-3294 | Cross-site scripting (XSS) DOM in saleor/React-storefront | 6.1NVD v3.1 | 0.5% | 2023-06-16 | |
| CVE-2023-3293 | Cross-site scripting (XSS) Stored in salesagility/suitecrm-core | 4.8NVD v3.1 | 0.5% | 2023-06-16 | Fix |
| CVE-2023-3291 | Heap-based buffer overflow in gpac/gpac | 3.3NVD v3.1 | 0.4% | 2023-06-16 | Fix |
| CVE-2023-3268 | Linux Kernel out-of-bounds read | 7.1NVD v3.1 | 0.5% | 2023-06-16 | Fix |
| CVE-2023-3195 | ImageMagick stack-based buffer overflow | 5.5NVD v3.1 | 0.5% | 2023-06-16 | Fix |
| CVE-2023-2831 | Mattermost denial of service while unescaping a Markdown string | 4.3CNA v3.1 | 0.7% | 2023-06-16 | |
| CVE-2023-2797 | Path traversal in GitHub plugin's code preview feature | 3.1CNA v3.1 | 0.5% | 2023-06-16 | |
| CVE-2023-2793 | Mattermost stack exhaustion in PreparePostForClientWithEmbedsAndImages | 6.5CNA v3.1 | 0.6% | 2023-06-16 | |
| CVE-2023-2792 | Mattermost ephemeral messages return private channel contents in permalink previews | 6.5CNA v3.1 | 0.6% | 2023-06-16 | |
| CVE-2023-2791 | Mattermost playbooks lets you edit arbitrary posts | 4.3CNA v3.1 | 0.4% | 2023-06-16 | Fix |
| CVE-2023-2788 | Mattermost deactivated user can retain access using oauth2 API | 6.2CNA v3.1 | 0.5% | 2023-06-16 | |
| CVE-2023-2787 | Mattermost collapsed Reply Threads APIs leak message contents from private channels | 6.5CNA v3.1 | 0.5% | 2023-06-16 | |
| CVE-2023-2786 | Mattermost channel commands execution doesn't properly verify permissions | 4.3CNA v3.1 | 0.4% | 2023-06-16 | |
| CVE-2023-2785 | Mattermost specially crafted search query can cause large log entries in postgres | 4.3CNA v3.1 | 0.6% | 2023-06-16 | |
| CVE-2023-2784 | Apps Framework allows install requests from regular members via an internal path | 4.2CNA v3.1 | 0.3% | 2023-06-16 | |
| CVE-2023-2783 | App Framework does not checks for the secret provided in the incoming webhook request | 4.3CNA v3.1 | 0.4% | 2023-06-16 | Fix |
| CVE-2023-2431 | Kubernetes bypass of seccomp profile enforcement | 3.4CNA v3.1 | 0.3% | 2023-06-16 | Fix |
| CVE-2023-35030 | Liferay Portal and Liferay DXP vulnerable to CSRF via the Layout module | 8.8CNA v3.1 | 0.4% | 2023-06-15 | Fix |
| CVE-2023-35029 | Liferay Portal and Liferay DXP vulnerable to open redirect via the Layout module | 6.1CNA v3.1 | 0.5% | 2023-06-15 | Fix |
| CVE-2023-34880 | CmsEasy path traversal | 9.8v3.1 | 1.1% | 2023-06-15 | |
| CVE-2023-34852 | PublicCMS incorrect permission assignment | 9.8v3.1 | 1.0% | 2023-06-15 | Exploit code |
| CVE-2023-34833 | ThinkAdmin component /api/upload.php arbitrary file upload | 6.1v3.1 | 0.5% | 2023-06-15 | Fix |
| CVE-2023-34800 | D-Link Go-rt-ac750 OS command injection | 9.8v3.1 | 29.3% | 2023-06-15 | |
| CVE-2023-34797 | Temenos Cwx Registration page missing authorization | 5.4v3.1 | 0.4% | 2023-06-15 | |
| CVE-2023-34666 | PHPGurukul Cyber Cafe Management System cross-site scripting | 6.1v3.1 | 0.7% | 2023-06-15 | |
| CVE-2023-34626 | Piwigo SQL injection | 4.3v3.1 | 0.5% | 2023-06-15 | |
| CVE-2023-34455 | Snappy-java's unchecked chunk length leads to DoS | 7.5CNA v3.1 | 1.8% | 2023-06-15 | Fix |
| CVE-2023-34454 | Snappy-java's integer overflow vulnerability in compress leads to DoS | 5.9CNA v3.1 | 1.5% | 2023-06-15 | Fix |
| CVE-2023-34453 | Snappy-java's integer overflow vulnerability in shuffle leads to DoS | 5.9CNA v3.1 | 1.7% | 2023-06-15 | Fix |
| CVE-2023-34242 | Cilium vulnerable to information leakage via incorrect ReferenceGrant handling | 3.4CNA v3.1 | 0.3% | 2023-06-15 | Fix |
| CVE-2023-33243 | Starface weak password hash | 8.1v3.1 | 4.4% | 2023-06-15 | Exploit code |
| CVE-2023-32229 | Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanently damaged when enabling the Stream security option (signing of the video stream) with option MD5, SHA-1 or SHA-256. | 4.9CNA v3.1 | 0.6% | 2023-06-15 | Fix |
| CVE-2023-31672 | Ai-dev Ailinear SQL injection | 9.8v3.1 | 0.9% | 2023-06-15 | |
| CVE-2023-29322 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.5% | 2023-06-15 | Fix |
| CVE-2023-29321 | Adobe Animate FLA files use-after-free arbitrary code execution | 7.8CNA v3.1 | 0.5% | 2023-06-15 | Fix |
| CVE-2023-29307 | Adobe Experience Manager open redirect on AEM Target | 5.4CNA v3.1 | 0.5% | 2023-06-15 | Fix |
| CVE-2023-29304 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.5% | 2023-06-15 | Fix |
| CVE-2023-29302 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.5% | 2023-06-15 | Fix |
| CVE-2023-29297 | Adobe Magento Commerce admin-to-admin stored XSS via cache poisoning | 9.1CNA v3.1 | 1.4% | 2023-06-15 | Fix |
| CVE-2023-29296 | Adobe Magento Open Source allows incorrect authorization | 4.3CNA v3.1 | 0.6% | 2023-06-15 | Fix |
| CVE-2023-29295 | Adobe Magento Commerce insecure direct object reference (IDOR) in Create Quote function | 4.3CNA v3.1 | 0.6% | 2023-06-15 | Fix |
| CVE-2023-29294 | Bypass Purchase Order Approval using Company User in Adobe Commerce B2B | 4.3CNA v3.1 | 0.7% | 2023-06-15 | Fix |
| CVE-2023-29293 | Adobe Commerce improper input validation | 2.7CNA v3.1 | 1.0% | 2023-06-15 | Fix |
| CVE-2023-29292 | Adobe Magento Commerce server side request forgery (SSRF) in FedEx carrier integration configuration | 4.9CNA v3.1 | 1.0% | 2023-06-15 | Fix |
| CVE-2023-29291 | Adobe Magento Commerce server side request forgery (SSRF) in USPS carrier integration configuration | 4.9CNA v3.1 | 1.1% | 2023-06-15 | Fix |
| CVE-2023-29290 | Adobe Commerce Guest Cart Shipping Address Overwrite IDOR | 5.3CNA v3.1 | 0.6% | 2023-06-15 | Fix |