CVE-2023 records published in June 2023
Page two of three: records 1,001 to 2,000 of the 2,054 published in June 2023, newest first. The first page carries the figures for June 2023.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-29289 | Adobe Commerce XML injection security feature bypass | 6.5CNA v3.1 | 0.9% | 2023-06-15 | Fix |
| CVE-2023-29288 | Adobe Commerce incorrect authorization | 4.3CNA v3.1 | 0.6% | 2023-06-15 | Fix |
| CVE-2023-29287 | Adobe Commerce information exposure security feature bypass | 5.3CNA v3.1 | 0.7% | 2023-06-15 | Fix |
| CVE-2023-28810 | Hikvision DS-K1T804AXX unauthorized access | 4.3CNA v3.1 | 10.4% | 2023-06-15 | Exploit codeFix |
| CVE-2023-28809 | Hikvision DS-K1T804AXX session hijacking | 7.5CNA v3.1 | 0.6% | 2023-06-15 | Fix |
| CVE-2023-28175 | Bosch BVMS SSH server improper authorization | 7.1CNA v3.1 | 0.5% | 2023-06-15 | Fix |
| CVE-2023-27634 | Intrepidity WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-06-15 | |
| CVE-2023-25972 | IKSWEB WordPress Старт cross-site scripting | 4.8v3.1 | 0.4% | 2023-06-15 | Fix |
| CVE-2023-25683 | IBM PowerVM Hypervisor information disclosure | 5.9CNA v3.1 | 0.6% | 2023-06-15 | Fix |
| CVE-2023-25450 | GiveWP WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-06-15 | Fix |
| CVE-2023-25449 | CformsII WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-06-15 | Fix |
| CVE-2023-25055 | Google XML Sitemap for Videos WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-06-15 | |
| CVE-2023-24420 | Admin side data storage for Contact Form 7 WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-15 | |
| CVE-2023-24032 | Zimbra Collaboration command injection | 7.8v3.1 | 1.0% | 2023-06-15 | Fix |
| CVE-2023-24031 | Zimbra Collaboration cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-15 | Fix |
| CVE-2023-24030 | Zimbra Collaboration /preauth Servlet open redirect | 6.1v3.1 | 0.4% | 2023-06-15 | Fix |
| CVE-2023-23841 | SolarWinds Serv-U exposure of sensitive information | 7.5CNA v3.1 | 0.5% | 2023-06-15 | Fix |
| CVE-2023-23802 | HT Easy GA4 ( Google Analytics 4 ) WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-06-15 | Fix |
| CVE-2023-22248 | Adobe Commerce incorrect authorization security feature bypass | 7.5CNA v3.1 | 1.0% | 2023-06-15 | Fix |
| CVE-2023-21618 | Adobe Substance 3D Designer SBS File Parsing uninitialized variable remote code execution | 7.8CNA v3.1 | 0.3% | 2023-06-15 | Fix |
| CVE-2023-21144 | Android NotificationContentInflater.java denial of service | 7.5v3.1 | 0.7% | 2023-06-15 | Fix |
| CVE-2023-21143 | Android multiple files denial of service | 5.5v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21142 | Android multiple files information disclosure | 5.5v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21141 | Android several files information disclosure | 5.5v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21139 | Android MediaControlPanel.java privilege escalation | 7.8v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21138 | Android CallRedirectionProcessor.java privilege escalation | 7.8v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21137 | Android improper check for exceptional conditions | 5.5v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21136 | Android JobStore.java crash | 5.5v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21135 | Android NotificationAccessSettings.java privilege escalation | 7.8v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21131 | Android ActivityManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21130 | Android btm_ble_gap.cc remote code execution | 9.8v3.1 | 0.5% | 2023-06-15 | Fix |
| CVE-2023-21129 | Android privilege escalation | 7.8v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21128 | Android AppStandbyController.java privilege escalation | 7.8v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21127 | Android NuMediaExtractor.cpp out-of-bounds write | 8.8v3.1 | 0.5% | 2023-06-15 | Fix |
| CVE-2023-21126 | Android MediaControlPanel.java privilege escalation | 7.8v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21124 | Android multiple files privilege escalation | 7.8v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21123 | Android multiple files privilege escalation | 7.8v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21122 | Android various files privilege escalation | 7.8v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21121 | Android AppManagementFragment.java privilege escalation | 7.8v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21120 | Android cdm_engine.cpp use-after-free | 7.8v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21115 | Android btm_sec.cc privilege escalation | 8.8v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21108 | Android sdp_discovery.cc out-of-bounds write | 8.8v3.1 | 0.2% | 2023-06-15 | Fix |
| CVE-2023-21105 | Android ChooserActivity.java information disclosure | 5.5v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21101 | Android WVDrmPlugin.cpp use-after-free | 7.0v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-21095 | Android RecentsAnimationDeviceState.java privilege escalation | 4.7v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-3276 | Dromara HuTool XML Parsing Module XmlUtil.java readBySax XML external entity reference | 7.5v3.1 | 0.7% | 2023-06-15 | |
| CVE-2023-3275 | PHPGurukul Rail Pass Management System POST request view-pass-detail.php SQL injection | 9.8v3.1 | 0.6% | 2023-06-15 | |
| CVE-2023-3274 | code-projects Supplier Management System Picture btn_functions.php unrestricted upload | 8.8v3.1 | 0.9% | 2023-06-15 | |
| CVE-2023-3193 | Liferay Portal and Liferay DXP vulnerable to XSS via the Layout module | 6.1CNA v3.1 | 0.5% | 2023-06-15 | Fix |
| CVE-2023-2847 | Local privilege escalation in ESET products for Linux and MacOS | 7.8CNA v3.1 | 0.1% | 2023-06-15 | Fix |
| CVE-2023-2747 | silabs.com GSDK uninitialized IV in Silicon Labs SE FW through for internally stored data | 3.1CNA v3.1 | 0.2% | 2023-06-15 | |
| CVE-2023-2686 | silabs.com Gecko Platform buffer overflow | 9.8CNA v3.1 | 0.8% | 2023-06-15 | Fix |
| CVE-2023-2683 | silabs.com Bluetooth SDK connection update while closing connection may lead to denial of service | 5.3CNA v3.1 | 0.3% | 2023-06-15 | |
| CVE-2023-2270 | Netskope Client local privilege escalation | 7.0CNA v3.1 | 0.3% | 2023-06-15 | Fix |
| CVE-2023-2080 | Forcepoint Cloud Security Gateway (CSG) SQL command improper neutralization | 8.5CNA v3.1 | 0.5% | 2023-06-15 | Fix |
| CVE-2023-35149 | Jenkins Digital.ai App Management Publisher Plugin missing permission checks | 6.5v3.1 | 0.7% | 2023-06-14 | Fix |
| CVE-2023-35148 | Jenkins Digital.ai App Management Publisher Plugin vulnerable to cross-site request forgery | 6.5v3.1 | 0.5% | 2023-06-14 | Fix |
| CVE-2023-35147 | Arbitrary file read vulnerability in Jenkins AWS CodeCommit Trigger Plugin | 6.5v3.1 | 0.6% | 2023-06-14 | Fix |
| CVE-2023-35146 | Jenkins Template Workflows Plugin vulnerable to stored cross-site scripting | 5.4v3.1 | 0.8% | 2023-06-14 | Fix |
| CVE-2023-35145 | Jenkins Sonargraph Integration Plugin vulnerable to stored cross-site scripting | 5.4v3.1 | 0.7% | 2023-06-14 | Fix |
| CVE-2023-35144 | Stored XSS vulnerability in Jenkins MAVEN Repository Server Plugin | 5.4v3.1 | 0.6% | 2023-06-14 | Fix |
| CVE-2023-35143 | Stored XSS vulnerability in Jenkins MAVEN Repository Server Plugin | 5.4v3.1 | 0.6% | 2023-06-14 | Fix |
| CVE-2023-35142 | SSL/TLS certificate validation disabled by default in Jenkins Checkmarx Plugin | 8.1v3.1 | 0.8% | 2023-06-14 | Fix |
| CVE-2023-35141 | Jenkins CSRF protection bypass | 8.0v3.1 | 0.9% | 2023-06-14 | Fix |
| CVE-2023-35116 | FasterXML jackson-databind resource exhaustion | 4.7v3.1 | 0.4% | 2023-06-14 | Fix |
| CVE-2023-35110 | Jjson vulnerable to stack exhaustion | 7.5v3.1 | 0.8% | 2023-06-14 | |
| CVE-2023-34878 | UJCMS observable discrepancy | 7.5v3.1 | 0.7% | 2023-06-14 | |
| CVE-2023-34868 | JerryScript reachable assertion | 7.5v3.1 | 0.7% | 2023-06-14 | |
| CVE-2023-34867 | JerryScript reachable assertion | 7.5v3.1 | 0.7% | 2023-06-14 | |
| CVE-2023-34865 | UJCMS path traversal | 9.8v3.1 | 1.2% | 2023-06-14 | |
| CVE-2023-34824 | Fdkaac out-of-bounds write | 5.5v3.1 | 0.3% | 2023-06-14 | Fix |
| CVE-2023-34823 | Fdkaac out-of-bounds write | 5.5v3.1 | 0.3% | 2023-06-14 | Fix |
| CVE-2023-34756 | bloofoxCMS SQL injection | 9.8v3.1 | 4.2% | 2023-06-14 | Nuclei |
| CVE-2023-34755 | bloofoxCMS SQL injection | 9.8v3.1 | 4.2% | 2023-06-14 | Nuclei |
| CVE-2023-34754 | bloofoxCMS SQL injection | 9.8v3.1 | 3.4% | 2023-06-14 | Nuclei |
| CVE-2023-34753 | bloofoxCMS SQL injection | 9.8v3.1 | 4.2% | 2023-06-14 | Nuclei |
| CVE-2023-34752 | bloofoxCMS SQL injection | 9.8v3.1 | 4.4% | 2023-06-14 | Nuclei |
| CVE-2023-34751 | bloofoxCMS SQL injection | 9.8v3.1 | 4.2% | 2023-06-14 | Nuclei |
| CVE-2023-34750 | bloofoxCMS SQL injection | 9.8v3.1 | 1.0% | 2023-06-14 | |
| CVE-2023-34747 | UJCMS unrestricted file upload | 9.8v3.1 | 20.0% | 2023-06-14 | |
| CVE-2023-34624 | Htmlcleaner vulnerable to stack exhaustion | 7.5v3.1 | 1.0% | 2023-06-14 | Fix |
| CVE-2023-34623 | Jtidy out-of-bounds write | 7.5v3.1 | 0.9% | 2023-06-14 | Fix |
| CVE-2023-34620 | Hjson stack exhaustion | 7.5v3.1 | 0.8% | 2023-06-14 | Fix |
| CVE-2023-34617 | Genson vulnerable to stack exhaustion | 7.5v3.1 | 0.7% | 2023-06-14 | |
| CVE-2023-34616 | Pbjson vulnerable to stack exhaustion | 7.5v3.1 | 0.7% | 2023-06-14 | |
| CVE-2023-34615 | JSONUtil vulnerable to stack exhaustion | 7.5v3.1 | 0.7% | 2023-06-14 | |
| CVE-2023-34614 | Jsonij vulnerable to stack exhaustion | 7.5v3.1 | 0.8% | 2023-06-14 | |
| CVE-2023-34613 | Sojo vulnerable to stack exhaustion | 7.5v3.1 | 0.8% | 2023-06-14 | |
| CVE-2023-34612 | Ph-json vulnerable to stack exhaustion | 7.5v3.1 | 0.8% | 2023-06-14 | |
| CVE-2023-34611 | mjson out-of-bounds write | 7.5v3.1 | 0.7% | 2023-06-14 | |
| CVE-2023-34610 | Json-io vulnerable to stack exhaustion | 7.5v3.1 | 0.8% | 2023-06-14 | Fix |
| CVE-2023-34609 | Flexjson out-of-bounds write | 7.5v3.1 | 1.2% | 2023-06-14 | |
| CVE-2023-34565 | NetBox cross-site scripting | 5.4v3.1 | 0.4% | 2023-06-14 | |
| CVE-2023-34540 | Langchain OS command injection | 9.8v3.1 | 1.7% | 2023-06-14 | Fix |
| CVE-2023-34452 | Grav vulnerable to Self cross-site scripting in /forgot_password | 5.4CNA v3.1 | 0.6% | 2023-06-14 | |
| CVE-2023-34449 | ink! vulnerable to incorrect decoding of storage value when using `DelegateCall` | 5.3CNA v3.1 | 1.0% | 2023-06-14 | Fix |
| CVE-2023-34448 | Grav server-side template injection (SSTI) via Twig Default Filters | 8.8CNA v3.1 | 4.5% | 2023-06-14 | Fix |
| CVE-2023-34396 | Apache Struts: DoS via OOM owing to no sanity limit on normal form fields in multipart forms | 4.3CNA v3.1 | 5.5% | 2023-06-14 | Fix |
| CVE-2023-34367 | Microsoft Windows improper authentication | 6.5v3.1 | 1.2% | 2023-06-14 | |
| CVE-2023-34253 | Grav vulnerable to server-side template injection (SSTI) via Denylist Bypass | 8.8CNA v3.1 | 2.1% | 2023-06-14 | Fix |
| CVE-2023-34252 | Grav server-side template injection via Insufficient Validation in filterFilter | 8.8CNA v3.1 | 2.1% | 2023-06-14 | Fix |
| CVE-2023-34251 | Grav server side template injection | 10.0CNA v3.1 | 2.3% | 2023-06-14 | Fix |
| CVE-2023-34149 | Apache Struts: DoS via OOM owing to not properly checking of list bounds | 4.3CNA v3.1 | 5.4% | 2023-06-14 | Fix |
| CVE-2023-34101 | Contiki-NG vulnerable to out-of-bounds read when processing ICMP DAO input | 7.3CNA v3.1 | 0.5% | 2023-06-14 | Fix |
| CVE-2023-34095 | cpdb-libs vulnerable to buffer overflows via scanf | 9.8CNA v3.1 | 1.5% | 2023-06-14 | Fix |
| CVE-2023-34000 | WooCommerce Stripe Payment Gateway WordPress plugin insecure direct object references (IDOR) | 7.5v3.1 | 1.2% | 2023-06-14 | Fix |
| CVE-2023-33933 | Apache Traffic Server: S3_auth plugin problem with hash calculation | 7.5v3.1 | 1.5% | 2023-06-14 | Fix |
| CVE-2023-33515 | Softexpert Excellence Suite cross-site scripting | 5.4v3.1 | 0.4% | 2023-06-14 | |
| CVE-2023-33146 | Microsoft Office remote code execution | 7.8CNA v3.1 | 0.8% | 2023-06-14 | Fix |
| CVE-2023-33145 | Microsoft Edge (Chromium-based) information disclosure | 6.5CNA v3.1 | 8.6% | 2023-06-14 | Exploit codeFix |
| CVE-2023-33144 | Microsoft Visual Studio Code spoofing | 6.6CNA v3.1 | 1.3% | 2023-06-14 | Fix |
| CVE-2023-33142 | Microsoft SharePoint server elevation of privilege | 6.5CNA v3.1 | 1.0% | 2023-06-14 | Fix |
| CVE-2023-33140 | Microsoft OneNote spoofing | 6.5CNA v3.1 | 1.6% | 2023-06-14 | Fix |
| CVE-2023-33139 | Visual Studio information disclosure | 5.5CNA v3.1 | 0.8% | 2023-06-14 | Fix |
| CVE-2023-33137 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.7% | 2023-06-14 | Exploit codeFix |
| CVE-2023-33135 | Microsoft .NET and Visual Studio elevation of privilege | 7.3CNA v3.1 | 1.0% | 2023-06-14 | Fix |
| CVE-2023-33133 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 44.0% | 2023-06-14 | Fix |
| CVE-2023-33132 | Microsoft SharePoint server spoofing | 6.3CNA v3.1 | 0.9% | 2023-06-14 | Fix |
| CVE-2023-33131 | Microsoft Outlook remote code execution | 8.8CNA v3.1 | 5.7% | 2023-06-14 | Exploit codeFix |
| CVE-2023-33130 | Microsoft SharePoint server spoofing | 7.3CNA v3.1 | 1.2% | 2023-06-14 | Fix |
| CVE-2023-33129 | Microsoft SharePoint server denial of service | 6.5CNA v3.1 | 2.0% | 2023-06-14 | Fix |
| CVE-2023-33128 | Microsoft .NET and Visual Studio remote code execution | 7.3CNA v3.1 | 1.0% | 2023-06-14 | Fix |
| CVE-2023-33126 | Microsoft .NET and Visual Studio remote code execution | 7.3CNA v3.1 | 1.0% | 2023-06-14 | Fix |
| CVE-2023-32465 | Dell Power Protect Cyber Recovery HTTP header injection | 8.8CNA v3.1 | 0.7% | 2023-06-14 | Fix |
| CVE-2023-32032 | Microsoft .NET and Visual Studio elevation of privilege | 6.5CNA v3.1 | 0.6% | 2023-06-14 | Fix |
| CVE-2023-32031 | Microsoft Exchange Server remote code execution | 8.8CNA v3.1 | 81.5% | 2023-06-14 | Exploit codeFix |
| CVE-2023-32030 | NET and Visual Studio denial of service | 7.5CNA v3.1 | 2.2% | 2023-06-14 | Fix |
| CVE-2023-32029 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 53.5% | 2023-06-14 | Fix |
| CVE-2023-32024 | Microsoft Power Apps spoofing | 3.0CNA v3.1 | 1.5% | 2023-06-14 | Fix |
| CVE-2023-32022 | Microsoft Windows Server service security feature bypass | 7.6CNA v3.1 | 0.8% | 2023-06-14 | Fix |
| CVE-2023-32021 | Microsoft Windows SMB Witness service security feature bypass | 7.1CNA v3.1 | 1.2% | 2023-06-14 | Fix |
| CVE-2023-32020 | Microsoft Windows DNS spoofing | 5.6CNA v3.1 | 0.7% | 2023-06-14 | Fix |
| CVE-2023-32019 | Microsoft Windows Kernel information disclosure | 4.7CNA v3.1 | 1.4% | 2023-06-14 | Fix |
| CVE-2023-32018 | Microsoft Windows Hello remote code execution | 7.8CNA v3.1 | 0.7% | 2023-06-14 | Fix |
| CVE-2023-32017 | Microsoft PostScript Printer driver remote code execution | 7.8CNA v3.1 | 0.5% | 2023-06-14 | Fix |
| CVE-2023-32016 | Microsoft Windows Installer information disclosure | 5.5CNA v3.1 | 0.7% | 2023-06-14 | Fix |
| CVE-2023-32015 | Microsoft Windows Pragmatic General Multicast (PGM) remote code execution | 9.8CNA v3.1 | 2.0% | 2023-06-14 | Fix |
| CVE-2023-32014 | Microsoft Windows Pragmatic General Multicast (PGM) remote code execution | 9.8CNA v3.1 | 1.9% | 2023-06-14 | Fix |
| CVE-2023-32013 | Microsoft Windows Hyper-V denial of service | 5.3CNA v3.1 | 1.6% | 2023-06-14 | Fix |
| CVE-2023-32012 | Microsoft Windows Container Manager service elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-06-14 | Fix |
| CVE-2023-32011 | Microsoft Windows iSCSI Discovery service denial of service | 7.5CNA v3.1 | 1.9% | 2023-06-14 | Fix |
| CVE-2023-32010 | Microsoft Windows Bus Filter driver elevation of privilege | 7.0CNA v3.1 | 0.3% | 2023-06-14 | Fix |
| CVE-2023-32009 | Microsoft Windows Collaborative Translation Framework elevation of privilege | 8.8CNA v3.1 | 0.4% | 2023-06-14 | Fix |
| CVE-2023-32008 | Microsoft Windows Resilient File System (ReFS) remote code execution | 7.8CNA v3.1 | 0.7% | 2023-06-14 | Fix |
| CVE-2023-31746 | ADSLR VW2100 command injection | 9.8v3.1 | 3.2% | 2023-06-14 | |
| CVE-2023-31671 | Webbax Postfinance SQL injection | 9.8v3.1 | 0.6% | 2023-06-14 | Fix |
| CVE-2023-30631 | Apache Traffic Server: Configuration option to block the PUSH method in ATS didn't work | 7.5v3.1 | 2.0% | 2023-06-14 | Fix |
| CVE-2023-30150 | LeoTheme Leocustomajax SQL injection | 9.8v3.1 | 3.8% | 2023-06-14 | Nuclei |
| CVE-2023-30082 | Enhancesoft osTicket improper quantity validation | 7.5v3.1 | 1.0% | 2023-06-14 | |
| CVE-2023-29373 | Microsoft ODBC driver remote code execution | 8.8CNA v3.1 | 1.3% | 2023-06-14 | Fix |
| CVE-2023-29372 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.3% | 2023-06-14 | Fix |
| CVE-2023-29371 | Microsoft Windows GDI elevation of privilege | 7.8CNA v3.1 | 5.4% | 2023-06-14 | Fix |
| CVE-2023-29370 | Microsoft Windows Media remote code execution | 7.8CNA v3.1 | 0.7% | 2023-06-14 | Fix |
| CVE-2023-29369 | Microsoft Windows Remote Procedure Call Runtime denial of service | 6.5CNA v3.1 | 2.0% | 2023-06-14 | Fix |
| CVE-2023-29368 | Microsoft Windows Filtering Platform elevation of privilege | 7.0CNA v3.1 | 0.4% | 2023-06-14 | Fix |
| CVE-2023-29367 | Microsoft Windows iSCSI Target WMI Provider remote code execution | 7.8CNA v3.1 | 0.7% | 2023-06-14 | Fix |
| CVE-2023-29366 | Microsoft Windows Geolocation service remote code execution | 7.8CNA v3.1 | 0.7% | 2023-06-14 | Fix |
| CVE-2023-29365 | Microsoft Windows Media remote code execution | 7.8CNA v3.1 | 0.7% | 2023-06-14 | Fix |
| CVE-2023-29364 | Microsoft Windows Authentication elevation of privilege | 7.0CNA v3.1 | 0.4% | 2023-06-14 | Fix |
| CVE-2023-29363 | Microsoft Windows Pragmatic General Multicast (PGM) remote code execution | 9.8CNA v3.1 | 1.9% | 2023-06-14 | Fix |
| CVE-2023-29362 | Remote Desktop client remote code execution | 8.8CNA v3.1 | 1.3% | 2023-06-14 | Fix |
| CVE-2023-29361 | Microsoft Windows Cloud Files Mini Filter driver elevation of privilege | 7.0CNA v3.1 | 4.0% | 2023-06-14 | Fix |
| CVE-2023-29360 | Microsoft Streaming Service untrusted pointer dereference | 8.4CNA v3.1 | 21.6% | 2023-06-14 | KEVExploit codeFix |
| CVE-2023-29359 | Microsoft Windows GDI elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-06-14 | Fix |
| CVE-2023-29358 | Microsoft Windows GDI elevation of privilege | 7.8CNA v3.1 | 4.7% | 2023-06-14 | Fix |
| CVE-2023-29357 | Microsoft SharePoint Server privilege escalation | 9.8CNA v3.1 | 100.0% | 2023-06-14 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2023-29355 | Microsoft Windows DHCP server service information disclosure | 5.3CNA v3.1 | 1.3% | 2023-06-14 | Fix |
| CVE-2023-29353 | Microsoft Sysinternals Process Monitor for Windows denial of service | 5.5CNA v3.1 | 0.8% | 2023-06-14 | Fix |
| CVE-2023-29352 | Microsoft Windows Remote Desktop security feature bypass | 6.5CNA v3.1 | 1.2% | 2023-06-14 | Fix |
| CVE-2023-29351 | Microsoft Windows Group Policy elevation of privilege | 8.1CNA v3.1 | 1.8% | 2023-06-14 | Fix |
| CVE-2023-29346 | Microsoft Windows NTFS elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-06-14 | Fix |
| CVE-2023-29337 | Microsoft NuGet client remote code execution | 7.1CNA v3.1 | 1.1% | 2023-06-14 | Fix |
| CVE-2023-29331 | Microsoft .NET, .NET Framework, and Visual Studio denial of service | 7.5CNA v3.1 | 2.6% | 2023-06-14 | Fix |
| CVE-2023-29326 | NET Framework remote code execution | 7.8CNA v3.1 | 0.9% | 2023-06-14 | Fix |
| CVE-2023-28310 | Microsoft Exchange Server remote code execution | 8.0CNA v3.1 | 25.0% | 2023-06-14 | Fix |
| CVE-2023-26965 | libtiff out-of-bounds write | 5.5v3.1 | 0.4% | 2023-06-14 | Fix |
| CVE-2023-26062 | Nokia Web Element Manager improper privilege management | 7.8v3.1 | 0.2% | 2023-06-14 | Fix |
| CVE-2023-25434 | libtiff buffer overflow | 8.8v3.1 | 0.8% | 2023-06-14 | Fix |
| CVE-2023-25369 | Siglent Sds1104x-e denial of service | 7.5v3.1 | 0.8% | 2023-06-14 | |
| CVE-2023-25368 | Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Incorrect Access Control. An unauthenticated attacker can overwrite firmnware. | 7.5v3.1 | 0.8% | 2023-06-14 | |
| CVE-2023-25367 | Siglent Sds1104x-e remote code execution | 9.8v3.1 | 1.7% | 2023-06-14 | |
| CVE-2023-24938 | Microsoft Windows CryptoAPI denial of service | 6.5CNA v3.1 | 2.0% | 2023-06-14 | Fix |
| CVE-2023-24937 | Microsoft Windows CryptoAPI denial of service | 6.5CNA v3.1 | 2.1% | 2023-06-14 | Fix |
| CVE-2023-24936 | NET, .NET Framework, and Visual Studio elevation of privilege | 7.5CNA v3.1 | 1.6% | 2023-06-14 | Fix |
| CVE-2023-24897 | NET, .NET Framework, and Visual Studio remote code execution | 7.8CNA v3.1 | 1.2% | 2023-06-14 | Fix |
| CVE-2023-24895 | Microsoft .NET, .NET Framework, and Visual Studio remote code execution | 7.8CNA v3.1 | 1.1% | 2023-06-14 | Fix |
| CVE-2023-21569 | Microsoft Azure DevOps Server spoofing | 5.5CNA v3.1 | 0.7% | 2023-06-14 | Fix |
| CVE-2023-21565 | Microsoft Azure DevOps Server spoofing | 7.1CNA v3.1 | 0.9% | 2023-06-14 | Fix |
| CVE-2023-3241 | Otcms path traversal | 7.5v3.1 | 1.0% | 2023-06-14 | |
| CVE-2023-3240 | Otcms usersNews_deal.php path traversal | 6.5v3.1 | 1.0% | 2023-06-14 | |
| CVE-2023-3239 | Otcms path traversal | 7.5v3.1 | 1.0% | 2023-06-14 | |
| CVE-2023-3238 | Otcms server-side request forgery | 9.8v3.1 | 0.7% | 2023-06-14 | |
| CVE-2023-3237 | Otcms hard-coded password | 9.8v3.1 | 0.9% | 2023-06-14 | |
| CVE-2023-3236 | mccms Comic.php pic_save server-side request forgery | 8.8v3.1 | 0.7% | 2023-06-14 | |
| CVE-2023-3235 | mccms Comic.php pic_api server-side request forgery | 8.8v3.1 | 0.7% | 2023-06-14 | |
| CVE-2023-3234 | Zhong Bang CRMEB PublicController.php put_image deserialization | 9.8v3.1 | 1.2% | 2023-06-14 | |
| CVE-2023-3233 | Zhong Bang CRMEB PublicController.php get_image_base64 server-side request forgery | 8.8v3.1 | 0.8% | 2023-06-14 | |
| CVE-2023-3232 | Zhong Bang CRMEB Image upload app_auth deserialization | 9.8v3.1 | 1.2% | 2023-06-14 | |
| CVE-2023-3231 | Ujcms ZIP Package information disclosure | 6.5v3.1 | 0.8% | 2023-06-14 | |
| CVE-2023-3230 | Missing authorization in FOSSBilling/FOSSBilling | 7.5v3.1 | 0.4% | 2023-06-14 | Fix |
| CVE-2023-3229 | Business Logic Errors in FOSSBilling/FOSSBilling | 6.5v3.1 | 0.5% | 2023-06-14 | Fix |
| CVE-2023-3228 | Business Logic Errors in FOSSBilling/FOSSBilling | 5.7v3.1 | 0.5% | 2023-06-14 | Fix |
| CVE-2023-3227 | Insufficient granularity of access control in FOSSBilling/FOSSBilling | 5.7v3.1 | 0.4% | 2023-06-14 | Fix |
| CVE-2023-3203 | MStore API WordPress plugin cross-site request forgery to Product Limit update | 4.3v3.1 | 0.3% | 2023-06-14 | Fix |
| CVE-2023-3201 | MStore API WordPress plugin cross-site request forgery to order Title update | 4.3v3.1 | 0.3% | 2023-06-14 | Fix |
| CVE-2023-3200 | MStore API WordPress plugin cross-site request forgery to order Message update | 4.3v3.1 | 0.3% | 2023-06-14 | Fix |
| CVE-2023-3198 | MStore API WordPress plugin cross-site request forgery to order Status update | 4.3v3.1 | 0.3% | 2023-06-14 | Fix |
| CVE-2023-3189 | SourceCodester Online School Fees System POST parameter branch.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-06-14 | |
| CVE-2023-3040 | Cloudflare lua-resty-json out-of-bounds access leading to undefined behavior | 3.7CNA v3.1 | 0.7% | 2023-06-14 | Fix |
| CVE-2023-3036 | Out-of-bounds Slice index in cfnts leads to remote panic | 8.6CNA v3.1 | 2.2% | 2023-06-14 | Fix |
| CVE-2023-3001 | Schneider Electric IGSS Dashboard (DashBoard.exe) deserialization of untrusted data | 7.8CNA v3.1 | 31.9% | 2023-06-14 | Fix |
| CVE-2023-2976 | Google Use of temporary directory for file creation in `FileBackedOutputStream` in Guava | 5.5CNA v3.1 | 0.2% | 2023-06-14 | Fix |
| CVE-2023-2820 | Proofpoint Threat Response Auto Pull faye endpoint information disclosure | 6.1CNA v3.1 | 0.3% | 2023-06-14 | Fix |
| CVE-2023-2819 | Proofpoint Threat Response Auto Pull stored cross-site scripting | 4.3CNA v3.1 | 0.3% | 2023-06-14 | Fix |
| CVE-2023-2570 | Schneider Electric EcoStruxure Foxboro DCS Control Core Services improper array index validation | 7.0CNA v3.1 | 0.2% | 2023-06-14 | Fix |
| CVE-2023-2569 | Schneider Electric EcoStruxure Foxboro DCS Control Core Services out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-06-14 | Fix |
| CVE-2023-1329 | HP multifunction printers buffer overflow | 9.8v3.1 | 1.5% | 2023-06-14 | Fix |
| CVE-2023-1049 | Schneider Electric EcoStruxure Operator Terminal Expert code injection | 7.8CNA v3.1 | 0.6% | 2023-06-14 | Fix |
| CVE-2023-0837 | TeamViewer Remote improper authorization | 5.5v3.1 | 0.2% | 2023-06-14 | Fix |
| CVE-2023-0010 | PAN-OS: Reflected cross-site scripting (XSS) vulnerability in Captive Portal Authentication | 5.4CNA v3.1 | 0.4% | 2023-06-14 | Fix |
| CVE-2023-0009 | GlobalProtect App: Local privilege escalation (PE) | 7.8CNA v3.1 | 0.2% | 2023-06-14 | Fix |
| CVE-2023-35064 | SQLi in Satos Mobile | 9.8CNA v3.1 | 0.7% | 2023-06-13 | Fix |
| CVE-2023-34965 | Sspanel-uim incorrect authorization | 5.3NVD v3.1 | 0.9% | 2023-06-13 | |
| CVE-2023-34944 | chamilo-lms /fileUpload.lib.php component arbitrary file upload | 9.8v3.1 | 1.1% | 2023-06-13 | Fix |
| CVE-2023-34537 | digitaldruid HotelDruid reflected cross-site scripting | 5.4NVD v3.1 | 1.4% | 2023-06-13 | NucleiFix |
| CVE-2023-34250 | Discourse vulnerable to exposure of number of topics recently created in private categories | 4.8CNA v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2023-34249 | Benjjvi/PyBB may send unsanitized request to SQL database | 9.8CNA v3.1 | 0.6% | 2023-06-13 | Fix |
| CVE-2023-34247 | keystonejs keystone @keystone-6/auth open redirect | 6.1CNA v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2023-34121 | Zoom Video Communications Zoom improper input validation | 4.1CNA v3.1 | 1.0% | 2023-06-13 | |
| CVE-2023-34120 | Zoom Video Communications Zoom improper privilege management | 8.7CNA v3.1 | 0.1% | 2023-06-13 | |
| CVE-2023-34115 | Zoom Video Communications Zoom Meeting SDK buffer overflow | 4.3CNA v3.1 | 0.3% | 2023-06-13 | |
| CVE-2023-34114 | Zoom Video Communications Zoom for MacOS Client Zoom for Windows and resource exposure | 7.4CNA v3.1 | 1.0% | 2023-06-13 | |
| CVE-2023-33991 | Stored cross-site scripting (stored XSS) vulnerability in SAP UI5 Variant Management | 8.2CNA v3.1 | 0.5% | 2023-06-13 | Fix |
| CVE-2023-33986 | Cross-site scripting (XSS) vulnerability in SAP CRM ABAP (Grantor Management) | 6.1CNA v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2023-33985 | Cross-site scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal | 6.1CNA v3.1 | 0.5% | 2023-06-13 | Fix |
| CVE-2023-33984 | Cross-site scripting (XSS) vulnerability in NetWeaver (Design Time Repository) | 6.4CNA v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2023-33921 | Siemens CP-8031 MASTER MODULE exposed dangerous method | 6.8CNA v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2023-33920 | Siemens CP-8031 MASTER MODULE hard-coded credentials | 6.8CNA v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2023-33919 | Siemens CP-8031 MASTER MODULE command injection | 7.2CNA v3.1 | 47.7% | 2023-06-13 | Fix |
| CVE-2023-33817 | digitaldruid HotelDruid SQL injection | 8.8v3.1 | 1.5% | 2023-06-13 | Exploit codeFix |
| CVE-2023-33695 | Insecure temporary file in HuTool | 7.1v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2023-33621 | GL.iNet Gl-ar750s authentication bypass by replay | 5.9v3.1 | 0.7% | 2023-06-13 | |
| CVE-2023-33620 | GL.iNet Gl-ar750s insufficiently protected credentials | 5.9v3.1 | 0.5% | 2023-06-13 | |
| CVE-2023-33568 | Dolibarr vulnerable to unauthenticated database access | 7.5v3.1 | 14.9% | 2023-06-13 | NucleiMetasploitExploit codeFix |
| CVE-2023-33305 | Fortinet FortiWeb A infinite loop | 4.9CNA v3.1 | 0.8% | 2023-06-13 | Fix |
| CVE-2023-33124 | Siemens JT2Go memory corruption | 7.8CNA v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2023-33123 | Siemens JT2Go out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2023-33122 | Siemens JT2Go out-of-bounds read | 3.3CNA v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2023-33121 | Siemens JT2Go null pointer dereference | 3.3CNA v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2023-32548 | KINGSOFT JAPAN WPS Office OS command injection | 8.1v3.1 | 1.1% | 2023-06-13 | Fix |
| CVE-2023-32546 | Chatwork Desktop Application (Mac) code injection | 4.4v3.1 | 0.3% | 2023-06-13 | Fix |
| CVE-2023-32301 | Discourse's canonical URL not being used for topic embeddings | 3.1CNA v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2023-32115 | SQL injection in Master DATA Synchronization (MDS COMPARE TOOL) | 4.2CNA v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2023-32114 | Denial of service in SAP NetWeaver | 2.7CNA v3.1 | 0.6% | 2023-06-13 | Fix |
| CVE-2023-32061 | Discourse Topic Creation page allows iFrame Tag without Restrictions | 5.4CNA v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2023-31541 | CKEditor unrestricted file upload | 9.8NVD v3.1 | 1.4% | 2023-06-13 | |
| CVE-2023-31439 | systemd improper integrity check validation | 5.3v3.1 | 0.3% | 2023-06-13 | Fix |
| CVE-2023-31438 | systemd improper integrity check validation | 5.3v3.1 | 0.3% | 2023-06-13 | Fix |
| CVE-2023-31437 | systemd improper integrity check validation | 5.3v3.1 | 0.3% | 2023-06-13 | Fix |
| CVE-2023-31238 | Siemens SICAM P850 incorrect permission assignment | 5.5CNA v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2023-31198 | Inaba Denki Sangyo Wi-Fi AP UNIT OS command injection | 7.2v3.1 | 1.5% | 2023-06-13 | Fix |
| CVE-2023-31196 | Inaba Denki Sangyo Wi-Fi AP UNIT missing authentication | 7.5v3.1 | 0.8% | 2023-06-13 | Fix |
| CVE-2023-31195 | ASUSTeK COMPUTER ASUS Router RT-AX3000 cleartext transmission of sensitive information | 5.3v3.1 | 0.3% | 2023-06-13 | Fix |
| CVE-2023-31142 | Discourse's general category permissions could be set back to default | 2.0CNA v3.1 | 0.3% | 2023-06-13 | Fix |
| CVE-2023-30901 | Siemens SICAM P850 cross-site request forgery | 4.3CNA v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2023-30897 | Siemens SIMATIC WinCC incorrect permission assignment | 7.8CNA v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2023-30766 | Hidden functionality issue exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary OS command may be executed on the product or the device settings may be altered. Affected products and versions are as follows: KB-AHR04D versions prior to 91110.1.101106.78, KB-AH | 9.8v3.1 | 0.7% | 2023-06-13 | Fix |
| CVE-2023-30764 | OS command injection vulnerability exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary OS command may be executed on the product or the device settings may be altered. Affected products and versions are as follows: KB-AHR04D versions prior to 91110.1.101106.7 | 9.8v3.1 | 1.5% | 2023-06-13 | Fix |
| CVE-2023-30762 | Improper authentication vulnerability exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary OS command may be executed on the product or the device settings may be altered. Affected products and versions are as follows: KB-AHR04D versions prior to 91110.1.10110 | 9.8v3.1 | 0.7% | 2023-06-13 | Fix |
| CVE-2023-30757 | Siemens Totally Integrated Automation Portal (TIA Portal) V14 protection mechanism failure | 6.2CNA v3.1 | 0.1% | 2023-06-13 | |
| CVE-2023-30179 | Craft CMS code injection | 7.2v3.1 | 2.2% | 2023-06-13 | Fix |
| CVE-2023-29562 | TP-Link Tl-wpa7510 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-06-13 | |
| CVE-2023-29501 | RUNSYSTEM Jiyu Kukan Toku-Toku coupon App improper certificate validation | 4.8v3.1 | 0.3% | 2023-06-13 | Fix |
| CVE-2023-29498 | Fuji Electric FRENIC RHC Loader XML external entity injection | 5.5v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2023-29178 | Fortinet FortiOS uninitialized pointer access | 3.9CNA v3.1 | 0.9% | 2023-06-13 | Fix |
| CVE-2023-29175 | Fortinet FortiOS improper certificate validation | 4.4CNA v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2023-29167 | Fuji Electric FRENIC RHC Loader out-of-bounds read | 7.8v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2023-29160 | Fuji Electric FRENIC RHC Loader stack-based buffer overflow | 7.8v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2023-29129 | Siemens Mendix SAML (Mendix 7 compatible) flawed authentication | 9.1CNA v3.1 | 0.9% | 2023-06-13 | Fix |
| CVE-2023-28829 | Siemens SIMATIC NET PC Software OPC services missing authentication | 3.9CNA v3.1 | 0.3% | 2023-06-13 | Fix |
| CVE-2023-28620 | Cyberus Key WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2023-28603 | Zoom Video Communications Zoom VDI Windows Meeting Client external control of a file path | 7.7CNA v3.1 | 0.2% | 2023-06-13 | |
| CVE-2023-28602 | Zoom Video Communications Zoom improper signature verification | 2.8CNA v3.1 | 0.3% | 2023-06-13 | |
| CVE-2023-28601 | Zoom Video Communications Zoom improperly implemented security check | 8.3CNA v3.1 | 1.0% | 2023-06-13 | |
| CVE-2023-28600 | Zoom Video Communications Zoom for MacOS Client insecure temporary file | 5.2CNA v3.1 | 0.2% | 2023-06-13 | |
| CVE-2023-28599 | Zoom Video Communications Zoom cross-site scripting | 4.3CNA v3.1 | 0.7% | 2023-06-13 | |
| CVE-2023-28598 | Zoom Video Communications Zoom cross-site scripting | 7.5CNA v3.1 | 0.5% | 2023-06-13 | |
| CVE-2023-28303 | Microsoft Windows Snipping Tool information disclosure | 3.3CNA v3.1 | 2.0% | 2023-06-13 | Fix |
| CVE-2023-28000 | Fortinet FortiADC OS command injection | 6.3CNA v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2023-27997 | Fortinet FortiOS and FortiProxy SSL-VPN heap-based buffer overflow | 9.2CNA v3.1 | 85.7% | 2023-06-13 | KEVEmerging ThreatsExploit codeFix |
| CVE-2023-27837 | TP-Link Tl-wpa8630p command injection | 9.8v3.1 | 2.4% | 2023-06-13 | |
| CVE-2023-27836 | TP-Link Tl-wpa8630p command injection | 9.8v3.1 | 2.4% | 2023-06-13 | |
| CVE-2023-27624 | Redirect After Login WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.6% | 2023-06-13 | Nuclei |
| CVE-2023-27465 | Siemens SIMOTION C240 information disclosure | 4.6CNA v3.1 | 0.3% | 2023-06-13 | Fix |
| CVE-2023-26538 | Chat Bee WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-13 | |
| CVE-2023-26528 | Shipyaari Shipping Management WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-13 | |
| CVE-2023-26210 | Fortinet FortiADC OS command injection | 7.8CNA v3.1 | 0.5% | 2023-06-13 | Fix |
| CVE-2023-26207 | Fortinet FortiProxy An sensitive information in log files | 3.3CNA v3.1 | 0.5% | 2023-06-13 | Fix |
| CVE-2023-26204 | Fortinet FortiSIEM plaintext password storage | 3.6CNA v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2023-25978 | Protected Posts Logout Button WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2023-25964 | We’re Open! WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2023-25910 | Siemens SIMATIC PCS 7 code injection | 10.0CNA v3.1 | 1.0% | 2023-06-13 | Fix |
| CVE-2023-25609 | Fortinet FortiAnalyzer server-side request forgery | 4.2CNA v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2023-24546 | CloudVision improper access control | 8.1v3.1 | 0.5% | 2023-06-13 | Fix |
| CVE-2023-24470 | ArcSight Logger Potential XML external entity injection | 9.1v3.1 | 0.9% | 2023-06-13 | Fix |
| CVE-2023-24469 | ArcSight Logger Potential cross-site scripting | 6.1v3.1 | 0.5% | 2023-06-13 | Fix |
| CVE-2023-23831 | Rating-Widget: Star Review System stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2023-22639 | Fortinet FortiOS A out-of-bounds write | 6.3CNA v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2023-22633 | Fortinet FortiNAC improper permissions | 7.2CNA v3.1 | 0.7% | 2023-06-13 | Fix |
| CVE-2023-20867 | VMware Tools authentication bypass | 3.9CNA v3.1 | 13.5% | 2023-06-13 | KEVFix |
| CVE-2023-3224 | Code injection in nuxt/nuxt | 9.8v3.1 | 58.6% | 2023-06-13 | Fix |
| CVE-2023-3218 | Race condition within a Thread in it-novum/openITCOCKPIT | 4.4v3.1 | 0.5% | 2023-06-13 | Fix |
| CVE-2023-3217 | Google Chrome WebXR use-after-free | 8.8v3.1 | 13.3% | 2023-06-13 | Fix |
| CVE-2023-3216 | Google Chrome V8 type confusion | 8.8v3.1 | 0.9% | 2023-06-13 | Fix |
| CVE-2023-3215 | Google Chrome WebRTC use-after-free | 8.8v3.1 | 13.8% | 2023-06-13 | Fix |
| CVE-2023-3214 | Google Chrome Autofill payments use-after-free | 8.8v3.1 | 0.9% | 2023-06-13 | Fix |
| CVE-2023-3050 | Authentication bypass in TMT's Lockcell | 9.8CNA v3.1 | 1.3% | 2023-06-13 | Fix |
| CVE-2023-3049 | File upload in TMT's Lockcell | 9.8v3.1 | 3.7% | 2023-06-13 | Fix |
| CVE-2023-3048 | IDOR in TMT's Lockcell | 9.8v3.1 | 1.3% | 2023-06-13 | Fix |
| CVE-2023-3047 | SQLi in TMT's Lockcell | 9.8CNA v3.1 | 1.7% | 2023-06-13 | Exploit codeFix |
| CVE-2023-2876 | ABB REX640 PCL1 session cookie exposure for client side script | 3.1CNA v3.1 | 0.3% | 2023-06-13 | Fix |
| CVE-2023-2827 | Missing authentication in SAP Plant Connectivity and Production Connector for SAP Digital | 7.9CNA v3.1 | 0.3% | 2023-06-13 | Fix |
| CVE-2023-2807 | Artica PFMS Pandora FMS authentication bypass in password reset process | 9.8v3.1 | 0.6% | 2023-06-13 | Fix |
| CVE-2023-2778 | Rockwell Automation FactoryTalk Transaction Manager vulnerable to denial of service | 7.5CNA v3.1 | 1.2% | 2023-06-13 | Fix |
| CVE-2023-2729 | Synology DiskStation Manager (DSM) User Management Functionality insufficient randomness | 5.9CNA v3.1 | 0.9% | 2023-06-13 | Fix |
| CVE-2023-2673 | Phoenix Contact: FL/TC MGUARD prone to improper input validation | 5.3v3.1 | 0.6% | 2023-06-13 | Fix |
| CVE-2023-2639 | Rockwell Automation FactoryTalk System Services vulnerable to sensitive information disclosure | 4.1CNA v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2023-2638 | Rockwell Automation FactoryTalk System Services vulnerable to a denial of service Attack | 5.9CNA v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2023-2637 | Rockwell Automation FactoryTalk System Services vulnerable to use of hard-coded cryptographic key | 7.3CNA v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2023-2563 | WordPress Contact Forms by Cimatti plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2023-06-13 | Fix |
| CVE-2023-2351 | WP Directory Kit WordPress plugin unauthorized access | 4.3v3.1 | 0.6% | 2023-06-13 | Fix |
| CVE-2023-2278 | WP Directory Kit WordPress plugin unauthenticated local file inclusion via wdk_public_action | 9.8v3.1 | 1.7% | 2023-06-13 | Fix |
| CVE-2023-2277 | WP Directory Kit WordPress plugin cross-site request forgery to stored cross-site scripting | 4.7v3.1 | 0.3% | 2023-06-13 | Fix |
| CVE-2023-1707 | HP Enterprise LaserJet and HP LaserJet Managed Printers observable discrepancy | 7.5v3.1 | 0.9% | 2023-06-13 | Fix |
| CVE-2023-0142 | Synology DiskStation Manager (DSM) Backup Management functionality uncontrolled search path | 6.5CNA v3.1 | 1.0% | 2023-06-13 | Fix |
| CVE-2023-35054 | JetBrains YouTrack cross-site scripting | 4.6CNA v3.1 | 1.0% | 2023-06-12 | Fix |
| CVE-2023-35053 | JetBrains YouTrack denial of service | 7.5CNA v3.1 | 0.6% | 2023-06-12 | Fix |
| CVE-2023-35042 | GeoServer RCE due to improper control of generation of code in jai-ext`Jiffle` map algebra language | 9.8v3.1 | 44.8% | 2023-06-12 | Fix |
| CVE-2023-35036 | Progress MOVEit Transfer SQL injection | 9.1v3.1 | 12.8% | 2023-06-12 | KCVFix |
| CVE-2023-35035 | Atos Unify Openscape 4000 Assistant command injection | 8.8v3.1 | 1.6% | 2023-06-12 | Fix |
| CVE-2023-35034 | Atos Unify Openscape 4000 Assistant code injection | 9.8v3.1 | 1.3% | 2023-06-12 | Fix |
| CVE-2023-35033 | Atos Unify Openscape 4000 Assistant command injection | 8.8v3.1 | 1.6% | 2023-06-12 | Fix |
| CVE-2023-35032 | Atos Unify Openscape 4000 Assistant command injection | 8.8v3.1 | 1.6% | 2023-06-12 | Fix |
| CVE-2023-35031 | Atos Unify Openscape 4000 Assistant command injection | 8.8v3.1 | 1.6% | 2023-06-12 | Fix |
| CVE-2023-34942 | ASUS Rt-n10lx out-of-bounds write | 7.5v3.1 | 0.7% | 2023-06-12 | |
| CVE-2023-34941 | ASUS Rt-n10lx urlFilterList function stored cross-site scripting | 5.4v3.1 | 23.8% | 2023-06-12 | |
| CVE-2023-34940 | ASUS Rt-n10lx out-of-bounds write | 7.5v3.1 | 0.8% | 2023-06-12 | |
| CVE-2023-34855 | Ac Centralized Management Platform Youxun Electronic Equipment cross-site scripting | 4.8v3.1 | 0.4% | 2023-06-12 | |
| CVE-2023-34581 | oretnom23 Service Provider Management System SQL injection | 9.8v3.1 | 3.3% | 2023-06-12 | Exploit code |
| CVE-2023-34494 | emqx nanomq use-after-free | 7.5v3.1 | 0.7% | 2023-06-12 | |
| CVE-2023-34488 | emqx nanomq heap-based buffer overflow | 7.8v3.1 | 0.5% | 2023-06-12 | |
| CVE-2023-34468 | Apache NiFi: Potential code injection with Database services using H2 | 8.8v3.1 | 61.9% | 2023-06-12 | MetasploitExploit codeFix |
| CVE-2023-34345 | AMI MegaRAC_SPx path traversal | 6.5CNA v3.1 | 0.7% | 2023-06-12 | Fix |
| CVE-2023-34344 | AMI MegaRAC SPx IPMI handler information disclosure | 5.3CNA v3.1 | 0.5% | 2023-06-12 | Fix |
| CVE-2023-34343 | AMI MegaRAC_SPx OS command injection | 7.2CNA v3.1 | 0.8% | 2023-06-12 | Fix |
| CVE-2023-34342 | AMI MegaRAC_SPx path traversal | 6.0CNA v3.1 | 0.5% | 2023-06-12 | Fix |
| CVE-2023-34341 | AMI MegaRAC_SPx code execution | 7.2CNA v3.1 | 0.8% | 2023-06-12 | Fix |
| CVE-2023-34336 | AMI MegaRAC_SPx buffer overflow | 8.1CNA v3.1 | 0.7% | 2023-06-12 | Fix |
| CVE-2023-34335 | AMI MegaRAC_SPx authentication bypass | 7.7CNA v3.1 | 0.4% | 2023-06-12 | Fix |
| CVE-2023-34334 | AMI MegaRAC_SPx OS command injection | 7.2CNA v3.1 | 0.8% | 2023-06-12 | Fix |
| CVE-2023-34246 | Doorkeeper improper authentication | 4.2CNA v3.1 | 0.7% | 2023-06-12 | Fix |
| CVE-2023-34212 | Apache NiFi: Potential deserialization of untrusted data with JNDI in JMS components | 6.5v3.1 | 2.4% | 2023-06-12 | Exploit codeFix |
| CVE-2023-34105 | SRS has command injection vulnerability in demonstration api-server for HTTP callback | 7.5CNA v3.1 | 8.7% | 2023-06-12 | NucleiFix |
| CVE-2023-34026 | This Day In History WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-12 | |
| CVE-2023-33626 | D-Link DIR-600 out-of-bounds write | 9.8v3.1 | 1.5% | 2023-06-12 | |
| CVE-2023-33625 | D-Link DIR-600 command injection | 9.8v3.1 | 33.2% | 2023-06-12 | MetasploitExploit code |
| CVE-2023-33492 | EyouCMS cross-site scripting | 5.4v3.1 | 0.3% | 2023-06-12 | |
| CVE-2023-33290 | Git-url-parse crate vulnerable to regular expression denial of service | 7.5v3.1 | 0.8% | 2023-06-12 | |
| CVE-2023-33253 | Agilebio LabCollector unrestricted file upload | 8.8v3.1 | 2.5% | 2023-06-12 | Exploit codeFix |
| CVE-2023-32961 | Zotpress WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 1.0% | 2023-06-12 | Exploit codeFix |
| CVE-2023-32674 | HP PC Hardware Diagnostics Windows buffer overflow | 9.8v3.1 | 0.9% | 2023-06-12 | Fix |
| CVE-2023-32673 | HP PC Hardware Diagnostics Windows elevation of privilege | 9.8v3.1 | 0.9% | 2023-06-12 | Fix |
| CVE-2023-32221 | EaseUS Todo Backup may allow local privilege escalation | 7.8v3.1 | 0.2% | 2023-06-12 | |
| CVE-2023-32220 | Milesight NCR/Camera authentication bypass | 9.8v3.1 | 0.6% | 2023-06-12 | |
| CVE-2023-32219 | Mazda (2015-2016) incorrect authorization | 7.5v3.1 | 0.5% | 2023-06-12 | |
| CVE-2023-32118 | SALERT WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-12 | Fix |
| CVE-2023-31236 | Scripts n Styles WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-12 | Fix |
| CVE-2023-30753 | IP Metaboxes WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-12 | |
| CVE-2023-30745 | IP Metaboxes WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-12 | |
| CVE-2023-30198 | Webbax Winbizpayment path traversal | 7.5v3.1 | 5.5% | 2023-06-12 | Exploit code |
| CVE-2023-29385 | WP Abstracts WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-12 | Fix |
| CVE-2023-28933 | StPeteDesign Call Now Accessibility Button stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-06-12 | Fix |
| CVE-2023-28478 | TP-Link EC70 out-of-bounds write | 8.8v3.1 | 0.3% | 2023-06-12 | |
| CVE-2023-27716 | Kafkaui-lite incorrect authorization | 9.8v3.1 | 0.7% | 2023-06-12 | |
| CVE-2023-26298 | HP Device Manager command injection | 8.8v3.1 | 1.6% | 2023-06-12 | Fix |
| CVE-2023-26297 | HP Device Manager command injection | 8.8v3.1 | 1.6% | 2023-06-12 | Fix |
| CVE-2023-26296 | HP Device Manager command injection | 8.8v3.1 | 1.6% | 2023-06-12 | Fix |
| CVE-2023-26295 | HP Device Manager command injection | 9.8v3.1 | 1.7% | 2023-06-12 | Fix |
| CVE-2023-26294 | HP Device Manager command injection | 7.8v3.1 | 0.7% | 2023-06-12 | Fix |
| CVE-2023-26133 | progressbar.js vulnerable to prototype pollution | 9.8v3.1 | 1.3% | 2023-06-12 | Fix |
| CVE-2023-23822 | UTM Tracker WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-12 | |
| CVE-2023-23819 | itemprop WP for SERP/SEO Rich snippets WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-12 | |
| CVE-2023-23818 | WP Register Profile With Shortcode WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-12 | Fix |
| CVE-2023-3208 | RoadFlow Visual Process Engine .NET Core Mvc Login SQL injection | 8.8v3.1 | 0.7% | 2023-06-12 | |
| CVE-2023-3206 | Chengdu VEC40G denial of service | 7.5v3.1 | 18.7% | 2023-06-12 | |
| CVE-2023-3161 | Linux Kernel (fbcon) undefined behavior | 5.5NVD v3.1 | 0.2% | 2023-06-12 | Fix |
| CVE-2023-3159 | Linux kernel use-after-free | 6.7NVD v3.1 | 0.2% | 2023-06-12 | Fix |
| CVE-2023-2718 | Contact Form Email WordPress plugin unauthenticated stored cross-site scripting | 5.4NVD v3.1 | 0.5% | 2023-06-12 | Fix |
| CVE-2023-2568 | Photo Gallery by Ays WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-06-12 | Fix |
| CVE-2023-2398 | Icegram Engage WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-06-12 | Fix |
| CVE-2023-2362 | Float menu WordPress plugin multiple plugins from Wow-Company reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-06-12 | Fix |
| CVE-2023-1899 | Atlas Copco Power Focus 6000 web server vulnerability | 7.5NVD v3.1 | 0.3% | 2023-06-12 | Fix |
| CVE-2023-1898 | Atlas Copco Power Focus 6000 session ID generation insufficient randomness | 7.5NVD v3.1 | 0.6% | 2023-06-12 | Fix |
| CVE-2023-1897 | Atlas Copco Power Focus 6000 web-based login cleartext storage of sensitive information | 7.5NVD v3.1 | 0.3% | 2023-06-12 | Fix |
| CVE-2023-1323 | Easy Forms for MailChimp WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-06-12 | Fix |
| CVE-2023-0431 | File Away WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.4% | 2023-06-12 | |
| CVE-2023-25912 | Webreport disclosure to unauthorized actor in Danfoss AK-EM100 | 5.3v3.1 | 0.6% | 2023-06-11 | Fix |
| CVE-2023-25911 | Authenticated OS command injection in Danfoss AK-EM100 | 8.8NVD v3.1 | 2.3% | 2023-06-11 | Fix |
| CVE-2023-22586 | Local file inclusion in Danfoss AK-EM100 | 7.5v3.1 | 0.7% | 2023-06-11 | Fix |
| CVE-2023-22585 | Reflected cross-site scripting in Danfoss AK-EM100 | 6.1NVD v3.1 | 0.6% | 2023-06-11 | Fix |
| CVE-2023-22584 | Danfoss AK-EM100 cleartext storage of sensitive information | 7.5v3.1 | 0.5% | 2023-06-11 | Fix |
| CVE-2023-22583 | SQL injection in Danfoss AK-EM100 | 9.8v3.1 | 0.8% | 2023-06-11 | Fix |
| CVE-2023-22582 | Reflected cross-site scripting in Danfoss AK-EM100 | 6.1NVD v3.1 | 0.6% | 2023-06-11 | Fix |
| CVE-2023-3192 | Session fixation in froxlor/froxlor | 5.4v3.1 | 0.4% | 2023-06-11 | Fix |
| CVE-2023-26132 | dottie vulnerable to prototype pollution | 7.5v3.1 | 1.1% | 2023-06-10 | Fix |
| CVE-2023-3191 | Cross-site scripting (XSS) Stored in nilsteampassnet/TeamPass | 5.4NVD v3.1 | 0.5% | 2023-06-10 | Fix |
| CVE-2023-3190 | Improper encoding or escaping of output in nilsteampassnet/TeamPass | 4.6v3.1 | 0.5% | 2023-06-10 | Fix |
| CVE-2023-3188 | Server-side request forgery (SSRF) in owncast/owncast | 6.5NVD v3.1 | 1.4% | 2023-06-10 | NucleiFix |
| CVE-2023-34856 | D-Link Di-7500g-ci cross-site scripting | 5.4v3.1 | 0.6% | 2023-06-09 | |
| CVE-2023-34364 | Progress Datadirect Odbc Oracle Wire Protocol Driver buffer overflow | 9.8v3.1 | 1.6% | 2023-06-09 | Fix |
| CVE-2023-34363 | Progress Datadirect Odbc Oracle Wire Protocol Driver weak random number generator | 5.9v3.1 | 0.3% | 2023-06-09 | Fix |
| CVE-2023-34245 | Cross-site scripting (XSS) in @udecode/plate-link | 8.1CNA v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-34112 | bytedeco javacpp-presets JavaCPP project actions vulnerable to code injection | 4.3CNA v3.1 | 2.0% | 2023-06-09 | Fix |
| CVE-2023-34100 | Out-of-bounds read in Contiki-NG | 7.3CNA v3.1 | 0.4% | 2023-06-09 | |
| CVE-2023-33557 | Thedaylightstudio Fuel CMS SQL injection | 8.8v3.1 | 0.8% | 2023-06-09 | |
| CVE-2023-32732 | Google denial of service in gRPC | 5.3CNA v3.1 | 0.5% | 2023-06-09 | Fix |
| CVE-2023-32731 | Google information leak in gRPC | 7.4CNA v3.1 | 0.5% | 2023-06-09 | Fix |
| CVE-2023-32312 | Client secret not mandatory in UmbracoIdentityExtensions | 3.7CNA v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-30262 | Mim Concurrent License Server deserialization of untrusted data | 8.8v3.1 | 0.8% | 2023-06-09 | Fix |
| CVE-2023-29767 | Appcrossx Crossx resource exhaustion | 5.5v3.1 | 0.3% | 2023-06-09 | |
| CVE-2023-29766 | Appcrossx Crossx incorrect authorization | 7.8v3.1 | 0.3% | 2023-06-09 | |
| CVE-2023-29761 | Urbanandroid Sleep incorrect authorization | 5.5v3.1 | 0.3% | 2023-06-09 | |
| CVE-2023-29759 | Flightaware incorrect authorization | 5.5v3.1 | 0.3% | 2023-06-09 | |
| CVE-2023-29758 | Leap Blue Light Filter incorrect authorization | 5.5v3.1 | 0.3% | 2023-06-09 | |
| CVE-2023-29757 | Leap Blue Light Filter insecure storage of sensitive information | 7.8v3.1 | 0.4% | 2023-06-09 | |
| CVE-2023-29756 | Urbanandroid Twilight origin validation error | 5.5v3.1 | 0.2% | 2023-06-09 | |
| CVE-2023-29755 | Urbanandroid Twilight insecure storage of sensitive information | 7.8v3.1 | 0.4% | 2023-06-09 | |
| CVE-2023-29753 | Ekatox Facemoji origin validation error | 5.5v3.1 | 0.2% | 2023-06-09 | |
| CVE-2023-29752 | Ekatox Facemoji Emoji Keyboard incorrect authorization | 7.8v3.1 | 0.4% | 2023-06-09 | |
| CVE-2023-29751 | Yandex Navigator origin validation error | 5.5v3.1 | 0.2% | 2023-06-09 | |
| CVE-2023-29749 | Yandex Navigator privilege escalation | 7.8v3.1 | 0.4% | 2023-06-09 | |
| CVE-2023-29714 | Vadesecure Secure Gateway cross-site scripting | 6.1v3.1 | 0.7% | 2023-06-09 | |
| CVE-2023-29713 | Vadesecure Secure Gateway cross-site scripting | 6.1v3.1 | 0.7% | 2023-06-09 | |
| CVE-2023-29712 | Vadesecure Secure Gateway cross-site scripting | 6.1v3.1 | 0.9% | 2023-06-09 | |
| CVE-2023-27706 | Bitwarden cleartext storage of sensitive information | 7.1v3.1 | 0.6% | 2023-06-09 | |
| CVE-2023-26465 | Pegasystems Pega Infinity cross-site scripting | 8.0CNA v3.0 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-3187 | PHPGurukul Teachers Record Management System Profile Picture changeimage.php unrestricted upload | 5.4v3.1 | 2.6% | 2023-06-09 | Exploit code |
| CVE-2023-3184 | SourceCodester Sales Tracker Management System cross-site scripting | 4.8v3.1 | 2.3% | 2023-06-09 | Exploit code |
| CVE-2023-3183 | SourceCodester Performance Indicator System addproduct.php cross-site scripting | 5.4v3.1 | 0.6% | 2023-06-09 | |
| CVE-2023-3177 | SourceCodester Lost and Found Information System view_inquiry.php SQL injection | 8.8v3.1 | 0.7% | 2023-06-09 | |
| CVE-2023-3176 | SourceCodester Lost and Found Information System manage_user.php SQL injection | 8.8v3.1 | 0.7% | 2023-06-09 | |
| CVE-2023-3173 | Improper restriction of excessive authentication attempts in froxlor/froxlor | 9.8v3.1 | 1.1% | 2023-06-09 | Fix |
| CVE-2023-3172 | Path traversal in froxlor/froxlor | 7.2v3.1 | 1.2% | 2023-06-09 | Fix |
| CVE-2023-3141 | Linux kernel use-after-free | 7.1NVD v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-2897 | Brizy Page Builder WordPress plugin IP Address spoofing to Protection Mechanism bypass | 5.3v3.1 | 0.3% | 2023-06-09 | Fix |
| CVE-2023-2896 | WP EasyCart WordPress plugin cross-site request forgery via process_duplicate_product | 4.3v3.1 | 0.2% | 2023-06-09 | Fix |
| CVE-2023-2895 | WP EasyCart WordPress plugin cross-site request forgery via process_bulk_activate_product | 4.3v3.1 | 0.2% | 2023-06-09 | Fix |
| CVE-2023-2894 | WP EasyCart WordPress plugin cross-site request forgery via process_bulk_deactivate_product | 4.3v3.1 | 0.2% | 2023-06-09 | Fix |
| CVE-2023-2893 | WP EasyCart WordPress plugin cross-site request forgery via process_deactivate_product | 4.3v3.1 | 0.2% | 2023-06-09 | Fix |
| CVE-2023-2892 | WP EasyCart WordPress plugin cross-site request forgery via process_bulk_delete_product | 4.3v3.1 | 0.2% | 2023-06-09 | Fix |
| CVE-2023-2891 | WP EasyCart WordPress plugin cross-site request forgery via process_delete_product | 4.3v3.1 | 0.2% | 2023-06-09 | Fix |
| CVE-2023-2767 | WordPress File Upload / WordPress File Upload Pro plugin stored cross-site scripting | 5.5v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-2764 | Draw Attention WordPress plugin missing authorization to arbitrary post Featured Image modification | 4.3v3.1 | 0.5% | 2023-06-09 | Fix |
| CVE-2023-2688 | WordPress File Upload / WordPress File Upload Pro plugin path traversal | 4.9v3.1 | 1.7% | 2023-06-09 | Fix |
| CVE-2023-2607 | Multiple Page Generator WordPress plugin authenticated (Administrator+) SQL injection | 7.2v3.1 | 0.8% | 2023-06-09 | Fix |
| CVE-2023-2604 | Team Circle Image Slider With Lightbox WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-2599 | Active Directory Integration WordPress plugin cross-site request forgery | 6.5v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-2584 | PixelYourSite WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.5% | 2023-06-09 | Fix |
| CVE-2023-2558 | WPCS WordPress Currency Switcher Professional plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-2557 | WPCS WordPress plugin unauthorized access | 4.3v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-2556 | WPCS WordPress plugin unauthorized access | 4.3v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-2555 | WPCS WordPress plugin unauthorized access | 4.3v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-2526 | Easy Google Maps WordPress plugin cross-site request forgery via AJAX action | 5.4v3.1 | 0.3% | 2023-06-09 | Fix |
| CVE-2023-2484 | Active Directory Integration / LDAP Integration WordPress plugin SQL injection | 4.9NVD v3.1 | 0.8% | 2023-06-09 | Fix |
| CVE-2023-2455 | PostgreSQL improper input validation | 5.4NVD v3.1 | 0.7% | 2023-06-09 | Fix |
| CVE-2023-2454 | PostgreSQL arbitrary code execution | 7.2NVD v3.1 | 1.2% | 2023-06-09 | Fix |
| CVE-2023-2452 | Advanced Woo Search WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.4v3.1 | 0.5% | 2023-06-09 | Fix |
| CVE-2023-2450 | FiboSearch WordPress plugin stored cross-site scripting | 4.4v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-2414 | Online Booking and Scheduling Calendar for WordPress by vcita WordPress plugin unauthorized access | 4.3v3.1 | 0.5% | 2023-06-09 | Fix |
| CVE-2023-2402 | Photo Gallery Slideshow and Masonry Tiled Gallery WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-2305 | Download Manager WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-2289 | wordpress vertical image slider plugin reflected cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-2286 | WP Activity Log WordPress plugin cross-site request forgery via ajax_run_cleanup | 4.3v3.1 | 0.3% | 2023-06-09 | Fix |
| CVE-2023-2285 | WP Activity Log Premium WordPress plugin cross-site request forgery via ajax_switch_db | 4.3v3.1 | 0.2% | 2023-06-09 | Fix |
| CVE-2023-2284 | WP Activity Log Premium WordPress plugin missing authorization via ajax_switch_db | 4.3v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-2280 | WP Directory Kit WordPress plugin unauthorized access | 5.3v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-2275 | WooCommerce Multivendor Marketplace WordPress plugin unauthorized access | 5.4v3.1 | 0.5% | 2023-06-09 | Fix |
| CVE-2023-2261 | WP Activity Log WordPress plugin missing Capabilities check to user enumeration | 4.3v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-2249 | wpForo Forum WordPress plugin remote file inclusion | 8.8v3.1 | 60.8% | 2023-06-09 | Fix |
| CVE-2023-2237 | WP Replicate Post WordPress plugin authenticated (Contributor+) SQL injection | 8.8v3.1 | 0.8% | 2023-06-09 | Fix |
| CVE-2023-2189 | Elementor Addons, Widgets and Enhancements WordPress plugin unauthorized access | 4.3v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-2184 | WP Responsive Tabs plugin search_term parameter reflected cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-2159 | CMP Coming Soon and Maintenance WordPress plugin Maintenance Mode bypass | 5.3v3.1 | 0.8% | 2023-06-09 | Fix |
| CVE-2023-2121 | Vault’s KV Diff Viewer Allowed for HTML injection | 4.3CNA v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-2087 | Essential Blocks WordPress plugin cross-site request forgery via save | 4.3v3.1 | 0.3% | 2023-06-09 | Fix |
| CVE-2023-2086 | Essential Blocks WordPress plugin missing authorization via template_count | 4.3v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-2085 | Essential Blocks WordPress plugin missing authorization via templates | 4.3v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-2084 | Essential Blocks WordPress plugin missing authorization via get | 4.3v3.1 | 0.5% | 2023-06-09 | Fix |
| CVE-2023-2083 | Essential Blocks WordPress plugin missing authorization via save | 4.3v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-2067 | Announcement and Notification Banner Bulletin WordPress plugin cross-site request forgery | 5.4v3.1 | 0.3% | 2023-06-09 | Fix |
| CVE-2023-2066 | Announcement and Notification Banner Bulletin WordPress plugin missing authorization checks | 4.3v3.1 | 0.5% | 2023-06-09 | Fix |
| CVE-2023-2031 | Locatoraid Store Locator WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-06-09 | Fix |
| CVE-2023-1978 | ShiftController Employee Shift Scheduling WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-1917 | PowerPress WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.5% | 2023-06-09 | Fix |
| CVE-2023-1910 | Getwid Gutenberg Blocks WordPress plugin improper authorization | 4.3v3.1 | 0.5% | 2023-06-09 | Fix |
| CVE-2023-1895 | Getwid Gutenberg Blocks WordPress plugin Authenticated(Subscriber+) server side request forgery | 9.6v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-1889 | Directorist WordPress plugin insecure direct object reference | 6.5v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-1888 | Directorist WordPress plugin arbitrary user password reset to privilege escalation | 8.8v3.1 | 1.0% | 2023-06-09 | Fix |
| CVE-2023-1843 | Metform Elementor Contact Form Builder WordPress plugin missing authorization | 5.3v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-1807 | Elementor Addons, Widgets and Enhancements Stax WordPress plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2023-06-09 | Fix |
| CVE-2023-1615 | Ultimate Addons for Contact Form 7 WordPress plugin SQL injection | 6.5NVD v3.1 | 0.8% | 2023-06-09 | Fix |
| CVE-2023-1430 | FluentCRM WordPress plugin unauthorized access | 3.7NVD v3.1 | 0.8% | 2023-06-09 | Fix |
| CVE-2023-1428 | Google denial of service in gRPC | 7.5CNA v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-1404 | Weaver Show Posts WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-06-09 | Fix |
| CVE-2023-1403 | Weaver Xtreme WordPress theme stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-06-09 | Fix |
| CVE-2023-1375 | WP Fastest Cache WordPress plugin missing authorization to Cache deletion | 4.3v3.1 | 0.5% | 2023-06-09 | Fix |
| CVE-2023-1169 | OoohBoi Steroids for Elementor WordPress plugin missing authorization | 4.3v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-1016 | Intuitive Custom Post Order WordPress plugin authenticated (Admin+) SQL injection | 7.2v3.1 | 1.0% | 2023-06-09 | Fix |
| CVE-2023-0993 | Shield Security WordPress plugin missing authorization | 4.3v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-0992 | Shield Security WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 93.0% | 2023-06-09 | Fix |
| CVE-2023-0832 | Under Construction WordPress plugin cross-site request forgery via admin_action_install_weglot | 4.3v3.1 | 0.2% | 2023-06-09 | Fix |
| CVE-2023-0831 | Under Construction WordPress plugin cross-site request forgery via admin_action_ucp_dismiss_notice | 4.3v3.1 | 0.3% | 2023-06-09 | Fix |
| CVE-2023-0729 | Wicked Folders WordPress plugin cross-site request forgery via ajax_save_sort_order | 4.3v3.1 | 0.3% | 2023-06-09 | Fix |
| CVE-2023-0721 | Metform Elementor Contact Form Builder WordPress plugin unauthenticated CSV injection | 7.8v3.1 | 0.7% | 2023-06-09 | Fix |
| CVE-2023-0710 | Metform Elementor Contact Form Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-0709 | Metform Elementor Contact Form Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-0708 | Metform Elementor Contact Form Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-0695 | Metform Elementor Contact Form Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-06-09 | Fix |
| CVE-2023-0694 | Metform Elementor Contact Form Builder WordPress plugin information disclosure | 4.3v3.1 | 0.7% | 2023-06-09 | Fix |
| CVE-2023-0693 | Metform Elementor Contact Form Builder WordPress plugin information disclosure | 4.3v3.1 | 0.7% | 2023-06-09 | Fix |
| CVE-2023-0692 | Metform Elementor Contact Form Builder WordPress plugin information disclosure | 4.3v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-0691 | Metform Elementor Contact Form Builder WordPress plugin information disclosure | 4.3v3.1 | 0.6% | 2023-06-09 | Fix |
| CVE-2023-0688 | Metform Elementor Contact Form Builder WordPress plugin information disclosure | 6.5v3.1 | 0.7% | 2023-06-09 | Fix |
| CVE-2023-0342 | MongoDB Ops Manager may disclose sensitive information in Diagnostic Archive | 3.1CNA v3.1 | 0.9% | 2023-06-09 | MetasploitFix |
| CVE-2023-0292 | Quiz And Survey Master WordPress plugin cross-site request forgery to arbitrary Media deletion | 8.1v3.1 | 0.8% | 2023-06-09 | Fix |
| CVE-2023-0291 | Quiz And Survey Master WordPress plugin unauthenticated arbitrary Media deletion | 9.1v3.1 | 2.0% | 2023-06-09 | Fix |
| CVE-2023-34969 | Freedesktop Dbus improper resource release | 6.5NVD v3.1 | 1.5% | 2023-06-08 | Fix |
| CVE-2023-34962 | Chamilo personal notes improper access control | 8.1v3.1 | 0.7% | 2023-06-08 | Fix |
| CVE-2023-34961 | chamilo-lms cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-08 | Fix |
| CVE-2023-34959 | chamilo-lms server-side request forgery | 5.3v3.1 | 0.6% | 2023-06-08 | Fix |
| CVE-2023-34958 | chamilo-lms incorrect authorization | 4.3v3.1 | 0.4% | 2023-06-08 | Fix |
| CVE-2023-34571 | Tenda AC10 out-of-bounds write | 6.7v3.1 | 0.3% | 2023-06-08 | |
| CVE-2023-34570 | Tenda AC10 out-of-bounds write | 6.7v3.1 | 0.3% | 2023-06-08 | |
| CVE-2023-34569 | Tenda AC10 out-of-bounds write | 6.7v3.1 | 0.3% | 2023-06-08 | |
| CVE-2023-34568 | Tenda AC10 out-of-bounds write | 6.7v3.1 | 0.3% | 2023-06-08 | |
| CVE-2023-34567 | Tenda AC10 out-of-bounds write | 6.7v3.1 | 0.3% | 2023-06-08 | |
| CVE-2023-34566 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-06-08 | |
| CVE-2023-34243 | Windows user name disclosure in TGstation | 5.8CNA v3.1 | 0.5% | 2023-06-08 | Fix |
| CVE-2023-34239 | Gradio vulnerable to arbitrary file read and proxying of arbitrary URLs | 7.3CNA v3.1 | 0.7% | 2023-06-08 | Fix |
| CVE-2023-34238 | Local file inclusion vulnerability in Gatsby | 4.3CNA v3.1 | 0.9% | 2023-06-08 | Fix |
| CVE-2023-34233 | Snowflake Python Connector vulnerable to command injection | 7.3CNA v3.0 | 1.8% | 2023-06-08 | Fix |
| CVE-2023-34232 | Snowflake NodeJS driver vulnerable to command injection | 7.3CNA v3.1 | 1.9% | 2023-06-08 | Fix |
| CVE-2023-34231 | Snowflake Golang driver vulnerable to command injection | 7.3CNA v3.0 | 2.0% | 2023-06-08 | Fix |
| CVE-2023-34230 | Snowflake Connector vulnerable to command injection | 7.3CNA v3.1 | 1.4% | 2023-06-08 | Fix |
| CVE-2023-34096 | Thruk has path traversal vulnerability in panorama.pm | 6.5CNA v3.1 | 62.7% | 2023-06-08 | Exploit codeFix |
| CVE-2023-33847 | IBM CICS TX information disclosure | 3.7CNA v3.1 | 0.6% | 2023-06-08 | Fix |
| CVE-2023-33846 | IBM CICS TX cross-site scripting | 5.4CNA v3.1 | 0.5% | 2023-06-08 | Fix |
| CVE-2023-33660 | emqx nanomq heap-based buffer overflow | 7.5v3.1 | 1.2% | 2023-06-08 | |
| CVE-2023-33658 | emqx nanomq heap-based buffer overflow | 7.5v3.1 | 1.2% | 2023-06-08 | |
| CVE-2023-33657 | emqx nanomq use-after-free | 7.5v3.1 | 1.0% | 2023-06-08 | |
| CVE-2023-33443 | Besder Bes--6024pb-i50h1 origin validation error | 9.8v3.1 | 3.5% | 2023-06-08 | |
| CVE-2023-32751 | pydio cells cross-site scripting | 5.4v3.1 | 2.9% | 2023-06-08 | Exploit code |
| CVE-2023-32750 | pydio cells server-side request forgery | 6.5v3.1 | 3.8% | 2023-06-08 | Exploit code |
| CVE-2023-32749 | pydio cells incorrect authorization | 8.8v3.1 | 14.2% | 2023-06-08 | Exploit code |
| CVE-2023-29405 | Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go | 9.8v3.1 | 1.7% | 2023-06-08 | Fix |
| CVE-2023-29404 | Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go | 9.8v3.1 | 1.8% | 2023-06-08 | Fix |
| CVE-2023-29403 | Unsafe behavior in setuid/setgid binaries in runtime | 7.8v3.1 | 0.4% | 2023-06-08 | Fix |
| CVE-2023-29402 | Code injection via go command with cgo in cmd/go | 9.8v3.1 | 1.7% | 2023-06-08 | Fix |
| CVE-2023-29401 | Improper handling of filenames in Content-Disposition HTTP header in github.com/Gin-gonic/Gin | 4.3v3.1 | 0.5% | 2023-06-08 | Exploit codeFix |
| CVE-2023-24535 | Panic when parsing invalid messages in google.golang.org/Protobuf | 7.5v3.1 | 1.1% | 2023-06-08 | Fix |
| CVE-2023-23482 | IBM Sterling Partner Engagement Manager clickjacking | 5.4CNA v3.1 | 0.6% | 2023-06-08 | Fix |
| CVE-2023-23481 | IBM Sterling Partner Engagement Manager cross-site scripting | 6.4CNA v3.1 | 0.4% | 2023-06-08 | Fix |
| CVE-2023-23480 | IBM Sterling Partner Engagement Manager cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-06-08 | Fix |
| CVE-2023-3165 | SourceCodester Life Insurance Management System insertNominee.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-06-08 | |
| CVE-2023-3163 | y_project RuoYi filterKeyword resource consumption | 7.5NVD v3.1 | 1.4% | 2023-06-08 | |
| CVE-2023-2986 | Abandoned Cart Lite for WooCommerce WordPress plugin authentication bypass | 9.8v3.1 | 42.8% | 2023-06-08 | NucleiExploit codeFix |
| CVE-2023-0954 | Debug feature in Sensormatic Electronics Illustra Dome and PTZ cameras | 8.3CNA v3.1 | 0.7% | 2023-06-08 | Fix |
| CVE-2023-34237 | Remote code execution via specially crafted script settings in SABnzbd | 8.1CNA v3.1 | 1.7% | 2023-06-07 | Fix |
| CVE-2023-34234 | Governor proposal creation may be blocked by frontrunning in OpenZeppelin | 5.3CNA v3.1 | 0.6% | 2023-06-07 | Fix |
| CVE-2023-34109 | User input results in Unbounded resource consumption in @Zxcvbn-ts/core | 6.5CNA v3.1 | 0.5% | 2023-06-07 | Fix |
| CVE-2023-34108 | Manipulation of Internal Dovecot variables in Mailcow via crafted Passwords | 8.8CNA v3.1 | 1.0% | 2023-06-07 | Fix |
| CVE-2023-33865 | Renderdoc link following | 7.8v3.1 | 0.9% | 2023-06-07 | Fix |
| CVE-2023-33864 | Renderdoc integer overflow | 9.8v3.1 | 3.6% | 2023-06-07 | Fix |
| CVE-2023-33863 | Renderdoc integer overflow | 9.8v3.1 | 3.6% | 2023-06-07 | Fix |
| CVE-2023-33849 | IBM CICS TX information disclosure | 3.7CNA v3.1 | 0.4% | 2023-06-07 | Fix |
| CVE-2023-33848 | IBM CICS TX information disclosure | 4.9CNA v3.1 | 0.8% | 2023-06-07 | Fix |
| CVE-2023-33782 | D-Link Dir-842v2 command injection | 8.8v3.1 | 35.6% | 2023-06-07 | Exploit code |
| CVE-2023-33781 | D-Link Dir-842v2 arbitrary command execution | 8.8v3.1 | 32.0% | 2023-06-07 | Exploit code |
| CVE-2023-33604 | Imperial Cms arbitrary file deletion | 9.1v3.1 | 0.8% | 2023-06-07 | |
| CVE-2023-33601 | PHPOK /admin.php?c=upload arbitrary file upload | 8.8v3.1 | 0.9% | 2023-06-07 | |
| CVE-2023-33595 | Python use-after-free | 5.5v3.1 | 0.4% | 2023-06-07 | Fix |
| CVE-2023-33556 | TOTOLINK A7100RU command injection | 9.8v3.1 | 2.0% | 2023-06-07 | |
| CVE-2023-33553 | PLANET Technology Wdrt-1800ax improper authentication | 9.8v3.1 | 1.0% | 2023-06-07 | |
| CVE-2023-33538 | TP-Link Multiple Routers command injection | 8.8v3.1 | 41.9% | 2023-06-07 | KEVEmerging ThreatsExploit codeFix |
| CVE-2023-33537 | TP-Link TL-WR740N out-of-bounds read | 8.1v3.1 | 0.9% | 2023-06-07 | |
| CVE-2023-33536 | TP-Link TL-WR740N out-of-bounds read | 8.1v3.1 | 0.9% | 2023-06-07 | |
| CVE-2023-33510 | Jeecg P3 Biz Chat allows remote attackers to read arbitrary files | 7.5v3.1 | 4.0% | 2023-06-07 | Nuclei |
| CVE-2023-33498 | alist incorrect access control vulnerability | 8.8v3.1 | 0.7% | 2023-06-07 | |
| CVE-2023-33496 | xxl-rpc deserialization | 9.8v3.1 | 1.0% | 2023-06-07 | |
| CVE-2023-33284 | Marvalglobal MSM deserialization of untrusted data | 8.8v3.1 | 1.1% | 2023-06-07 | |
| CVE-2023-33283 | Marvalglobal MSM inadequate encryption strength | 5.5v3.1 | 0.1% | 2023-06-07 | |
| CVE-2023-33282 | Marvalglobal MSM incorrect default permissions | 9.8v3.1 | 1.0% | 2023-06-07 | |
| CVE-2023-31200 | PTC Vuforia Studio cross-site request forgery | 8.0v3.1 | 0.2% | 2023-06-07 | Fix |
| CVE-2023-31116 | Samsung Exynos 5123 incorrect default permissions | 9.8v3.1 | 0.6% | 2023-06-07 | Fix |
| CVE-2023-31115 | Samsung Exynos 5123 incorrect resource transfer | 7.5v3.1 | 0.5% | 2023-06-07 | Fix |
| CVE-2023-31114 | Samsung Exynos 5123 incorrect resource transfer | 9.1v3.1 | 0.6% | 2023-06-07 | Fix |
| CVE-2023-30576 | Apache Guacamole: Use-after-free in handling of RDP audio input buffer | 6.8CNA v3.1 | 1.1% | 2023-06-07 | Fix |
| CVE-2023-30575 | Apache Guacamole: Incorrect calculation of Guacamole protocol element lengths | 6.5CNA v3.1 | 1.0% | 2023-06-07 | Fix |
| CVE-2023-30400 | Anyka AK3918EV300 command injection | 9.8v3.1 | 3.5% | 2023-06-07 | |
| CVE-2023-29502 | PTC Vuforia Studio path traversal | 4.3v3.1 | 0.5% | 2023-06-07 | Fix |
| CVE-2023-29345 | Microsoft Edge (Chromium-based) security feature bypass | 6.1CNA v3.1 | 1.2% | 2023-06-07 | Fix |
| CVE-2023-29168 | PTC Vuforia Studio insufficiently protected credentials | 7.5v3.1 | 0.5% | 2023-06-07 | Fix |
| CVE-2023-29152 | PTC Vuforia Studio improper authorization | 8.1v3.1 | 0.4% | 2023-06-07 | Fix |
| CVE-2023-27881 | PTC Vuforia Studio unrestricted upload of file with dangerous type | 9.9v3.1 | 0.7% | 2023-06-07 | Fix |
| CVE-2023-25177 | Delta Electronics CNCSoft-B DOPSoft stack-based buffer overflow | 7.8v3.1 | 0.3% | 2023-06-07 | Fix |
| CVE-2023-24476 | PTC Vuforia Studio improper authorization | 3.3v3.1 | 0.1% | 2023-06-07 | Fix |
| CVE-2023-24014 | Delta Electronics CNCSoft-B DOPSoft heap-based buffer overflow | 7.8v3.1 | 0.2% | 2023-06-07 | Fix |
| CVE-2023-20889 | Aria Operations for Networks command injection | 7.5v3.1 | 79.3% | 2023-06-07 | NucleiEmerging ThreatsFix |
| CVE-2023-20888 | Aria Operations for Networks deserialization of untrusted data | 8.8v3.1 | 82.3% | 2023-06-07 | NucleiEmerging ThreatsFix |
| CVE-2023-20887 | Vmware Aria Operations for Networks command injection | 9.8v3.1 | 98.3% | 2023-06-07 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-3152 | SourceCodester Online Discussion Forum Site view_post.php SQL injection | 8.8v3.1 | 0.8% | 2023-06-07 | Fix |
| CVE-2023-3151 | SourceCodester Online Discussion Forum Site manage_user.php SQL injection | 8.8v3.1 | 0.8% | 2023-06-07 | |
| CVE-2023-3150 | SourceCodester Online Discussion Forum Site manage_post.php SQL injection | 8.8v3.1 | 0.8% | 2023-06-07 | |
| CVE-2023-3149 | SourceCodester Online Discussion Forum Site manage_user.php SQL injection | 8.8v3.1 | 0.8% | 2023-06-07 | |
| CVE-2023-3148 | SourceCodester Online Discussion Forum Site manage_post.php SQL injection | 8.8v3.1 | 0.8% | 2023-06-07 | |
| CVE-2023-3147 | SourceCodester Online Discussion Forum Site view_category.php SQL injection | 8.8v3.1 | 0.8% | 2023-06-07 | |
| CVE-2023-3146 | SourceCodester Online Discussion Forum Site manage_category.php SQL injection | 8.8v3.1 | 0.8% | 2023-06-07 | |
| CVE-2023-3145 | SourceCodester Online Discussion Forum Site SQL injection | 8.8v3.1 | 0.8% | 2023-06-07 | |
| CVE-2023-3144 | SourceCodester Online Discussion Forum Site manage_post.php cross-site scripting | 5.4v3.1 | 0.6% | 2023-06-07 | |
| CVE-2023-3143 | SourceCodester Online Discussion Forum Site manage_post.php cross-site scripting | 5.4v3.1 | 0.6% | 2023-06-07 | |
| CVE-2023-3142 | Cross-site scripting (XSS) Stored in microweber/microweber | 5.4v3.1 | 0.3% | 2023-06-07 | Fix |
| CVE-2023-3140 | KNIME Hub Web application is vulnerable to clickjacking | 4.3CNA v3.1 | 0.4% | 2023-06-07 | Fix |
| CVE-2023-3126 | B2BKing WordPress plugin missing authorization to Authenticated(Subscriber+) information disclosure | 4.3v3.1 | 0.7% | 2023-06-07 | Fix |
| CVE-2023-3125 | B2BKing WordPress plugin missing authorization to Authenticated(Subscriber+) Price modification | 6.5v3.1 | 0.7% | 2023-06-07 | Fix |
| CVE-2023-3124 | Elementor Pro WordPress plugin privilege escalation | 8.8v3.1 | 22.7% | 2023-06-07 | Exploit codeFix |
| CVE-2023-2904 | HID Global SAFE visitor manager portal vulnerability | 7.3v3.1 | 0.6% | 2023-06-07 | Fix |
| CVE-2023-2878 | Kubernetes secrets-store-csi-driver discloses service account tokens in logs | 6.5CNA v3.1 | 0.4% | 2023-06-07 | Fix |
| CVE-2023-2866 | Advantech WebAccess Insufficient Type Distinction | 7.8v3.1 | 0.1% | 2023-06-07 | Fix |
| CVE-2023-2589 | GitLab origin validation error | 5.9CNA v3.1 | 0.4% | 2023-06-07 | Fix |
| CVE-2023-2541 | Sensitive information disclosure in KNIME Hub Web application | 5.3CNA v3.1 | 0.6% | 2023-06-07 | Fix |
| CVE-2023-2530 | Puppet Enterprise orchestration service privilege escalation | 9.8v3.1 | 1.1% | 2023-06-07 | Fix |
| CVE-2023-2485 | Incorrect privilege assignment in GitLab | 4.4CNA v3.1 | 0.8% | 2023-06-07 | Fix |
| CVE-2023-2442 | GitLab cross-site scripting | 8.7CNA v3.1 | 96.1% | 2023-06-07 | Fix |
| CVE-2023-2199 | GitLab regular expression denial of service | 7.5CNA v3.1 | 1.3% | 2023-06-07 | Fix |
| CVE-2023-2198 | GitLab regular expression denial of service | 7.5CNA v3.1 | 1.3% | 2023-06-07 | Fix |
| CVE-2023-2187 | Triangle MicroWorks SCADA Data Gateway missing authentication | 5.3NVD v3.1 | 0.6% | 2023-06-07 | |
| CVE-2023-2186 | Triangle MicroWorks SCADA Data Gateway format string | 9.8NVD v3.1 | 0.7% | 2023-06-07 | |
| CVE-2023-2015 | GitLab cross-site scripting | 4.4CNA v3.1 | 0.6% | 2023-06-07 | Fix |
| CVE-2023-2013 | GitLab clickjacking | 2.6CNA v3.1 | 0.7% | 2023-06-07 | Fix |
| CVE-2023-2001 | GitLab authentication bypass by spoofing | 4.3CNA v3.1 | 0.6% | 2023-06-07 | Fix |
| CVE-2023-1864 | FANUC ROBOGUIDE-HandlingPRO path traversal | 7.5v3.1 | 0.9% | 2023-06-07 | Fix |
| CVE-2023-1825 | Insertion of sensitive information into sent data in GitLab | 3.1CNA v3.1 | 0.5% | 2023-06-07 | Fix |
| CVE-2023-1709 | Datalogics Library APDFL stack-based buffer overflow | 7.8v3.1 | 0.3% | 2023-06-07 | Fix |
| CVE-2023-1388 | Trellix Agent TA heap-based buffer overflow | 6.3CNA v3.1 | 0.6% | 2023-06-07 | Fix |
| CVE-2023-0976 | Trellix Agent TA for mac-OS command injection | 6.3CNA v3.1 | 0.6% | 2023-06-07 | Fix |
| CVE-2023-0668 | Wireshark IEEE-C37.118 parsing buffer overflow | 6.5v3.1 | 2.3% | 2023-06-07 | Fix |
| CVE-2023-0667 | Wireshark MSMMS parsing buffer overflow | 6.5v3.1 | 2.0% | 2023-06-07 | Fix |
| CVE-2023-0666 | Wireshark RTPS Parsing buffer overflow | 6.5v3.1 | 2.3% | 2023-06-07 | Fix |
| CVE-2023-0508 | Improper neutralization of CRLF sequences in HTTP headers in GitLab | 3.1CNA v3.1 | 0.8% | 2023-06-07 | Fix |
| CVE-2023-0121 | Allocation of resources without limits or throttling in GitLab | 6.5CNA v3.1 | 1.2% | 2023-06-07 | Fix |
| CVE-2023-34409 | Percona Monitoring and Management path traversal | 9.8v3.1 | 1.3% | 2023-06-06 | Fix |
| CVE-2023-34111 | Command injection vulnerability in `Release PR Merged` Workflow in taosdata/grafanaplugin | 8.1CNA v3.1 | 4.0% | 2023-06-06 | |
| CVE-2023-34104 | NaturalIntelligence fast-xml-parser Regex injection via Doctype Entities | 7.5CNA v3.1 | 1.1% | 2023-06-06 | Fix |
| CVE-2023-33977 | Stored cross-site scripting (XSS) via unrestricted file upload in Kiwi TCMS | 8.1CNA v3.1 | 0.9% | 2023-06-06 | Exploit codeFix |
| CVE-2023-33959 | notaryproject notation-go verification bypass can cause users into verifying the wrong artifact | 8.4CNA v3.1 | 0.4% | 2023-06-06 | Fix |
| CVE-2023-33958 | Default `maxSignatureAttempts` in `notation verify` enables an endless data attack in notation | 5.4CNA v3.1 | 0.5% | 2023-06-06 | Fix |
| CVE-2023-33957 | Denial of service from high number of artifact signatures in notation | 2.6CNA v3.1 | 0.5% | 2023-06-06 | Fix |
| CVE-2023-33747 | MGT-COMMERCE CloudPanel path traversal | 7.8v3.1 | 0.5% | 2023-06-06 | Exploit codeFix |
| CVE-2023-33684 | Dbbroadcast Sft Dab 600/c Firmware authentication bypass | 5.7v3.1 | 0.3% | 2023-06-06 | |
| CVE-2023-33659 | emqx nanomq heap-based buffer overflow | 7.5v3.1 | 1.1% | 2023-06-06 | |
| CVE-2023-33653 | Sitecore Experience Platform remote code execution | 8.8v3.1 | 2.1% | 2023-06-06 | |
| CVE-2023-33652 | Sitecore Experience Platform unsafe reflection | 8.8v3.1 | 2.5% | 2023-06-06 | |
| CVE-2023-33651 | Sitecore Experience Commerce incorrect authorization | 7.5v3.1 | 1.4% | 2023-06-06 | Fix |
| CVE-2023-33613 | Axtls out-of-bounds write | 5.5v3.1 | 0.3% | 2023-06-06 | |
| CVE-2023-33569 | Faculty Evaluation System unrestricted file upload | 7.2v3.1 | 1.1% | 2023-06-06 | |
| CVE-2023-33533 | NETGEAR D6220 command injection | 8.8v3.1 | 3.1% | 2023-06-06 | Fix |
| CVE-2023-33532 | NETGEAR R6250 There is a command injection | 9.8v3.1 | 16.2% | 2023-06-06 | |
| CVE-2023-33530 | Tenda G103 There is a command injection | 8.8v3.1 | 1.3% | 2023-06-06 | |
| CVE-2023-33477 | Harmonicinc Nsg 9000-6g missing authorization | 6.5v3.1 | 1.0% | 2023-06-06 | Exploit code |
| CVE-2023-33460 | Yajl There's a memory leak | 6.5v3.1 | 1.1% | 2023-06-06 | Fix |
| CVE-2023-33457 | Sogou C++ Workflow buffer overflow | 8.8v3.1 | 0.8% | 2023-06-06 | |
| CVE-2023-33381 | MitraStar Gpt-2741gnac OS command injection | 7.2v3.1 | 22.2% | 2023-06-06 | Exploit code |
| CVE-2023-32683 | URL deny list bypass via oEmbed and image URLs when generating previews in Synapse | 3.5CNA v3.1 | 0.6% | 2023-06-06 | Fix |
| CVE-2023-32682 | Improper checks for deactivated users during login in synapse | 5.4CNA v3.1 | 0.8% | 2023-06-06 | Fix |
| CVE-2023-32628 | Advantech WebAccess/SCADA unrestricted file upload | 9.8v3.1 | 0.7% | 2023-06-06 | Fix |
| CVE-2023-32551 | Landscape open redirect | 6.1CNA v3.1 | 0.3% | 2023-06-06 | Fix |
| CVE-2023-32550 | Landscape's Apache server-status is accessible by default | 9.3CNA v3.1 | 0.4% | 2023-06-06 | Fix |
| CVE-2023-32549 | Landscape insecure token generation | 6.8CNA v3.1 | 0.5% | 2023-06-06 | Fix |
| CVE-2023-32545 | Horner Automation Cscape out-of-bounds read | 7.8v3.1 | 0.2% | 2023-06-06 | Fix |
| CVE-2023-32540 | Advantech WebAccess/SCADA code injection | 9.8v3.1 | 0.9% | 2023-06-06 | Fix |
| CVE-2023-32539 | Horner Automation Cscape out-of-bounds write | 7.8v3.1 | 0.2% | 2023-06-06 | Fix |
| CVE-2023-32289 | Horner Automation Cscape out-of-bounds read | 7.8v3.1 | 0.2% | 2023-06-06 | Fix |
| CVE-2023-32281 | Horner Automation Cscape out-of-bounds read | 7.8v3.1 | 0.2% | 2023-06-06 | Fix |
| CVE-2023-32203 | Horner Automation Cscape out-of-bounds write | 7.8v3.1 | 0.2% | 2023-06-06 | Fix |
| CVE-2023-31606 | RedCloth regular expression denial of service issue | 7.5v3.1 | 1.5% | 2023-06-06 | Exploit codeFix |
| CVE-2023-31569 | TOTOLINK X5000R command injection | 9.8v3.1 | 3.1% | 2023-06-06 | |
| CVE-2023-31278 | Horner Automation Cscape out-of-bounds read | 7.8v3.1 | 0.2% | 2023-06-06 | Fix |
| CVE-2023-31244 | Horner Automation Cscape uninitialized pointer access | 7.8v3.1 | 0.2% | 2023-06-06 | Fix |
| CVE-2023-30948 | Retrieval of Attachments to Comments lacks Authorization | 6.5CNA v3.1 | 0.5% | 2023-06-06 | Fix |
| CVE-2023-30915 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-30914 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-30866 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-30865 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-30864 | UNISOC chipsets Connectivity service missing authorization | 7.8v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-30863 | UNISOC chipsets Connectivity service missing authorization | 7.8v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-29632 | Joommasters Jmspagebuilder SQL injection | 9.8v3.1 | 1.0% | 2023-06-06 | Fix |
| CVE-2023-29503 | Horner Automation Cscape stack-based buffer overflow | 7.8v3.1 | 0.2% | 2023-06-06 | Fix |
| CVE-2023-28653 | Horner Automation Cscape use-after-free | 7.8v3.1 | 0.2% | 2023-06-06 | Fix |
| CVE-2023-27916 | Horner Automation Cscape out-of-bounds read | 7.8v3.1 | 0.2% | 2023-06-06 | Fix |
| CVE-2023-27126 | TP-Link Tapo C200 insufficiently protected credentials | 4.6v3.1 | 0.4% | 2023-06-06 | |
| CVE-2023-22833 | Mandatory control bypass in Lime2 | 7.6CNA v3.1 | 0.4% | 2023-06-06 | Fix |
| CVE-2023-22450 | Advantech WebAccess/SCADA unrestricted file upload | 7.2v3.1 | 0.8% | 2023-06-06 | Fix |
| CVE-2023-21670 | Qualcomm Snapdragon improper access control in GPU subsystem | 7.8CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-21669 | Qualcomm Snapdragon buffer over-read in WLAN host | 8.2CNA v3.1 | 0.4% | 2023-06-06 | Fix |
| CVE-2023-21661 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.4% | 2023-06-06 | Fix |
| CVE-2023-21660 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.4% | 2023-06-06 | Fix |
| CVE-2023-21659 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.4% | 2023-06-06 | Fix |
| CVE-2023-21658 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.4% | 2023-06-06 | Fix |
| CVE-2023-21657 | Qualcomm Snapdragon improper input validation in Audio | 7.8CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-21656 | Qualcomm Snapdragon improper input validation in WLAN host | 7.8CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-21632 | Qualcomm Snapdragon stack-based buffer overflow in Automotive GPU | 8.4CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-21628 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN HAL | 8.4CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20752 | MediaTek chipsets out-of-bounds write in keymanage | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20751 | MediaTek chipsets out-of-bounds write in keymanage | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20750 | MediaTek chipsets improper input validation in swpm | 4.1v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20749 | MediaTek chipsets improper input validation in swpm | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20747 | MediaTek chipsets access of resource using incompatible type (type confusion) in vcu | 4.4v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20746 | MediaTek chipsets improper synchronization in vcu | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20745 | MediaTek chipsets improper synchronization in vcu | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20744 | MediaTek chipsets improper synchronization in vcu | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20743 | MediaTek chipsets improper synchronization in vcu | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20742 | MediaTek chipsets improper input validation in ril | 4.4v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20741 | MediaTek chipsets improper input validation in ril | 4.4v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20740 | MediaTek chipsets concurrent execution using shared resource with improper synchronization in vcu | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20739 | MediaTek chipsets concurrent execution using shared resource with improper synchronization in vcu | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20738 | MediaTek chipsets improper input validation in vcu | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20737 | MediaTek chipsets improper synchronization in vcu | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20736 | MediaTek chipsets improper synchronization in vcu | 6.4v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20735 | MediaTek chipsets improper input validation in vcu | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20734 | MediaTek chipsets improper input validation in vcu | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20733 | MediaTek chipsets improper synchronization in vcu | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20732 | MediaTek chipsets improper input validation in wlan | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20731 | MediaTek chipsets improper input validation in wlan | 4.4v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20730 | MediaTek chipsets improper input validation in wlan | 4.4v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20729 | MediaTek chipsets improper input validation in wlan | 4.4v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20728 | MediaTek chipsets improper input validation in wlan | 4.4v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20727 | MediaTek chipsets improper input validation in wlan | 4.4v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20725 | MediaTek chipsets improper input validation in preloader | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20724 | MediaTek chipsets out-of-bounds read in Bluetooth | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20723 | MediaTek chipsets out-of-bounds read in Bluetooth | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20716 | MediaTek chipsets improper input validation in wlan | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20715 | MediaTek chipsets improper input validation in wlan | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-20712 | MediaTek chipsets improper input validation in wlan | 6.7v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2023-3121 | Dahua Smart Parking Management image server-side request forgery | 4.6v3.1 | 0.5% | 2023-06-06 | |
| CVE-2023-3120 | SourceCodester Service Provider Management System view_service.php SQL injection | 7.2v3.1 | 0.7% | 2023-06-06 | |
| CVE-2023-3119 | SourceCodester Service Provider Management System view.php SQL injection | 8.8v3.1 | 0.7% | 2023-06-06 | |
| CVE-2023-2961 | advancecomp improper input validation | 3.3NVD v3.1 | 0.2% | 2023-06-06 | Fix |
| CVE-2023-2833 | ReviewX WordPress plugin arbitrary Usermeta update to authenticated privilege escalation | 8.8v3.1 | 17.5% | 2023-06-06 | Exploit codeFix |
| CVE-2023-2801 | Grafana public dashboards denial of service | 7.5CNA v3.1 | 0.7% | 2023-06-06 | Fix |
| CVE-2023-2603 | libcap integer overflow | 7.8NVD v3.1 | 0.6% | 2023-06-06 | Exploit codeFix |
| CVE-2023-2602 | libcap pthread_create function memory leak | 3.3NVD v3.1 | 0.4% | 2023-06-06 | Fix |
| CVE-2023-2546 | WP User Switch WordPress plugin authenticated (Subscriber+) authentication bypass via Cookie | 8.8v3.1 | 1.4% | 2023-06-06 | Fix |
| CVE-2023-2253 | distribution catalog API endpoint can lead to OOM via malicious user input | 6.5NVD v3.1 | 0.9% | 2023-06-06 | Fix |
| CVE-2023-2183 | Grafana has broken access control in Alert manager: Viewer can send test alerts | 4.1CNA v3.1 | 1.0% | 2023-06-06 | Fix |
| CVE-2023-2157 | ImageMagick heap-based buffer overflow | 5.5NVD v3.1 | 1.0% | 2023-06-06 | Fix |
| CVE-2023-2132 | GitLab regular expression denial of service | 7.5CNA v3.1 | 1.3% | 2023-06-06 | Fix |
| CVE-2023-1779 | Helmholz and MB Connect Line: Account takeover via password reset in multiple products | 4.3CNA v3.1 | 0.5% | 2023-06-06 | Fix |
| CVE-2023-1621 | GitLab IP address restrictions vulnerability | 6.5CNA v3.1 | 0.9% | 2023-06-06 | Fix |
| CVE-2023-0985 | Helmholz and MB Connect Line: Account takeover via password reset in multiple products | 8.8CNA v3.1 | 0.8% | 2023-06-06 | Fix |
| CVE-2023-0921 | Allocation of resources without limits or throttling in GitLab | 4.3CNA v3.1 | 84.4% | 2023-06-06 | Fix |
| CVE-2023-34411 | Xml-rs vulnerable to denial of service via invalid token in XML document | 7.5v3.1 | 1.2% | 2023-06-05 | Fix |
| CVE-2023-34410 | Qt improper certificate validation | 5.3v3.1 | 0.7% | 2023-06-05 | Fix |
| CVE-2023-34408 | DokuWiki cross-site scripting | 5.4v3.1 | 0.7% | 2023-06-05 | Fix |
| CVE-2023-34407 | Harbingergroup Office Player path traversal | 7.5v3.1 | 1.1% | 2023-06-05 | |
| CVE-2023-34103 | Stored XSS (cross-site scripting) in html content based fields of avo | 7.3CNA v3.1 | 0.6% | 2023-06-05 | Fix |
| CVE-2023-34102 | Possible unsafe reflection / partial denial of service in avo | 8.3CNA v3.1 | 1.6% | 2023-06-05 | Fix |
| CVE-2023-34097 | Database password exposed in logs in hoppscotch | 7.8CNA v3.1 | 0.7% | 2023-06-05 | Fix |
| CVE-2023-33970 | Missing access control in internal task links feature in Kanboard | 5.4CNA v3.1 | 0.5% | 2023-06-05 | Fix |
| CVE-2023-33969 | Stored cross-site scripting in the Task External Link Functionality in Kanboard | 6.4CNA v3.1 | 0.5% | 2023-06-05 | Fix |
| CVE-2023-33968 | Missing access control allows User to move and duplicate tasks in Kanboard | 5.4CNA v3.1 | 0.4% | 2023-06-05 | Fix |
| CVE-2023-33956 | Parameter based Indirect Object Referencing leading to private file exposure in Kanboard | 4.3CNA v3.1 | 0.6% | 2023-06-05 | Fix |
| CVE-2023-33733 | Reportlab vulnerable to remote code execution | 7.8v3.1 | 2.1% | 2023-06-05 | Exploit codeFix |
| CVE-2023-33693 | Tsingsee Easyplayerpro buffer overflow | 5.5NVD v3.1 | 0.4% | 2023-06-05 | |
| CVE-2023-33690 | Sonicjs path traversal | 6.5v3.1 | 0.9% | 2023-06-05 | |
| CVE-2023-33524 | Advent Tamale Rms path traversal | 5.3v3.1 | 1.0% | 2023-06-05 | |
| CVE-2023-33518 | Emoncms observable discrepancy | 5.3v3.1 | 0.5% | 2023-06-05 | |
| CVE-2023-33410 | miniCal CSV injection | 8.8v3.1 | 1.2% | 2023-06-05 | Exploit code |
| CVE-2023-33409 | miniCal cross-site request forgery | 6.5v3.1 | 0.4% | 2023-06-05 | Exploit code |
| CVE-2023-33408 | miniCal cross-site scripting | 5.4v3.1 | 0.5% | 2023-06-05 | Exploit code |
| CVE-2023-33386 | Marsctf unrestricted file upload | 9.8v3.1 | 1.0% | 2023-06-05 | |
| CVE-2023-32766 | Gitpod vulnerable to cross-site scripting | 6.1v3.1 | 0.6% | 2023-06-05 | Fix |
| CVE-2023-32334 | IBM Maximo Asset Management information disclosure | 3.7CNA v3.1 | 0.6% | 2023-06-05 | Fix |
| CVE-2023-32217 | SailPoint IdentityIQ Unsafe use of Reflection vulnerability | 9.0CNA v3.1 | 0.6% | 2023-06-05 | Fix |
| CVE-2023-31893 | Telefonica Brasil Vivo Play uncontrolled recursion | 7.5v3.1 | 0.9% | 2023-06-05 | |
| CVE-2023-29631 | Joommasters Jms Slider unrestricted file upload | 9.8v3.1 | 0.7% | 2023-06-05 | |
| CVE-2023-29630 | Joommasters Jms Drop Mega Menu SQL injection | 9.8v3.1 | 1.0% | 2023-06-05 | |
| CVE-2023-29629 | Jmsthemelayout SQL injection | 9.8v3.1 | 1.0% | 2023-06-05 | |
| CVE-2023-29344 | Microsoft Office remote code execution | 7.8CNA v3.1 | 0.9% | 2023-06-05 | Fix |
| CVE-2023-27989 | Zyxel NR7101 firmware CGI program of the Zyxel buffer overflow | 6.5CNA v3.1 | 1.0% | 2023-06-05 | Fix |
| CVE-2023-27861 | IBM Maximo Application Suite information disclosure | 5.9CNA v3.1 | 0.3% | 2023-06-05 | Fix |
| CVE-2023-27285 | IBM Aspera buffer overflow | 8.4CNA v3.1 | 0.2% | 2023-06-05 | Fix |
| CVE-2023-24510 | Arista EOS DHCP relay agent vulnerability | 7.5CNA v3.1 | 0.6% | 2023-06-05 | Fix |
| CVE-2023-22862 | IBM Aspera information disclosure | 5.9CNA v3.1 | 0.5% | 2023-06-05 | Fix |
| CVE-2023-3111 | kernel use-after-free | 7.8NVD v3.1 | 0.4% | 2023-06-05 | Fix |
| CVE-2023-3109 | Cross-site scripting (XSS) Stored in Admidio/Admidio | 5.4v3.1 | 0.5% | 2023-06-05 | Fix |
| CVE-2023-3100 | IBOS del actionDel SQL injection | 9.8v3.1 | 0.7% | 2023-06-05 | |
| CVE-2023-3099 | KylinSoft youker-assistant Arbitrary file dbus.SystemBus delete_file access control | 7.1v3.1 | 0.3% | 2023-06-05 | |
| CVE-2023-3098 | KylinSoft youker-assistant restore_all_sound_file path traversal | 7.8v3.1 | 0.7% | 2023-06-05 | |
| CVE-2023-3097 | KylinSoft kylin-software-properties setMainSource os command injection | 7.8v3.1 | 2.1% | 2023-06-05 | |
| CVE-2023-3096 | KylinSoft kylin-software-properties changedSource access control | 7.8v3.1 | 0.3% | 2023-06-05 | |
| CVE-2023-3079 | Google Chromium V8 type confusion | 8.8NVD v3.1 | 37.9% | 2023-06-05 | KEVExploit codeFix |
| CVE-2023-3066 | Mobatime mobile application AMXGT100 incorrect authorization | 8.1v3.1 | 0.6% | 2023-06-05 | |
| CVE-2023-3065 | Mobatime mobile application authentication bypass | 9.1v3.1 | 0.8% | 2023-06-05 | |
| CVE-2023-3064 | Mobatime mobile application sensitive information disclosure | 5.3NVD v3.1 | 0.6% | 2023-06-05 | |
| CVE-2023-3027 | RHACM improper privilege management | 7.8v3.1 | 0.2% | 2023-06-05 | |
| CVE-2023-2634 | Get Your Number WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-06-05 | |
| CVE-2023-2572 | Survey Maker WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-06-05 | Fix |
| CVE-2023-2571 | Quiz Maker WordPress plugin reflected XSS | 6.1NVD v3.1 | 2.1% | 2023-06-05 | Fix |
| CVE-2023-2503 | 10Web Social Post Feed reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-06-05 | Fix |
| CVE-2023-2489 | Stop Spammers Security WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-06-05 | Fix |
| CVE-2023-2488 | Stop Spammers Security WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-06-05 | Fix |
| CVE-2023-2472 | Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-06-05 | Fix |
| CVE-2023-2337 | ConvertKit WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-06-05 | Fix |
| CVE-2023-2224 | Seo By 10Web WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.9% | 2023-06-05 | NucleiFix |
| CVE-2023-0900 | AP Pricing Tables Lite WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 3.2% | 2023-06-05 | Nuclei |
| CVE-2023-0636 | ABB ASPECT-Enterprise remote code execution via command injection | 7.2CNA v3.1 | 1.4% | 2023-06-05 | Fix |
| CVE-2023-0635 | ABB ASPECT-Enterprise privilege escalation to root | 7.8CNA v3.1 | 0.4% | 2023-06-05 | Fix |
| CVE-2023-0545 | Hostel WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-06-05 | Fix |
| CVE-2023-0152 | WP Multi Store Locator WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-06-05 | Fix |
| CVE-2023-0041 | IBM Security Guardium session fixation | 6.3CNA v3.1 | 0.5% | 2023-06-05 | Fix |
| CVE-2023-3095 | Improper access control in nilsteampassnet/TeamPass | 6.5v3.1 | 0.4% | 2023-06-04 | Fix |
| CVE-2023-3094 | code-projects Agro-School Management System btn_functions.php doUpdateQuestion SQL injection | 9.8v3.1 | 0.7% | 2023-06-04 | |
| CVE-2023-3091 | Captura CRYPTBASE.dll uncontrolled search path | 7.8v3.1 | 0.2% | 2023-06-04 | |
| CVE-2023-33143 | Microsoft Edge (Chromium-based) elevation of privilege | 7.5CNA v3.1 | 1.5% | 2023-06-03 | Fix |
| CVE-2023-32582 | Don8 WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-03 | |
| CVE-2023-3086 | Cross-site scripting (XSS) Stored in nilsteampassnet/TeamPass | 9.0v3.1 | 0.9% | 2023-06-03 | Fix |
| CVE-2023-3085 | X-WRT luci 404 Error template dispatcher.uc run_action cross-site scripting | 6.1v3.1 | 0.5% | 2023-06-03 | Fix |
| CVE-2023-3084 | Cross-site scripting (XSS) Stored in nilsteampassnet/TeamPass | 8.1v3.1 | 0.8% | 2023-06-03 | Fix |
| CVE-2023-3083 | Cross-site scripting (XSS) Stored in nilsteampassnet/TeamPass | 8.7v3.1 | 0.7% | 2023-06-03 | Fix |
| CVE-2023-3055 | Page Builder by AZEXO WordPress plugin cross-site request forgery to stored cross-site scripting | 4.3v3.1 | 0.2% | 2023-06-03 | Fix |
| CVE-2023-3053 | Page Builder by AZEXO WordPress plugin missing authorization to post creation | 4.3v3.1 | 0.5% | 2023-06-03 | Fix |
| CVE-2023-3052 | Page Builder by AZEXO WordPress plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-06-03 | Fix |
| CVE-2023-3051 | Page Builder by AZEXO WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-06-03 | Fix |
| CVE-2023-2781 | User Email Verification for WooCommerce WordPress plugin authentication bypass | 9.8v3.1 | 1.2% | 2023-06-03 | Fix |
| CVE-2023-2416 | vcita Online Booking and Scheduling Calendar logout function cross-site request forgery | 6.5v3.1 | 0.4% | 2023-06-03 | Fix |
| CVE-2023-2415 | Online Booking and Scheduling Calendar for WordPress by vcita WordPress plugin unauthorized access | 5.4v3.1 | 0.7% | 2023-06-03 | Fix |
| CVE-2023-2407 | vcita Event Registration Calendar cross-site request forgery | 6.5v3.1 | 0.4% | 2023-06-03 | Fix |
| CVE-2023-2406 | vcita Event Registration Calendar email field stored cross-site scripting | 5.4v3.1 | 0.8% | 2023-06-03 | Fix |
| CVE-2023-2405 | CRM and Lead Management by vcita WordPress plugin cross-site request forgery | 6.5v3.1 | 0.3% | 2023-06-03 | Fix |
| CVE-2023-2404 | CRM and Lead Management by vcita WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-06-03 | Fix |
| CVE-2023-2303 | Contact Form and Calls To Action by vcita WordPress plugin cross-site request forgery | 6.1v3.1 | 0.3% | 2023-06-03 | Fix |
| CVE-2023-2302 | Contact Form and Calls To Action by vcita WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-06-03 | Fix |
| CVE-2023-2301 | Contact Form Builder by vcita WordPress plugin cross-site request forgery | 6.1v3.1 | 0.3% | 2023-06-03 | Fix |
| CVE-2023-2300 | Contact Form Builder by vcita WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-06-03 | Fix |
| CVE-2023-2299 | vcita Online Booking and Scheduling Calendar REST API authentication endpoint missing authorization | 5.3v3.1 | 0.6% | 2023-06-03 | Fix |
| CVE-2023-2298 | vcita Online Booking and Scheduling Calendar business_id parameter stored cross-site scripting | 6.1NVD v3.1 | 0.6% | 2023-06-03 | Fix |
| CVE-2023-0584 | VK Blocks WordPress plugin Authenticated(Contributor+) settings update | 4.3v3.1 | 0.5% | 2023-06-03 | Fix |
| CVE-2023-0583 | VK Blocks WordPress plugin Authenticated(Contributor+) settings update | 4.3v3.1 | 0.5% | 2023-06-03 | Fix |
| CVE-2023-34362 | Progress MOVEit Transfer SQL injection | 9.8NVD v3.1 | 99.9% | 2023-06-02 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2023-34094 | ChuanhuChatGPT vulnerable to unauthorized configuration file access | 7.5CNA v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-33763 | Simpleredak cross-site scripting | 6.1v3.1 | 0.5% | 2023-06-02 | |
| CVE-2023-33762 | Simpleredak SQL injection | 9.8v3.1 | 0.9% | 2023-06-02 | |
| CVE-2023-33761 | Simpleredak cross-site scripting | 6.1v3.1 | 0.5% | 2023-06-02 | |
| CVE-2023-33731 | Escanav Escan Management Console reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2023-06-02 | |
| CVE-2023-33717 | MP4v2 MP4File::ReadBytes function memory leak | 5.5v3.1 | 0.3% | 2023-06-02 | |
| CVE-2023-33675 | Tenda AC8 out-of-bounds write | 9.8v3.1 | 1.2% | 2023-06-02 | |
| CVE-2023-33673 | Tenda AC8 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-06-02 | |
| CVE-2023-33672 | Tenda AC8 out-of-bounds write | 7.5v3.1 | 0.9% | 2023-06-02 | |
| CVE-2023-33671 | Tenda AC8 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-06-02 | |
| CVE-2023-33670 | Tenda AC8 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-06-02 | |
| CVE-2023-33669 | Tenda AC8 out-of-bounds write | 9.8v3.1 | 2.1% | 2023-06-02 | Exploit code |
| CVE-2023-33476 | Readymedia out-of-bounds write | 9.8v3.1 | 2.1% | 2023-06-02 | Exploit codeFix |
| CVE-2023-32215 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 0.8% | 2023-06-02 | Fix |
| CVE-2023-32213 | Mozilla Firefox uninitialized resource use | 8.8v3.1 | 0.8% | 2023-06-02 | Fix |
| CVE-2023-32212 | Mozilla Firefox and Thunderbird datalist element vulnerability | 4.3v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-32211 | Mozilla Firefox and Thunderbird type checking vulnerability | 6.5v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-32207 | Mozilla Firefox authentication bypass by spoofing | 8.8v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-32206 | Mozilla Firefox RLBox Expat driver out-of-bounds read | 6.5v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-32205 | Mozilla Firefox spoofing | 4.3v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-30604 | Hitron Technologies Inc. Coda-5310 broken access control | 9.8CNA v3.1 | 0.9% | 2023-06-02 | Fix |
| CVE-2023-30603 | Hitron Technologies Inc. Coda-5310 using default credentials | 9.8v3.1 | 0.8% | 2023-06-02 | Fix |
| CVE-2023-30602 | Hitron Technologies Inc. Coda-5310 Insecure service Telnet | 7.5CNA v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-30149 | Ebewe City Autocomplete SQL injection | 9.8v3.1 | 16.9% | 2023-06-02 | |
| CVE-2023-29746 | The Thaiger code execution | 9.8v3.1 | 1.4% | 2023-06-02 | |
| CVE-2023-29725 | BT21 x BTS Wallpaper preference database denial of service | 5.5v3.1 | 0.4% | 2023-06-02 | |
| CVE-2023-29724 | BT21 X Bts Wallpaper privilege escalation | 7.8v3.1 | 0.4% | 2023-06-02 | |
| CVE-2023-29551 | Mozilla Firefox memory safety bugs | 8.8v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-29550 | Mozilla Firefox memory safety bugs | 8.8v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-29549 | Mozilla Firefox inadequate encryption strength | 6.5v3.1 | 0.3% | 2023-06-02 | Fix |
| CVE-2023-29548 | Mozilla Firefox ARM64 Ion compiler vulnerability | 6.5v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-29547 | Mozilla Firefox cookie jar vulnerability | 6.5v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-29544 | Mozilla Firefox resource exhaustion | 6.5v3.1 | 0.4% | 2023-06-02 | Fix |
| CVE-2023-29543 | Mozilla Firefox use-after-free | 8.8v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-29541 | Mozilla Firefox improper output encoding | 8.8v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-29540 | Mozilla Firefox open redirect | 6.1v3.1 | 0.3% | 2023-06-02 | Fix |
| CVE-2023-29539 | Mozilla Firefox null pointer dereference | 8.8v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-29538 | Mozilla Firefox resource exposure | 4.3v3.1 | 0.4% | 2023-06-02 | Fix |
| CVE-2023-29537 | Mozilla Firefox race condition | 7.5v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-29536 | Mozilla Firefox use-after-free | 8.8v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-29535 | Mozilla Firefox memory corruption | 6.5v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-29533 | Mozilla Firefox spoofing | 4.3v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-28705 | Openfind MAIL2000 XSS (reflected cross-site scripting) | 6.1v3.1 | 0.4% | 2023-06-02 | Fix |
| CVE-2023-28704 | Furbo Dog Camera command injection | 8.8CNA v3.1 | 1.0% | 2023-06-02 | |
| CVE-2023-28703 | ASUS RT-AC86U buffer overflow | 7.2CNA v3.1 | 0.9% | 2023-06-02 | Fix |
| CVE-2023-28702 | ASUS RT-AC86U command injection | 8.8CNA v3.1 | 1.2% | 2023-06-02 | Fix |
| CVE-2023-28701 | ELITE Web Fax SQL injection | 9.8CNA v3.1 | 0.9% | 2023-06-02 | Fix |
| CVE-2023-28700 | ITPison OMICARD EDM arbitrary file upload | 6.8CNA v3.1 | 0.3% | 2023-06-02 | |
| CVE-2023-28699 | WADE DIGITAL DESIGN CO, LTD. FANTSY arbitrary file upload | 8.8CNA v3.1 | 0.9% | 2023-06-02 | Fix |
| CVE-2023-28698 | WADE DIGITAL DESIGN CO, LTD. FANTSY Broken Acesss Control | 9.8CNA v3.1 | 0.8% | 2023-06-02 | Fix |
| CVE-2023-28469 | Arm Avalon GPU Kernel Driver use-after-free | 5.5v3.1 | 0.2% | 2023-06-02 | Fix |
| CVE-2023-28177 | Mozilla Firefox memory safety bugs | 8.8v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-28176 | Mozilla Firefox memory safety bugs | 8.8v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-28164 | Mozilla Firefox origin validation error | 6.5v3.1 | 0.3% | 2023-06-02 | Fix |
| CVE-2023-28163 | Mozilla Firefox path traversal | 6.5v3.1 | 0.8% | 2023-06-02 | Fix |
| CVE-2023-28162 | Mozilla Firefox incorrect type conversion | 8.8v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-28161 | Mozilla Firefox improper preservation of permissions | 8.8v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-28160 | Mozilla Firefox forced browsing | 6.5v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-28159 | Mozilla Firefox clickjacking | 4.3v3.1 | 0.3% | 2023-06-02 | Fix |
| CVE-2023-28147 | An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r29p0 through r32p0, Bifrost r17p0 through r42p0 before r43p0, Valhall r19p0 through r42p0 before r43p0, and Arm's | 5.5v3.1 | 0.2% | 2023-06-02 | Fix |
| CVE-2023-27745 | Southrivertech Titan FTP Server Nextgen origin validation error | 8.8v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-27744 | Southrivertech Titan FTP Server Nextgen code injection | 7.8v3.1 | 0.8% | 2023-06-02 | Fix |
| CVE-2023-25780 | Status Internet Co.,Ltd. PowerBPM broken access control | 5.7CNA v3.1 | 0.3% | 2023-06-02 | Fix |
| CVE-2023-25752 | Mozilla Firefox and Thunderbird throttled streams handling vulnerability | 6.5v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-25751 | Mozilla Firefox crash | 6.5v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-25750 | Mozilla Firefox path traversal | 4.3v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-25749 | Mozilla Firefox incorrect authorization | 4.3v3.1 | 0.4% | 2023-06-02 | Fix |
| CVE-2023-25748 | Mozilla Firefox clickjacking | 4.3v3.1 | 0.3% | 2023-06-02 | Fix |
| CVE-2023-25746 | Mozilla Firefox ESR memory safety bugs | 8.8v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-25745 | Mozilla Firefox memory safety bugs | 8.8v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-25744 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-25743 | Mozilla Firefox authentication bypass by spoofing | 7.5v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-25742 | Mozilla Firefox crash | 6.5v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-25741 | Mozilla Firefox observable discrepancy | 6.5v3.1 | 0.8% | 2023-06-02 | Fix |
| CVE-2023-25740 | Mozilla Firefox insufficiently protected credentials | 8.8v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-25739 | Mozilla Firefox use-after-free | 8.8v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-25738 | Mozilla Firefox out-of-bounds read | 6.5v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-25737 | Mozilla Firefox incorrect type conversion | 8.8v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-25735 | Mozilla Firefox use-after-free | 8.8v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-25734 | Mozilla Firefox open redirect | 8.1v3.1 | 0.8% | 2023-06-02 | Fix |
| CVE-2023-25732 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-25731 | Mozilla Firefox improper quantity validation | 8.8v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-25730 | Mozilla Firefox clickjacking | 5.4v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-25729 | Mozilla Firefox incorrect authorization | 8.8v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-25728 | Mozilla Firefox observable discrepancy | 6.5v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-23606 | Mozilla memory safety bugs fixed in Firefox 109 | 8.8v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-23605 | Mozilla memory safety bugs fixed in Firefox 109 and Firefox ESR | 8.8v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-23604 | Mozilla Firefox creation of duplicate SystemPrincipal from less secure contexts | 6.5v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-23603 | Mozilla Firefox calls to console.log allowed bypassing Content Security Policy via format directive | 6.5v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-23602 | Mozilla Firefox Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers | 6.5v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-23601 | Mozilla Firefox URL being dragged from cross-origin iframe into same tab triggers navigation | 6.5v3.1 | 0.3% | 2023-06-02 | Fix |
| CVE-2023-23600 | Mozilla Firefox Notification permissions persisted between Normal and Private Browsing on Android | 6.5v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-23599 | Mozilla Firefox malicious command could be hidden in devtools output on Windows | 6.5v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-23598 | Mozilla Firefox arbitrary file read from GTK drag and drop on Linux | 6.5v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-23597 | Mozilla Firefox logic bug in process allocation allowed to read arbitrary files | 6.5v3.1 | 0.3% | 2023-06-02 | Fix |
| CVE-2023-3075 | Cross-site request forgery (CSRF) in tsolucio/Corebos | 6.5NVD v3.1 | 0.3% | 2023-06-02 | Fix |
| CVE-2023-3074 | Cross-site scripting (XSS) Stored in tsolucio/Corebos | 5.4NVD v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-3073 | Cross-site scripting (XSS) Stored in tsolucio/Corebos | 5.4v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-3071 | Cross-site scripting (XSS) Stored in tsolucio/Corebos | 5.4NVD v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-3070 | Cross-site scripting (XSS) Stored in tsolucio/Corebos | 5.4NVD v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-3069 | Unverified password change in tsolucio/Corebos | 9.8v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-3068 | Campcodes Retro Cellphone Online Store modal_add_product.php SQL injection | 9.8v3.1 | 0.8% | 2023-06-02 | |
| CVE-2023-3067 | Cross-site scripting (XSS) Stored in zadam/Trilium | 5.4v3.1 | 0.4% | 2023-06-02 | Fix |
| CVE-2023-3062 | code-projects Agro-School Management System index.php SQL injection | 9.8v3.1 | 0.8% | 2023-06-02 | |
| CVE-2023-3061 | code-projects Agro-School Management System Attachment Image btn_functions.php unrestricted upload | 9.8v3.1 | 0.9% | 2023-06-02 | |
| CVE-2023-3060 | code-projects Agro-School Management System btn_functions.php doAddQuestion cross-site scripting | 5.4v3.1 | 0.6% | 2023-06-02 | |
| CVE-2023-3059 | SourceCodester Online Exam Form Submission update_s6.php SQL injection | 9.8v3.1 | 0.7% | 2023-06-02 | |
| CVE-2023-3058 | 07FLY CRM User Profile cross-site scripting | 5.4v3.1 | 0.6% | 2023-06-02 | |
| CVE-2023-3057 | YFCMF Ajax.php path traversal | 9.8v3.1 | 1.2% | 2023-06-02 | |
| CVE-2023-3056 | YFCMF index.php path traversal | 9.8v3.1 | 1.2% | 2023-06-02 | |
| CVE-2023-3044 | Divide-by-zero in Xpdf due to very large page size | 3.3CNA v3.1 | 0.3% | 2023-06-02 | Fix |
| CVE-2023-3033 | Mobatime web application broken authorisation mechanisms | 8.8v3.1 | 0.6% | 2023-06-02 | |
| CVE-2023-3032 | Mobatime web application arbitrary file upload (RCE) | 8.8v3.1 | 0.8% | 2023-06-02 | |
| CVE-2023-3031 | Prestahop module King-Avis path traversal | 4.9v3.1 | 0.8% | 2023-06-02 | Fix |
| CVE-2023-3000 | SQLi in Erikoglu Technology's ErMon | 9.8CNA v3.1 | 0.8% | 2023-06-02 | Fix |
| CVE-2023-2835 | WP Directory Kit WordPress plugin reflected cross-site scripting via search | 6.1v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2023-2816 | Consul Envoy Extension Downsteam Proxy Configuration by Upstream Service Owner | 8.7CNA v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-2687 | silabs.com Gecko SDK Platform CLI component in Silicon Labs buffer overflow | 2.9CNA v3.1 | 0.2% | 2023-06-02 | Fix |
| CVE-2023-2201 | Web Directory Free WordPress plugin authenticated (Contributor+) SQL injection via post_id | 8.8v3.1 | 0.8% | 2023-06-02 | Fix |
| CVE-2023-2063 | Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP unrestricted file upload | 6.3CNA v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-2062 | Information disclosure vulnerability in EtherNet/IP Configuration tools | 6.2CNA v3.1 | 0.3% | 2023-06-02 | Fix |
| CVE-2023-2061 | Authentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP modules | 6.2CNA v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-2060 | Authentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP modules | 7.5CNA v3.1 | 0.8% | 2023-06-02 | Fix |
| CVE-2023-1945 | Mozilla Thunderbird out-of-bounds write | 6.5v3.1 | 0.6% | 2023-06-02 | Fix |
| CVE-2023-1297 | Consul Cluster Peering can result in denial of service | 4.9CNA v3.1 | 0.8% | 2023-06-02 | Fix |
| CVE-2023-1159 | Bookly WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-06-02 | Fix |
| CVE-2023-0767 | Mozilla Firefox and Thunderbird PKCS 12 Safe Bag parser vulnerability | 8.8v3.1 | 0.8% | 2023-06-02 | Fix |
| CVE-2023-0616 | Mozilla Thunderbird resource exhaustion | 6.5v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2023-0547 | Mozilla Thunderbird improper certificate validation | 6.5v3.1 | 0.4% | 2023-06-02 | Fix |
| CVE-2023-0430 | Mozilla Thunderbird improper certificate validation | 6.5v3.1 | 0.4% | 2023-06-02 | Fix |
| CVE-2023-34339 | JetBrains Ktor information disclosure through error messages | 3.3CNA v3.1 | 0.2% | 2023-06-01 | Fix |
| CVE-2023-34312 | Tencent Tim release of an invalid pointer | 7.8v3.1 | 0.6% | 2023-06-01 | Exploit code |
| CVE-2023-34092 | Vite Server options (server.fs.deny) can be bypassed using double forward-slash (//) | 7.5CNA v3.1 | 3.1% | 2023-06-01 | NucleiFix |
| CVE-2023-34091 | Kyverno resource with a deletionTimestamp may allow policy circumvention | 6.5CNA v3.1 | 0.5% | 2023-06-01 | Fix |
| CVE-2023-33965 | Brook's tproxy server is vulnerable to a drive-by command injection | 9.7CNA v3.1 | 1.6% | 2023-06-01 | Fix |
| CVE-2023-33963 | DataEase data source has deserialization | 9.8CNA v3.1 | 1.3% | 2023-06-01 | Fix |
| CVE-2023-33960 | OpenProject vulnerable to project identifier information leakage through robots.txt | 7.5CNA v3.1 | 1.3% | 2023-06-01 | NucleiFix |
| CVE-2023-33778 | DrayTek Myvigor hard-coded credentials | 9.8v3.1 | 0.6% | 2023-06-01 | |
| CVE-2023-33764 | Simpleredak cross-site scripting | 5.4v3.1 | 0.5% | 2023-06-01 | |
| CVE-2023-33754 | Inpiazza Cloud Wifi missing brute-force protection | 6.5v3.1 | 0.7% | 2023-06-01 | |
| CVE-2023-33719 | MP4v2 MP4SdpAtom::Read function memory leak | 5.5v3.1 | 0.3% | 2023-06-01 |