CVE-2023 records published in June 2023
Page three of three: records 2,001 to 2,054 of the 2,054 published in June 2023, newest first. The first page carries the figures for June 2023.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-33716 | MP4v2 MP4StringProperty class memory leak | 5.5v3.1 | 0.2% | 2023-06-01 | |
| CVE-2023-33552 | Erofs-utils erofs_read_one_data function at data.c heap-based buffer overflow | 7.8v3.1 | 0.7% | 2023-06-01 | Fix |
| CVE-2023-33551 | Erofs-utils erofsfsck_dirent_iter function in fsck/main.c heap-based buffer overflow | 7.8v3.1 | 0.8% | 2023-06-01 | Fix |
| CVE-2023-33546 | Janino vulnerable to denial of service due to stack overflow | 5.5v3.1 | 0.3% | 2023-06-01 | Fix |
| CVE-2023-33544 | hawtio vulnerable to path traversal | 5.5v3.1 | 0.3% | 2023-06-01 | Fix |
| CVE-2023-33461 | Ndevilla ini-parser null pointer dereference | 5.5v3.1 | 0.4% | 2023-06-01 | Fix |
| CVE-2023-32717 | Splunk Enterprise and Cloud Platform indexing preview endpoint improper authorization | 4.3v3.1 | 0.4% | 2023-06-01 | Fix |
| CVE-2023-32716 | Splunk Enterprise denial of service via the dump SPL command | 6.5v3.1 | 0.6% | 2023-06-01 | Fix |
| CVE-2023-32715 | Self cross-site scripting (XSS) on Splunk App for Lookup File Editing | 6.1v3.1 | 0.3% | 2023-06-01 | Fix |
| CVE-2023-32714 | Path traversal in Splunk App for Lookup File Editing | 8.1v3.1 | 42.8% | 2023-06-01 | Fix |
| CVE-2023-32713 | Local privilege escalation via the streamfwd program in Splunk App for Stream | 9.9v3.1 | 0.3% | 2023-06-01 | Fix |
| CVE-2023-32712 | Unauthenticated log injection in Splunk Enterprise | 3.1NVD v3.1 | 0.3% | 2023-06-01 | Fix |
| CVE-2023-32711 | Splunk Enterprise persistent cross-site scripting | 5.4v3.1 | 0.4% | 2023-06-01 | Fix |
| CVE-2023-32710 | Splunk Enterprise information disclosure via the copyresults SPL command | 5.3v3.1 | 0.4% | 2023-06-01 | Fix |
| CVE-2023-32709 | Low-privileged User can View Hashed Default Splunk Password | 4.3v3.1 | 0.4% | 2023-06-01 | Fix |
| CVE-2023-32708 | Splunk Enterprise HTTP response splitting via the rest SPL command | 8.8v3.1 | 0.7% | 2023-06-01 | Fix |
| CVE-2023-32707 | Splunk Enterprise edit_user capability privilege escalation | 8.8v3.1 | 78.9% | 2023-06-01 | MetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-32706 | Splunk Enterprise SAML authentication XML parser XML external entity injection | 6.5NVD v3.1 | 0.6% | 2023-06-01 | Fix |
| CVE-2023-32690 | Responder can Invoke undefined behavior in libspdm Requester | 5.7CNA v3.1 | 0.7% | 2023-06-01 | Fix |
| CVE-2023-32324 | OpenPrinting CUPS vulnerable to heap buffer overflow | 7.5CNA v3.1 | 1.5% | 2023-06-01 | Fix |
| CVE-2023-32310 | DataEase API interface has IDOR | 8.1CNA v3.1 | 1.0% | 2023-06-01 | Fix |
| CVE-2023-32181 | openSUSE libeconf stack buffer overflow in econf_writeFile function | 3.3CNA v3.1 | 0.6% | 2023-06-01 | Fix |
| CVE-2023-30758 | Implem Pleasanter cross-site scripting | 5.4v3.1 | 0.7% | 2023-06-01 | Fix |
| CVE-2023-29748 | Story Saver For Instagram - Video Downloader crash | 7.5v3.1 | 1.2% | 2023-06-01 | |
| CVE-2023-29736 | Timmystudios Keyboard Themes path traversal | 9.8v3.1 | 1.2% | 2023-06-01 | |
| CVE-2023-29723 | Glitter Unicorn Wallpaper preference database denial of service | 7.5v3.1 | 0.8% | 2023-06-01 | |
| CVE-2023-29722 | Glitter Unicorn Wallpaper privilege escalation | 9.1v3.1 | 0.8% | 2023-06-01 | |
| CVE-2023-29159 | Starlette has path traversal vulnerability in StaticFiles | 7.5v3.1 | 2.0% | 2023-06-01 | Fix |
| CVE-2023-29154 | Contec CONPROSYS HMI System (CHS) SQL injection | 7.2v3.1 | 41.4% | 2023-06-01 | Fix |
| CVE-2023-28937 | SAISON INFORMATION SYSTEMS DataSpider Servista hard-coded credentials | 8.8v3.1 | 0.8% | 2023-06-01 | Fix |
| CVE-2023-28824 | Contec CONPROSYS HMI System (CHS) server-side request forgery | 4.9v3.1 | 0.6% | 2023-06-01 | Fix |
| CVE-2023-28713 | Contec CONPROSYS HMI System (CHS) plaintext password storage | 8.1v3.1 | 0.4% | 2023-06-01 | Fix |
| CVE-2023-28657 | Contec CONPROSYS HMI System (CHS) improper access control | 8.8v3.1 | 0.7% | 2023-06-01 | Fix |
| CVE-2023-28651 | Contec CONPROSYS HMI System (CHS) cross-site scripting | 4.8v3.1 | 62.4% | 2023-06-01 | Fix |
| CVE-2023-28399 | Contec CONPROSYS HMI System (CHS) incorrect permission assignment | 7.8v3.1 | 0.2% | 2023-06-01 | Fix |
| CVE-2023-28066 | Dell OS Recovery Tool improper access control | 7.3CNA v3.1 | 0.2% | 2023-06-01 | Fix |
| CVE-2023-28043 | Dell Secure Connect Gateway weak cryptographic algorithm | 6.5CNA v3.1 | 0.3% | 2023-06-01 | Fix |
| CVE-2023-27640 | Tshirtecommerce Custom Product Designer path traversal | 7.5v3.1 | 3.6% | 2023-06-01 | Nuclei |
| CVE-2023-27639 | Tshirtecommerce Custom Product Designer path traversal | 7.5v3.1 | 3.6% | 2023-06-01 | Nuclei |
| CVE-2023-24584 | Controller 6000 buffer overflow via upload feature in web interface | 7.5CNA v3.1 | 0.5% | 2023-06-01 | Fix |
| CVE-2023-23955 | Advanced Secure Gateway, Content Analysis server-side request forgery | 8.1NVD v3.1 | 0.5% | 2023-06-01 | Fix |
| CVE-2023-23954 | Advanced Secure Gateway, Content Analysis cross-site scripting | 5.4NVD v3.1 | 0.3% | 2023-06-01 | Fix |
| CVE-2023-23953 | Advanced Secure Gateway, Content Analysis elevation of privilege | 7.8NVD v3.1 | 0.2% | 2023-06-01 | Fix |
| CVE-2023-23952 | Advanced Secure Gateway, Content Analysis command injection | 9.8NVD v3.1 | 1.3% | 2023-06-01 | Fix |
| CVE-2023-22652 | openSUSE libeconf stack buffer overflow in read_file function | 3.3CNA v3.1 | 0.6% | 2023-06-01 | Fix |
| CVE-2023-22648 | Rancher's Azure AD permission changes are not reflected on active sessions | 8.0CNA v3.1 | 0.5% | 2023-06-01 | Fix |
| CVE-2023-22647 | Rancher vulnerable to privilege escalation via manipulation of Secrets | 9.9CNA v3.1 | 0.7% | 2023-06-01 | Fix |
| CVE-2023-3035 | Guangdong Pythagorean OA Office System Schedule cross-site scripting | 5.4v3.1 | 0.6% | 2023-06-01 | |
| CVE-2023-3029 | Guangdong Pythagorean OA Office System delete cross-site request forgery | 8.8v3.1 | 0.4% | 2023-06-01 | |
| CVE-2023-3028 | Hangzhou Hopechart IoT Technology HQT-401 MQTT backend improper authentication | 9.8v3.1 | 0.2% | 2023-06-01 | |
| CVE-2023-3026 | Cross-site scripting (XSS) Stored in jgraph/drawio | 6.1v3.1 | 0.5% | 2023-06-01 | Fix |
| CVE-2023-2985 | Linux kernel use-after-free | 5.5NVD v3.1 | 0.2% | 2023-06-01 | Fix |
| CVE-2023-2977 | opensc buffer overflow | 7.1NVD v3.1 | 0.3% | 2023-06-01 | Fix |
| CVE-2023-2598 | kernel use-after-free | 7.8NVD v3.1 | 1.4% | 2023-06-01 | Exploit codeFix |