Skip to content
OpenAdvisories

Archive

16 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /16 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-48472

    A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execut…

    Huawei BiSheng-WNM Network devices
  • Critical 10.0
    CVE-2023-34157

    Vulnerability of HwWatchHealth being hijacked.Successful exploitation of this vulnerability may cause repeated pop-up w…

    Huawei HarmonyOS Network devices
  • Critical 9.8
    CVE-2023-34659 Scanner template EPSS 12%

    jeecg-boot SQL injection vulnerability

    jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface.

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • Critical 9.8
    CVE-2023-34548

    Simple Customer Relationship Management 1.0 is vulnerable to SQL Injection via the email parameter.

  • Critical 9.8
    CVE-2023-32752

    L7 Networks InstantScan & InstantQoS - Arbitrary File Upload

    L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbi…

    L7 Networks InstantQoS InstantScan
  • Critical 9.8
    CVE-2023-32753

    ITPison OMICARD EDM - Arbitrary File Upload

    OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.

    ITPison Contact ITPison
  • Critical 9.8
    CVE-2023-32754

    Thinking Software Efence - SQL injection

    Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.

    Thinking Software Technology Efence
  • Critical 9.8
    CVE-2023-25366

    In Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS, insecure SCPI interface discloses web password.