Archive

16 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /16 July 2023 →

All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

High 8.8

CVE-2023-30625 Public exploit Scanner template EPSS 86%

rudder-server vulnerable to SQL Injection

rudder-server is part of RudderStack, an open source Customer Data Platform (CDP). Versions of rudder-server prior to 1.3.0-rc.1 are vulnerable to SQL injection. This issue may lead to Remote Code Execution (RCE) due to the `rudder` role in PostgresSQL having…

rudderlabs rudder-server github.com/rudderlabs/rudder-server Go

Jun 16, 2023
High 7.5

CVE-2022-48471

There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability ma…

Huawei BiSheng-WNM Network devices

Jun 16, 2023
High 8.0

CVE-2022-48330

A Huawei sound box product has an out-of-bounds write vulnerability. Attackers can exploit this vulnerability to cause …

Huawei FLMG-10 Network devices

Jun 16, 2023
High 7.1

CVE-2023-27420

WordPress Arya Multipurpose Theme <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Arya Multipurpose theme <= 1.0.5 versions.

Everest themes Arya Multipurpose

Jun 16, 2023
High 7.8

CVE-2023-29349

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.4 Linux Windows macOS

Jun 16, 2023
High 7.8

CVE-2023-32028

Microsoft SQL OLE DB Remote Code Execution Vulnerability

Microsoft SQL OLE DB Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.4

Jun 16, 2023
High 7.8

CVE-2023-32026

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.4 Linux Windows macOS

Jun 16, 2023
High 7.8

CVE-2023-32027

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.4 Linux Windows macOS

Jun 16, 2023
High 7.8

CVE-2023-32025

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.4 Linux Windows macOS

Jun 16, 2023
High 7.8

CVE-2023-29356

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.4 Linux Windows macOS

Jun 16, 2023
High 7.5

CVE-2023-34645

jfinal CMS 5.1.0 has an arbitrary file read vulnerability.

Jun 16, 2023
High 7.8

CVE-2023-35788 Public exploit

An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an o…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Jun 16, 2023
High 8.2

CVE-2023-35782

ipandlanguageredirect extension vulnerable to SQL Injection

The ipandlanguageredirect extension before 5.1.2 for TYPO3 allows SQL Injection.

in2code/ipandlanguageredirect Packagist

Jun 16, 2023
High 7.5

CVE-2023-24243 Scanner template

CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).

Jun 16, 2023
High 7.6

CVE-2023-3293

Cross-site Scripting (XSS) - Stored in salesagility/suitecrm-core

Cross-site Scripting (XSS) - Stored in GitHub repository salesagility/suitecrm-core prior to 8.3.0.

salesagility salesagility/suitecrm-core

Jun 16, 2023
High 7.6

CVE-2023-3294

Cross-site Scripting (XSS) - DOM in saleor/react-storefront

Cross-site Scripting (XSS) - DOM in GitHub repository saleor/react-storefront prior to c29aab226f07ca980cc19787dcef101e11b83ef7.

saleor saleor/react-storefront

Jun 16, 2023
High 7.1

CVE-2023-3268

An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c …

Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Jun 16, 2023
High 7.7

CVE-2023-25645

There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings,…

Jun 16, 2023