Skip to content
OpenAdvisories

Archive

16 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /16 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

79 results · Feed

  • High 7.8
    CVE-2023-32027

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.4 Linux Windows macOS
  • High 7.8
    CVE-2023-32025

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.4 Linux Windows macOS
  • High 7.8
    CVE-2023-29356

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

    Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.4 Linux Windows macOS
  • Critical 9.8
    CVE-2023-34659 Scanner template EPSS 12%

    jeecg-boot SQL injection vulnerability

    jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface.

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • Unscored —
    CVE-2023-34795

    xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioread_sheetlist_close() …

  • Unscored —
    CVE-2023-34475

    A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c. An atta…

  • High 7.5
    CVE-2023-34645

    jfinal CMS 5.1.0 has an arbitrary file read vulnerability.

  • Medium 6.5
    CVE-2023-34660

    jeecg-boot unrestricted file upload vulnerability

    jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • Unscored —
    CVE-2023-34832

    TP-Link Archer AX10(EU)_V1.2_230220 was discovered to contain a buffer overflow via the function FUN_131e8 - 0x132B4.

  • Unscored —
    CVE-2023-34474

    A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A loc…

  • Critical 9.8
    CVE-2023-34548

    Simple Customer Relationship Management 1.0 is vulnerable to SQL Injection via the email parameter.

  • Unscored —
    CVE-2023-34845 Public exploit

    Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. Th…

  • Unscored —
    CVE-2023-34733

    A lack of exception handling in the Volkswagen Discover Media Infotainment System Software Version 0876 allows attacker…

  • Medium 5.4
    CVE-2023-33438

    A stored Cross-site scripting (XSS) vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0 allows remote attackers to inje…

  • Unscored —
    CVE-2023-35790

    An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can l…

    jpeg-xl jpeg-xl Debian Ubuntu
  • High 7.8
    CVE-2023-35788 Public exploit

    An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an o…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • High 8.2
    CVE-2023-35782

    ipandlanguageredirect extension vulnerable to SQL Injection

    The ipandlanguageredirect extension before 5.1.2 for TYPO3 allows SQL Injection.

    in2code/ipandlanguageredirect Packagist
  • Unscored —
    CVE-2023-35708 Scanner template EPSS 97%

    In Progress MOVEit Transfer before 2021.0.8 (13.0.8), 2021.1.6 (13.1.6), 2022.0.6 (14.0.6), 2022.1.7 (14.1.7), and 2023…

  • Unscored —
    CVE-2023-35789

    An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only…

    librabbitmq librabbitmq librabbitmq rabbitmq-c Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 6.3
    CVE-2023-35783

    ke_search (aka Faceted Search) vulnerable to Cross-Site Scripting

    The ke_search (aka Faceted Search) extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data.

    tpwd/ke_search Packagist
  • Unscored —
    CVE-2023-35784

    A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004,…

  • Critical 9.8
    CVE-2023-32752

    L7 Networks InstantScan & InstantQoS - Arbitrary File Upload

    L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbi…

    L7 Networks InstantScan InstantQoS
  • Critical 9.8
    CVE-2023-32753

    ITPison OMICARD EDM - Arbitrary File Upload

    OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.

    ITPison Contact ITPison
  • Critical 9.8
    CVE-2023-32754

    Thinking Software Efence - SQL injection

    Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.

    Thinking Software Technology Efence
  • High 7.5
    CVE-2023-24243 Scanner template

    CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).

  • Unscored —
    CVE-2023-3195

    A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. This flaw allows an attacker to trick the…

    imagemagick imagemagick Debian Ubuntu
  • High 7.6
    CVE-2023-3293

    Cross-site Scripting (XSS) - Stored in salesagility/suitecrm-core

    Cross-site Scripting (XSS) - Stored in GitHub repository salesagility/suitecrm-core prior to 8.3.0.

    salesagility salesagility/suitecrm-core
  • Medium 5.1
    CVE-2023-3291

    Heap-based Buffer Overflow in gpac/gpac

    Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2.

    gpac gpac/gpac gpac gpac Debian Ubuntu
  • High 7.6
    CVE-2023-3294

    Cross-site Scripting (XSS) - DOM in saleor/react-storefront

    Cross-site Scripting (XSS) - DOM in GitHub repository saleor/react-storefront prior to c29aab226f07ca980cc19787dcef101e11b83ef7.

    saleor saleor/react-storefront
  • High 7.1
    CVE-2023-3268

    An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c …

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2023-30223

    A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and earlier allows attackers to se…

  • Medium 5.4
    CVE-2023-30453

    The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter.

  • Unscored —
    CVE-2023-30222

    An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers t…

  • High 7.7
    CVE-2023-25645

    There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings,…

  • Medium 6.3
    CVE-2023-25187 Public exploit

    An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. Nokia Single RAN commissioning procedure…

  • Medium 5.1
    CVE-2023-25188

    An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) rem…

  • Critical 9.8
    CVE-2023-25366

    In Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS, insecure SCPI interface discloses web password.

  • Medium 5.1
    CVE-2023-25186

    An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) rem…

  • Low 3.8
    CVE-2023-25185

    An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. A mobile network solution internal fault…