Archive
23 June 2023
Vulnerabilities first published on this day (UTC), newest first.
192 results · Feed
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Low 2.7
Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged rem…
-
Low 3.4
Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A r…
-
Critical 9.6CVE-2023-33299 EPSS 24%
A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions…
-
High 8.8
Apache StreamPipes: Privilege escalation through non-admin user
A REST interface in Apache StreamPipes (versions 0.69.0 to 0.91.0) was not properly restricted to admin-only access. This allowed a non-admin user with valid login credentials to elevate privileges beyond the initially assigned roles. The issue is resolved by…
-
Low 3.0
HCL BigFix WebUI Insights is susceptible to a lack of sufficient authorization
A permission issue in BigFix WebUI Insights site version 14 allows an authenticated, unprivileged operator to access an administrator page.
-
High 7.5
Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability
Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability
-
Unscored —
Improper Access Control leads to adding a high-privilege user affecting Elenos ETG150 FM transmitter running on version…
-
Unscored —
Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive …
-
Unscored —
In Progress OpenEdge OEM (OpenEdge Management) and OEE (OpenEdge Explorer) before 12.7, a remote user (who has any OEM …
-
Unscored —
Improper Access Control leads to privilege escalation affecting Elenos ETG150 FM transmitter running on version 3.12 by…
-
Unscored —
The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. By sending a singl…
-
Unscored —
In Progress WhatsUp Gold before 23.0.0, an SNMP-related application endpoint failed to adequately sanitize malicious in…
-
Unscored —CVE-2023-35801 Public exploit
A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation…
-
Unscored —
This issue was addressed with improved state management. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, …
-
Medium 6.5
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macO…
KEV May 22, 2023 -
Unscored —
This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 9.5, tvOS 16.…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, wa…
-
Unscored —
A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ven…
-
Unscored —
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5,…
-
Unscored —
A denial-of-service issue was addressed with improved memory handling. This issue is fixed in iOS 16.5 and iPadOS 16.5,…
-
Unscored —CVE-2023-32413 Public exploit
A race condition was addressed with improved state handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventu…
-
Unscored —
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.5 and iPadOS 1…
-
Unscored —
This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macO…
-
High 7.8
An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 1…
KEV Jun 23, 2023 -
Unscored —
The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5,…
-
Unscored —
A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, ma…
-
Unscored —
The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventu…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.7.7, macOS …
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.5, tvOS 16.5, mac…
-
Unscored —
A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, m…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macO…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, iOS …
-
Unscored —
A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, ma…
-
Unscored —
A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able…
-
Unscored —CVE-2023-32353 Public exploit
A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able…