Archive

26 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /26 July 2023 →

All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

High 8.8

CVE-2023-3421

Use after free in Media in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium Browsers Debian

Jun 26, 2023
High 8.8

CVE-2023-3420 EPSS 56%

Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap cor…

Google Chrome chromium Browsers Debian

Jun 26, 2023
High 8.1

CVE-2023-34463

Unauthorized users can delete applications in DataEase

DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. In affected versions Unauthorized users can delete an application erroneously. This vulnerability has been fixed in version 1.18.8. Users are ad…

dataease dataease

Jun 26, 2023
High 7.2

CVE-2023-34420

A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted cal…

Lenovo Lenovo XClarity Administrator

Jun 26, 2023
High 8.1

CVE-2023-34418

A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due to…

Lenovo Lenovo XClarity Administrator

Jun 26, 2023
High 8.2

CVE-2023-3113

An unauthenticated XML external entity injection (XXE) vulnerability exists in LXCA's Common Information Model (CIM) se…

Lenovo Lenovo XClarity Administrator

Jun 26, 2023
High 7.5

CVE-2023-2992

An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which c…

Lenovo Fan Power Controller (FPC) System Management Module (SMM)

Jun 26, 2023
High 7.1

CVE-2023-29430

WordPress TheRoof Theme <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CTHthemes TheRoof theme <= 1.0.3 versions.

Cththemes TheRoof

Jun 26, 2023
High 7.1

CVE-2023-29427

WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin <= 1.0.75 versions.

TMS Booking for Appointments and Events Calendar – Amelia

Jun 26, 2023
High 7.1

CVE-2023-29424

WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Plainware ShiftController Employee Shift Scheduling plugin <= 4.9.23 versions.

plainware ShiftController Employee Shift Scheduling

Jun 26, 2023
High 7.5

CVE-2023-1150

WAGO: Series 750-3x/-8x prone to MODBUS server DoS

Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets.

WAGO 750-891 750-823 750-832/xxx-xxx ICS / OT

Jun 26, 2023
High 7.1

CVE-2023-28992

WordPress Coupon Affiliates Plugin <= 5.4.3 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Elliot Sowersby, RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin plugin <= 5.4.3 versions.

Elliot Sowersby / RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin Web / CMS

Jun 26, 2023
High 8.8

CVE-2023-25307

mrpack-install vulnerable to path traversal with dependency

nothub mrpack-install <= v0.16.2 is vulnerable to Directory Traversal.

github.com/nothub/mrpack-install Go

Jun 26, 2023