Skip to content
OpenAdvisories

Archive

June 2023

Vulnerabilities first published in this month (UTC), newest first.

← May 2023 2023 / June July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

854 results · Clear filters · Feed

  • Medium 5.5
    CVE-2023-33716

    mp4v2 v2.1.3 was discovered to contain a memory leak via the class MP4StringProperty at mp4property.cpp.

    mp4v2 Ubuntu
  • Medium 5.4
    CVE-2023-33764

    eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a stored cross-site scripting (XSS) vulnerabi…

  • Medium 5.5
    CVE-2023-33544

    hawtio vulnerable to Path Traversal

    hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite.

    io.hawt:project Maven
  • Medium 5.5
    CVE-2023-33546

    janino vulnerable to denial of service due to stack overflow

    Janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could supply content that causes the parser to crash due to a stack…

    janino org.codehaus.janino:janino-parent Debian Maven
  • Medium 5.5
    CVE-2023-33719

    mp4v2 v2.1.3 was discovered to contain a memory leak via MP4SdpAtom::Read() at atom_sdp.cpp

    mp4v2 Ubuntu
  • Medium 6.5
    CVE-2023-33754

    The captive portal in Inpiazza Cloud WiFi versions prior to v4.2.17 does not enforce limits on the number of attempts f…

  • Medium 5.5
    CVE-2023-33461

    iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for f…

    iniparser iniparser iniparser iniparser Debian Ubuntu Azure Linux Alpine
  • Medium 4.8
    CVE-2023-28651 EPSS 62%

    Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. If a user who can acce…

    Contec CONPROSYS HMI System(CHS)
  • Medium 4.9
    CVE-2023-28824

    Server-side request forgery vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can …

    Contec CONPROSYS HMI System(CHS)
  • Medium 5.5
    CVE-2023-28147

    An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing opera…

  • Medium 6.5
    CVE-2023-3026

    Cross-site Scripting (XSS) - Stored in jgraph/drawio

    Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 21.2.8.

    jgraph jgraph/drawio
  • Medium 5.5
    CVE-2023-2985

    A use after free flaw was found in hfsplus_put_super in fs/hfsplus/super.c in the Linux Kernel. This flaw could allow a…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Medium 5.4
    CVE-2023-30758

    Cross-site scripting vulnerability in Pleasanter 1.3.38.1 and earlier allows a remote authenticated attacker to inject …

    Implem Pleasanter
  • Medium 5.4
    CVE-2023-23954

    Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cross-Site Sc…