Archive
June 2023
Vulnerabilities first published in this month (UTC), newest first.
2,424 results · Feed
-
Low 3.5
SourceCodester Game Result Matrix System GET Parameter save-delegates.php cross site scripting
A vulnerability, which was classified as problematic, has been found in SourceCodester Game Result Matrix System 1.0. Affected by this issue is some unknown functionality of the file /dipam/save-delegates.php of the component GET Parameter Handler. The manipu…
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Low 3.5
SourceCodester Online School Fees System GET Parameter datatable.php cross site scripting
A vulnerability classified as problematic was found in SourceCodester Online School Fees System 1.0. Affected by this vulnerability is an unknown functionality of the file /paysystem/datatable.php of the component GET Parameter Handler. The manipulation of th…
-
Medium 4.7CVE-2023-3380 Scanner template
Wavlink WN579X3 Ping Test adm.cgi injection
A vulnerability classified as critical has been found in Wavlink WN579X3 up to 20230615. Affected is an unknown function of the file /cgi-bin/adm.cgi of the component Ping Test. The manipulation of the argument pingIp leads to injection. It is possible to lau…
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Low 2.7
Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged rem…
-
Low 3.4
Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A r…
-
Critical 9.6CVE-2023-33299 EPSS 24%
A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions…
-
High 8.8
Apache StreamPipes: Privilege escalation through non-admin user
A REST interface in Apache StreamPipes (versions 0.69.0 to 0.91.0) was not properly restricted to admin-only access. This allowed a non-admin user with valid login credentials to elevate privileges beyond the initially assigned roles. The issue is resolved by…
-
Low 3.0
HCL BigFix WebUI Insights is susceptible to a lack of sufficient authorization
A permission issue in BigFix WebUI Insights site version 14 allows an authenticated, unprivileged operator to access an administrator page.
-
High 7.5
Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability
Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability
-
Unscored —
Improper Access Control leads to adding a high-privilege user affecting Elenos ETG150 FM transmitter running on version…
-
Unscored —
Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive …
-
Unscored —
In Progress OpenEdge OEM (OpenEdge Management) and OEE (OpenEdge Explorer) before 12.7, a remote user (who has any OEM …
-
Unscored —
Improper Access Control leads to privilege escalation affecting Elenos ETG150 FM transmitter running on version 3.12 by…
-
Unscored —
The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. By sending a singl…
-
Unscored —
In Progress WhatsUp Gold before 23.0.0, an SNMP-related application endpoint failed to adequately sanitize malicious in…
-
Unscored —CVE-2023-35801 Public exploit
A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation…
-
Unscored —
This issue was addressed with improved state management. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, …
-
Medium 6.5
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macO…
KEV May 22, 2023 -
Unscored —
This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 9.5, tvOS 16.…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, wa…
-
Unscored —
A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ven…
-
Unscored —
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5,…
-
Unscored —
A denial-of-service issue was addressed with improved memory handling. This issue is fixed in iOS 16.5 and iPadOS 16.5,…