Archive
June 2023
Vulnerabilities first published in this month (UTC), newest first.
2,424 results · Feed
-
Critical 9.8
Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to p…
-
High 7.5
JeecgBoot vulnerable to SQL injection in queryFilterTableDictInfo
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController.
-
Unscored —
Vulnerability of services denied by early fingerprint APIs on HarmonyOS products.Successful exploitation of this vulner…
-
High 7.5
Permission control vulnerability in the window management module.Successful exploitation of this vulnerability may caus…
-
High 7.5
Vulnerability of system restart triggered by abnormal callbacks passed to APIs.Successful exploitation of this vulnerab…
-
Medium 5.3
Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-pa…
-
High 7.5
Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may…
-
High 7.5
packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory tra…
-
High 7.5
NocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allows an unauthenticated attacker to acces…
-
Unscored —
In Suricata before 6.0.13 (when there is an adversary who controls an external source of rules), a dataset filename, th…
-
Critical 9.8
Solon vulnerable to deserialization of untrusted data
A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload.
-
Unscored —
libcoap 4.3.1 contains a buffer over-read via the function coap_parse_oscore_conf_mem at coap_oscore.c.
-
High 7.5
VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performi…
-
Medium 6.5CVE-2023-35840 Public exploit
elFinder vulnerable to path traversal in LocalVolumeDriver connector
_joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.
-
Unscored —
In KeePassXC through 2.7.5, a local attacker can make changes to the Database security settings, including master passw…
-
Unscored —
VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before attempting to set a value of …
-
Unscored —
VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero).
-
Unscored —
A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to ex…
-
Unscored —
In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. T…
-
Unscored —
In Siren Investigate before 13.2.2, session keys remain active even after logging out.
-
Unscored —
A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's ma…
-
Unscored —
VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessi…
-
High 7.8
Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially cra…
-
High 7.8
Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially cra…
-
High 7.8
Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially cra…
-
High 7.8
Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially cra…
-
High 7.8
Access of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a spe…
-
High 7.8
Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 f…
-
High 7.8
Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM …
-
High 7.8
Stack-based buffer overflow vulnerability in V-Server v4.0.15.0 and V-Server Lite v4.0.15.0 and earlier allows an attac…
-
Critical 9.8
FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA…
-
High 7.5
A vulnerability was found in drivers/cpufreq/qcom-cpufreq-hw.c in cpufreq subsystem in the Linux Kernel. This flaw, dur…
-
Medium 5.5
A flaw was found in the IPv6 module of the Linux kernel. The arg.result was not used consistently in fib6_rule_lookup, …
-
High 8.4
The driver installation package created by Printer Driver Packager NX v1.0.02 to v1.1.25 fails to detect its modificati…
-
High 7.5
Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
-
High 7.5
Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
-
Low 2.4
A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolu…
-
Unscored —
Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
-
High 7.5
Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
-
High 7.5
Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.