CVEs published June 13, 2023
187 CVEs were published on June 13, 2023: 24 critical, 72 high. 4 are now in CISA KEV.
- Published
- 187
- Critical
- 24
- High
- 72
- Medium
- 67
- Low
- 13
- Unrated
- 11
- Now in CISA KEV
- 4
- Fix available
- 83
Most affected products
- Microsoft Windows
- 26
- Microsoft Windows Server
- 6
- HP PC BIOS
- 5
- discourse
- 4
- Fortinet FortiOS · Fortinet FortiProxy
- 4
- Google Chrome
- 4
- Microsoft SharePoint Server
- 4
- Siemens JT2Go · Siemens Teamcenter Visualization
- 4
- TMT Lockcell
- 4
- Fortinet FortiSIEM
- 3
Critical 24
- CVE-2023-32015Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-32014Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-29363Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-29357Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Server
- CVE-2022-43684ACL bypass in Reporting functionalityServiceNow Now Platform
- CVE-2023-34249benjjvi/PyBB may send unsanitized request to SQL databasebenjjvi PyBB
- CVE-2023-35064SQLi in Satos MobileSatos Mobile
- CVE-2023-3050Authentication Bypass in TMT's LockcellTMT Lockcell
- CVE-2023-3049File Upload in TMT's LockcellTMT Lockcell
- CVE-2023-3048IDOR in TMT's LockcellTMT Lockcell
- CVE-2023-3047SQLi in TMT's LockcellTMT Lockcell
- CVE-2023-27997A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below,Fortinet FortiOS-6K7K · Fortinet FortiProxy +1
- CVE-2023-29129A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3 < V1.18.0), Mendix SAML (Mendix 7…Siemens Mendix SAML
- CVE-2023-25910A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC…Siemens SIMATIC PCS · Siemens SIMATIC S7-PM +1
- CVE-2023-2278WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_actionwpdirectorykit WP Directory Kit
- CVE-2022-28550Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead.
- CVE-2023-24470Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.ArcSight Logger
- CVE-2023-27836TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the devicePwd parameter in…
- CVE-2023-27837TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the key parameter in the…
- CVE-2023-29562TP-Link TL-WPA7510 (EU)_V2_190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale.
- CVE-2023-30762Improper authentication vulnerability exists in KB-AHR series and KB-IRIP series.KbDevice KB-AHR series and KB-IRIP series
- CVE-2023-30764OS command injection vulnerability exists in KB-AHR series and KB-IRIP series.KbDevice KB-AHR series and KB-IRIP series
- CVE-2023-30766Hidden functionality issue exists in KB-AHR series and KB-IRIP series.KbDevice KB-AHR series and KB-IRIP series
- CVE-2023-31541A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for…
High 72
- CVE-2023-33135.NET and Visual Studio Elevation of Privilege VulnerabilityMicrosoft .NET · Microsoft Visual Studio
- CVE-2023-33133Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2023-33131Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2023-33130Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Server
- CVE-2023-33128.NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft .NET · Microsoft Visual Studio +13
- CVE-2023-33126.NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft .NET · Microsoft Visual Studio +5
- CVE-2023-32022Windows Server Service Security Feature Bypass VulnerabilityMicrosoft Windows Server
- CVE-2023-32021Windows SMB Witness Service Security Feature Bypass VulnerabilityMicrosoft Windows Server
- CVE-2023-32018Windows Hello Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-32017Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-32012Windows Container Manager Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-32011Windows iSCSI Discovery Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-32010Windows Bus Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-32009Windows Collaborative Translation Framework Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-32008Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-29373Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-29372Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-29371Windows GDI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29370Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-29368Windows Filtering Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29367iSCSI Target WMI Provider Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2023-29366Windows Geolocation Service Remote Code Execution VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2023-29365Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-29364Windows Authentication Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29362Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows · Microsoft Remote Desktop client for Win…
Show all 72 entriesShow fewer entries
- CVE-2023-29361Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2023-29360Microsoft Streaming Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29359GDI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29358Windows GDI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29351Windows Group Policy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29346NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21565Azure DevOps Server Spoofing VulnerabilityMicrosoft Azure DevOps Server
- CVE-2023-33146Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office 2019 for Mac · Microsoft 365 Apps for E… +1
- CVE-2023-33137Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft Excel
- CVE-2023-32029Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2023-2778Rockwell Automation FactoryTalk Transaction Manager Vulnerable to Denial-Of-ServiceRockwell Automation FactoryTalk Transaction Manager
- CVE-2023-2637Rockwell Automation FactoryTalk System Services Vulnerable To Use Of Hard-Coded Cryptographic KeyRockwell Automation FactoryTalk System Services
- CVE-2023-34114Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an authenticated user to…Zoom Video Communications Zoom for Windows Client · Zoom Vi…
- CVE-2023-3217Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a…Google Chrome
- CVE-2023-3216Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a…Google Chrome
- CVE-2023-3215Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a…Google Chrome
- CVE-2023-3214Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap…Google Chrome
- CVE-2023-34120Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an…Zoom Video Communications Zoom for Windows Client · Zoom… +1
- CVE-2023-28603Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability.Zoom Video Communications Zoom VDI Windows Meeting Client
- CVE-2023-1707Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to information disclosure when IPsec is enabled…HP Enterprise LaserJet and HP LaserJet Managed Printers
- CVE-2023-28601Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability.Zoom Video Communications Zoom for Windows Client
- CVE-2023-28598Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability.Zoom Video Communications Zoom for Linux clients
- CVE-2022-31639Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might…HP PC BIOS
- CVE-2022-31638Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might…HP PC BIOS
- CVE-2022-31637Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might…HP PC BIOS
- CVE-2022-31636Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might…HP PC BIOS
- CVE-2022-31635Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might…HP PC BIOS
- CVE-2023-26210Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] vulnerability…Fortinet FortiADC · Fortinet FortiADCManager
- CVE-2023-22633An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and…Fortinet FortiNAC
- CVE-2022-42478An Improper Restriction of Excessive Authentication Attempts [CWE-307] in FortiSIEM below 7.0.0 may allow a non-privileged user with…Fortinet FortiSIEM
- CVE-2022-41327A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through…Fortinet FortiOS · Fortinet FortiProxy
- CVE-2022-39946An access control vulnerability [CWE-284] in FortiNAC version 9.4.2 and below, version 9.2.7 and below, 9.1 all versions, 8.8 all…Fortinet FortiNAC
- CVE-2023-33919A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05).Siemens CP-8031 MASTER MODULE · Siemens CP-8050 MASTER MODU…
- CVE-2023-33124A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13)…Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2023-33123A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13)…Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2023-30897A vulnerability has been identified in SIMATIC WinCC (All versions < V7.5.2.13).Siemens SIMATIC WinCC
- CVE-2023-33991Stored Cross-Site Scripting (Stored XSS) vulnerability in SAP UI5 Variant ManagementSAP_SE SAP UI5 Variant Management
- CVE-2023-2827Missing Authentication in SAP Plant Connectivity and Production Connector for SAP DigitalSAP_SE SAP Plant Connectivity
- CVE-2022-47376The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation.Alaris Infusion Central
- CVE-2023-24546On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision could enable a…CloudVision
- CVE-2023-29160Stack-based buffer overflow vulnerability exists in FRENIC RHC Loader v1.1.0.3.FUJI ELECTRIC CO. FRENIC RHC Loader
- CVE-2023-29167Out-of-bound reads vulnerability exists in FRENIC RHC Loader v1.1.0.3.FUJI ELECTRIC CO. FRENIC RHC Loader
- CVE-2023-30179CraftCMS version 3.7.59 is vulnerable to Server-Side Template Injection (SSTI).
- CVE-2023-31196Missing authentication for critical function in Wi-Fi AP UNIT allows a remote unauthenticated attacker to obtain sensitive information of…Inaba Denki Sangyo Co. Wi-Fi AP UNIT
- CVE-2023-31198OS command injection vulnerability exists in Wi-Fi AP UNIT allows.Inaba Denki Sangyo Co. Wi-Fi AP UNIT
- CVE-2023-3224Code Injection in nuxt/nuxtnuxt/nuxt · nuxt
- CVE-2023-32548OS command injection vulnerability exists in WPS Office version 10.8.0.6186.KINGSOFT JAPAN WPS Office
Medium, low and unrated 91
- CVE-2023-33145Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMicrosoft Edge
- CVE-2023-33144Visual Studio Code Spoofing VulnerabilityMicrosoft Visual Studio Code
- CVE-2023-33142Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Server
- CVE-2023-33140Microsoft OneNote Spoofing VulnerabilityMicrosoft OneNote for Universal
- CVE-2023-33132Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Server
- CVE-2023-33129Microsoft SharePoint Server Denial of Service VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2023-32032.NET and Visual Studio Elevation of Privilege VulnerabilityMicrosoft .NET · Microsoft Visual Studio +1
- CVE-2023-32020Windows DNS Spoofing VulnerabilityMicrosoft Windows Server
- CVE-2023-32019Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-32016Windows Installer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-32013Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-29369Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2023-29355DHCP Server Service Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2023-29352Windows Remote Desktop Security Feature Bypass VulnerabilityMicrosoft Windows · Microsoft Remote Desktop client for Win…
- CVE-2023-21569Azure DevOps Server Spoofing VulnerabilityMicrosoft Azure DevOps Server
- CVE-2023-33139Visual Studio Information Disclosure VulnerabilityMicrosoft Visual Studio
- CVE-2023-29353Sysinternals Process Monitor for Windows Denial of Service VulnerabilityMicrosoft Windows Sysinternals Process Monitor · Microsoft…
- CVE-2023-24938Windows CryptoAPI Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-34250Discourse vulnerable to exposure of number of topics recently created in private categoriesdiscourse
- CVE-2023-32301Discourse's canonical url not being used for topic embeddingsdiscourse
- CVE-2023-32061Discourse Topic Creation Page Allows iFrame Tag without Restrictionsdiscourse
- CVE-2023-31142Discourse's general category permissions could be set back to defaultdiscourse
- CVE-2023-2639Rockwell Automation FactoryTalk System Services Vulnerable to Sensitive Information DisclosureRockwell Automation FactoryTalk System Services
- CVE-2023-2638Rockwell Automation FactoryTalk System Services Vulnerable to a Denial-of-Service AttackRockwell Automation FactoryTalk System Services
- CVE-2023-34115Buffer copy without checking size of input in Zoom Meeting SDK before 5.13.0 may allow an authenticated user to potentially enable a…Zoom Video Communications Zoom Meeting SDK
Show all 91 entriesShow fewer entries
- CVE-2023-34121Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated…Zoom Video Communications Zoom for Windows · Zoom Video… +1
- CVE-2023-28602Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability.Zoom Video Communications Zoom for Windows Client
- CVE-2023-28600Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability.Zoom Video Communications Zoom for macOS Client
- CVE-2023-28599Zoom clients prior to 5.13.10 contain an HTML injection vulnerability.Zoom Video Communications Zoom for Android · Zoom Video… +3
- CVE-2023-20867VMware Tools Authentication Bypass VulnerabilityVMware Tools
- CVE-2023-34247@keystone-6/auth Open Redirect vulnerabilitykeystonejs keystone · @keystone-6/auth
- CVE-2023-28303Windows Snipping Tool Information Disclosure VulnerabilityMicrosoft Snipping Tool · Microsoft Snip & Sketch for Windo…
- CVE-2023-25978WordPress Protected Posts Logout Button Plugin <= 1.4.5 is vulnerable to Cross Site Scripting (XSS)Nate Reist Protected Posts Logout Button
- CVE-2023-27624WordPress Redirect After Login Plugin <= 0.1.9 is vulnerable to Cross Site Scripting (XSS)Marcelotorres Redirect After Login
- CVE-2023-28620WordPress Cyberus Key Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)Cyberus Labs Cyberus Key
- CVE-2023-26528WordPress Shipyaari Shipping Management Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)jinit9906 Shipyaari Shipping Management
- CVE-2023-26538WordPress Chat Bee Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)Kamyabsoft Chat Bee
- CVE-2023-25964WordPress We’re Open! Plugin <= 1.46 is vulnerable to Cross Site Scripting (XSS)Noah Hearle, Design Extreme We’re Open!
- CVE-2022-42880WordPress Auto Upload Images Plugin <= 3.3 is vulnerable to Cross Site Request Forgery (CSRF)Ali Irani Auto Upload Images
- CVE-2023-23831WordPress Rating Widget Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS)Rating-Widget: Star Review System
- CVE-2023-2807Authentication bypass in password reset processArtica PFMS Pandora FMS
- CVE-2023-33305A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0.0 through…Fortinet FortiWeb · Fortinet FortiOS +1
- CVE-2023-29178A access of uninitialized pointer vulnerability [CWE-824] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.1Fortinet FortiOS · Fortinet FortiProxy
- CVE-2023-29175An improper certificate validation vulnerability [CWE-295] in FortiOS 6.2 all versions, 6.4 all versions, 7.0.0 through 7.0.10, 7.2.0 and…Fortinet FortiOS · Fortinet FortiProxy
- CVE-2023-28000An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC CLI 7.1.0, 7.0.0 through 7.0.3…Fortinet FortiADC
- CVE-2023-26204A plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all…Fortinet FortiSIEM
- CVE-2023-26207An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy 7.0.0 through…Fortinet FortiProxy · Fortinet FortiOS
- CVE-2023-25609A server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer GUI 7.2.0 through 7.2.1, 7.0.0 through…Fortinet FortiAnalyzer · Fortinet FortiManager
- CVE-2023-22639A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through…Fortinet FortiOS · Fortinet FortiProxy
- CVE-2022-43953A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0, FortiOS all…Fortinet FortiProxy · Fortinet FortiOS
- CVE-2022-43949A use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker…Fortinet FortiSIEM
- CVE-2022-42474A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before…Fortinet FortiSwitchManager · Fortinet FortiProxy +1
- CVE-2022-33877An incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0 through 7.0.6 and 6.4.0 through 6.4.8 and…Fortinet FortiConverter · Fortinet FortiClientWindows
- CVE-2023-33921A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05).Siemens CP-8031 MASTER MODULE · Siemens CP-8050 MASTER MODU…
- CVE-2023-33920A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05).Siemens CP-8031 MASTER MODULE · Siemens CP-8050 MASTER MODU…
- CVE-2023-33122A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13)…Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2023-33121A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13)…Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2023-31238A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All…Siemens SICAM P850 · Siemens SICAM P855 +1
- CVE-2023-30901A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All…Siemens SICAM P850 · Siemens SICAM P855 +1
- CVE-2023-30757A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation…Siemens Totally Integrated Automation Portal (TIA Portal)
- CVE-2023-28829A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS…Siemens SIMATIC NET PC Software · Siemens SIMATIC PCS 7 +2
- CVE-2023-27465A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5…Siemens SIMOTION C240 · Siemens SIMOTION D410-2 DP +9
- CVE-2023-2729Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561…Synology DiskStation Manager · Synology Unified Controll… +1
- CVE-2023-0142Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before…Synology DiskStation Manager · Synology Unified Controll… +1
- CVE-2023-2673PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input ValidationPHOENIX CONTACT FL MGUARD
- CVE-2023-2876Session cookie exposure for client side scriptABB REX640 PCL1 · ABB REX640 PCL2 +1
- CVE-2023-33986Cross-Site Scripting (XSS) vulnerability in SAP CRM ABAP (Grantor Management)SAP_SE SAP CRM ABAP
- CVE-2023-33985Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise PortalSAP_SE SAP NetWeaver Enterprise Portal
- CVE-2023-33984Cross-Site Scripting (XSS) vulnerability in NetWeaver (Design Time Repository)SAP_SE SAP NetWeaver
- CVE-2023-32115SQL Injection in Master Data Synchronization (MDS COMPARE TOOL)SAP_SE Master Data Synchronization
- CVE-2023-32114Denial of Service in SAP NetWeaverSAP_SE SAP NetWeaver
- CVE-2023-2563WordPress Contact Forms by Cimatti <= 1.5.7 - Cross-Site Request Forgery via _accua_forms_form_edit_actionContact Forms by Cimatti
- CVE-2023-2277WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitemwpdirectorykit WP Directory Kit
- CVE-2023-2351WP Directory Kit <= 1.2.3 - Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_actionwpdirectorykit WP Directory Kit
- CVE-2023-24469Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0ArcSight Logger
- CVE-2023-29498Improper restriction of XML external entity reference (XXE) vulnerability exists in FRENIC RHC Loader v1.1.0.3 and earlier.FUJI ELECTRIC CO. FRENIC RHC Loader
- CVE-2023-29501Jiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier, and Jiyu Kukan Toku-Toku coupon App for Android versions 3.5.0 and…RUNSYSTEM CO. Jiyu Kukan Toku-Toku coupon App for iOS, and…
- CVE-2023-31195ASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388.23403 uses sensitive cookies without 'Secure' attribute.ASUSTeK COMPUTER ASUS Router RT-AX3000
- CVE-2023-31437An issue was discovered in systemd 253.
- CVE-2023-31438An issue was discovered in systemd 253.
- CVE-2023-31439An issue was discovered in systemd 253.
- CVE-2023-3218Race Condition within a Thread in it-novum/openitcockpitit-novum/openitcockpit
- CVE-2023-32546Code injection vulnerability exists in Chatwork Desktop Application (Mac) 2.6.43 and earlier.Chatwork Co. Chatwork Desktop Application
- CVE-2023-33568An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer…dolibarr/dolibarr
- CVE-2023-33620GL.iNET GL-AR750S-Ext firmware v3.215 uses an insecure protocol in its communications which allows attackers to eavesdrop via a…
- CVE-2023-33621GL.iNET GL-AR750S-Ext firmware v3.215 inserts the admin authentication token into a GET request when the OpenVPN Server config file is…
- CVE-2023-33695Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at…cn.hutool:hutool-core
- CVE-2023-33817hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability.
- CVE-2023-34537A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected webpage's parameter…
- CVE-2023-34944An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11. up to v1.11.18 allows attackers to execute…
- CVE-2023-34965SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information.