# CVEs published 2023-06-04

7 CVEs were published on June 4, 2023: 0 critical, 1 high. Days are UTC.

- [CVE-2023-27285](https://cve.now/CVE-2023-27285.md): IBM Aspera buffer overflow (CVSS 8.4, IBM Aspera Connect · IBM Aspera Cargo)
- [CVE-2023-22862](https://cve.now/CVE-2023-22862.md): IBM Aspera information disclosure (CVSS 5.9, IBM Aspera Connect · IBM Aspera Cargo)
- [CVE-2013-10028](https://cve.now/CVE-2013-10028.md): EELV Newsletter Plugin lettreinfo.php style\_newsletter cross site scripting (CVSS 3.5, EELV Newsletter Plugin)
- [CVE-2013-10027](https://cve.now/CVE-2013-10027.md): Blogger Importer Plugin blogger-importer.php restart cross-site request forgery (CVSS 4.3, Blogger Importer Plugin)
- [CVE-2015-10111](https://cve.now/CVE-2015-10111.md): Watu Quiz Plugin Exam exam.php watu\_exams sql injection (CVSS 6.3, Watu Quiz Plugin)
- [CVE-2023-3094](https://cve.now/CVE-2023-3094.md): code-projects Agro-School Management System btn\_functions.php doUpdateQuestion sql injection (CVSS 6.3, code-projects Agro-School Management System)
- [CVE-2023-3095](https://cve.now/CVE-2023-3095.md): Improper Access Control in nilsteampassnet/teampass (CVSS 6.2, nilsteampassnet/teampass)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-06-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.