CVEs published June 13, 2023
187 CVEs were published on June 13, 2023: 24 critical, 72 high. 4 are now in CISA KEV.
- Published
- 187
- Critical
- 24
- High
- 72
- Medium
- 67
- Low
- 13
- Unrated
- 11
- Now in CISA KEV
- 4
- Fix available
- 83
Most affected products
- Microsoft Windows
- 26
- Microsoft Windows Server
- 6
- HP PC BIOS
- 5
- discourse
- 4
- Fortinet FortiOS · Fortinet FortiProxy
- 4
- Google Chrome
- 4
- Microsoft SharePoint Server
- 4
- Siemens JT2Go · Siemens Teamcenter Visualization
- 4
- TMT Lockcell
- 4
- Fortinet FortiSIEM
- 3
Critical 24
- CVE-2023-32015Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-32014Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-29363Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-29357Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Server
- CVE-2022-43684ACL bypass in Reporting functionalityServiceNow Now Platform
- CVE-2023-34249benjjvi/PyBB may send unsanitized request to SQL databasebenjjvi PyBB
- CVE-2023-35064SQLi in Satos MobileSatos Mobile
- CVE-2023-3050Authentication Bypass in TMT's LockcellTMT Lockcell
- CVE-2023-3049File Upload in TMT's LockcellTMT Lockcell
- CVE-2023-3048IDOR in TMT's LockcellTMT Lockcell
- CVE-2023-3047SQLi in TMT's LockcellTMT Lockcell
- CVE-2023-27997A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below,Fortinet FortiOS-6K7K · Fortinet FortiProxy +1
- CVE-2023-29129A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3 < V1.18.0), Mendix SAML (Mendix 7 compatibSiemens Mendix SAML
- CVE-2023-25910A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7Siemens SIMATIC PCS · Siemens SIMATIC S7-PM +1
- CVE-2023-2278WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_actionwpdirectorykit WP Directory Kit
- CVE-2022-28550Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead.
- CVE-2023-24470Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.ArcSight Logger
- CVE-2023-27836TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the devicePwd parameter in the
- CVE-2023-27837TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the key parameter in the functi
- CVE-2023-29562TP-Link TL-WPA7510 (EU)_V2_190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale.
- CVE-2023-30762Improper authentication vulnerability exists in KB-AHR series and KB-IRIP series.KbDevice KB-AHR series and KB-IRIP series
- CVE-2023-30764OS command injection vulnerability exists in KB-AHR series and KB-IRIP series.KbDevice KB-AHR series and KB-IRIP series
- CVE-2023-30766Hidden functionality issue exists in KB-AHR series and KB-IRIP series.KbDevice KB-AHR series and KB-IRIP series
- CVE-2023-31541A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine,
High 72
- CVE-2023-33135.NET and Visual Studio Elevation of Privilege VulnerabilityMicrosoft .NET · Microsoft Visual Studio
- CVE-2023-33133Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2023-33131Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2023-33130Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Server
- CVE-2023-33128.NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft .NET · Microsoft Visual Studio +13
- CVE-2023-33126.NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft .NET · Microsoft Visual Studio +5
- CVE-2023-32022Windows Server Service Security Feature Bypass VulnerabilityMicrosoft Windows Server
- CVE-2023-32021Windows SMB Witness Service Security Feature Bypass VulnerabilityMicrosoft Windows Server
- CVE-2023-32018Windows Hello Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-32017Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-32012Windows Container Manager Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-32011Windows iSCSI Discovery Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-32010Windows Bus Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-32009Windows Collaborative Translation Framework Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-32008Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-29373Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-29372Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-29371Windows GDI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29370Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-29368Windows Filtering Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29367iSCSI Target WMI Provider Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2023-29366Windows Geolocation Service Remote Code Execution VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2023-29365Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-29364Windows Authentication Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29362Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows · Microsoft Remote Desktop client for Win…
- CVE-2023-29361Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2023-29360Microsoft Streaming Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29359GDI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29358Windows GDI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29351Windows Group Policy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29346NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21565Azure DevOps Server Spoofing VulnerabilityMicrosoft Azure DevOps Server
- CVE-2023-33146Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office 2019 for Mac · Microsoft 365 Apps for E… +1
- CVE-2023-33137Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft Excel
- CVE-2023-32029Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2023-2778Rockwell Automation FactoryTalk Transaction Manager Vulnerable to Denial-Of-ServiceRockwell Automation FactoryTalk Transaction Manager
- CVE-2023-2637Rockwell Automation FactoryTalk System Services Vulnerable To Use Of Hard-Coded Cryptographic KeyRockwell Automation FactoryTalk System Services
- CVE-2023-34114Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an authenticated user to potenZoom Video Communications Zoom for Windows Client · Zoom Vi…
- CVE-2023-3217Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2023-3216Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a craftedGoogle Chrome
- CVE-2023-3215Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a craGoogle Chrome
- CVE-2023-3214Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruptioGoogle Chrome
- CVE-2023-34120Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authZoom Video Communications Zoom for Windows Client · Zoom… +1
- CVE-2023-28603Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability.Zoom Video Communications Zoom VDI Windows Meeting Client
- CVE-2023-1707Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to information disclosure when IPsec is enabled wHP Enterprise LaserJet and HP LaserJet Managed Printers
- CVE-2023-28601Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability.Zoom Video Communications Zoom for Windows Client
- CVE-2023-28598Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability.Zoom Video Communications Zoom for Linux clients
- CVE-2022-31639Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allHP PC BIOS
- CVE-2022-31638Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allHP PC BIOS
- CVE-2022-31637Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allHP PC BIOS
- CVE-2022-31636Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allHP PC BIOS
- CVE-2022-31635Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allHP PC BIOS
- CVE-2023-26210Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] vulnerability inFortinet FortiADC · Fortinet FortiADCManager
- CVE-2023-22633An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and beFortinet FortiNAC
- CVE-2022-42478An Improper Restriction of Excessive Authentication Attempts [CWE-307] in FortiSIEM below 7.0.0 may allow a non-privileged user with access Fortinet FortiSIEM
- CVE-2022-41327A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0Fortinet FortiOS · Fortinet FortiProxy
- CVE-2022-39946An access control vulnerability [CWE-284] in FortiNAC version 9.4.2 and below, version 9.2.7 and below, 9.1 all versions, 8.8 all versions, Fortinet FortiNAC
- CVE-2023-33919A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05).Siemens CP-8031 MASTER MODULE · Siemens CP-8050 MASTER MODU…
- CVE-2023-33124A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), TeamcenSiemens JT2Go · Siemens Teamcenter Visualization
- CVE-2023-33123A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), TeamcenSiemens JT2Go · Siemens Teamcenter Visualization
- CVE-2023-30897A vulnerability has been identified in SIMATIC WinCC (All versions < V7.5.2.13).Siemens SIMATIC WinCC
- CVE-2023-33991Stored Cross-Site Scripting (Stored XSS) vulnerability in SAP UI5 Variant ManagementSAP_SE SAP UI5 Variant Management
- CVE-2023-2827Missing Authentication in SAP Plant Connectivity and Production Connector for SAP DigitalSAP_SE SAP Plant Connectivity
- CVE-2022-47376The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation.Alaris Infusion Central
- CVE-2023-24546On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision could enable a malicioCloudVision
- CVE-2023-29160Stack-based buffer overflow vulnerability exists in FRENIC RHC Loader v1.1.0.3.FUJI ELECTRIC CO. FRENIC RHC Loader
- CVE-2023-29167Out-of-bound reads vulnerability exists in FRENIC RHC Loader v1.1.0.3.FUJI ELECTRIC CO. FRENIC RHC Loader
- CVE-2023-30179CraftCMS version 3.7.59 is vulnerable to Server-Side Template Injection (SSTI).
- CVE-2023-31196Missing authentication for critical function in Wi-Fi AP UNIT allows a remote unauthenticated attacker to obtain sensitive information of thInaba Denki Sangyo Co. Wi-Fi AP UNIT
- CVE-2023-31198OS command injection vulnerability exists in Wi-Fi AP UNIT allows.Inaba Denki Sangyo Co. Wi-Fi AP UNIT
- CVE-2023-3224Code Injection in nuxt/nuxtnuxt/nuxt · nuxt
- CVE-2023-32548OS command injection vulnerability exists in WPS Office version 10.8.0.6186.KINGSOFT JAPAN WPS Office
Medium, low and unrated 91
- CVE-2023-33145Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMicrosoft Edge
- CVE-2023-33144Visual Studio Code Spoofing VulnerabilityMicrosoft Visual Studio Code
- CVE-2023-33142Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Server
- CVE-2023-33140Microsoft OneNote Spoofing VulnerabilityMicrosoft OneNote for Universal
- CVE-2023-33132Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Server
- CVE-2023-33129Microsoft SharePoint Server Denial of Service VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2023-32032.NET and Visual Studio Elevation of Privilege VulnerabilityMicrosoft .NET · Microsoft Visual Studio +1
- CVE-2023-32020Windows DNS Spoofing VulnerabilityMicrosoft Windows Server
- CVE-2023-32019Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-32016Windows Installer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-32013Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-29369Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2023-29355DHCP Server Service Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2023-29352Windows Remote Desktop Security Feature Bypass VulnerabilityMicrosoft Windows · Microsoft Remote Desktop client for Win…
- CVE-2023-21569Azure DevOps Server Spoofing VulnerabilityMicrosoft Azure DevOps Server
- CVE-2023-33139Visual Studio Information Disclosure VulnerabilityMicrosoft Visual Studio
- CVE-2023-29353Sysinternals Process Monitor for Windows Denial of Service VulnerabilityMicrosoft Windows Sysinternals Process Monitor · Microsoft…
- CVE-2023-24938Windows CryptoAPI Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-34250Discourse vulnerable to exposure of number of topics recently created in private categoriesdiscourse
- CVE-2023-32301Discourse's canonical url not being used for topic embeddingsdiscourse
- CVE-2023-32061Discourse Topic Creation Page Allows iFrame Tag without Restrictionsdiscourse
- CVE-2023-31142Discourse's general category permissions could be set back to defaultdiscourse
- CVE-2023-2639Rockwell Automation FactoryTalk System Services Vulnerable to Sensitive Information DisclosureRockwell Automation FactoryTalk System Services
- CVE-2023-2638Rockwell Automation FactoryTalk System Services Vulnerable to a Denial-of-Service AttackRockwell Automation FactoryTalk System Services
- CVE-2023-34115Buffer copy without checking size of input in Zoom Meeting SDK before 5.13.0 may allow an authenticated user to potentially enable a deniaZoom Video Communications Zoom Meeting SDK
- CVE-2023-34121Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated Zoom Video Communications Zoom for Windows · Zoom Video… +1
- CVE-2023-28602Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability.Zoom Video Communications Zoom for Windows Client
- CVE-2023-28600Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability.Zoom Video Communications Zoom for macOS Client
- CVE-2023-28599Zoom clients prior to 5.13.10 contain an HTML injection vulnerability.Zoom Video Communications Zoom for Android · Zoom Video… +3
- CVE-2023-20867VMware Tools Authentication Bypass VulnerabilityVMware Tools
- CVE-2023-34247@keystone-6/auth Open Redirect vulnerabilitykeystonejs keystone · @keystone-6/auth
- CVE-2023-28303Windows Snipping Tool Information Disclosure VulnerabilityMicrosoft Snipping Tool · Microsoft Snip & Sketch for Windo…
- CVE-2023-25978WordPress Protected Posts Logout Button Plugin <= 1.4.5 is vulnerable to Cross Site Scripting (XSS)Nate Reist Protected Posts Logout Button
- CVE-2023-27624WordPress Redirect After Login Plugin <= 0.1.9 is vulnerable to Cross Site Scripting (XSS)Marcelotorres Redirect After Login
- CVE-2023-28620WordPress Cyberus Key Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)Cyberus Labs Cyberus Key
- CVE-2023-26528WordPress Shipyaari Shipping Management Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)jinit9906 Shipyaari Shipping Management
- CVE-2023-26538WordPress Chat Bee Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)Kamyabsoft Chat Bee
- CVE-2023-25964WordPress We’re Open! Plugin <= 1.46 is vulnerable to Cross Site Scripting (XSS)Noah Hearle, Design Extreme We’re Open!
- CVE-2022-42880WordPress Auto Upload Images Plugin <= 3.3 is vulnerable to Cross Site Request Forgery (CSRF)Ali Irani Auto Upload Images
- CVE-2023-23831WordPress Rating Widget Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS)Rating-Widget: Star Review System
- CVE-2023-2807Authentication bypass in password reset processArtica PFMS Pandora FMS
- CVE-2023-33305A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0.0 through 7.0.Fortinet FortiWeb · Fortinet FortiOS +1
- CVE-2023-29178A access of uninitialized pointer vulnerability [CWE-824] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.1Fortinet FortiOS · Fortinet FortiProxy
- CVE-2023-29175An improper certificate validation vulnerability [CWE-295] in FortiOS 6.2 all versions, 6.4 all versions, 7.0.0 through 7.0.10, 7.2.0 and FoFortinet FortiOS · Fortinet FortiProxy
- CVE-2023-28000An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC CLI 7.1.0, 7.0.0 through 7.0.3, 6.2.Fortinet FortiADC
- CVE-2023-26204A plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versionFortinet FortiSIEM
- CVE-2023-26207An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy 7.0.0 through 7.0.1Fortinet FortiProxy · Fortinet FortiOS
- CVE-2023-25609A server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer GUI 7.2.0 through 7.2.1, 7.0.0 through 7.0.6,Fortinet FortiAnalyzer · Fortinet FortiManager
- CVE-2023-22639A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6Fortinet FortiOS · Fortinet FortiProxy
- CVE-2022-43953A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0, FortiOS all versionsFortinet FortiProxy · Fortinet FortiOS
- CVE-2022-43949A use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker toFortinet FortiSIEM
- CVE-2022-42474A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4Fortinet FortiSwitchManager · Fortinet FortiProxy +1
- CVE-2022-33877An incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0 through 7.0.6 and 6.4.0 through 6.4.8 and FoFortinet FortiConverter · Fortinet FortiClientWindows
- CVE-2023-33921A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05).Siemens CP-8031 MASTER MODULE · Siemens CP-8050 MASTER MODU…
- CVE-2023-33920A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05).Siemens CP-8031 MASTER MODULE · Siemens CP-8050 MASTER MODU…
- CVE-2023-33122A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), TeamcenSiemens JT2Go · Siemens Teamcenter Visualization
- CVE-2023-33121A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), TeamcenSiemens JT2Go · Siemens Teamcenter Visualization
- CVE-2023-31238A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All versionsSiemens SICAM P850 · Siemens SICAM P855 +1
- CVE-2023-30901A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All versionsSiemens SICAM P850 · Siemens SICAM P855 +1
- CVE-2023-30757A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation PSiemens Totally Integrated Automation Portal (TIA Portal)
- CVE-2023-28829A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7Siemens SIMATIC NET PC Software · Siemens SIMATIC PCS 7 +2
- CVE-2023-27465A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1), Siemens SIMOTION C240 · Siemens SIMOTION D410-2 DP +9
- CVE-2023-2729Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 alSynology DiskStation Manager · Synology Unified Controll… +1
- CVE-2023-0142Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8Synology DiskStation Manager · Synology Unified Controll… +1
- CVE-2023-2673PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input ValidationPHOENIX CONTACT FL MGUARD
- CVE-2023-2876Session cookie exposure for client side scriptABB REX640 PCL1 · ABB REX640 PCL2 +1
- CVE-2023-33986Cross-Site Scripting (XSS) vulnerability in SAP CRM ABAP (Grantor Management)SAP_SE SAP CRM ABAP
- CVE-2023-33985Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise PortalSAP_SE SAP NetWeaver Enterprise Portal
- CVE-2023-33984Cross-Site Scripting (XSS) vulnerability in NetWeaver (Design Time Repository)SAP_SE SAP NetWeaver
- CVE-2023-32115SQL Injection in Master Data Synchronization (MDS COMPARE TOOL)SAP_SE Master Data Synchronization
- CVE-2023-32114Denial of Service in SAP NetWeaverSAP_SE SAP NetWeaver
- CVE-2023-2563WordPress Contact Forms by Cimatti <= 1.5.7 - Cross-Site Request Forgery via _accua_forms_form_edit_actionContact Forms by Cimatti
- CVE-2023-2277WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitemwpdirectorykit WP Directory Kit
- CVE-2023-2351WP Directory Kit <= 1.2.3 - Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_actionwpdirectorykit WP Directory Kit
- CVE-2023-24469Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0ArcSight Logger
- CVE-2023-29498Improper restriction of XML external entity reference (XXE) vulnerability exists in FRENIC RHC Loader v1.1.0.3 and earlier.FUJI ELECTRIC CO. FRENIC RHC Loader
- CVE-2023-29501Jiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier, and Jiyu Kukan Toku-Toku coupon App for Android versions 3.5.0 and earliRUNSYSTEM CO. Jiyu Kukan Toku-Toku coupon App for iOS, and…
- CVE-2023-31195ASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388.23403 uses sensitive cookies without 'Secure' attribute.ASUSTeK COMPUTER ASUS Router RT-AX3000
- CVE-2023-31437An issue was discovered in systemd 253.
- CVE-2023-31438An issue was discovered in systemd 253.
- CVE-2023-31439An issue was discovered in systemd 253.
- CVE-2023-3218Race Condition within a Thread in it-novum/openitcockpitit-novum/openitcockpit
- CVE-2023-32546Code injection vulnerability exists in Chatwork Desktop Application (Mac) 2.6.43 and earlier.Chatwork Co. Chatwork Desktop Application
- CVE-2023-33568An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer fildolibarr/dolibarr
- CVE-2023-33620GL.iNET GL-AR750S-Ext firmware v3.215 uses an insecure protocol in its communications which allows attackers to eavesdrop via a man-in-the-m
- CVE-2023-33621GL.iNET GL-AR750S-Ext firmware v3.215 inserts the admin authentication token into a GET request when the OpenVPN Server config file is downl
- CVE-2023-33695Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at /core/icn.hutool:hutool-core
- CVE-2023-33817hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability.
- CVE-2023-34537A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected webpage's parameter to
- CVE-2023-34944An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11.* up to v1.11.18 allows attackers to execute arb
- CVE-2023-34965SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information.