# CVEs published 2023-06-15

94 CVEs were published on June 15, 2023: 4 critical, 19 high. Days are UTC.

- [CVE-2023-2080](https://cve.now/CVE-2023-2080.md): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG (CVSS 8.5, Forcepoint Cloud Security Gateway)
- [CVE-2023-2747](https://cve.now/CVE-2023-2747.md): Uninitialized IV in Silicon Labs SE FW v2.0.0 through v 2.2.1 for internally stored data (CVSS 3.1, silabs.com GSDK)
- [CVE-2023-34242](https://cve.now/CVE-2023-34242.md): Cilium vulnerable to information leakage via incorrect ReferenceGrant handling (CVSS 3.4, cilium · github.com/cilium/cilium)
- [CVE-2023-2683](https://cve.now/CVE-2023-2683.md): Connection update while closing connection may lead to denial-of-service (CVSS 5.3, silabs.com Bluetooth SDK)
- [CVE-2023-2686](https://cve.now/CVE-2023-2686.md): Buffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or earlier allows connected device to write payloa (CVSS 9.8, silabs.com Gecko Platform)
- [CVE-2023-34455](https://cve.now/CVE-2023-34455.md): snappy-java's unchecked chunk length leads to DoS (CVSS 7.5, xerial snappy-java · org.xerial.snappy:snappy-java)
- [CVE-2023-34454](https://cve.now/CVE-2023-34454.md): snappy-java's Integer Overflow vulnerability in compress leads to DoS (CVSS 5.9, xerial snappy-java · org.xerial.snappy:snappy-java)
- [CVE-2023-34453](https://cve.now/CVE-2023-34453.md): snappy-java's Integer Overflow vulnerability in shuffle leads to DoS (CVSS 5.9, xerial snappy-java · org.xerial.snappy:snappy-java)
- [CVE-2023-24420](https://cve.now/CVE-2023-24420.md): WordPress Admin side data storage for Contact Form 7 Plugin \<= 1.1.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Zestard Technologies Admin side data storage for Contact Fo…)
- [CVE-2023-25055](https://cve.now/CVE-2023-25055.md): WordPress Google XML Sitemap for Videos Plugin \<= 2.6.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Amit Agarwal Google XML Sitemap for Videos)
- [CVE-2023-27634](https://cve.now/CVE-2023-27634.md): WordPress Intrepidity Theme \<= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8, Shingo Intrepidity)
- [CVE-2023-3276](https://cve.now/CVE-2023-3276.md): Dromara HuTool XML Parsing Module XmlUtil.java readBySax xml external entity reference (CVSS 5.5, Dromara HuTool · cn.hutool:hutool-core)
- [CVE-2023-3275](https://cve.now/CVE-2023-3275.md): PHPGurukul Rail Pass Management System POST Request view-pass-detail.php sql injection (CVSS 6.3, PHPGurukul Rail Pass Management System)
- [CVE-2023-3274](https://cve.now/CVE-2023-3274.md): code-projects Supplier Management System Picture btn\_functions.php unrestricted upload (CVSS 6.3, code-projects Supplier Management System)
- [CVE-2023-25972](https://cve.now/CVE-2023-25972.md): WordPress Старт Plugin \<= 3.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, IKSWEB WordPress Старт)
- [CVE-2023-25450](https://cve.now/CVE-2023-25450.md): WordPress GiveWP Plugin \<= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, GiveWP – Donation Plugin and Fundraising Platform)
- [CVE-2023-23802](https://cve.now/CVE-2023-23802.md): WordPress HT Easy GA4 ( Google Analytics 4 ) Plugin \<= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, HasThemes HT Easy GA4)
- [CVE-2023-25449](https://cve.now/CVE-2023-25449.md): WordPress CformsII Plugin \<=15.0.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Oliver Seidel, Bastian Germann cformsII)
- [CVE-2023-28175](https://cve.now/CVE-2023-28175.md): Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the (CVSS 7.1, Bosch BVMS · Bosch DIVAR IP)
- [CVE-2023-32229](https://cve.now/CVE-2023-32229.md): Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanen (CVSS 4.9, Bosch Camera Firmware)
- [CVE-2023-2847](https://cve.now/CVE-2023-2847.md): Local privilege escalation in ESET products for Linux and MacOS (CVSS 7.8, ESET Server Security for Linux · ESET Endpoint Antivirus… +2)
- [CVE-2022-4149](https://cve.now/CVE-2022-4149.md): Local privilege escalation using log file (CVSS 7.0, Netskope Client)
- [CVE-2023-2270](https://cve.now/CVE-2023-2270.md): Local privilege escalation (CVSS 7.0, Netskope Client)
- [CVE-2023-35030](https://cve.now/CVE-2023-35030.md): Cross-site request forgery (CSRF) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Li (CVSS 8.8, Liferay Portal · Liferay DXP +2)
- [CVE-2023-35029](https://cve.now/CVE-2023-35029.md): Open redirect vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update (CVSS 6.1, Liferay Portal · Liferay DXP +2)
- [CVE-2023-3193](https://cve.now/CVE-2023-3193.md): Cross-site scripting (XSS) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.73, and Liferay D (CVSS 6.1, Liferay Portal · Liferay DXP +2)
- [CVE-2022-32752](https://cve.now/CVE-2022-32752.md): IBM Security Directory Suite VA command execution (CVSS 7.2, IBM Security Directory Suite VA)
- [CVE-2022-32757](https://cve.now/CVE-2022-32757.md): IBM Security Directory Suite VA information disclosure (CVSS 7.5, IBM Security Directory Suite VA)
- [CVE-2022-33166](https://cve.now/CVE-2022-33166.md): IBM Security Directory Suite VA file upload (CVSS 7.2, IBM Security Directory Suite VA)
- [CVE-2022-33159](https://cve.now/CVE-2022-33159.md): IBM Security Directory Suite VA information disclosure (CVSS 5.3, IBM Security Directory Suite VA)
- [CVE-2022-33168](https://cve.now/CVE-2022-33168.md): IBM Security Directory Suite VA denial of service (CVSS 7.5, IBM Security Directory Suite VA)
- [CVE-2022-33163](https://cve.now/CVE-2022-33163.md): IBM Security Directory Suite VA information disclosure (CVSS 5.3, IBM Security Directory Suite VA)
- [CVE-2023-25683](https://cve.now/CVE-2023-25683.md): IBM PowerVM Hypervisor information disclosure (CVSS 5.9, IBM PowerVM Hypervisor)
- [CVE-2022-22307](https://cve.now/CVE-2022-22307.md): IBM Security Guardium privilege escalation (CVSS 4.4, IBM Security Guardium)
- [CVE-2021-0701](https://cve.now/CVE-2021-0701.md): In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could all (no CVSS, Android)
- [CVE-2021-0945](https://cve.now/CVE-2021-0945.md): In \_PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. (no CVSS, Android)
- [CVE-2023-21095](https://cve.now/CVE-2023-21095.md): In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. (no CVSS, Android)
- [CVE-2023-21101](https://cve.now/CVE-2023-21101.md): In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. (no CVSS, Android)
- [CVE-2023-21105](https://cve.now/CVE-2023-21105.md): In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. (no CVSS, Android)
- [CVE-2023-21108](https://cve.now/CVE-2023-21108.md): In sdpu\_build\_uuid\_seq of sdp\_discovery.cc, there is a possible out of bounds write due to a use after free. (no CVSS, Android)
- [CVE-2023-21115](https://cve.now/CVE-2023-21115.md): In btm\_sec\_encrypt\_change of btm\_sec.cc, there is a possible way to downgrade the link key type due to improperly used crypto. (no CVSS, Android)
- [CVE-2023-21120](https://cve.now/CVE-2023-21120.md): In multiple functions of cdm\_engine.cpp, there is a possible use-after-free due to improper locking. (no CVSS, Android)
- [CVE-2023-21121](https://cve.now/CVE-2023-21121.md): In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connected VPN due to improp (no CVSS, Android)
- [CVE-2023-21122](https://cve.now/CVE-2023-21122.md): In various functions of various files, there is a possible way to bypass the DISALLOW\_DEBUGGING\_FEATURES restriction for tracing due to a mi (no CVSS, Android)
- [CVE-2023-21123](https://cve.now/CVE-2023-21123.md): In multiple functions of multiple files, there is a possible way to bypass the DISALLOW\_DEBUGGING\_FEATURES restriction for tracing due to a (no CVSS, Android)
- [CVE-2023-21124](https://cve.now/CVE-2023-21124.md): In run of multiple files, there is a possible escalation of privilege due to unsafe deserialization. (no CVSS, Android)
- [CVE-2023-21126](https://cve.now/CVE-2023-21126.md): In bindOutputSwitcherAndBroadcastButton of MediaControlPanel.java, there is a possible launch arbitrary activity under SysUI due to Unsafe I (no CVSS, Android)
- [CVE-2023-21127](https://cve.now/CVE-2023-21127.md): In readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to uninitialized data. (no CVSS, Android)
- [CVE-2023-21128](https://cve.now/CVE-2023-21128.md): In various functions of AppStandbyController.java, there is a possible way to break manageability scenarios due to a logic error in the code (no CVSS, Android)
- [CVE-2023-21129](https://cve.now/CVE-2023-21129.md): In getFullScreenIntentDecision of NotificationInterruptStateProviderImpl.java, there is a possible activity launch while the app is in the b (no CVSS, Android)
- [CVE-2023-21130](https://cve.now/CVE-2023-21130.md): In btm\_ble\_periodic\_adv\_sync\_lost of btm\_ble\_gap.cc, there is a possible remote code execution due to a buffer overflow. (no CVSS, Android)
- [CVE-2023-21131](https://cve.now/CVE-2023-21131.md): In checkKeyIntentParceledCorrectly() of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch mitigations due to a logi (no CVSS, Android)
- [CVE-2023-21135](https://cve.now/CVE-2023-21135.md): In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to improper input validati (no CVSS, Android)
- [CVE-2023-21136](https://cve.now/CVE-2023-21136.md): In multiple functions of JobStore.java, there is a possible way to cause a crash on startup due to improper input validation. (no CVSS, Android)
- [CVE-2023-21137](https://cve.now/CVE-2023-21137.md): In several methods of JobStore.java, uncaught exceptions in job map parsing could lead to local persistent denial of service with no additio (no CVSS, Android)
- [CVE-2023-21138](https://cve.now/CVE-2023-21138.md): In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input validation. (no CVSS, Android)
- [CVE-2023-21139](https://cve.now/CVE-2023-21139.md): In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. (no CVSS, Android)
- [CVE-2023-21141](https://cve.now/CVE-2023-21141.md): In several functions of several files, there is a possible way to access developer mode traces due to a permissions bypass. (no CVSS, Android)
- [CVE-2023-21142](https://cve.now/CVE-2023-21142.md): In multiple files, there is a possible way to access traces in the dev mode due to a permissions bypass. (no CVSS, Android)
- [CVE-2023-21143](https://cve.now/CVE-2023-21143.md): In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input validation. (no CVSS, Android)
- [CVE-2023-21144](https://cve.now/CVE-2023-21144.md): In doInBackground of NotificationContentInflater.java, there is a possible temporary denial or service due to long running operations. (no CVSS, Android)
- [CVE-2023-21618](https://cve.now/CVE-2023-21618.md): ZDI-CAN-20963: Adobe Substance 3D Designer SBS File Parsing Uninitialized Variable Remote Code Execution Vulnerability (CVSS 7.8, Adobe Substance3D - Designer)
- [CVE-2023-22248](https://cve.now/CVE-2023-22248.md): Adobe Commerce Incorrect Authorization Security feature bypass (CVSS 7.5, Adobe Magento Commerce · magento/community-edition +1)
- [CVE-2023-23841](https://cve.now/CVE-2023-23841.md): SolarWinds Serv-U Exposure of Sensitive Information Vulnerability (CVSS 7.5, SolarWinds ServU)
- [CVE-2023-24030](https://cve.now/CVE-2023-24030.md): An open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite through 9.0 and 8.8.15. (no CVSS)
- [CVE-2023-24031](https://cve.now/CVE-2023-24031.md): An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15. (no CVSS)
- [CVE-2023-24032](https://cve.now/CVE-2023-24032.md): In Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user access to a Zimbra server instance) can execute comm (no CVSS)
- [CVE-2023-28809](https://cve.now/CVE-2023-28809.md): Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user su (CVSS 7.5, hikvision DS-K1T804AXX · hikvision DS-K1T341AXX +4)
- [CVE-2023-28810](https://cve.now/CVE-2023-28810.md): Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. (CVSS 4.3, hikvision DS-K1T804AXX · hikvision DS-K1T341AXX +6)
- [CVE-2023-29287](https://cve.now/CVE-2023-29287.md): Adobe Commerce Information Exposure Security feature bypass (CVSS 5.3, Adobe Magento Commerce · magento/community-edition +1)
- [CVE-2023-29288](https://cve.now/CVE-2023-29288.md): Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 4.3, Adobe Commerce · magento/community-edition +1)
- [CVE-2023-29289](https://cve.now/CVE-2023-29289.md): Adobe Commerce XML Injection Security feature bypass (CVSS 6.5, Adobe Magento Commerce · magento/community-edition +1)
- [CVE-2023-29290](https://cve.now/CVE-2023-29290.md): Adobe Commerce Guest Cart Shipping Address Overwrite IDOR (CVSS 5.3, Adobe Magento Commerce · magento/community-edition +1)
- [CVE-2023-29291](https://cve.now/CVE-2023-29291.md): Server Side Request Forgery (SSRF) in USPS carrier integration configuration (CVSS 4.9, Adobe Magento Commerce · magento/community-edition +1)
- [CVE-2023-29292](https://cve.now/CVE-2023-29292.md): Server Side Request Forgery (SSRF) in FedEx carrier integration configuration (CVSS 4.9, Adobe Magento Commerce · magento/community-edition +1)
- [CVE-2023-29293](https://cve.now/CVE-2023-29293.md): Adobe Commerce | Improper Input Validation (CWE-20) (CVSS 2.7, Adobe Commerce · magento/community-edition +1)
- [CVE-2023-29294](https://cve.now/CVE-2023-29294.md): Bypass Purchase Order Approval using Company User in Adobe Commerce B2B (CVSS 4.3, Adobe Magento Commerce · magento/community-edition +1)
- [CVE-2023-29295](https://cve.now/CVE-2023-29295.md): Insecure Direct Object Reference (IDOR) in Create Quote Function (CVSS 4.3, Adobe Magento Commerce · magento/community-edition +1)
- [CVE-2023-29296](https://cve.now/CVE-2023-29296.md): \[Cloud\] Customer suspects IDOR vulnerability (CVSS 4.3, Adobe Magento Commerce · magento/community-edition +1)
- [CVE-2023-29297](https://cve.now/CVE-2023-29297.md): Admin-to-admin stored XSS via cache poisoning (CVSS 9.1, Adobe Magento Commerce · magento/community-edition +1)
- [CVE-2023-29302](https://cve.now/CVE-2023-29302.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2023-29304](https://cve.now/CVE-2023-29304.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2023-29307](https://cve.now/CVE-2023-29307.md): Open Redirect on AEM Target (CVSS 5.4, Adobe Experience Manager)
- [CVE-2023-29321](https://cve.now/CVE-2023-29321.md): Adobe Animate FLA files Use After Free Arbitrary code execution (CVSS 7.8, Adobe Animate)
- [CVE-2023-29322](https://cve.now/CVE-2023-29322.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2023-31672](https://cve.now/CVE-2023-31672.md): In the PrestaShop \< 2.4.3 module "Length, weight or volume sell" (ailinear) there is a SQL injection vulnerability. (CVSS 9.8)
- [CVE-2023-33243](https://cve.now/CVE-2023-33243.md): RedTeam Pentesting discovered that the web interface of STARFACE as well as its REST API allows authentication using the SHA512 hash of the (CVSS 8.1)
- [CVE-2023-34626](https://cve.now/CVE-2023-34626.md): Piwigo 13.7.0 is vulnerable to SQL Injection via the "Users" function. (no CVSS)
- [CVE-2023-34666](https://cve.now/CVE-2023-34666.md): Cross-site scripting (XSS) vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows remote attackers to inject arbitrary web scri (CVSS 6.1)
- [CVE-2023-34797](https://cve.now/CVE-2023-34797.md): Broken access control in the Registration page (/Registration.aspx) of Termenos CWX v8.5.6 allows attackers to access sensitive information. (no CVSS)
- [CVE-2023-34800](https://cve.now/CVE-2023-34800.md): D-Link Go-RT-AC750 revA\_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi\_main. (CVSS 9.8)
- [CVE-2023-34833](https://cve.now/CVE-2023-34833.md): An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a cr (no CVSS)
- [CVE-2023-34852](https://cve.now/CVE-2023-34852.md): PublicCMS \<=V4.0.202302 is vulnerable to Insecure Permissions. (no CVSS)
- [CVE-2023-34880](https://cve.now/CVE-2023-34880.md): cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the add\_action method at lib/admin/language\_admin.php (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-06-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.