# CVEs published 2023-06-17

9 CVEs were published on June 17, 2023: 1 critical, 4 high. Days are UTC.

- [CVE-2023-3295](https://cve.now/CVE-2023-3295.md): Unlimited Elements For Elementor (Free Widgets, Addons, Templates) \<= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload (CVSS 8.8, unitecms Unlimited Elements For Elementor)
- [CVE-2023-28295](https://cve.now/CVE-2023-28295.md): Microsoft Publisher Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office · Microsoft Publisher +1)
- [CVE-2023-28287](https://cve.now/CVE-2023-28287.md): Microsoft Publisher Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Publisher · Microsoft Office LTSC +2)
- [CVE-2014-125106](https://cve.now/CVE-2014-125106.md): Nanopb before 0.3.1 allows size\_t overflows in pb\_dec\_bytes and pb\_dec\_string. (CVSS 9.8)
- [CVE-2023-35808](https://cve.now/CVE-2023-35808.md): An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. (CVSS 8.8)
- [CVE-2023-35809](https://cve.now/CVE-2023-35809.md): An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. (no CVSS)
- [CVE-2023-35810](https://cve.now/CVE-2023-35810.md): An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. (no CVSS)
- [CVE-2023-35811](https://cve.now/CVE-2023-35811.md): An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. (no CVSS)
- [CVE-2023-35813](https://cve.now/CVE-2023-35813.md): Multiple Sitecore products allow remote code execution. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-06-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.