CVEs published June 21, 2023
29 CVEs were published on June 21, 2023: 5 critical, 14 high.
- Published
- 29
- Critical
- 5
- High
- 14
- Medium
- 9
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- Silicon Labs Z/IP Gateway
- 4
- ISC BIND
- 3
- Apache Software Foundation Apache Accumulo · org.apache.acc…
- 1
- Apache Software Foundation Apache Tomcat · org.apache.to… +1
- 1
- Automattic - Jetpack CRM team Jetpack CRM
- 1
- code-projects Agro-School Management System
- 1
- gl_SPICE New Adman
- 1
- Grant Kimball Simple Vimeo Shortcode
- 1
- Juniper Networks Junos OS
- 1
- org.broadleafcommerce:broadleaf
- 1
Critical 5
- CVE-2023-3110Buffer overflow in S0 Decryption on Unify GatewaySilicon Labs Unify Gateway
- CVE-2023-0972Buffer overflow in S0 Decryption on Z/IP GatweaySilicon Labs Z/IP Gateway
- CVE-2023-0971Command Authentication Bypass in Z/IP GatewaySilicon Labs Z/IP Gateway
- CVE-2023-34340Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentialsApache Software Foundation Apache Accumulo · org.apache.acc…
- CVE-2023-33584Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL q
High 14
- CVE-2023-0970Serial API Buffer Overflow in Z/IP GatewaySilicon Labs Z/IP Gateway
- CVE-2023-2911Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0ISC BIND
- CVE-2023-2829Malformed NSEC records can cause named to terminate unexpectedly when synth-from-dnssec is enabledISC BIND
- CVE-2023-2828named's configured cache size limit can be significantly exceededISC BIND
- CVE-2023-27414WordPress Popup box Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)Popup Box Team Popup box
- CVE-2023-27432WordPress Manage Upload Limit Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)WpSimpleTools Manage Upload Limit
- CVE-2023-27450WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Scripting (XSS)Teplitsa of social technologies Leyka
- CVE-2022-3372Cross-Site Request Forgery (CSRF) in Riello UPS Netman-204Riello UPS Netman-204
- CVE-2023-34981Apache Tomcat: AJP response header mix-upApache Software Foundation Apache Tomcat · org.apache.to… +1
- CVE-2022-45287An access control issue in Registration.aspx of Temenos CWX 8.5.6 allows authenticated attackers to escalate privileges and perform arbitrar
- CVE-2023-00262023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attributeJuniper Networks Junos OS
- CVE-2023-24261A vulnerability in GL.iNET GL-E750 Mudi before firmware v3.216 allows authenticated attackers to execute arbitrary code via a crafted POST r
- CVE-2023-27243An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via a crafted web request
- CVE-2023-33289The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to lib.rs.
Medium, low and unrated 10
- CVE-2023-0969Global read overflow in Z/IP GatewaySilicon Labs Z/IP Gateway
- CVE-2023-27429WordPress Jetpack CRM Plugin <= 5.4.4 is vulnerable to Cross Site Scripting (XSS)Automattic - Jetpack CRM team Jetpack CRM
- CVE-2023-27439WordPress New Adman Plugin <= 1.6.8 is vulnerable to Cross Site Scripting (XSS)gl_SPICE New Adman
- CVE-2023-27443WordPress Simple Vimeo Shortcode Plugin <= 2.9.1 is vulnerable to Cross Site Scripting (XSS)Grant Kimball Simple Vimeo Shortcode
- CVE-2023-3339code-projects Agro-School Management System exam-delete.php sql injectioncode-projects Agro-School Management System
- CVE-2022-25883Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when semver
- CVE-2023-25435libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753.
- CVE-2023-33405Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect.
- CVE-2023-33591User Registration & Login and User Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the compo
- CVE-2023-33725Broadleaf 5.x and 6.x (including 5.2.25-GA and 6.2.6-GA) was discovered to contain a cross-site scripting (XSS) vulnerability via a customerorg.broadleafcommerce:broadleaf