# CVEs published 2023-06-22

111 CVEs were published on June 22, 2023: 3 critical, 29 high. Days are UTC.

- [CVE-2023-34462](https://cve.now/CVE-2023-34462.md): netty-handler SniHandler 16MB allocation (CVSS 6.5, netty · io.netty:netty-handler)
- [CVE-2023-34241](https://cve.now/CVE-2023-34241.md): CUPS vulnerable to use-after-free in cupsdAcceptClient() (CVSS 5.3, OpenPrinting cups)
- [CVE-2023-34110](https://cve.now/CVE-2023-34110.md): Flask-AppBuilder vulnerable to possible disclosure of sensitive information on user error (CVSS 2.7, dpgaspar Flask-AppBuilder · flask-appbuilder)
- [CVE-2023-28016](https://cve.now/CVE-2023-28016.md): HCL BigFix OSD Bare Metal Server is affected by a host header injection vulnerability (CVSS 3.1, HCL Software HCL BigFix OSD Bare Metal Server)
- [CVE-2023-28006](https://cve.now/CVE-2023-28006.md): HCL BigFix OSD Bare Metal Server is affected by a weak cryptographic algorithm. (CVSS 7.0, HCL Software HCL BigFix OSD Bare Metal Server)
- [CVE-2023-3114](https://cve.now/CVE-2023-3114.md): Terraform Enterprise Agent Pool Controls Allowed Unauthorized Workspaces To Target an Agent Pool (CVSS 5.0, HashiCorp Terraform Enterprise)
- [CVE-2023-23343](https://cve.now/CVE-2023-23343.md): HCL BigFix OSD Bare Metal Server version 311.12 or lower is affected by a clickjacking vulnerability. (CVSS 2.4, HCL Software HCL BigFix OSD Bare Metal Server)
- [CVE-2023-32320](https://cve.now/CVE-2023-32320.md): Nextcloud Server's brute force protection allows someone to send more requests than intended (CVSS 8.7, nextcloud security-advisories)
- [CVE-2023-3128](https://cve.now/CVE-2023-3128.md): Grafana is validating Azure AD accounts based on the email claim. (CVSS 9.4, Grafana · github.com/grafana/grafana)
- [CVE-2023-2991](https://cve.now/CVE-2023-2991.md): Fortra Globalscape Administration Server Information Disclosure (no CVSS, Fortra Globalscape EFT)
- [CVE-2023-2990](https://cve.now/CVE-2023-2990.md): Fortra Globalscape Administration Server Denial of Service (no CVSS, Fortra Globalscape EFT)
- [CVE-2023-28800](https://cve.now/CVE-2023-28800.md): Output encoding missing in redrurl parameter (CVSS 8.1, Zscaler Client Connector)
- [CVE-2023-2989](https://cve.now/CVE-2023-2989.md): Fortra Globalscape Administration Server Out of Bounds Memory Read (no CVSS, Fortra Globalscape EFT)
- [CVE-2023-28799](https://cve.now/CVE-2023-28799.md): A URL parameter during login flow was vulnerable to injection. (CVSS 8.2, Zscaler Client Connector)
- [CVE-2023-3326](https://cve.now/CVE-2023-3326.md): Network authentication attack via pam\_krb5 (no CVSS, FreeBSD)
- [CVE-2023-2611](https://cve.now/CVE-2023-2611.md): Advantech R-SeeNet Use of Hard-coded Credentials (CVSS 9.8, Advantech R-SeeNet)
- [CVE-2023-3256](https://cve.now/CVE-2023-3256.md): Advantech R-SeeNet External Control of File Name or Path (CVSS 8.8, Advantech R-SeeNet)
- [CVE-2023-34170](https://cve.now/CVE-2023-34170.md): WordPress Quick/Bulk Order Form for WooCommerce Plugin \<= 3.5.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, WP Overnight Quick/Bulk Order Form for WooCommerce)
- [CVE-2023-34028](https://cve.now/CVE-2023-34028.md): WordPress WOLF Plugin \<= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, realmag777 WOLF – WordPress Posts Bulk Editor and Manager P…)
- [CVE-2023-35174](https://cve.now/CVE-2023-35174.md): Livebook Desktop's protocol handler can be exploited to execute arbitrary command on Windows (CVSS 8.6, livebook-dev livebook)
- [CVE-2023-35926](https://cve.now/CVE-2023-35926.md): Insecure sandbox in Backstage Scaffolder plugin (CVSS 8.1, backstage · @backstage/plugin-scaffolder-backend)
- [CVE-2023-34006](https://cve.now/CVE-2023-34006.md): WordPress Telegram Bot & Channel Plugin \<= 3.6.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Marco Milesi Telegram Bot & Channel)
- [CVE-2023-33997](https://cve.now/CVE-2023-33997.md): WordPress bbp style pack Plugin \<= 5.5.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Robin Wilson bbp style pack)
- [CVE-2023-32960](https://cve.now/CVE-2023-32960.md): WordPress UpdraftPlus Plugin \<= 1.23.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 7.1, UpdraftPlus.Com, DavidAnderson UpdraftPlus WordPress Backup…)
- [CVE-2023-25500](https://cve.now/CVE-2023-25500.md): Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1 (CVSS 3.5, vaadin · flow-server +2)
- [CVE-2023-25499](https://cve.now/CVE-2023-25499.md): Possible information disclosure in non visible components (CVSS 5.7, vaadin · com.vaadin:vaadin +1)
- [CVE-2022-47593](https://cve.now/CVE-2022-47593.md): WordPress RapidLoad Power-Up for Autoptimize Plugin \<= 1.6.35 is vulnerable to SQL Injection (CVSS 8.5, RapidLoad Power-Up for Autoptimize)
- [CVE-2023-28774](https://cve.now/CVE-2023-28774.md): WordPress Review Stream Plugin \<= 1.6.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Grade Us Review Stream)
- [CVE-2023-34368](https://cve.now/CVE-2023-34368.md): WordPress Kanban Boards for WordPress Plugin \<= 2.5.20 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Kanban for WordPress Kanban Boards for WordPress)
- [CVE-2023-33323](https://cve.now/CVE-2023-33323.md): WordPress ARMember Plugin \<= 4.0.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Repute InfoSystems ARMember)
- [CVE-2023-32239](https://cve.now/CVE-2023-32239.md): WordPress WoodMart Theme \<= 7.2.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4, xtemos WoodMart)
- [CVE-2023-28418](https://cve.now/CVE-2023-28418.md): WordPress Mediciti Lite Theme \<= 1.3.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Yudlee themes Mediciti Lite)
- [CVE-2023-20896](https://cve.now/CVE-2023-20896.md): The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. (CVSS 5.9, VMware vCenter Server · VMware Cloud Foundation)
- [CVE-2023-28174](https://cve.now/CVE-2023-28174.md): WordPress eRocket Plugin \<= 1.2.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, eLightUp eRocket)
- [CVE-2023-27452](https://cve.now/CVE-2023-27452.md): WordPress Button Generator – easily Button Builder Plugin \<= 2.3.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Wow-Company Button Generator – easily Button Builder)
- [CVE-2023-20895](https://cve.now/CVE-2023-20895.md): The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol. (CVSS 8.1, VMware vCenter Server · VMware Cloud Foundation)
- [CVE-2023-20894](https://cve.now/CVE-2023-20894.md): The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. (CVSS 8.1, VMware vCenter Server · VMware Cloud Foundation)
- [CVE-2023-20893](https://cve.now/CVE-2023-20893.md): The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol. (CVSS 8.1, VMware vCenter Server · VMware Cloud Foundation)
- [CVE-2023-26534](https://cve.now/CVE-2023-26534.md): WordPress WP Repost Plugin \<= 0.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, OneWebsite WP Repost)
- [CVE-2023-26539](https://cve.now/CVE-2023-26539.md): WordPress Advanced Text Widget Plugin \<= 2.1.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Max Chirkov Advanced Text Widget)
- [CVE-2023-35917](https://cve.now/CVE-2023-35917.md): WordPress WooCommerce PayPal Payments Plugin \<= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, WooCommerce PayPal Payments)
- [CVE-2023-35918](https://cve.now/CVE-2023-35918.md): WordPress WooCommerce Bulk Stock Management Plugin \<= 2.2.33 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, WooCommerce Bulk Stock Management)
- [CVE-2023-20892](https://cve.now/CVE-2023-20892.md): VMware vCenter Server heap-overflow vulnerability (CVSS 8.1, VMware vCenter Server · VMware Cloud Foundation)
- [CVE-2023-30500](https://cve.now/CVE-2023-30500.md): WordPress WPForms plugins - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 5.8, WPForms Lite · WPForms Pro)
- [CVE-2023-23811](https://cve.now/CVE-2023-23811.md): WordPress Smoothscroller Plugin \<= 1.0.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Neil Gee Smoothscroller)
- [CVE-2023-23795](https://cve.now/CVE-2023-23795.md): WordPress Form Builder Plugin \<= 1.9.9.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 7.1, Muneeb Form Builder)
- [CVE-2023-23807](https://cve.now/CVE-2023-23807.md): WordPress MojoPlug Slide Panel Plugin \<= 1.1.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Qumos MojoPlug Slide Panel)
- [CVE-2023-28778](https://cve.now/CVE-2023-28778.md): WordPress Pagination by BestWebSoft Plugin \<= 1.2.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, BestWebSoft Pagination)
- [CVE-2023-28776](https://cve.now/CVE-2023-28776.md): WordPress Continuous Image Carousel With Lightbox Plugin \<= 1.0.15 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, I Thirteen Web Solution Continuous Image Carousel With Ligh…)
- [CVE-2023-28750](https://cve.now/CVE-2023-28750.md): WordPress Albo Pretorio Online Plugin \<= 4.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Ignazio Scimone Albo Pretorio On line)
- [CVE-2023-28784](https://cve.now/CVE-2023-28784.md): WordPress Contest Gallery Plugin \<= 21.1.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Contest Gallery)
- [CVE-2023-35093](https://cve.now/CVE-2023-35093.md): WordPress MasterStudy LMS Plugin \<= 3.0.8 is vulnerable to Broken Access Control (CVSS 6.5, StylemixThemes MasterStudy LMS WordPress Plugin – for Onlin…)
- [CVE-2023-35090](https://cve.now/CVE-2023-35090.md): WordPress MasterStudy LMS Plugin \<= 3.0.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, StylemixThemes MasterStudy LMS WordPress Plugin – for Onlin…)
- [CVE-2023-31213](https://cve.now/CVE-2023-31213.md): WordPress WPBakery Page Builder Plugin \< 6.13.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, WPBakery Page Builder)
- [CVE-2023-28695](https://cve.now/CVE-2023-28695.md): WordPress VigilanTor Plugin \<= 1.3.10 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Drew Phillips VigilanTor)
- [CVE-2023-27618](https://cve.now/CVE-2023-27618.md): WordPress Store Locator WordPress Plugin \<= 1.4.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, AGILELOGIX Store Locator WordPress)
- [CVE-2023-28534](https://cve.now/CVE-2023-28534.md): WordPress WP Job Portal Plugin \<= 2.0.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, WP Job Portal – A Complete Job Board)
- [CVE-2023-28496](https://cve.now/CVE-2023-28496.md): WordPress SMTP2GO Plugin \<= 1.4.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, SMTP2GO – Email Made Easy)
- [CVE-2023-28423](https://cve.now/CVE-2023-28423.md): WordPress Modern Footnotes Plugin \<= 1.4.15 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Prism Tech Studios Modern Footnotes)
- [CVE-2023-28166](https://cve.now/CVE-2023-28166.md): WordPress Tags Cloud Manager Plugin \<= 1.0.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Aakif Kadiwala Tags Cloud Manager)
- [CVE-2023-28171](https://cve.now/CVE-2023-28171.md): WordPress Brilliance Theme \<= 1.3.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4, WP Chill Brilliance)
- [CVE-2023-27612](https://cve.now/CVE-2023-27612.md): WordPress Site Reviews Plugin \<= 6.5.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Paul Ryley Site Reviews)
- [CVE-2023-27629](https://cve.now/CVE-2023-27629.md): WordPress Site Reviews Plugin \<= 6.5.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Paul Ryley Site Reviews)
- [CVE-2023-27413](https://cve.now/CVE-2023-27413.md): WordPress W4 Post List Plugin \<= 2.4.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Shazzad Hossain Khan W4 Post List)
- [CVE-2023-27631](https://cve.now/CVE-2023-27631.md): WordPress Daily Prayer Time Plugin \<= 2023.05.04 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, mmrs151 Daily Prayer Time)
- [CVE-2023-32449](https://cve.now/CVE-2023-32449.md): Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. (CVSS 7.2, Dell PowerStore)
- [CVE-2023-26115](https://cve.now/CVE-2023-26115.md): All versions of the package word-wrap are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of an insecure regular (CVSS 5.3, word-wrap · org.webjars.npm:word-wrap)
- [CVE-2019-25152](https://cve.now/CVE-2019-25152.md): Abandoned Cart Lite for WooCommerce \< 5.2.0 and Abandoned Cart Pro for WooCommerce \< 7.13.0 - Stored Cross-Site Scripting (CVSS 7.2, tychesoftwares Abandoned Cart Lite for WooCommerce · TYCHE…)
- [CVE-2023-33842](https://cve.now/CVE-2023-33842.md): IBM SPSS Modeler information disclosure (CVSS 6.2, IBM SPSS Modeler)
- [CVE-2023-28956](https://cve.now/CVE-2023-28956.md): IBM Spectrum Protect Backup-Archive Client privilege escalation (CVSS 8.4, IBM Spectrum Protect Backup-Archive Client)
- [CVE-2023-27083](https://cve.now/CVE-2023-27083.md): An issue discovered in /admin.php in Pluck CMS 4.7.15 through 4.7.16-dev5 allows remote attackers to run arbitrary code via manage file func (no CVSS)
- [CVE-2023-28094](https://cve.now/CVE-2023-28094.md): Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default creden (CVSS 8.1, Pegasystems Pega Platform)
- [CVE-2023-29707](https://cve.now/CVE-2023-29707.md): Cross Site Scripting (XSS) vulnerability in GBCOM LAC WEB Control Center version lac-1.3.x, allows attackers to create an arbitrary device. (no CVSS)
- [CVE-2023-29708](https://cve.now/CVE-2023-29708.md): An issue was discovered in /cgi-bin/adm.cgi in WavLink WavRouter version RPT70HA1.x, allows attackers to force a factory reset via crafted p (no CVSS)
- [CVE-2023-29709](https://cve.now/CVE-2023-29709.md): An issue was discovered in /cgi-bin/login\_rj.cgi in Wildix WSG24POE version 103SP7D190822, allows attackers to bypass authentication. (CVSS 7.5)
- [CVE-2023-29711](https://cve.now/CVE-2023-29711.md): An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafted (CVSS 9.8)
- [CVE-2023-29931](https://cve.now/CVE-2023-29931.md): laravel-s 3.7.35 is vulnerable to Local File Inclusion via /src/Illuminate/Laravel.php. (no CVSS, hhxsv5/laravel-s)
- [CVE-2023-30347](https://cve.now/CVE-2023-30347.md): Cross Site Scripting (XSS) vulnerability in Neox Contact Center 2.3.9, via the serach\_sms\_api\_name parameter to the SMA API search. (no CVSS)
- [CVE-2023-31867](https://cve.now/CVE-2023-31867.md): Sage X3 version 12.14.0.50-0 is vulnerable to CSV Injection. (no CVSS)
- [CVE-2023-31868](https://cve.now/CVE-2023-31868.md): Sage X3 version 12.14.0.50-0 is vulnerable to Cross Site Scripting (XSS). (no CVSS)
- [CVE-2023-32571](https://cve.now/CVE-2023-32571.md): Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute arbitrary code and commands when untrusted input to methods in (no CVSS, System.Linq.Dynamic.Core)
- [CVE-2023-33387](https://cve.now/CVE-2023-33387.md): A reflected cross-site scripting (XSS) vulnerability in DATEV eG Personal-Management System Comfort/Comfort Plus v15.1.0 to v16.1.1 P4 allow (no CVSS)
- [CVE-2023-34553](https://cve.now/CVE-2023-34553.md): An issue was discovered in WAFU Keyless Smart Lock v1.0 allows attackers to unlock a device via code replay attack. (no CVSS)
- [CVE-2023-34601](https://cve.now/CVE-2023-34601.md): Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component ${businessTable} at /act/ActDao.xml. (no CVSS)
- [CVE-2023-34796](https://cve.now/CVE-2023-34796.md): Cross site scripting (XSS) vulnerabiliy in dmarcts-report-viewer dashboard versions 1.1 and thru commit 8a1d882b4c481a05e296e9b38a7961e91214 (no CVSS)
- [CVE-2023-34923](https://cve.now/CVE-2023-34923.md): XML Signature Wrapping (XSW) in SAML-based Single Sign-on feature in TOPdesk v12.10.12 allows bad actors with credentials to authenticate wi (no CVSS)
- [CVE-2023-34927](https://cve.now/CVE-2023-34927.md): Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password. (no CVSS, github.com/casdoor/casdoor)
- [CVE-2023-34939](https://cve.now/CVE-2023-34939.md): Onlyoffice Community Server before v12.5.2 was discovered to contain a remote code execution (RCE) vulnerability via the component UploadPro (no CVSS)
- [CVE-2023-35131](https://cve.now/CVE-2023-35131.md): Moodle: xss risk on groups page (CVSS 6.1, moodle · moodle/moodle)
- [CVE-2023-35132](https://cve.now/CVE-2023-35132.md): Moodle: minor sql injection risk on mnet sso access control page (CVSS 6.3, moodle · moodle/moodle)
- [CVE-2023-35133](https://cve.now/CVE-2023-35133.md): Moodle: ssrf risk due to insufficient check on the curl blocked hosts (CVSS 7.5, moodle · moodle/moodle)
- [CVE-2023-36093](https://cve.now/CVE-2023-36093.md): There is a storage type cross site scripting (XSS) vulnerability in the filing number of the Basic Information tab on the backend management (no CVSS)
- [CVE-2023-36097](https://cve.now/CVE-2023-36097.md): funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install. (no CVSS, funadmin/funadmin)
- [CVE-2023-36239](https://cve.now/CVE-2023-36239.md): libming listswf 0.4.7 was discovered to contain a buffer overflow in the parseSWF\_DEFINEFONTINFO() function at parser.c. (no CVSS)
- [CVE-2023-36243](https://cve.now/CVE-2023-36243.md): FLVMeta v1.2.1 was discovered to contain a buffer overflow via the xml\_on\_metadata\_tag\_only function at dump\_xml.c. (no CVSS)
- [CVE-2023-36354](https://cve.now/CVE-2023-36354.md): TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow (no CVSS)
- [CVE-2023-36355](https://cve.now/CVE-2023-36355.md): TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. (no CVSS)
- [CVE-2023-36356](https://cve.now/CVE-2023-36356.md): TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the (no CVSS)
- [CVE-2023-36357](https://cve.now/CVE-2023-36357.md): An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers (no CVSS)
- [CVE-2023-36358](https://cve.now/CVE-2023-36358.md): TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component / (CVSS 7.7)
- [CVE-2023-36359](https://cve.now/CVE-2023-36359.md): TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component / (CVSS 7.5)
- [CVE-2023-36362](https://cve.now/CVE-2023-36362.md): An issue in the rel\_sequences component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via cra (no CVSS)
- [CVE-2023-36363](https://cve.now/CVE-2023-36363.md): An issue in the \_\_nss\_database\_lookup component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) (no CVSS)
- [CVE-2023-36364](https://cve.now/CVE-2023-36364.md): An issue in the rel\_deps component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted (no CVSS)
- [CVE-2023-36365](https://cve.now/CVE-2023-36365.md): An issue in the sql\_trans\_copy\_key component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) vi (no CVSS)
- [CVE-2023-36366](https://cve.now/CVE-2023-36366.md): An issue in the log\_create\_delta component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause Denial of Service (DoS) via cr (no CVSS)
- [CVE-2023-36367](https://cve.now/CVE-2023-36367.md): An issue in the BLOBcmp component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted S (no CVSS)
- [CVE-2023-36368](https://cve.now/CVE-2023-36368.md): An issue in the cs\_bind\_ubat component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via craf (no CVSS)
- [CVE-2023-36369](https://cve.now/CVE-2023-36369.md): An issue in the list\_append component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via craft (no CVSS)
- [CVE-2023-36370](https://cve.now/CVE-2023-36370.md): An issue in the gc\_col component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQ (no CVSS)
- [CVE-2023-36371](https://cve.now/CVE-2023-36371.md): An issue in the GDKfree component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted S (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-06-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.