CVEs published June 25, 2023
10 CVEs were published on June 25, 2023: 0 critical, 1 high.
- Published
- 10
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Campcodes Retro Cellphone Online Store
- 1
High 1
Medium, low and unrated 9
- CVE-2023-3396Campcodes Retro Cellphone Online Store index.php sql injectionCampcodes Retro Cellphone Online Store
- CVE-2015-20109end_pattern (called from internal_fnmatch) in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to
- CVE-2023-36612Directory traversal can occur in the Basecamp com.basecamp.bc3 application before 4.2.1 for Android, which may allow an attacker to write ar
- CVE-2023-36630In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.
- CVE-2023-36632The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger "RecursionError: maximum recursion depth exce
- CVE-2023-36660The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.
- CVE-2023-36663it-novum openITCOCKPIT (aka open IT COCKPIT) 4.6.4 before 4.6.5 allows SQL Injection (by authenticated users) via the sort parameter of the
- CVE-2023-36664Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix)
- CVE-2023-36666INEX IXP-Manager before 6.3.1 allows XSS.