CVEs published June 28, 2023
153 CVEs were published on June 28, 2023: 7 critical, 13 high. 1 is now in CISA KEV.
- Published
- 153
- Critical
- 7
- High
- 13
- Medium
- 24
- Low
- 2
- Unrated
- 107
- Now in CISA KEV
- 1
- Fix available
- 16
Most affected products
- Android
- 75
- Linux Kernel
- 5
- NEC Aterm WG2600HP2 · NEC Aterm WG2600HP +15
- 4
- Kernel
- 3
- Samsung Mobile Devices
- 3
- Cisco TelePresence Video Communication Server (VCS) Express…
- 2
- Cisco Web Security Appliance
- 2
- D-Link DSL-224 firmware
- 2
- GitLab
- 2
- wedevs Subscribe2 – Form, Email Subscribers & Newsletters
- 2
Critical 7
- CVE-2023-36475Parse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollutionparse-community parse-server · parse-server
- CVE-2023-2625A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, haviHitachi Energy TXpert Hub CoreTec
- CVE-2023-26134Versions of the package git-commit-info before 2.0.2 are vulnerable to Command Injection such that the package-exported method gitCommitInfogit-commit-info
- CVE-2023-20105A vulnerability in the change password functionality of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) coulCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2023-20192Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation VulnerabilitiesCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2023-32222D-Link DSL-G256DG firmware version vBZ_1.00.27 Authentication BypassD-Link DSL-G256DG firmware
- CVE-2023-32224D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication AttemptsD-Link DSL-224 firmware
High 13
- CVE-2023-36474Interactsh server settings make users vulnerable to Subdomain Takeoverprojectdiscovery interactsh · github.com/projectdiscovery/i…
- CVE-2023-3243 ** UNSUPPORTED WHEN ASSIGNED ** [An attacker can capture an authenticating hash and utilize it to create new sessions.Alerton BCM-WEB
- CVE-2023-3390Use-after-free in Linux kernel's netfilter subsystemLinux Kernel
- CVE-2023-3389Use after free in io_uring in the Linux KernelLinux Kernel
- CVE-2023-3090Out-of-bounds write in Linux kernel's ipvlan network driverLinux Kernel
- CVE-2021-31937Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge
- CVE-2023-36467AWS data.all vulnerable to RCE through user injection of Python Commandsawslabs aws-dataall
- CVE-2023-1295Privilege escalation with IO_RING_OP_CLOSE in the Linux KernelLinux Kernel
- CVE-2023-20006A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco FirepCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2023-20108A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&PCisco Unified Communications Manager IM and Presence Service
- CVE-2023-20178A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client SoftwarCisco Secure Client
- CVE-2023-21517Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code.Samsung Mobile Devices
- CVE-2023-32223D-Link DSL-224 firmware version 3.0.10 post authentication command executionD-Link DSL-224 firmware
Medium, low and unrated 133
- CVE-2023-3450Ruijie RG-BCR860 Network Diagnostic Page os command injectionRuijie RG-BCR860
- CVE-2023-3449IBOS OA Interview Management Export export&interviews=x actionExport sql injectionIBOS OA
- CVE-2023-27866IBM Informix JDBC code executionIBM Informix JDBC
- CVE-2023-3445Cross-site Scripting (XSS) - Stored in spinacms/spinaspinacms/spina · spina
- CVE-2023-3034Reflected XSS in BKG Ntrip Professional Caster version <=2.0.44BKG NTRIP Professional Caster
- CVE-2023-32623Directory traversal vulnerability in Snow Monkey Forms v5.1.1 and earlier allows a remote unauthenticated attacker to delete arbitrary filesMonkey Wrench Snow Monkey Forms
- CVE-2023-1844Subscribe2 <= 10.40 - Missing Authorizationwedevs Subscribe2 – Form, Email Subscribers & Newsletters
- CVE-2023-3407Subscribe2 <= 10.40 - Cross-Site Request Forgerywedevs Subscribe2 – Form, Email Subscribers & Newsletters
- CVE-2022-48505This issue was addressed with improved data protection.Apple macOS
- CVE-2023-3427Salon Booking System <= 8.4.6 - Cross-Site Request Forgery to Admin Role Change to Customer, User Meta Update via save_customerwordpresschef Salon Booking System – Free Version
- CVE-2023-3333Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG18NEC Aterm WG2600HP2 · NEC Aterm WG2600HP +15
- CVE-2023-3332Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG18NEC Aterm WG2600HP2 · NEC Aterm WG2600HP +15
- CVE-2023-3331Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG18NEC Aterm WG2600HP2 · NEC Aterm WG2600HP +15
- CVE-2023-3330Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2,NEC Aterm WG2600HP2 · NEC Aterm WG2600HP +15
- CVE-2021-25827Emby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address.
- CVE-2021-25828Emby Server versions < 4.6.0.50 is vulnerable to Cross Site Scripting (XSS) vulnerability via a crafted GET request to /web.
- CVE-2022-20443In hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements due to a tapjacking/overlay attack.Android
- CVE-2022-4143An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 befoGitLab
- CVE-2022-44276In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting in RCE.
- CVE-2023-20028Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting VulnerabilitiesCisco Web Security Appliance
- CVE-2023-20116A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified CommuCisco Unified Communications Manager
- CVE-2023-20119A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, formerly known as CoCisco Secure Email and Web Manager
- CVE-2023-20120Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting VulnerabilitiesCisco Web Security Appliance
- CVE-2023-20136A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated, remote attacker with the privileges of a read-only useCisco Secure Workload
- CVE-2023-20188A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series ManCisco Small Business Smart and Managed Switches
- CVE-2023-20199Cisco Duo Two-Factor Authentication for macOS Authentication Bypass VulnerabilityCisco Duo
- CVE-2023-21066In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2023-21146there is a possible way to corrupt memory due to a use after free.Android
- CVE-2023-21147In lwis_i2c_device_disable of lwis_device_i2c.c, there is a possible UAF due to a logic error in the code.Android
- CVE-2023-21148In BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing null check.Android
- CVE-2023-21149In registerGsmaServiceIntentReceiver of ShannonRcsService.java, there is a possible way to activate/deactivate RCS service due to a missing Android
- CVE-2023-21150In handle_set_parameters_ctrl of hal_socket.c, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2023-21151In the Google BMS kernel module, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2023-21152In FaceStatsAnalyzer::InterpolateWeightList of face_stats_analyzer.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21153In Do_AIMS_SET_CALL_WAITING of imsservice.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21154In StoreAdbSerialNumber of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21155In BuildSetRadioNode of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing null check.Android
- CVE-2023-21156In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation.Android
- CVE-2023-21157In encode of wlandata.cpp, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2023-21158In encode of miscdata.cpp, there is a possible out of bounds read due to a heap buffer overflow.Android
- CVE-2023-21159In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2023-21160In BuildSetTcsFci of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a heap buffer overflow.Android
- CVE-2023-21161In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2023-21167In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check.Android
- CVE-2023-21168In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21169In inviteInternal of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21170In executeSetClientTarget of ComposerCommandEngine.h, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21171In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure.Android
- CVE-2023-21172In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin user due to a permissAndroid
- CVE-2023-21173In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due to a missing permissioAndroid
- CVE-2023-21174In isPageSearchEnabled of BillingCycleSettings.java, there is a possible way for the guest user to change data limits due to a permissions bAndroid
- CVE-2023-21175In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due to a permissions bypaAndroid
- CVE-2023-21176In list_key_entries of utils.rs, there is a possible way to disable user credentials due to resource exhaustion.Android
- CVE-2023-21177In requestAppKeyboardShortcuts of WindowManagerService.java, there is a possible way to infer the app a user is interacting with due to a miAndroid
- CVE-2023-21178In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition.Android
- CVE-2023-21179In parseSecurityParamsFromXml of XmlUtil.java, there is a possible bypass of user specified wifi encryption protocol due to improperly used Android
- CVE-2023-21180In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap buffer overflow.Android
- CVE-2023-21181In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow.Android
- CVE-2023-21182In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds read due to a missing bounds checkAndroid
- CVE-2023-21183In ForegroundUtils of ForegroundUtils.java, there is a possible way to read NFC tag data while the app is still in the background due to a lAndroid
- CVE-2023-21184In getCurrentPrivilegedPackagesForAllUsers of CarrierPrivilegesTracker.java, there is a possible permission bypass due to a logic error in tAndroid
- CVE-2023-21185In multiple functions of WifiNetworkFactory.java, there is a missing permission check.Android
- CVE-2023-21186In LogResponse of Dns.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21187In onCreate of UsbAccessoryUriActivity.java, there is a possible way to escape the Setup Wizard due to a logic error in the code.Android
- CVE-2023-21188In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow.Android
- CVE-2023-21189In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in the code.Android
- CVE-2023-21190In btm_acl_encrypt_change of btm_acl.cc, there is a possible way for a remote device to turn off encryption without resulting in a terminateAndroid
- CVE-2023-21191In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to a logic error in thAndroid
- CVE-2023-21192In setInputMethodWithSubtypeIdLocked of InputMethodManagerService.java, there is a possible way to setup input methods that are not enabled Android
- CVE-2023-21193In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow.Android
- CVE-2023-21194In gatt_dbg_op_name of gatt_utils.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21195In btm_ble_periodic_adv_sync_tx_rcvd of btm_ble_gap.cc, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2023-21196In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds checAndroid
- CVE-2023-21197In btm_acl_process_sca_cmpl_pkt of btm_acl.cc, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2023-21198In remove_sdp_record of btif_sdp_server.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21199In btu_ble_proc_ltk_req of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21200In on_remove_iso_data_path of btm_iso_impl.h, there is a possible out of bounds read due to improper input validation.Android
- CVE-2023-21201In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check.Android
- CVE-2023-21202In btm_delete_stored_link_key_complete of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21203In startWpsPbcInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation.Android
- CVE-2023-21204In multiple files, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21205In startWpsPinDisplayInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization.Android
- CVE-2023-21206In initiateVenueUrlAnqpQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization.Android
- CVE-2023-21207In initiateTdlsSetupInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21208In setCountryCodeInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation.Android
- CVE-2023-21209In multiple functions of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization.Android
- CVE-2023-21210In initiateHs20IconQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation.Android
- CVE-2023-21211In multiple files, there is a possible out of bounds read due to a heap buffer overflow.Android
- CVE-2023-21212In multiple files, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21213In initiateTdlsTeardownInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21214In addGroupWithConfigInternal of p2p_iface.cpp, there is a possible out of bounds read due to unsafe deserialization.Android
- CVE-2023-21219there is a possible use of unencrypted transport over cellular networks due to an insecure default value.Android
- CVE-2023-21220there is a possible use of unencrypted transport over cellular networks due to an insecure default value.Android
- CVE-2023-21222In load_dt_data of storage.c, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2023-21223In LPP_ConvertGNSS_DataBitAssistance of LPP_CommonUtil.c, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21224In ss_ProcessReturnResultComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a heap buffer overflow.Android
- CVE-2023-21225there is a possible way to bypass the protected confirmation screen due to Failure to lock display power.Android
- CVE-2023-21226In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2023-21236In aoc_service_set_read_blocked of aoc.c, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2023-21237In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading orAndroid
- CVE-2023-21512Improper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1 allows local attackers to read work profile notiSamsung Mobile Devices
- CVE-2023-21513Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to manipulate device to opeSamsung Mobile Devices
- CVE-2023-21518Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications to start arbitrary Samsung Mobile Samsung SearchWidget
- CVE-2023-2232An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulnerability in the Jira GitLab
- CVE-2023-26615D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActions API, allowing unau
- CVE-2023-30259A Buffer Overflow vulnerability in importshp plugin in LibreCAD 2.2.0 allows attackers to obtain sensitive information via a crafted DBF fil
- CVE-2023-3138A vulnerability was found in libX11.libX11
- CVE-2023-3355Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.ckernel · Red Hat Enterprise Linux +1
- CVE-2023-3357A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver.Kernel
- CVE-2023-33570Bagisto v1.5.1 is vulnerable to Server-Side Template Injection (SSTI).
- CVE-2023-3358A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver.Kernel
- CVE-2023-3359An issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c.Kernel
- CVE-2023-33592Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=syste
- CVE-2023-33661Multiple cross-site scripting (XSS) vulnerabilities were discovered in Church CRM v4.5.3 in GroupReports.php via GroupRole, ReportModel, and
- CVE-2023-3439A flaw was found in the MCTP protocol in the Linux kernel.Linux Kernel
- CVE-2023-34647PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).
- CVE-2023-34650PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting (XSS).
- CVE-2023-34651PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).
- CVE-2023-34652PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS) via Add New Course.
- CVE-2023-34736Guantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload.
- CVE-2023-34738Chemex through 3.7.1 is vulnerable to arbitrary file upload.
- CVE-2023-34761An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message Cup, Hello Cup 1.3.1 for Android, and bypass
- CVE-2023-34843Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request.
- CVE-2023-34928A stack overflow in the Edit_BasicSSID function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted
- CVE-2023-34929A stack overflow in the AddMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST
- CVE-2023-34930A stack overflow in the EditMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POS
- CVE-2023-34931A stack overflow in the EditWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted
- CVE-2023-34932A stack overflow in the UpdateWanMode function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted P
- CVE-2023-34933A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted
- CVE-2023-34934A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a craft
- CVE-2023-34935A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted
- CVE-2023-34936A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted
- CVE-2023-34937A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST