# CVEs published 2023-06-28

153 CVEs were published on June 28, 2023: 7 critical, 13 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-36475](https://cve.now/CVE-2023-36475.md): Parse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollution (CVSS 9.8, parse-community parse-server · parse-server)
- [CVE-2023-36474](https://cve.now/CVE-2023-36474.md): Interactsh server settings make users vulnerable to Subdomain Takeover (CVSS 8.2, projectdiscovery interactsh · github.com/projectdiscovery/i…)
- [CVE-2023-3243](https://cve.now/CVE-2023-3243.md): \*\* UNSUPPORTED WHEN ASSIGNED \*\* \[An attacker can capture an authenticating hash and utilize it to create new sessions. (CVSS 8.3, Alerton BCM-WEB)
- [CVE-2023-3390](https://cve.now/CVE-2023-3390.md): Use-after-free in Linux kernel's netfilter subsystem (CVSS 7.8, Linux Kernel)
- [CVE-2023-3389](https://cve.now/CVE-2023-3389.md): Use after free in io\_uring in the Linux Kernel (CVSS 7.8, Linux Kernel)
- [CVE-2023-3090](https://cve.now/CVE-2023-3090.md): Out-of-bounds write in Linux kernel's ipvlan network driver (CVSS 7.8, Linux Kernel)
- [CVE-2023-3450](https://cve.now/CVE-2023-3450.md): Ruijie RG-BCR860 Network Diagnostic Page os command injection (CVSS 4.7, Ruijie RG-BCR860)
- [CVE-2023-3449](https://cve.now/CVE-2023-3449.md): IBOS OA Interview Management Export export&interviews=x actionExport sql injection (CVSS 5.5, IBOS OA)
- [CVE-2021-31937](https://cve.now/CVE-2021-31937.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 8.2, Microsoft Edge)
- [CVE-2023-2625](https://cve.now/CVE-2023-2625.md): A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, havi (CVSS 9.0, Hitachi Energy TXpert Hub CoreTec)
- [CVE-2023-27866](https://cve.now/CVE-2023-27866.md): IBM Informix JDBC code execution (CVSS 6.3, IBM Informix JDBC)
- [CVE-2023-36467](https://cve.now/CVE-2023-36467.md): AWS data.all vulnerable to RCE through user injection of Python Commands (CVSS 8.0, awslabs aws-dataall)
- [CVE-2023-3445](https://cve.now/CVE-2023-3445.md): Cross-site Scripting (XSS) - Stored in spinacms/spina (CVSS 3.5, spinacms/spina · spina)
- [CVE-2023-1295](https://cve.now/CVE-2023-1295.md): Privilege escalation with IO\_RING\_OP\_CLOSE in the Linux Kernel (CVSS 7.8, Linux Kernel)
- [CVE-2023-3034](https://cve.now/CVE-2023-3034.md): Reflected XSS in BKG Ntrip Professional Caster version \<=2.0.44 (CVSS 4.7, BKG NTRIP Professional Caster)
- [CVE-2023-26134](https://cve.now/CVE-2023-26134.md): Versions of the package git-commit-info before 2.0.2 are vulnerable to Command Injection such that the package-exported method gitCommitInfo (CVSS 9.8, git-commit-info)
- [CVE-2023-32623](https://cve.now/CVE-2023-32623.md): Directory traversal vulnerability in Snow Monkey Forms v5.1.1 and earlier allows a remote unauthenticated attacker to delete arbitrary files (no CVSS, Monkey Wrench Snow Monkey Forms)
- [CVE-2023-1844](https://cve.now/CVE-2023-1844.md): Subscribe2 \<= 10.40 - Missing Authorization (CVSS 4.3, wedevs Subscribe2 – Form, Email Subscribers & Newsletters)
- [CVE-2023-3407](https://cve.now/CVE-2023-3407.md): Subscribe2 \<= 10.40 - Cross-Site Request Forgery (CVSS 4.3, wedevs Subscribe2 – Form, Email Subscribers & Newsletters)
- [CVE-2022-48505](https://cve.now/CVE-2022-48505.md): This issue was addressed with improved data protection. (no CVSS, Apple macOS)
- [CVE-2023-3427](https://cve.now/CVE-2023-3427.md): Salon Booking System \<= 8.4.6 - Cross-Site Request Forgery to Admin Role Change to Customer, User Meta Update via save\_customer (CVSS 5.4, wordpresschef Salon Booking System – Free Version)
- [CVE-2023-3333](https://cve.now/CVE-2023-3333.md): Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG18 (no CVSS, NEC Aterm WG2600HP2 · NEC Aterm WG2600HP +15)
- [CVE-2023-3332](https://cve.now/CVE-2023-3332.md): Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG18 (no CVSS, NEC Aterm WG2600HP2 · NEC Aterm WG2600HP +15)
- [CVE-2023-3331](https://cve.now/CVE-2023-3331.md): Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG18 (no CVSS, NEC Aterm WG2600HP2 · NEC Aterm WG2600HP +15)
- [CVE-2023-3330](https://cve.now/CVE-2023-3330.md): Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, (no CVSS, NEC Aterm WG2600HP2 · NEC Aterm WG2600HP +15)
- [CVE-2021-25827](https://cve.now/CVE-2021-25827.md): Emby Server \< 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address. (no CVSS)
- [CVE-2021-25828](https://cve.now/CVE-2021-25828.md): Emby Server versions \< 4.6.0.50 is vulnerable to Cross Site Scripting (XSS) vulnerability via a crafted GET request to /web. (no CVSS)
- [CVE-2022-20443](https://cve.now/CVE-2022-20443.md): In hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements due to a tapjacking/overlay attack. (no CVSS, Android)
- [CVE-2022-4143](https://cve.now/CVE-2022-4143.md): An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 befo (CVSS 6.4, GitLab)
- [CVE-2022-44276](https://cve.now/CVE-2022-44276.md): In Responsive Filemanager \< 9.12.0, an attacker can bypass upload restrictions resulting in RCE. (no CVSS)
- [CVE-2023-20006](https://cve.now/CVE-2023-20006.md): A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firep (CVSS 8.6, Cisco Adaptive Security Appliance (ASA) Software · Cisco Fi…)
- [CVE-2023-20028](https://cve.now/CVE-2023-20028.md): Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities (CVSS 5.4, Cisco Web Security Appliance)
- [CVE-2023-20105](https://cve.now/CVE-2023-20105.md): A vulnerability in the change password functionality of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) coul (CVSS 9.6, Cisco TelePresence Video Communication Server (VCS) Express…)
- [CVE-2023-20108](https://cve.now/CVE-2023-20108.md): A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P (CVSS 7.5, Cisco Unified Communications Manager IM and Presence Service)
- [CVE-2023-20116](https://cve.now/CVE-2023-20116.md): A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Commu (CVSS 6.8, Cisco Unified Communications Manager)
- [CVE-2023-20119](https://cve.now/CVE-2023-20119.md): A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, formerly known as Co (CVSS 6.1, Cisco Secure Email and Web Manager)
- [CVE-2023-20120](https://cve.now/CVE-2023-20120.md): Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities (CVSS 5.4, Cisco Web Security Appliance)
- [CVE-2023-20136](https://cve.now/CVE-2023-20136.md): A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated, remote attacker with the privileges of a read-only use (CVSS 4.3, Cisco Secure Workload)
- [CVE-2023-20178](https://cve.now/CVE-2023-20178.md): A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Softwar (CVSS 7.8, Cisco Secure Client)
- [CVE-2023-20188](https://cve.now/CVE-2023-20188.md): A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Man (CVSS 4.8, Cisco Small Business Smart and Managed Switches)
- [CVE-2023-20192](https://cve.now/CVE-2023-20192.md): Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities (CVSS 9.6, Cisco TelePresence Video Communication Server (VCS) Express…)
- [CVE-2023-20199](https://cve.now/CVE-2023-20199.md): Cisco Duo Two-Factor Authentication for macOS Authentication Bypass Vulnerability (CVSS 6.2, Cisco Duo)
- [CVE-2023-21066](https://cve.now/CVE-2023-21066.md): In cd\_CodeMsg of cd\_codec.c, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2023-21146](https://cve.now/CVE-2023-21146.md): there is a possible way to corrupt memory due to a use after free. (no CVSS, Android)
- [CVE-2023-21147](https://cve.now/CVE-2023-21147.md): In lwis\_i2c\_device\_disable of lwis\_device\_i2c.c, there is a possible UAF due to a logic error in the code. (no CVSS, Android)
- [CVE-2023-21148](https://cve.now/CVE-2023-21148.md): In BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing null check. (no CVSS, Android)
- [CVE-2023-21149](https://cve.now/CVE-2023-21149.md): In registerGsmaServiceIntentReceiver of ShannonRcsService.java, there is a possible way to activate/deactivate RCS service due to a missing (no CVSS, Android)
- [CVE-2023-21150](https://cve.now/CVE-2023-21150.md): In handle\_set\_parameters\_ctrl of hal\_socket.c, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2023-21151](https://cve.now/CVE-2023-21151.md): In the Google BMS kernel module, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2023-21152](https://cve.now/CVE-2023-21152.md): In FaceStatsAnalyzer::InterpolateWeightList of face\_stats\_analyzer.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21153](https://cve.now/CVE-2023-21153.md): In Do\_AIMS\_SET\_CALL\_WAITING of imsservice.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21154](https://cve.now/CVE-2023-21154.md): In StoreAdbSerialNumber of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21155](https://cve.now/CVE-2023-21155.md): In BuildSetRadioNode of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing null check. (no CVSS, Android)
- [CVE-2023-21156](https://cve.now/CVE-2023-21156.md): In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. (no CVSS, Android)
- [CVE-2023-21157](https://cve.now/CVE-2023-21157.md): In encode of wlandata.cpp, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2023-21158](https://cve.now/CVE-2023-21158.md): In encode of miscdata.cpp, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2023-21159](https://cve.now/CVE-2023-21159.md): In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21160](https://cve.now/CVE-2023-21160.md): In BuildSetTcsFci of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2023-21161](https://cve.now/CVE-2023-21161.md): In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21167](https://cve.now/CVE-2023-21167.md): In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21168](https://cve.now/CVE-2023-21168.md): In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21169](https://cve.now/CVE-2023-21169.md): In inviteInternal of p2p\_iface.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21170](https://cve.now/CVE-2023-21170.md): In executeSetClientTarget of ComposerCommandEngine.h, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21171](https://cve.now/CVE-2023-21171.md): In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure. (no CVSS, Android)
- [CVE-2023-21172](https://cve.now/CVE-2023-21172.md): In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin user due to a permiss (no CVSS, Android)
- [CVE-2023-21173](https://cve.now/CVE-2023-21173.md): In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due to a missing permissio (no CVSS, Android)
- [CVE-2023-21174](https://cve.now/CVE-2023-21174.md): In isPageSearchEnabled of BillingCycleSettings.java, there is a possible way for the guest user to change data limits due to a permissions b (no CVSS, Android)
- [CVE-2023-21175](https://cve.now/CVE-2023-21175.md): In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due to a permissions bypa (no CVSS, Android)
- [CVE-2023-21176](https://cve.now/CVE-2023-21176.md): In list\_key\_entries of utils.rs, there is a possible way to disable user credentials due to resource exhaustion. (no CVSS, Android)
- [CVE-2023-21177](https://cve.now/CVE-2023-21177.md): In requestAppKeyboardShortcuts of WindowManagerService.java, there is a possible way to infer the app a user is interacting with due to a mi (no CVSS, Android)
- [CVE-2023-21178](https://cve.now/CVE-2023-21178.md): In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. (no CVSS, Android)
- [CVE-2023-21179](https://cve.now/CVE-2023-21179.md): In parseSecurityParamsFromXml of XmlUtil.java, there is a possible bypass of user specified wifi encryption protocol due to improperly used (no CVSS, Android)
- [CVE-2023-21180](https://cve.now/CVE-2023-21180.md): In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2023-21181](https://cve.now/CVE-2023-21181.md): In btm\_ble\_update\_inq\_result of btm\_ble\_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2023-21182](https://cve.now/CVE-2023-21182.md): In Exynos\_parsing\_user\_data\_registered\_itu\_t\_t35 of VendorVideoAPI.cpp, there is a possible out of bounds read due to a missing bounds check (no CVSS, Android)
- [CVE-2023-21183](https://cve.now/CVE-2023-21183.md): In ForegroundUtils of ForegroundUtils.java, there is a possible way to read NFC tag data while the app is still in the background due to a l (no CVSS, Android)
- [CVE-2023-21184](https://cve.now/CVE-2023-21184.md): In getCurrentPrivilegedPackagesForAllUsers of CarrierPrivilegesTracker.java, there is a possible permission bypass due to a logic error in t (no CVSS, Android)
- [CVE-2023-21185](https://cve.now/CVE-2023-21185.md): In multiple functions of WifiNetworkFactory.java, there is a missing permission check. (no CVSS, Android)
- [CVE-2023-21186](https://cve.now/CVE-2023-21186.md): In LogResponse of Dns.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21187](https://cve.now/CVE-2023-21187.md): In onCreate of UsbAccessoryUriActivity.java, there is a possible way to escape the Setup Wizard due to a logic error in the code. (no CVSS, Android)
- [CVE-2023-21188](https://cve.now/CVE-2023-21188.md): In btm\_ble\_update\_inq\_result of btm\_ble\_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2023-21189](https://cve.now/CVE-2023-21189.md): In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in the code. (no CVSS, Android)
- [CVE-2023-21190](https://cve.now/CVE-2023-21190.md): In btm\_acl\_encrypt\_change of btm\_acl.cc, there is a possible way for a remote device to turn off encryption without resulting in a terminate (no CVSS, Android)
- [CVE-2023-21191](https://cve.now/CVE-2023-21191.md): In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to a logic error in th (no CVSS, Android)
- [CVE-2023-21192](https://cve.now/CVE-2023-21192.md): In setInputMethodWithSubtypeIdLocked of InputMethodManagerService.java, there is a possible way to setup input methods that are not enabled (no CVSS, Android)
- [CVE-2023-21193](https://cve.now/CVE-2023-21193.md): In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. (no CVSS, Android)
- [CVE-2023-21194](https://cve.now/CVE-2023-21194.md): In gatt\_dbg\_op\_name of gatt\_utils.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21195](https://cve.now/CVE-2023-21195.md): In btm\_ble\_periodic\_adv\_sync\_tx\_rcvd of btm\_ble\_gap.cc, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2023-21196](https://cve.now/CVE-2023-21196.md): In btm\_ble\_batchscan\_filter\_track\_adv\_vse\_cback of btm\_ble\_batchscan.cc, there is a possible out of bounds read due to a missing bounds chec (no CVSS, Android)
- [CVE-2023-21197](https://cve.now/CVE-2023-21197.md): In btm\_acl\_process\_sca\_cmpl\_pkt of btm\_acl.cc, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2023-21198](https://cve.now/CVE-2023-21198.md): In remove\_sdp\_record of btif\_sdp\_server.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21199](https://cve.now/CVE-2023-21199.md): In btu\_ble\_proc\_ltk\_req of btu\_hcif.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21200](https://cve.now/CVE-2023-21200.md): In on\_remove\_iso\_data\_path of btm\_iso\_impl.h, there is a possible out of bounds read due to improper input validation. (no CVSS, Android)
- [CVE-2023-21201](https://cve.now/CVE-2023-21201.md): In on\_create\_record\_event of btif\_sdp\_server.cc, there is a possible out of bounds read due to a missing null check. (no CVSS, Android)
- [CVE-2023-21202](https://cve.now/CVE-2023-21202.md): In btm\_delete\_stored\_link\_key\_complete of btm\_devctl.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21203](https://cve.now/CVE-2023-21203.md): In startWpsPbcInternal of sta\_iface.cpp, there is a possible out of bounds read due to improper input validation. (no CVSS, Android)
- [CVE-2023-21204](https://cve.now/CVE-2023-21204.md): In multiple files, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21205](https://cve.now/CVE-2023-21205.md): In startWpsPinDisplayInternal of sta\_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. (no CVSS, Android)
- [CVE-2023-21206](https://cve.now/CVE-2023-21206.md): In initiateVenueUrlAnqpQueryInternal of sta\_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. (no CVSS, Android)
- [CVE-2023-21207](https://cve.now/CVE-2023-21207.md): In initiateTdlsSetupInternal of sta\_iface.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21208](https://cve.now/CVE-2023-21208.md): In setCountryCodeInternal of sta\_iface.cpp, there is a possible out of bounds read due to improper input validation. (no CVSS, Android)
- [CVE-2023-21209](https://cve.now/CVE-2023-21209.md): In multiple functions of sta\_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. (no CVSS, Android)
- [CVE-2023-21210](https://cve.now/CVE-2023-21210.md): In initiateHs20IconQueryInternal of sta\_iface.cpp, there is a possible out of bounds read due to improper input validation. (no CVSS, Android)
- [CVE-2023-21211](https://cve.now/CVE-2023-21211.md): In multiple files, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2023-21212](https://cve.now/CVE-2023-21212.md): In multiple files, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21213](https://cve.now/CVE-2023-21213.md): In initiateTdlsTeardownInternal of sta\_iface.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21214](https://cve.now/CVE-2023-21214.md): In addGroupWithConfigInternal of p2p\_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. (no CVSS, Android)
- [CVE-2023-21219](https://cve.now/CVE-2023-21219.md): there is a possible use of unencrypted transport over cellular networks due to an insecure default value. (no CVSS, Android)
- [CVE-2023-21220](https://cve.now/CVE-2023-21220.md): there is a possible use of unencrypted transport over cellular networks due to an insecure default value. (no CVSS, Android)
- [CVE-2023-21222](https://cve.now/CVE-2023-21222.md): In load\_dt\_data of storage.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21223](https://cve.now/CVE-2023-21223.md): In LPP\_ConvertGNSS\_DataBitAssistance of LPP\_CommonUtil.c, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21224](https://cve.now/CVE-2023-21224.md): In ss\_ProcessReturnResultComponent of ss\_MmConManagement.c, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2023-21225](https://cve.now/CVE-2023-21225.md): there is a possible way to bypass the protected confirmation screen due to Failure to lock display power. (no CVSS, Android)
- [CVE-2023-21226](https://cve.now/CVE-2023-21226.md): In SAEMM\_RetrieveTaiList of SAEMM\_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2023-21236](https://cve.now/CVE-2023-21236.md): In aoc\_service\_set\_read\_blocked of aoc.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21237](https://cve.now/CVE-2023-21237.md): In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or (CVSS 6.2, KEV, Android)
- [CVE-2023-21512](https://cve.now/CVE-2023-21512.md): Improper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1 allows local attackers to read work profile noti (CVSS 2.4, Samsung Mobile Devices)
- [CVE-2023-21513](https://cve.now/CVE-2023-21513.md): Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to manipulate device to ope (CVSS 6.1, Samsung Mobile Devices)
- [CVE-2023-21517](https://cve.now/CVE-2023-21517.md): Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code. (CVSS 8.8, Samsung Mobile Devices)
- [CVE-2023-21518](https://cve.now/CVE-2023-21518.md): Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications to start arbitrary (CVSS 4.4, Samsung Mobile Samsung SearchWidget)
- [CVE-2023-2232](https://cve.now/CVE-2023-2232.md): An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulnerability in the Jira (CVSS 6.5, GitLab)
- [CVE-2023-26615](https://cve.now/CVE-2023-26615.md): D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActions API, allowing unau (no CVSS)
- [CVE-2023-30259](https://cve.now/CVE-2023-30259.md): A Buffer Overflow vulnerability in importshp plugin in LibreCAD 2.2.0 allows attackers to obtain sensitive information via a crafted DBF fil (no CVSS)
- [CVE-2023-3138](https://cve.now/CVE-2023-3138.md): A vulnerability was found in libX11. (no CVSS, libX11)
- [CVE-2023-32222](https://cve.now/CVE-2023-32222.md): D-Link DSL-G256DG firmware version vBZ\_1.00.27 Authentication Bypass (CVSS 9.8, D-Link DSL-G256DG firmware)
- [CVE-2023-32223](https://cve.now/CVE-2023-32223.md): D-Link DSL-224 firmware version 3.0.10 post authentication command execution (CVSS 8.8, D-Link DSL-224 firmware)
- [CVE-2023-32224](https://cve.now/CVE-2023-32224.md): D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts (CVSS 9.8, D-Link DSL-224 firmware)
- [CVE-2023-3355](https://cve.now/CVE-2023-3355.md): Null pointer dereference in submit\_lookup\_cmds() in drivers/gpu/drm/msm/msm\_gem\_submit.c (CVSS 4.7, kernel · Red Hat Enterprise Linux +1)
- [CVE-2023-3357](https://cve.now/CVE-2023-3357.md): A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. (CVSS 5.5, Kernel)
- [CVE-2023-33570](https://cve.now/CVE-2023-33570.md): Bagisto v1.5.1 is vulnerable to Server-Side Template Injection (SSTI). (no CVSS)
- [CVE-2023-3358](https://cve.now/CVE-2023-3358.md): A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. (CVSS 5.5, Kernel)
- [CVE-2023-3359](https://cve.now/CVE-2023-3359.md): An issue was discovered in the Linux kernel brcm\_nvram\_parse in drivers/nvmem/brcm\_nvram.c. (CVSS 5.5, Kernel)
- [CVE-2023-33592](https://cve.now/CVE-2023-33592.md): Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=syste (no CVSS)
- [CVE-2023-33661](https://cve.now/CVE-2023-33661.md): Multiple cross-site scripting (XSS) vulnerabilities were discovered in Church CRM v4.5.3 in GroupReports.php via GroupRole, ReportModel, and (no CVSS)
- [CVE-2023-3439](https://cve.now/CVE-2023-3439.md): A flaw was found in the MCTP protocol in the Linux kernel. (CVSS 4.7, Linux Kernel)
- [CVE-2023-34647](https://cve.now/CVE-2023-34647.md): PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS). (no CVSS)
- [CVE-2023-34650](https://cve.now/CVE-2023-34650.md): PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting (XSS). (no CVSS)
- [CVE-2023-34651](https://cve.now/CVE-2023-34651.md): PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS). (no CVSS)
- [CVE-2023-34652](https://cve.now/CVE-2023-34652.md): PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS) via Add New Course. (no CVSS)
- [CVE-2023-34736](https://cve.now/CVE-2023-34736.md): Guantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload. (no CVSS)
- [CVE-2023-34738](https://cve.now/CVE-2023-34738.md): Chemex through 3.7.1 is vulnerable to arbitrary file upload. (no CVSS)
- [CVE-2023-34761](https://cve.now/CVE-2023-34761.md): An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message Cup, Hello Cup 1.3.1 for Android, and bypass (no CVSS)
- [CVE-2023-34843](https://cve.now/CVE-2023-34843.md): Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request. (no CVSS)
- [CVE-2023-34928](https://cve.now/CVE-2023-34928.md): A stack overflow in the Edit\_BasicSSID function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted (no CVSS)
- [CVE-2023-34929](https://cve.now/CVE-2023-34929.md): A stack overflow in the AddMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST (no CVSS)
- [CVE-2023-34930](https://cve.now/CVE-2023-34930.md): A stack overflow in the EditMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POS (no CVSS)
- [CVE-2023-34931](https://cve.now/CVE-2023-34931.md): A stack overflow in the EditWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted (no CVSS)
- [CVE-2023-34932](https://cve.now/CVE-2023-34932.md): A stack overflow in the UpdateWanMode function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted P (no CVSS)
- [CVE-2023-34933](https://cve.now/CVE-2023-34933.md): A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted (no CVSS)
- [CVE-2023-34934](https://cve.now/CVE-2023-34934.md): A stack overflow in the Edit\_BasicSSID\_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a craft (no CVSS)
- [CVE-2023-34935](https://cve.now/CVE-2023-34935.md): A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted (no CVSS)
- [CVE-2023-34936](https://cve.now/CVE-2023-34936.md): A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted (no CVSS)
- [CVE-2023-34937](https://cve.now/CVE-2023-34937.md): A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-06-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.