# CVEs published 2023-06-30

80 CVEs were published on June 30, 2023: 7 critical, 9 high. Days are UTC.

- [CVE-2023-28323](https://cve.now/CVE-2023-28323.md): A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to elevate rights. (CVSS 9.8, Ivanti Endpoint Manager)
- [CVE-2023-28324](https://cve.now/CVE-2023-28324.md): A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege escalation or remote c (CVSS 8.2, Ivanti Endpoint Manager)
- [CVE-2023-28365](https://cve.now/CVE-2023-28365.md): A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows application a (no CVSS, Ubiquiti UniFi Network application)
- [CVE-2023-30586](https://cve.now/CVE-2023-30586.md): A privilege escalation vulnerability exists in Node.js 20 that allowed loading arbitrary OpenSSL engines when the experimental permission mo (CVSS 7.5, NodeJS Node)
- [CVE-2023-30589](https://cve.now/CVE-2023-30589.md): The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. (no CVSS, NodeJS Node · node +2)
- [CVE-2023-31997](https://cve.now/CVE-2023-31997.md): UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on a local network to access MongoDB. (no CVSS, Ubiquiti UniFi OS)
- [CVE-2023-28364](https://cve.now/CVE-2023-28364.md): An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android navigated to scanned (no CVSS, Brave Software Brave Browser Android)
- [CVE-2021-34475](https://cve.now/CVE-2021-34475.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 5.4, Microsoft Edge)
- [CVE-2021-31982](https://cve.now/CVE-2021-31982.md): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CVSS 8.8, Microsoft Edge)
- [CVE-2021-42307](https://cve.now/CVE-2021-42307.md): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVSS 4.3, Microsoft Edge)
- [CVE-2021-34506](https://cve.now/CVE-2021-34506.md): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CVSS 6.1, Microsoft Edge)
- [CVE-2023-22814](https://cve.now/CVE-2023-22814.md): Authentication Bypass issue in My Cloud OS 5 devices (CVSS 10.0, Western Digital My Cloud OS)
- [CVE-2023-36812](https://cve.now/CVE-2023-36812.md): Remote Code Execution in OpenTSDB (CVSS 9.8, opentsdb · net.opentsdb:opentsdb)
- [CVE-2023-3493](https://cve.now/CVE-2023-3493.md): Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling (CVSS 7.7, fossbilling/fossbilling)
- [CVE-2023-3491](https://cve.now/CVE-2023-3491.md): Unrestricted Upload of File with Dangerous Type in fossbilling/fossbilling (CVSS 8.0, fossbilling/fossbilling)
- [CVE-2023-3490](https://cve.now/CVE-2023-3490.md): SQL Injection in fossbilling/fossbilling (CVSS 9.8, fossbilling/fossbilling)
- [CVE-2023-22815](https://cve.now/CVE-2023-22815.md): Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices (CVSS 6.2, Western Digital My Cloud OS)
- [CVE-2023-22816](https://cve.now/CVE-2023-22816.md): Limited Post-Authentication Remote Command Injection in My Cloud Products (CVSS 6.0, Western Digital My Cloud OS)
- [CVE-2023-35946](https://cve.now/CVE-2023-35946.md): Dependency cache path traversal in Gradle (CVSS 6.9, gradle)
- [CVE-2023-35947](https://cve.now/CVE-2023-35947.md): Path traversal vulnerabilities in handling of Tar archives in Gradle (CVSS 6.9, gradle)
- [CVE-2023-36477](https://cve.now/CVE-2023-36477.md): Persistent Cross-site Scripting (XSS) through CKEditor Configuration pages in XWiki Platform (CVSS 9.1, xwiki-platform · org.xwiki.platform:xwiki-platform-ckedi… +1)
- [CVE-2023-36810](https://cve.now/CVE-2023-36810.md): Quadratic runtime with malformed PDF missing xref marker in pypdf (CVSS 6.2, py-pdf pypdf · pypdf2)
- [CVE-2023-36807](https://cve.now/CVE-2023-36807.md): Infinite Loop when reading malformed objects in pypdf (CVSS 6.2, py-pdf pypdf · pypdf2)
- [CVE-2023-3485](https://cve.now/CVE-2023-3485.md): Insecure Default Authorization in Temporal Server (CVSS 3.0, Temporal Technologies Temporal Server · go.temporal.io/serv…)
- [CVE-2023-35178](https://cve.now/CVE-2023-35178.md): Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs. (no CVSS, HP LaserJet Pro)
- [CVE-2023-35177](https://cve.now/CVE-2023-35177.md): Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser (no CVSS, HP LaserJet Pro)
- [CVE-2023-35176](https://cve.now/CVE-2023-35176.md): Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restor (no CVSS, HP LaserJet Pro)
- [CVE-2023-35175](https://cve.now/CVE-2023-35175.md): Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Serve (no CVSS, HP LaserJet Pro)
- [CVE-2023-26299](https://cve.now/CVE-2023-26299.md): A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (syste (no CVSS, HP PC products using AMI UEFI Firmware)
- [CVE-2023-3478](https://cve.now/CVE-2023-3478.md): IBOS OA Add User edit&op=member actionEdit sql injection (CVSS 4.7, IBOS OA)
- [CVE-2023-3479](https://cve.now/CVE-2023-3479.md): Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp (CVSS 4.3, hestiacp/hestiacp)
- [CVE-2023-3477](https://cve.now/CVE-2023-3477.md): RocketSoft Rocket LMS Contact Form store cross site scripting (CVSS 3.5, RocketSoft Rocket LMS)
- [CVE-2023-3476](https://cve.now/CVE-2023-3476.md): SimplePHPscripts GuestBook Script URL Parameter preview.php cross site scripting (CVSS 3.5, SimplePHPscripts GuestBook Script)
- [CVE-2023-3475](https://cve.now/CVE-2023-3475.md): SimplePHPscripts Event Script URL Parameter preview.php cross site scripting (CVSS 3.5, SimplePHPscripts Event Script)
- [CVE-2023-3474](https://cve.now/CVE-2023-3474.md): SimplePHPscripts Simple Blog URL Parameter preview.php cross site scripting (CVSS 3.5, SimplePHPscripts Simple Blog)
- [CVE-2023-3473](https://cve.now/CVE-2023-3473.md): Campcodes Retro Cellphone Online Store edit\_product.php sql injection (CVSS 4.7, Campcodes Retro Cellphone Online Store)
- [CVE-2023-28387](https://cve.now/CVE-2023-28387.md): "NewsPicks" App for Android versions 10.4.5 and earlier and "NewsPicks" App for iOS versions 10.4.2 and earlier use hard-coded credentials, (no CVSS, "NewsPicks" App for Android · "NewsPicks" App for iOS)
- [CVE-2023-26135](https://cve.now/CVE-2023-26135.md): All versions of the package flatnest are vulnerable to Prototype Pollution via the nest() function in the flatnest/nest.js file. (CVSS 7.3, flatnest)
- [CVE-2023-2846](https://cve.now/CVE-2023-2846.md): Authentication Bypass Vulnerability in MELSEC-F Series main module (CVSS 7.5, Mitsubishi Electric MELSEC-F Series FX3U-16MR/ES · Mit… +148)
- [CVE-2023-32622](https://cve.now/CVE-2023-32622.md): Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative priv (no CVSS, WAVLINK TECHNOLOGY WL-WN531AX2)
- [CVE-2023-32621](https://cve.now/CVE-2023-32621.md): WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS (no CVSS, WAVLINK TECHNOLOGY WL-WN531AX2)
- [CVE-2023-32620](https://cve.now/CVE-2023-32620.md): Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a passw (no CVSS, WAVLINK TECHNOLOGY WL-WN531AX2)
- [CVE-2023-32613](https://cve.now/CVE-2023-32613.md): Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a network-adjacent atta (no CVSS, WAVLINK TECHNOLOGY WL-WN531AX2)
- [CVE-2023-32612](https://cve.now/CVE-2023-32612.md): Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow an attacker (no CVSS, WAVLINK TECHNOLOGY WL-WN531AX2)
- [CVE-2023-32608](https://cve.now/CVE-2023-32608.md): Directory traversal vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a remote aut (no CVSS, Implem Pleasanter)
- [CVE-2023-32607](https://cve.now/CVE-2023-32607.md): Stored cross-site scripting vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a r (no CVSS, Implem Pleasanter)
- [CVE-2023-36539](https://cve.now/CVE-2023-36539.md): Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information. (CVSS 5.3, Zoom Video Communications Zoom clients)
- [CVE-2023-3249](https://cve.now/CVE-2023-3249.md): Web3 – Crypto wallet Login & NFT token gating \<= 2.6.0 - Authentication Bypass (CVSS 9.8, cyberlord92 Web3 – Crypto wallet Login & NFT token gating)
- [CVE-2023-2834](https://cve.now/CVE-2023-2834.md): BookIt \<= 2.3.7 - Authentication Bypass (CVSS 9.8, stellarwp Bookit — Booking & Appointment Calendar)
- [CVE-2023-3063](https://cve.now/CVE-2023-3063.md): SP Project & Document Manager \<= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change (CVSS 8.8, smartypants SP Project & Document Manager)
- [CVE-2023-3469](https://cve.now/CVE-2023-3469.md): Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq (CVSS 5.2, thorsten/phpmyfaq)
- [CVE-2020-18432](https://cve.now/CVE-2020-18432.md): File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges. (no CVSS)
- [CVE-2023-1206](https://cve.now/CVE-2023-1206.md): A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of (no CVSS, Kernel)
- [CVE-2023-27469](https://cve.now/CVE-2023-27469.md): Malwarebytes Anti-Exploit 4.4.0.220 is vulnerable to arbitrary file deletion and denial of service via an ALPC message in which FullFileName (no CVSS)
- [CVE-2023-2908](https://cve.now/CVE-2023-2908.md): Libtiff: null pointer dereference in tif\_dir.c (CVSS 5.5, Libtiff · Red Hat Enterprise Linux +1)
- [CVE-2023-29145](https://cve.now/CVE-2023-29145.md): The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowi (no CVSS)
- [CVE-2023-29147](https://cve.now/CVE-2023-29147.md): In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, because an identifier (no CVSS)
- [CVE-2023-29241](https://cve.now/CVE-2023-29241.md): Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows (CVSS 8.1, Bosch BIS)
- [CVE-2023-31543](https://cve.now/CVE-2023-31543.md): A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the c (no CVSS, pipreqs)
- [CVE-2023-33276](https://cve.now/CVE-2023-33276.md): The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status code if a path is ac (no CVSS)
- [CVE-2023-33298](https://cve.now/CVE-2023-33298.md): com.perimeter81.osx.HelperTool in Perimeter81 10.0.0.19 on macOS allows Local Privilege Escalation (to root) via shell metacharacters in usi (no CVSS)
- [CVE-2023-33336](https://cve.now/CVE-2023-33336.md): Reflected cross site scripting (XSS) vulnerability was discovered in Sophos Web Appliance v4.3.9.1 that allows for arbitrary code to be inpu (no CVSS)
- [CVE-2023-3338](https://cve.now/CVE-2023-3338.md): Crash due to a null pointer dereference in the dn\_nsp\_send function (CVSS 6.5, kernel · Red Hat Enterprise Linux +1)
- [CVE-2023-34840](https://cve.now/CVE-2023-34840.md): angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting (XSS) vulnerability. (no CVSS, angular-ui-notification)
- [CVE-2023-36143](https://cve.now/CVE-2023-36143.md): Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the device. (no CVSS)
- [CVE-2023-36144](https://cve.now/CVE-2023-36144.md): An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file o (no CVSS)
- [CVE-2023-36146](https://cve.now/CVE-2023-36146.md): A Stored Cross-Site Scripting (XSS) vulnerability was found in Multilaser RE 170 using firmware 2.2.6733. (no CVSS)
- [CVE-2023-36347](https://cve.now/CVE-2023-36347.md): A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data. (no CVSS)
- [CVE-2023-37298](https://cve.now/CVE-2023-37298.md): Joplin before 2.11.5 allows XSS via a USE element in an SVG document. (no CVSS, joplin)
- [CVE-2023-37299](https://cve.now/CVE-2023-37299.md): Joplin before 2.11.5 allows XSS via an AREA element of an image map. (no CVSS, joplin)
- [CVE-2023-37300](https://cve.now/CVE-2023-37300.md): An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3. (no CVSS)
- [CVE-2023-37301](https://cve.now/CVE-2023-37301.md): An issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. (no CVSS)
- [CVE-2023-37302](https://cve.now/CVE-2023-37302.md): An issue was discovered in SiteLinksView.php in Wikibase in MediaWiki through 1.39.3. (no CVSS, wikibase/wikibase)
- [CVE-2023-37303](https://cve.now/CVE-2023-37303.md): An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. (no CVSS)
- [CVE-2023-37304](https://cve.now/CVE-2023-37304.md): An issue was discovered in the DoubleWiki extension for MediaWiki through 1.39.3. (no CVSS)
- [CVE-2023-37305](https://cve.now/CVE-2023-37305.md): An issue was discovered in the ProofreadPage (aka Proofread Page) extension for MediaWiki through 1.39.3. (no CVSS)
- [CVE-2023-37306](https://cve.now/CVE-2023-37306.md): MISP 2.4.172 mishandles different certificate file extensions in server sync. (no CVSS)
- [CVE-2023-37307](https://cve.now/CVE-2023-37307.md): In MISP before 2.4.172, title\_for\_layout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts. (no CVSS)
- [CVE-2023-37360](https://cve.now/CVE-2023-37360.md): pacparser\_find\_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the attacker controls th (CVSS 5.9, pacparser)
- [CVE-2023-37365](https://cve.now/CVE-2023-37365.md): Hnswlib 0.7.0 has a double free in init\_index when the M argument is a large integer. (no CVSS, hnswlib)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-06-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.