Total
398912 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-7263 | 2026-06-17 | N/A | 7.3 HIGH | ||
| Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorized file deletion or file permission change.(Vulnerability ID:HWPSIRT-2023-53450) This vulnerability has been assigned a (CVE)ID:CVE-2023-7263 | |||||
| CVE-2023-7261 | 1 Google | 2 Chrome, Updater | 2026-06-17 | N/A | 7.8 HIGH |
| Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: High) | |||||
| CVE-2023-7258 | 1 Google | 1 Gvisor | 2026-06-17 | N/A | 4.8 MEDIUM |
| A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead to a panic, making it possible for an attacker running as root and with permission to mount volumes to kill the sandbox. We recommend upgrading past commit 6a112c60a257dadac59962e0bc9e9b5aee70b5b6 | |||||
| CVE-2023-7256 | 1 Tcpdump | 1 Libpcap | 2026-06-17 | N/A | 4.4 MEDIUM |
| In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clearly indicate to the caller function whether freeaddrinfo() still remains to be called after the function returns. This makes it possible in some scenarios that both the function and its caller call freeaddrinfo() for the same allocated memory block. A similar problem was reported in Apple libpcap, to which Apple assigned CVE-2023-40400. | |||||
| CVE-2023-7253 | 1 Importwp | 1 Import Wp | 2026-06-17 | N/A | 6.1 MEDIUM |
| The Import WP WordPress plugin before 2.13.1 does not prevent users with the administrator role from pinging conducting SSRF attacks, which may be a problem in multisite configurations. | |||||
| CVE-2023-7252 | 1 Tickera | 1 Tickera | 2026-06-17 | N/A | 5.3 MEDIUM |
| The Tickera WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets. | |||||
| CVE-2023-7251 | 2026-06-17 | N/A | 6.5 MEDIUM | ||
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr User Submitted Posts allows Stored XSS.This issue affects User Submitted Posts: from n/a through 20230901. | |||||
| CVE-2023-7250 | 2 Es, Redhat | 5 Iperf3, Enterprise Linux, Enterprise Linux For Arm 64 and 2 more | 2026-06-17 | N/A | 5.3 MEDIUM |
| A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection gets closed. This will prevent other connections to the server, leading to a denial of service. | |||||
| CVE-2023-7248 | 1 Opentext | 1 Vertica | 2026-06-17 | N/A | 5.0 MEDIUM |
| Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests. The vulnerability would affect one of Vertica’s authentication functionalities by allowing specially crafted requests and sequences. This issue impacts the following Vertica Management Console versions: 10.x 11.1.1-24 or lower 12.0.4-18 or lower Please upgrade to one of the following Vertica Management Console versions: 10.x to upgrade to latest versions from below. 11.1.1-25 12.0.4-19 23.x 24.x | |||||
| CVE-2023-7247 | 1 Wp-buy | 1 Login As User Or Customer \(user Switching\) | 2026-06-17 | N/A | 4.9 MEDIUM |
| The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log in as any other user on the site. | |||||
| CVE-2023-7246 | 1 Bowo | 1 System Dashboard | 2026-06-17 | N/A | 5.4 MEDIUM |
| The System Dashboard WordPress plugin before 2.8.10 does not sanitize and escape some parameters, which could allow administrators in multisite WordPress configurations to perform Cross-Site Scripting attacks | |||||
| CVE-2023-7245 | 1 Openvpn | 1 Connect | 2026-06-17 | N/A | 7.8 HIGH |
| The nodejs framework in OpenVPN Connect 3.0 through 3.4.3 (Windows)/3.4.7 (macOS) was not properly configured, which allows a local user to execute arbitrary code within the nodejs process context via the ELECTRON_RUN_AS_NODE environment variable | |||||
| CVE-2023-7244 | 1 Cisa | 1 Icsnpp-ethercat | 2026-06-17 | N/A | 9.8 CRITICAL |
| Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write in their primary analyses function for Ethercat communication packets. This could allow an attacker to cause arbitrary code execution. | |||||
| CVE-2023-7243 | 1 Cisa | 1 Icsnpp-ethercat | 2026-06-17 | N/A | 9.8 CRITICAL |
| Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific Ethercat datagrams. This could allow an attacker to cause arbitrary code execution. | |||||
| CVE-2023-7242 | 1 Cisa | 1 Icsnpp-ethercat | 2026-06-17 | N/A | 8.2 HIGH |
| Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read during the process of analyzing a specific Ethercat packet. This could allow an attacker to crash the Zeek process and leak some information in memory. | |||||
| CVE-2023-7241 | 2026-06-17 | N/A | 7.9 HIGH | ||
| Privilege Escalation in WRSA.EXE in Webroot Antivirus 8.0.1X- 9.0.35.12 on Windows64 bit and 32 bit allows malicious software to abuse WRSA.EXE to delete arbitrary and protected files. | |||||
| CVE-2023-7240 | 2026-06-17 | N/A | 5.8 MEDIUM | ||
| An improper authorization level has been detected in the login panel. It may lead to unauthenticated Server Side Request Forgery and allows to perform open services enumeration. Server makes query to provided server (Server IP/DNS field) and is triggering connection to arbitrary address. | |||||
| CVE-2023-7239 | 1 Jeroensormani | 1 Wp Dashboard Notes | 2026-06-17 | N/A | 7.5 HIGH |
| The WP Dashboard Notes WordPress plugin before 1.0.11 does not validate that the user has access to the post_id parameter in its wpdn_update_note AJAX action. This allows users with a role of contributor and above to update notes created by other users. | |||||
| CVE-2023-7238 | 1 Orthanc-server | 1 Osimis Web Viewer | 2026-06-17 | N/A | 7.1 HIGH |
| A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. If exploited, the attacker will be able to execute arbitrary JavaScript code inside the victim's browser. | |||||
| CVE-2023-7237 | 1 Lantronix | 2 Xport Edge, Xport Edge Firmware | 2026-06-17 | N/A | 5.7 MEDIUM |
| Lantronix XPort sends weakly encoded credentials within web request headers. | |||||