CVEs published in June 2023
18 tracked CVEs from 5 vendors had their first vendor advisory published in June 2023: 1 critical, 9 high, 1 in CISA KEV. Newest first.
3 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2023-20178High
vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a low-privileged, authenticated, local attacker to elevate privileges to those of SYSTEM
Cisco · 1 advisory - Added
CVE-2023-32028High
Microsoft SQL OLE DB Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-29178Medium
access of uninitialized pointer vulnerability [CWE-824] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiProxy 7.2.0 through 7.2.3, FortiProxy 7.0.0 through 7.0.9, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions allows an authenticated attacker to repetitively crash the httpsd process via crafted HTTP or HTTPS requests
Fortinet · 1 advisory - Added
CVE-2023-27997CriticalCISA KEV
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
Fortinet · 1 advisory - Added
CVE-2023-2006High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2023-32717Medium
On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, an…
Splunk · 1 advisory - Added
CVE-2023-32716Medium
In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an attacker
Splunk · 1 advisory - Added
CVE-2023-32715Medium
In the Splunk App for Lookup File Editing versions below 4.0.1, a user
Splunk · 1 advisory - Added
CVE-2023-32714High
In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user
Splunk · 1 advisory - Added
CVE-2023-32713High
Splunk Enterprise: In Splunk App for Stream versions below 8.1.1, a low-privileged user
Splunk · 1 advisory - Added
CVE-2023-32712High
In Splunk Enterprise versions below 9.1.0.2, 9.0.5.1, and 8.2.11.2, an attacker
Splunk · 1 advisory - Added
CVE-2023-32711Medium
Splunk · 1 advisory - Added
CVE-2019-8331Medium
Splunk · 1 advisory - Added
CVE-2023-32710Medium
In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, a…
Splunk · 1 advisory - Added
CVE-2023-32709Medium
Splunk Enterprise: In Splunk Enterprise versions below 9.0.5, 8.2.11.
Splunk · 1 advisory - Added
CVE-2023-32708High
In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a…
Splunk · 1 advisory - Added
CVE-2023-32707High
In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, a…
Splunk · 1 advisory - Added
CVE-2023-32706High
On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, an unauthenticated attacker
Splunk · 1 advisory