Security Vulnerabilities - CVEs Published In June 2023
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the parser_parse_for_statement_start at jerry-core/parser/js/js-parser-statm.c.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-06-14
Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS Score
8.8
EPSS Score
0.49
Published
2023-06-14
Contiki-NG is an operating system for internet of things devices. In version 4.8 and prior, when processing ICMP DAO packets in the `dao_input_storing` function, the Contiki-NG OS does not verify that the packet buffer is big enough to contain the bytes it needs before accessing them. Up to 16 bytes can be read out of bounds in the `dao_input_storing` function. An attacker can truncate an ICMP packet so that it does not contain enough data, leading to an out-of-bounds read on these lines. The problem has been patched in the "develop" branch of Contiki-NG, and is expected to be included in release 4.9. As a workaround, one can apply the changes in Contiki-NG pull request #2435 to patch the system.
CVSS Score
7.3
EPSS Score
0.002
Published
2023-06-14
Langchain before v0.0.225 was discovered to contain a remote code execution (RCE) vulnerability in the component JiraAPIWrapper (aka the JIRA API wrapper). This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available.
CVSS Score
9.8
EPSS Score
0.013
Published
2023-06-14
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.013
Published
2023-06-14
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.023
Published
2023-06-14
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVSS Score
7.5
EPSS Score
0.015
Published
2023-06-14
Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS Score
8.0
EPSS Score
0.054
Published
2023-06-14
.NET Framework Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.006
Published
2023-06-14
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVSS Score
7.5
EPSS Score
0.017
Published
2023-06-14