Security Vulnerabilities - CVEs Published In June 2023
A Mazda model (2015-2016) can be unlocked via an unspecified method.
CVSS Score
6.5
EPSS Score
0.001
Published
2023-06-12
Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method.
CVSS Score
8.2
EPSS Score
0.0
Published
2023-06-12
EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privilege escalation.
CVSS Score
8.8
EPSS Score
0.0
Published
2023-06-12
A use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queue_event() fails.
CVSS Score
6.7
EPSS Score
0.0
Published
2023-06-12
D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter in the lxmldbc_system() function.
CVSS Score
9.8
EPSS Score
0.892
Published
2023-06-12
D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a stack overflow via the gena.cgi binary.
CVSS Score
9.8
EPSS Score
0.016
Published
2023-06-12
Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the url parameter at /start-apply.html. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-06-12
A stored cross-site scripting (XSS) vulnerability in the urlFilterList function of Asus RT-N10LX Router v2.0.0.39 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL Keyword List text field. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score
5.4
EPSS Score
0.052
Published
2023-06-12
Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the mac parameter at /start-apply.html. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-06-12
A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.
CVSS Score
5.5
EPSS Score
0.0
Published
2023-06-12