CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- japan system techniques co., ltd. universal passport rxCross-site scripting vulnerability exists in UNIVERSAL PASSPORT RX versions 1.0.0 to 1.0.7, which...6.5 Medium
- google android, mediatek mt6833, mt6853 +9 more +11 moreIn eemgpu, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google android, mediatek mt6580, mt6739 +29 more +31 moreIn dmc, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.6 Medium
- mediatek mt6890, mt7622, software development kit +2 more +4 moreIn wlan service, there is a possible out of bounds write due to improper input validation. This...6.6 Medium
- mediatek mt6890, mt6990, mt7622 +3 more +5 moreIn wlan driver, there is a possible out of bounds write due to improper input validation. This...6.6 Medium
- mediatek software development kit, mediatek, inc. mt6890, mt6990, mt7622, openwrt +2 moreIn wlan driver, there is a possible out of bounds read due to improper input validation. This...4.4 Medium
- mediatek nr15, nr16, nr17 +1 more +3 moreIn modem, there is a possible information disclosure due to using risky cryptographic algorithm...5.1 Medium
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway JSON Content uploadiscuser.php sql injection5.3 Medium
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway sql injection5.3 Medium
- kde plasma-workspaceKSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1...7.8 High
- phpgurukul online fire reporting systemA SQL Injection vulnerability exists in the `ofrs/admin/index.php` script of PHPGurukul Online...9.1 Critical
- No product listedA deep link validation issue in KakaoTalk 10.4.3 allowed a remote adversary to direct users to...9.6 Critical
- harborSQL Injection in Harbor scan log API2.7 Low
- harborHarbor Open Redirect URL4.3 Medium
activeadminRubyGemsactiveadmin vulnerable to stored persistent cross-site scripting (XSS) in dynamic form legends6.1 Medium- yiiframework yii, yiisoft yiisoft/yii2 +1 moreUnsafe Reflection in base Component class in yiisoft/yii28.1 High
- itsourcecode learning management systemitsourcecode Learning Management System processscore.php sql injection5.3 Medium
- milesight devicehubMileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6.1 Medium
- milesight devicehubMileSight DeviceHub - CWE-320: Key Management Errors9.1 Critical
- milesight devicehubMileSight DeviceHub - CWE-20 Improper Input Validation7.5 High
- milesight devicehubMileSight DeviceHub - CWE-330 Use of Insufficiently Random Values9.8 Critical
- milesight devicehubMileSight DeviceHub - CWE-305 Missing Authentication for Critical Function10.0 Critical
- milesight devicehubMileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')9.8 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal Vulnerability in parisneo/lollms-webui7.5 High
- casbin casdoorCasdoor Configuration File app.conf file access6.9 Medium
- paultgoodchild shield: blocks bots, protects users, and prevents security breachesShield Security – Smart Bot Blocking & Intrusion Prevention Security <= 19.1.13 - Cross-Site Request Forgery4.3 Medium
- m a vinoth kumar random banner, random banner banner +1 moreWordPress Random Banner plugin <= 4.2.12 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- erez hadas-sonnenschein smartarget message bar, smartarget message bar +1 moreWordPress Smartarget Message Bar plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- global notification bar notification barWordPress Global Notification Bar plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreRedos (Regular Expression Denial of Service) in lunary-ai/lunary7.5 High
- uploadcare file uploader and adaptive delivery (beta)WordPress Uploadcare File Uploader and Adaptive Delivery plugin <= 3.0.11 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- tms-plugins wpdatatables, wpdatatables (premium) +1 morewpDataTables - Tables & Table Charts (Premium) <= 6.3.1 - Unauthenticated SQL Injection10.0 Critical
- gvectors wpforo forumwpForo Forum <= 2.3.3 - Authenticated (Contributor+) SQL Injection9.9 Critical
- nicdark elements for elementorElements For Elementor <= 2.1 - Authenticated (Contributor+) Local File Inclusion via Multiple Widget Attributes8.8 High
- wpdatatables – wordpress data table, dynamic tables & table charts pluginwpDataTables - Tables & Table Charts (Premium) <= 6.3.2 - Missing Authorization to DataTable Access & Modification7.3 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.2.0.1 - Missing Authorization to Privilege Escalation7.1 High
- f1logic contact form managerContact Form Manager <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- qqworld auto save imagesQQWorld Auto Save Images <= 1.9.8 - Missing Authorization to Arbitrary Post Content Retrieval5.3 Medium
- popupbuilder popup builder – create highly converting, mobile friendly marketing popups.Popup Builder <= 4.2.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom JS6.4 Medium
- royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 moreRoyal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget6.4 Medium
- divisupreme supreme modules lite – divi theme, extra theme and divi builderSupreme Modules Lite – Divi Theme, Extra Theme and Divi Builder <= 2.5.51 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- royal-elementor-addons royal elementor addons, wproyal royal elementor addons and templates, royal addons for elementor – addons and templates kit for elementor +2 moreRoyal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- averta master slider – responsive touch slider, master slider +1 moreMaster Slider - Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- vanderwijk content blocks (custom post widget), content blocks +1 moreContent Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode8.8 High
- vanderwijk content blocks (custom post widget), content blocks, johan van der wijk content blocks custom post widget +2 moreContent Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcode6.4 Medium
- connekthq ajax load more, dcooney ajax load more – infinite scroll, load more, & lazy load +1 moreWordPress Infinite Scroll – Ajax Load More <= 7.1.1 - Authenticated (Contributor+) Cross-Site Scripting6.4 Medium
- godaddy page builder gutenberg blocks – coblocksPage Builder Gutenberg Blocks – CoBlocks <= 3.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Profiles6.4 Medium
- mediatek, inc. mediatek chipsetIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...5.3 Medium
- google androidIn plugin_ipc_handler of slc_plugin.c, there is a possible information disclosure due to...5.5 Medium
- google androidthere is a possible information disclosure due to side channel information disclosure. This could...5.5 Medium
- Show moreLoading…