CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- popup maker wpWordPress Popup Maker WP plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wp hait post grid elementor addonWordPress Post Grid Elementor Addon plugin <= 2.0.16 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hans van eijsden,niwreg imagemagick sharpen resized imagesWordPress Download ImageMagick Sharpen Resized Images plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- wpbean wpb elementor addonsWordPress WPB Elementor Addons plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- kharim tomlinson wp next post naviWordPress WP Next Post Navi plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- tainacanWordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- tainacanWordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- accessally popupallyWordPress PopupAlly plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- benoit mercusot simple popup managerWordPress Simple Popup Manager plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- mervin praison praison seo wordpressWordPress Praison SEO WordPress plugin <= 4.0.15 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 moreWordPress FV Flowplayer Video Player plugin <= 7.5.45.7212 - Cross Site Scripting (XSS) vulnerability7.1 High
- jgwhite33 wp tripadvisor review sliderWordPress WP TripAdvisor Review Slider plugin <= 12.6 - SQL Injection vulnerability7.6 High
- a wp life contact form widgetWordPress Contact Form Widget plugin <= 1.3.9 - Sensitive Data Exposure vulnerability5.3 Medium
- lukman nakib debug log – manger toolWordPress Debug Log – Manger Tool plugin <= 1.4.5 - Sensitive Data Exposure vulnerability5.3 Medium
- fastlyWordPress Fastly plugin <= 1.2.25 - Broken Access Control vulnerability4.3 Medium
- qdrant, qdrant qdrant/qdrant +1 moreArbitrary File Read and Write during Snapshot Recovery in qdrant/qdrant9.8 Critical
- qualcomm ar8035 firmware, csr8811 firmware, fastconnect 6900 firmware +135 more +137 moreBuffer Over-read in WLAN Firmware7.5 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +11 more +13 moreImproper Access Control in Graphics Windows8.4 High
- qualcomm qam8255p firmware, qam8650p firmware, qam8775p firmware +10 more +12 moreNULL Pointer Dereference in Graphics6.2 Medium
- qualcomm ar8035 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +76 more +78 moreBuffer Copy Without Checking Size of Input in Hypervisor9.3 Critical
- qualcomm 215 mobile firmware, aqt1000 firmware, fastconnect 6200 firmware +137 more +139 moreBuffer Over-read in Video8.2 High
- qualcomm 205 mobile firmware, 215 mobile firmware, 315 5g iot modem firmware +242 more +244 moreImproper Authentication in Multi-Mode Call Processor9.1 Critical
- qualcomm 9205 lte modem firmware, aqt1000 firmware, ar8031 firmware +240 more +242 moreBuffer Copy Without Checking Size of Input in Trusted Execution Environment7.8 High
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +154 more +156 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS9.3 Critical
- creative themes blocksy companionWordPress Blocksy Companion plugin <= 2.0.42 - Server Side Request Forgery (SSRF) vulnerability4.4 Medium
- shahjahan jewel ninja tablesWordPress Ninja Tables plugin <= 5.0.9 - Server Side Request Forgery (SSRF) vulnerability4.4 Medium
- fortinet fortiwebMultiple improper authorization vulnerabilities [CWE-285] in FortiWeb version 7.4.2 and below,...5.6 Medium
- fortinet fortiauthenticatorA URL redirection to untrusted site ('open redirect') in Fortinet FortiAuthenticator version 6.6...5.8 Medium
- fortinet fortiwebmanager, fortiweb manager +1 moreAn improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6...7.6 High
- fortinet fortiwebmanager, fortiweb manager +1 moreAn improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6...8.6 High
- fortinet fortiwebmanager, fortiweb manager +1 moreAn improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6...7.6 High
- ifm moneo appliance qha210, moneo appliance qha300, moneo appliance qva200 +5 more +7 moreifm: moneo prone to weak password recovery mechanism9.8 Critical
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.3.6 - Server Side Request Forgery (SSRF) vulnerability4.4 Medium
- activedemand online agency marketing automation activedemandWordPress ActiveDEMAND plugin <= 0.2.43 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- webliberty simple spoilerWordPress Simple Spoiler plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- fortinet fortiportalA client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6...4.1 Medium
- fortinet fortisoarAn improper removal of sensitive information before storage or transfer vulnerability [CWE-212]...6.0 Medium
- fortinet fortiwebAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiWeb...5.2 Medium
- debian linux, linux kernel +1 morefs/9p: only translate RWX permissions for plain 9P20008.8 High
- linux, linux kernel +1 moretracefs: Reset permissions on remount if permissions are options7.8 High
- linux, linux kernel +1 morenet: ks8851: Queue RX packets in IRQ handler instead of disabling BHs7.5 High
- linux, linux kernel +1 morethermal/debugfs: Fix two locking issues with thermal zone debug7.8 High
- debian linux, linux kernel +1 moredrm/vmwgfx: Fix invalid reads in fence signaled events7.1 High
- tomas cordero safety exitWordPress Safety Exit plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- greg ross just writing statisticsWordPress Just Writing Statistics plugin <= 4.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- bryan hadaway site faviconWordPress Site Favicon plugin <= 0.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- xabier miranda wp back buttonWordPress WP Back Button plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- digiwin easyflow .netDigiWin EasyFlow .NET - SQL Injection9.8 Critical
- silverpeasSilverpeas authentication bypass9.8 Critical
- japan system techniques co., ltd. universal passport rxCross-site scripting vulnerability exists in UNIVERSAL PASSPORT RX versions 1.0.0 to 1.0.8, which...5.9 Medium
- Show moreLoading…