CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- zyxel nas326 firmware, nas542 firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the SUID...6.7 Medium
- zyxel nas326 firmware, nas542 firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** The remote code execution vulnerability in the CGI program ...9.8 Critical
- zyxel nas326 firmware, nas542 firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter...9.8 Critical
- zyxel nas326 firmware, nas542 firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program ...9.8 Critical
- aomedia libaomheap buffer overflow in libaom10.0 Critical
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +13 more +15 moreAn issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor,...5.9 Medium
- codepeople cp multi view event calendarWordPress Calendar Event Multi View plugin <= 1.4.10 - Missing Authorization Leading To Feedback Submission vulnerability4.3 Medium
- codepeople cp contact form with paypalWordPress CP Contact Form with PayPal plugin <= 1.3.34 - Missing Authorization Leading To Feedback Submission vulnerability4.3 Medium
- event espresso 4 decafWordPress Event Espresso 4 Decaf plugin <= 4.10.44.decaf - Bypass vulnerability3.7 Low
- codepeople calculated fields formWordPress Calculated Fields Form plugin <= 1.1.120 - Missing Authorization Leading To Feedback Submission Vulnerability4.3 Medium
- codepeople search in placeWordPress Search in Place plugin <= 1.0.104 - Missing Authorization Leading To Feedback Submission vulnerability4.3 Medium
- wpdevart booking calendar, appointment booking system, booking calendar +1 moreWordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerability3.7 Low
- brainstorm force spectraWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email Spoofing Vulnerability5.3 Medium
- brainstorm force spectraWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email HTML Injection Vulnerability5.3 Medium
- brainstorm force spectraWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Captcha Bypass Vulnerability5.3 Medium
- totolink cp300\+, cp300 firmware +1 moreTOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in ...9.8 Critical
- totolink lr350 firmwareTOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection via the...9.8 Critical
typo3/cmsPackagistTYPO3 Cross-Site Scripting (XSS) in form componentNo scoretypo3/cmsPackagistTYPO3 Cross-Site Scripting in legacy form componentNo score- mercusys mw325r eu v3Mercusys MW325R EU V3 (Firmware MW325R(EU)_V3_1.11.0 Build 221019) is vulnerable to a stack-based...6.7 Medium
- dolibarrReflected Cross-Site Scripting (XSS) in Dolibarr4.6 Medium
- phonecleaner boost\&cleanerIncorrect access control in the fingerprint authentication mechanism of Phone Cleaner: Boost &...9.8 Critical
- No product listedIncorrect access control in the fingerprint authentication mechanism of Bitdefender Mobile...3.5 Low
- northern.tech menderNorthern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication.9.8 Critical
- fortra tripwire enterpriseImproper Authentication in Tripwire Enterprise 9.1.0 APIs9.3 Critical
typo3/cmsPackagistTYPO3 Cross-Site Scripting in link validator componentNo scoretypo3/cmsPackagistTYPO3 Multiple Cross-Site Scripting vulnerabilities in frontendNo scoretypo3/cmsPackagistTYPO3 SQL Injection in dbalNo score- lylme spageLyLme_spage v1.9.5 is vulnerable to Cross Site Scripting (XSS) via admin/link.php.6.1 Medium
- red hat build of keycloak, build of keycloak 22, build of keycloak 24 +5 more +7 moreKeycloak: exposure of sensitive information in pushed authorization requests (par) kc_restart cookie7.5 High
- misskeyMisskey allows the impersonation and takeover of remote accounts with unnormalized signed activities8.2 High
- directusDirectus is soft-locked by providing a string value to random string util7.5 High
- chainguard-dev apkoapko Exposure of HTTP basic auth credentials in log output7.5 High
typo3/cmsPackagistCross-Site Scripting in TYPO3 component Indexed SearchNo scoretypo3/cmsPackagistTYPO3 is susceptible to Cross-Site FlashingNo scoretypo3/cmsPackagistMultiple Cross-Site Scripting vulnerabilities in TYPO3 backendNo score- dain snappy, xerial snappy-java +1 moreiq80 Snappy has an out-of-bounds read when uncompressing data, leading to JVM crash5.3 Medium
- starcitizen.tools citizen, starcitizentools mediawiki-skins-citizen +1 moreCitizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:Tagline6.5 Medium
- emta grup pdksImproper Access Control in EMTA Grups PDKS9.4 Critical
- trendnet tew-827dru firmwareTRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi...8.1 High
- trendnet tew-827dru firmwareTRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi...6.3 Medium
- chromium libvpx, debian linux +1 moreInteger overflow in libvpx5.9 Medium
- mayurik gas agency management systemSourcecodester Gas Agency Management System v1.0 is vulnerable to arbitrary code execution via...8.1 High
- mayurik gas agency management systemSourcecodester Gas Agency Management System v1.0 is vulnerable to SQL Injection via /gasmark...9.8 Critical
- viz-rs nano-id, viz nano id +1 morenano-id is unable to generate the correct character set9.4 Critical
- crm perks integration for contact form 7 and constant contactWordPress Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- yith woocommerce wishlist, yithemes yith woocommerce wishlist +1 moreWordPress YITH WooCommerce Wishlist plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- automattic chaostheoryWordPress ChaosTheory theme <= 1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hastech shoplentorWordPress ShopLentor plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cyclonetheme elegant blocksWordPress Elegant Blocks – Amazing Gutenberg Blocks plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…