CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- skops-dev skopsSkops unsafe deserialization7.8 High
- ydataai ydata-profilingydata unsafe deserialization7.8 High
- ydataai ydata-profilingydata cross-site scripting7.8 High
- ydataai ydata-profilingydata unsafe deserialization7.8 High
- lfprojects mlflowMLFlow improper input validation8.8 High
- lfprojects mlflowMLFlow unsafe deserialization8.8 High
- lfprojects mlflowMLFlow unsafe deserialization8.8 High
- lfprojects mlflowMLFlow unsafe deserialization8.8 High
- gradio-app gradio-app/gradio, gradio project gradio +1 moreSecrets Exfiltration in gradio-app/gradio7.1 High
- lfprojects mlflowMLFlow unsafe deserialization8.8 High
- lfprojects mlflowMLFlow unsafe deserialization8.8 High
- lfprojects mlflowMLFlow unsafe deserialization8.8 High
- lfprojects mlflowMLFlow unsafe deserialization8.8 High
- lfprojects mlflowMLFlow unsafe deserialization8.8 High
- lfprojects mlflowMLFlow unsafe deserialization8.8 High
- vsourz digital responsive slick slider wordpressWordPress Responsive Slick Slider WordPress plugin <= 1.4 - Content Injection vulnerability6.5 Medium
- david vongries ultimate dashboardWordPress Ultimate Dashboard plugin <= 3.7.10 - Secret Login Page Location Disclosure on Multisites vulnerability3.7 Low
- j.n. breetvelt a.k.a. opajaap wp photo album plusWordPress WP Photo Album Plus plugin <= 8.5.02.005 - IP Bypass vulnerability5.3 Medium
- unknown wps hide loginWordPress WPS Hide Login plugin <= 1.9.11 - Secret Login Page Location Disclosure on Multisites vulnerability3.7 Low
- wpdevart coming soon and maintenance modeWordPress Coming soon and Maintenance mode plugin <= 3.7.3 - IP Filtering Bypass vulnerability3.7 Low
- 10up restricted site access, elasticpress +1 moreWordPress Restricted Site Access plugin <= 7.4.1 - IP Restriction Bypass vulnerability5.3 Medium
- booster for woocommerce, pluggabl booster for woocommerce +1 moreWordPress Booster for WooCommerce plugin <= 7.1.2 - Authenticated Production Creation/Modification Vulnerability6.5 Medium
- webfactory captcha codeWordPress Captcha Code plugin <= 2.9 - Captcha Bypass vulnerability5.3 Medium
- webcraftic hide login pageWordPress Hide login page plugin <= 1.1.9 - Secret Login Page Location Disclosure on Multisites vulnerability3.7 Low
- codepeople contact form emailWordPress Contact Form Email plugin <= 1.3.41 - Captcha Bypass vulnerability5.3 Medium
- 10web form maker, 10web form builder team form maker by 10web +1 moreWordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerability5.3 Medium
- tips and tricks hq stripe payments, tipsandtricks-hq accept stripe +1 moreWordPress Accept Stripe Payments plugin <= 2.0.79 - Content Injection vulnerability5.3 Medium
- nitin rathod wp forms puzzle captchaWordPress WP Forms Puzzle Captcha plugin <= 4.1 - Captcha Bypass vulnerability5.3 Medium
- yonifre maspik – spam blacklistWordPress Maspik – Spam Blacklist plugin <= 0.10.3 - IP Filtering Bypass vulnerability5.3 Medium
- armemberplugin armemberWordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerability8.3 High
- lws hide loginWordPress LWS Hide Login plugin <= 2.1.8 - Secret Login Page Location Disclosure on Multisites vulnerability3.7 Low
- florent maillefaud wp maintenanceWordPress WP Maintenance plugin <= 6.1.3 - IP Filtering Bypass vulnerability3.7 Low
- ari soft stream quizWordPress ARI Stream Quiz – WordPress Quizzes Builder plugin <= 1.3.2 - Content Injection vulnerability5.4 Medium
- synology bc500, camera firmware, tc500 +2 more +4 moreA vulnerability regarding buffer copy without checking the size of input ('Classic Buffer...6.5 Medium
- revolution slider slider revolutionSlider Revolution <= 6.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor wrapperid and zindex6.4 Medium
- unknown defender security, wpmudev defender +1 moreWordPress Defender Security plugin <= 4.2.0 - Masked Login Area View Bypass vulnerability5.3 Medium
- bowo admin and site enhancements (ase)WordPress Admin and Site Enhancements (ASE) plugin <= 5.7.1 - Password Protected View Bypass Vulnerability vulnerability7.5 High
- gvectors wpdiscuzWordPress wpDiscuz plugin <= 7.6.10 - Content Injection vulnerability5.3 Medium
- unknown responsive tabsWordPress Responsive Tabs plugin < 4.0.6 - HTML Content Injection vulnerability5.4 Medium
- pluginever wp content pilot – autoblogging & affiliate marketing pluginWordPress WP Content Pilot plugin <= 1.3.3 - HTML Injection vulnerability4.3 Medium
- forge12 interactive gmbh captcha/honeypot for contact form 7WordPress Captcha for Contact Form 7 plugin <= 1.11.3 - Capcha Bypass vulnerability5.3 Medium
- codesys control win (sl), development system v3, edge gateway for windows +6 more +8 moreCODESYS: Development system prone to DoS through exposure of resource to wrong sphere7.8 High
- codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +17 more +19 moreCODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products7.5 High
- revolution slider slider revolutionSlider Revolution <= 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting via Add Layer class, id, and title Attributes6.4 Medium
- seh inu-100, utnserver pro, utnserver promax +2 moreDenial of Service7.1 High
- seh inu-100, utnserver pro, utnserver promax +2 moreAuthenticated Command Injection8.7 High
- seh inu-100, utnserver pro, utnserver promax +2 moreStored Cross-Site Scripting in SEH Computertechnik utnserver Pro8.3 High
- devnath verma wp captchaWordPress WP Captcha plugin <= 2.0.0 - Captcha Bypass vulnerability5.3 Medium
- gradio-app gradio-app/gradio, gradio project gradio +1 moreCommand Injection in gradio-app/gradio7.5 High
- apache ofbizApache OFBiz: Path traversal leading to a RCE9.1 Critical
- Show moreLoading…