CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
typo3/cmsPackagistInsecure Unserialize in TYPO3 Backend5.0 MediumpypqcPyPIObservable Timing Discrepancy in pypqc7.8 High- opentelemetry configgrpc, confighttp, opentelemetry +2 more +4 moreOpenTelemetry Collector has a Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPC8.2 High
typo3/cmsPackagistCache Flooding in TYPO3 Frontend5.3 Mediumtypo3/cmsPackagistAuthentication Bypass in TYPO3 Frontend5.4 Mediumtypo3/cmsPackagistAuthentication Bypass in TYPO3 CMSNo score- acquia dam, drupal acquia dam +1 moreAcquia DAM - Moderately critical - Cross Site Request Forgery, Denial of Service - SA-CONTRIB-2024-0253.5 Low
typo3/cmsPackagistInformation Disclosure in TYPO3 CMS4.3 Mediumtypo3/cmsPackagistInsecure Deserialization & Arbitrary Code Execution in TYPO3 CMSNo score- unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates), unlimited-elements unlimited elements for elementor +1 more +3 moreWordPress Unlimited Elements For Elementor plugin <= 1.5.109 - Broken Access Control vulnerability4.3 Medium
- cisco finesse, packaged contact center enterprise, unified contact center enterprise +1 more +3 moreA vulnerability in the web-based management interface of Cisco Finesse could allow an...4.8 Medium
- cisco finesse, packaged contact center enterprise, unified contact center enterprise +1 more +3 moreA vulnerability in the web-based management interface of Cisco Finesse could allow an...7.2 High
typo3/cmsPackagistInformation Disclosure in TYPO3 CMS3.7 Lowtypo3/cmsPackagistPrivilege Escalation & SQL Injection in TYPO3 CMS8.8 Hightypo3/cmsPackagistTYPO3 Remote Code Execution in third party library swiftmailerNo scoretypo3/cmsPackagistArbitrary Code Execution in TYPO3 CMS9.9 Criticaltypo3/cmsPackagistInsecure Deserialization in TYPO3 CMSNo score- katello project katello, red hat satellite 6, redhat satellite +2 moreKatello: potential cross-site scripting exploit in ui4.8 Medium
- red hat satellite 6, redhat satellite +1 moreForeman-installer: candlepin database password being leaked to local users via the process list6.2 Medium
typo3/cmsPackagistCross-Site Scripting (XSS) vulnerability in typolinksNo scoretypo3/cmsPackagistCross-Site Scripting (XSS) in TYPO3 BackendNo scoretypo3/cmsPackagistCross-Site Scripting in third party library mso/idna-convertNo scoretypo3/cmsPackagistInformation Disclosure in TYPO3 Backend5.3 Medium- mongodb pymongo, debian linux +1 moreOut-of-bounds read in bson module of PyMongo4.7 Medium
typo3/cmsPackagistSQL Injection in TYPO3 Frontend Login5.4 Mediumtypo3/cmsPackagistMissing Access Check in TYPO3 CMS9.0 Criticaltypo3/cmsPackagistInsecure Unserialize in TYPO3 Import/Export6.3 Mediumtypo3/cmsPackagistCross-Site Scripting in TYPO3 Backend4.6 Mediumtypo3/cmsPackagistPrivilege Escalation in TYPO3 CMS6.5 Mediumtypo3/cmsPackagistCross-Site Scripting in TYPO3 Backend4.6 Mediumtypo3/cmsPackagistAuthentication Bypass in TYPO3 CMS5.4 Mediumgradio-pdfPyPIArbitrary JavaScript execution due to using outdated libraries3.6 Low- aimeos ai-client-htmlAimeos HTML client vulnerable to digital products download without proper payment status check5.3 Medium
- aimeos aimeos-coreAimeos Core remote code execution in web server context7.2 High
- jasonraimondi url-to-png@jmondi/url-to-png arbitrary file read via Playwright's screenshot feature exploiting file wrapper5.3 Medium
pimcore/admin-ui-classic-bundlePackagistVulnerable embedded jQuery VersionNo score- pure chat by ruby chat, purechat pure chat +1 moreWordPress Pure Chat plugin <= 2.22 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- generatepress gp premium, generatepress +1 moreGP Premium <= 2.4.0 - Reflected Cross-Site Scripting6.1 Medium
- fivestarplugins five star restaurant menu, rustaurius five star restaurant menu and food ordering +1 moreRestaurant Menu and Food Ordering <= 2.4.16 - Missing Authorization to Menu Creation4.3 Medium
- porty powerbank, powerbank application +1 moreInformation Disclosure in Porty's PowerBank7.5 High
- grafana oncallGrafana OnCall is an easy-to-use on-call management tool that will help reduce toil in on-call...7.7 High
- codename065 download managerDownload Manager <= 3.2.93 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_modal_login_form Shortcode6.4 Medium
- rubengc gamipress – link, gamipress - link +1 moreGamiPress – Link <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode6.4 Medium
- lifterlms, chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes +1 moreLifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via Shortcode8.8 High
- wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 moreEmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripti…6.4 Medium
- tnb mobile solutions cockpit software, tnbmobil cockpit +1 moreInformation Disclosure to Source Code in TNB Mobile Solutions' Cockpit Software7.5 High
- fortinet fortiwebmanager, fortiweb manager +1 moreAn improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6...6.4 Medium
- creativethemes blocksyBlocksy <= 2.0.50 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- unknown weaver xtreme theme supportWeaver Xtreme Theme Support <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via div Shortcode6.4 Medium
- Show moreLoading…