CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- lvaudore the moneytizerThe Moneytizer <= 9.6.3 - Cross-Site Request Forgery via multiple AJAX actions8.1 High
- dextorlobo custom dashCustom Dash <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- purvabathe simple image popup shortcodeSimple Image Popup Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- duongancol boostify header footer builder for elementorBoostify Header Footer Builder for Elementor <= 1.3.5 - Missing Authorization to Page/Post Creation4.3 Medium
- xootix login & register customizer – popup | slider | inline | woocommerce, login\/signup popup, otp login & register woocommerce +5 more +7 moreXootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update8.8 High
trafficserverOSS-FuzzUse-of-uninitialized-value in QUICVariableInt::sizeNo scorespirv-toolsOSS-FuzzUse-of-uninitialized-value in spvTextEncodeOperandNo score- clusterlabs booth, red hat enterprise linux 10, enterprise linux 7 +17 more +19 moreBooth: specially crafted hash can lead to invalid hmac being accepted by booth server5.9 Medium
- johnson controls software house c•cure 9000, johnsoncontrols c-cure 9000 firmware, software house c-cure 9000 siteserver +2 moreCCURE passwords exposed to administrators8.5 High
- chanjet smooth t+system, smooth tsystem, chanjetvip t\+ +2 moreChanjet Smooth T+system keyEdit.aspx sql injection6.9 Medium
typo3/swiftmailerPackagisttypo3 Security fix for Flow Swift Mailer packageNo scoretypo3/flowPackagistInsecure Unserialize Vulnerability in FLOW3No score- idccms project idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...8.8 High
- idccms project idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...8.8 High
- idccms project idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...8.8 High
- samsung exynos 1280, exynos 1330, exynos 1380 +7 more +9 moreAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos...6.7 Medium
- samsung exynos 1280, exynos 1330, exynos 1380 +7 more +9 moreAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos...6.7 Medium
- samsung mobile exynos, samsung exynos 1280 firmware, exynos 1330 firmware +3 more +5 moreAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos...6.7 Medium
- samsung exynos 1280, exynos 1330, exynos 1380 +7 more +9 moreAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos...6.7 Medium
- samsung exynos 1280 firmware, exynos 1330 firmware, exynos 1380 firmware +2 more +4 moreAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos...6.7 Medium
- samsung mobile exynos, samsung exynos 1280 firmware, exynos 1330 firmware +3 more +5 moreAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos...6.7 Medium
- samsung exynos 1280 firmware, exynos 1330 firmware, exynos 1380 firmware +2 more +4 moreAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos...6.7 Medium
- samsung exynos 1280 firmware, exynos 1330 firmware, exynos 1380 firmware +2 more +4 moreAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos...6.0 Medium
- samsung exynos 1280 firmware, exynos 1330 firmware, exynos 1380 firmware +2 more +4 moreAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos...6.0 Medium
typo3/neosPackagisttypo3 Information Disclosure Security NoteNo score- samsung exynos 1280 firmware, exynos 1330 firmware, exynos 1380 firmware +2 more +4 moreAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos...6.0 Medium
- samsung exynos 1280, exynos 1330, exynos 1380 +7 more +9 moreAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos...6.7 Medium
- samsung exynos 1280 firmware, exynos 1330 firmware, exynos 1380 firmware +2 more +4 moreAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos...6.0 Medium
- samsung mobile exynos, samsung exynos 1280 firmware, exynos 1330 firmware +3 more +5 moreAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos...6.7 Medium
typo3/flowPackagistTypo3 Arbitrary file upload and XML External Entity processingNo score- red hat logging subsystem for red hat openshift, openshift container platform 4.12, openshift container platform 4.13 +7 more +9 moreOpenshift/telemeter: iss check during jwt authentication can be bypassed7.5 High
- emailgptPrompt Injection in EmailGPT8.5 High
typo3/phar-stream-wrapperPackagistBy-passing Protection of PharStreamWrapper InterceptorNo scoretypo3/flowPackagistTime-Based Information Disclosure Vulnerability in FlowNo scoretypo3/neosPackagistPrivilege Escalation in TYPO3 Neos4.9 Mediumtypo3/flowPackagistFlow Bugfix Releases for Entity SecurityNo scoretypo3/neosPackagistCross-Site Scripting (XSS) vulnerabilities in NeosNo scoretypo3/cmsPackagistTypo3 Cross-Site Scripting in Language Pack HandlingNo scoretypo3/cmsPackagistTypo3 Broken Access Control in Import ModuleNo scoretypo3/cmsPackagistTypo3 Information Disclosure in Page TreeNo scoretypo3/cmsPackagistTypo3 Arbitrary Code Execution and Cross-Site Scripting in Backend APINo score- abb 2tma310010b0001 firmware, 2tma310010b0003 firmware, 2tma310011b0001 firmware +14 more +16 moreReplay Attack in KNX Secure Devices7.3 High
- abb 2tma310010b0001 firmware, 2tma310010b0003 firmware, 2tma310011b0001 firmware +14 more +16 moreFDSK Leak in KNX Secure Devices7.3 High
typo3/cmsPackagistTypo3 Security Misconfiguration in Frontend Session HandlingNo scoretypo3/cmsPackagistTypo3 Security Misconfiguration in User Session HandlingNo scoretypo3/cmsPackagistTypo3 Information Disclosure in Backend User InterfaceNo scoretypo3/cmsPackagistTypo3 Information Disclosure in User AuthenticationNo scoretypo3/cmsPackagistCross-Site Scripting in TYPO3 CMS Backend5.4 Mediumtypo3/cmsPackagistCross-Site Scripting in TYPO3 CMS6.5 Medium- Show moreLoading…