CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- evmosEvmos is missing create validator check3.5 Low
- evmosEvmos is missing precompile checks3.5 Low
- evmosevmos allows transferring unvested tokens after delegations3.5 Low
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui9.4 Critical
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreStored XSS leading to admin account takeover in mintplex-labs/anything-llm7.3 High
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Access Control in lunary-ai/lunary7.6 High
- kubeflow, kubeflow kubeflow/kubeflow +1 moreReDoS in kubeflow/kubeflow7.5 High
- lunary, lunary-ai lunary-ai/lunary +1 moreIDOR Vulnerability in lunary-ai/lunary9.4 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreDenial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflow5.4 Medium
- parisneo parisneo/lollms-webui, lollms web ui, parisneo parisneo\/lollms-webui +2 morePath Traversal in parisneo/lollms-webui7.5 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal in parisneo/lollms-webui9.1 Critical
- otrs, otrs community edition, otrs ag ((otrs)) community edition +2 moreUpload of files outside application directory6.3 Medium
- kofax power pdfKofax Power PDF PDF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- kofax power pdfKofax Power PDF TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- kofax power pdfKofax Power PDF PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreSSRF in add_webpage endpoint in parisneo/lollms-webui7.4 High
- deepjavalibrary deepjavalibrary/djl, djl, djl deep java library +2 moreTarSlip Vulnerability in deepjavalibrary/djl7.8 High
- gradio-app gradio-app/gradio, gradio project gradio +1 moreServer-Side Request Forgery (SSRF) in gradio-app/gradio8.6 High
- gradio-app gradio-app/gradio, gradio project gradio +1 moreLocal File Inclusion in JSON component in gradio-app/gradio7.5 High
- lightning-ai lightning-ai/pytorch-lightning, lightning ai ai\/pytorch lightning, lightningai pytorch lightning +2 moreRCE via Property/Class Pollution in lightning-ai/pytorch-lightning9.8 Critical
- kofax power pdfKofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- kofax power pdfKofax Power PDF PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Access Control in lunary-ai/lunary8.1 High
- berriai berriai/litellm, litellm +1 moreCode Injection in berriai/litellm7.2 High
- significant-gravitas autogpt, significant-gravitas/autogpt, agpt autogpt classic +2 moreCSRF to RCE in significant-gravitas/autogpt8.8 High
- a10 thunder adc, a10networks advanced core operating system +1 moreA10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability7.8 High
- a10 thunder adc, a10networks advanced core operating system +1 moreA10 Thunder ADC CsrRequestView Command Injection Remote Code Execution Vulnerability7.2 High
- luxion keyshot, keyshot viewer, keyshot network rendering +2 moreLuxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- luxion keyshot, keyshot viewer, keyshot network rendering +2 moreLuxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- luxion keyshot, keyshot network rendering, keyshot viewer +2 moreLuxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability7.8 High
- luxion keyshot, keyshot viewer, keyshot network rendering +2 moreLuxion KeyShot Viewer KSP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreRemote Code Execution in mintplex-labs/anything-llm9.6 Critical
- sonos era 100, era 100 firmware +1 moreSonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability8.8 High
- sonos era 100, era 100 firmware +1 moreSonos Era 100 SMB2 Message Handling Out-Of-Bounds Read Information Disclosure Vulnerability4.3 Medium
- sonos era 100, era 100 firmware +1 moreSonos Era 100 SMB2 Message Handling Out-Of-Bounds Write Remote Code Execution Vulnerability8.8 High
- sonos era 100, era 100 firmware +1 moreSonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability4.3 Medium
- netgear prosafe network management systemNETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability8.8 High
- luxion keyshot, keyshot viewer +1 moreLuxion KeyShot Viewer KSP File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- luxion keyshot, keyshot viewer +1 moreLuxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- oneflowAn issue in the oneflow.permute component of OneFlow-Inc. Oneflow v0.9.1 causes an incorrect...9.8 Critical
- lunary, lunary-ai lunary-ai/lunary +1 moreWeak Password Recovery Mechanism in lunary-ai/lunary6.4 Medium
- oneflowImproper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of...7.5 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreImproper Authorization in mintplex-labs/anything-llm9.1 Critical
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Access Control in lunary-ai/lunary5.4 Medium
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 morePrivilege Escalation and Local File Inclusion in mintplex-labs/anything-llm8.8 High
- oneflowAn issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via...7.5 High
- oneflowAn issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when...7.5 High
- oneflowAn issue in the oneflow.scatter_nd parameter OneFlow-Inc. Oneflow v0.9.1 allows attackers to...7.5 High
- sulu suluformbundleTokenController formName not sanitized in hidden input6.1 Medium
- jupyter server, jupyter-server jupyter server +1 moreJupyter server on Windows discloses Windows user password hash7.5 High
- Show moreLoading…