CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- ninjateam gdpr ccpa compliance & cookie consent banner, gdpr ccpa compliance \& cookie consent banner +1 moreGDPR CCPA Compliance & Cookie Consent Banner <= 2.7.0 - Missing Authorization to Settings Update and Stored Cross-Site Scripting5.4 Medium
- freshlightlab wp mobile menu, takanakui wp mobile menu – the mobile-friendly responsive menu +1 moreWP Mobile Menu – The Mobile-Friendly Responsive Menu <= 2.8.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Alt5.4 Medium
- nayrathemes clever foxClever Fox <= 25.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- dell alienware aurora r10 firmware, alienware aurora r15 amd firmware, alienware aurora ryzen edition r14 firmware +38 more +40 moreDell BIOS contains a missing support for integrity check vulnerability. An attacker with physical...7.6 High
- nayrathemes clever foxClever Fox – One Click Website Importer by Nayra Themes <= 25.2.0 - Missing Authorization to arbitrary theme activation via clever-fox-activate-theme5.4 Medium
- themefarmer woocommerce toolsWooCommerce Tools <= 1.2.9 - Missing Authorization to Authenticated (Subscriber+) Plugin Module Deactivation4.3 Medium
- canonical netplannetplan leaks the private key of wireguard to local users. A security fix will be released soon.6.5 Medium
javaparserOSS-FuzzSecurity exception in com.github.javaparser.CommentsInserter.insertCommentsNo score- dnkorpushov ebookmeta, lxml +1 moreebookmeta XML External Entity vulnerability9.1 Critical
- roundcube webmail, debian linux +1 moreRoundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via list columns from user...6.1 Medium
- roundcube webmail, debian linux +1 moreRoundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.6.1 Medium
- dnkorpushov ebookmetaebookmeta XML External Entity vulnerability7.5 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +6 more +8 moreAn issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos...8.4 High
- samsung exynos 1480, exynos 2200, exynos 2400 +3 more +5 moreAn issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400. It...8.4 High
- samsung exynos 1480 firmware, exynos 2200 firmware, exynos 2400 firmware +2 moreAn issue was discovered in Samsung Mobile Processor EExynos 2200, Exynos 1480, Exynos 2400. It...6.8 Medium
- invisioncommunityInvision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front...9.8 Critical
- invisioncommunity communityInvision Community through 4.7.16 allows remote code execution via the applications/core/modules...7.2 High
- precor p82Precor touchscreen console P62, P80, and P82 contains a default SSH public key in the...8.0 High
- precor p82Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive...8.8 High
- precor p82Precor touchscreen console P82 contains a private SSH key that corresponds to a default public...8.8 High
- precor p62, p80, p82 +2 morePrecor touchscreen console P62, P80, and P82 could allow a remote attacker (within the local...7.8 High
- idopesok zsazsa Generates Error Messages Containing Sensitive Information4.0 Medium
- hcltech domino, hcl software domino server +1 moreHCL Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability8.4 High
- tornadoweb tornadoTornado before 6.4.1 CRLF Injection via CurlAsyncHTTPClient6.3 Medium
- tornadoweb tornadoTornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding9.0 Critical
- monstra, monstra cms +1 moreA cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute...5.4 Medium
- monstra, monstra cms +1 moreAn arbitrary file upload vulnerability in Monstra CMS v3.0.4 allows attackers to execute...7.2 High
- silabs.com gecko sdkFailure to update BT Mesh Replay Protection List5.6 Medium
- libcoapAn issue in obgm and Libcoap v.a3ed466 allows a remote attacker to cause a denial of service via...7.5 High
- dnspod security recursivednspod-sr 0dfbd37 contains a SEGV.5.5 Medium
- dnspod security recursivednspod-sr 0dfbd37 is vulnerable to buffer overflow.5.5 Medium
- pymumu smartdnssmartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/dns.c.7.5 High
- pymumu smartdnssmartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/util.c.7.5 High
- robdnsrobdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c.7.5 High
- robdnsrobdns commit d76d2e6 was discovered to contain a NULL pointer dereference via the item->tokens...7.5 High
- robertdavidgraham robdnsrobdns commit d76d2e6 was discovered to contain a heap overflow via the component block->filename...9.1 Critical
- thekelleys dnsmasqdnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.7.5 High
- ninjaframework ninjaWeak encryption in Ninja Core7.5 High
- johnson controls istar configuration utility (icu), johnsoncontrols icu, johnson controls istar pro, edge and ex +3 more +5 moreJohnson Controls Software House iSTAR Configuration Utility (ICU) Tool8.8 High
- netgear wnr614 firmwareInsecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to access...4.0 Medium
- dynamsoft serviceDynamsoft Service 1.8.1025 through 1.8.2013, 1.7.0330 through 1.7.2531, 1.6.0428 through 1.6.1112...9.8 Critical
- oneflowImproper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of...7.5 High
- evmosEvmos allows unvested token delegations5.3 Medium
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreImproper Neutralization of Special Elements used in an OS Command in parisneo/lollms-webui9.8 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal leading to Remote Code Execution in parisneo/lollms-webui9.8 Critical
- man-group dtale, man-group/dtale, man d-tale +2 moreAuthentication Bypass and RCE in man-group/dtale9.8 Critical
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreTiming Attack Vulnerability in gaizhenbiao/chuanhuchatgpt7.5 High
- lunary, lunary-ai lunary-ai/lunary +1 moreSSRF Vulnerability in lunary-ai/lunary8.6 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anything-llm, anythingllm +2 morePrivilege Escalation in mintplex-labs/anything-llm8.1 High
- langchain, langchain-ai langchain-ai/langchain +1 moreDenial-of-Service in LangChain SitemapLoader in langchain-ai/langchain4.2 Medium
- Show moreLoading…