CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
typo3/cmsPackagistTYPO3 Cross-Site Scripting in Link Handling6.1 Mediumtypo3/cmsPackagistTYPO3 Broken Access Control in Localization Handling6.5 Mediumtypo3/cmsPackagistTYPO3 Cross-Site Scripting in Filelist Module6.1 Mediumtypo3/cmsPackagistTYPO3 Cross-Site Scripting in Fluid ViewHelpers6.1 Mediumtypo3/cmsPackagistTYPO3 CMS Possible Insecure Deserialization in Extbase Request Handling8.1 High- opensourcelabs skyscraperSkyScrape Secure API Requests6.4 Medium
- samsung exynos 1080, exynos 1280, exynos 1330 +13 more +15 moreAn issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos...8.4 High
- monstra, monstra cms +1 moreA cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute...4.8 Medium
- netgear wnr614 firmwareNetgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies...4.8 Medium
- netgear wnr614 firmwareNetgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plaintext.8.8 High
- netgear wnr614 firmwareAn issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create passwords...8.1 High
- netgear wnr614 firmwareAn issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass...8.8 High
- netgear wnr614 firmwareAn issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows...8.2 High
- formwork project formworkFormwork has a Cross-site scripting (XSS) vulnerability in Description metadata4.8 Medium
- ibm iIBM i information disclosure5.3 Medium
- pharmacy\/medical store point of sale system project store point of sale system, sourcecodester pharmacymedical store point of sale system +1 moreSourcecodester Pharmacy/Medical Store Point of Sale System 1.0 is vulnerable SQL Injection via...9.8 Critical
- master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits, wordpress free widgets for elementor plugin +2 moreMaster Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to MA Template Creation or Modification6.5 Medium
- fileorganizer, softaculous fileorganizer – wordpress file manager +1 moreFileOrganizer <= 1.0.7 - Sensitive Information Exposure via Directory Listing7.5 High
- master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits +1 moreMaster Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Navigation Menu Widget7.2 High
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.7.1 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Quiz Attempt Deletion4.3 Medium
- itsourcecode online discussion forum, online discussion forum project discussion forum +1 moreitsourcecode Online Discussion Forum poster.php unrestricted upload5.3 Medium
- itsourcecode online discussion forum, online discussion forum project discussion forum +1 moreitsourcecode Online Discussion Forum register_me.php sql injection6.9 Medium
- arm bifrost gpu kernel driver, mali gpu kernel driver, valhall gpu kernel driver +2 moreMali GPU Kernel Driver allows improper GPU memory processing operations7.8 High
- anton vanyukov market exporterMarket Exporter <= 2.0.19 - Missing Authorization to Arbitrary File Deletion7.5 High
- clashforwindows clashClash Proxy Port improper authentication6.9 Medium
- envothemes envo extraEnvo Extra <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget6.4 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Path Traversal via esc_dir Function6.8 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Zipped SVG6.4 Medium
- westguardsolutions ws form, westguard ws form lite – drag & drop contact form builder, ws form pro +2 moreWS Form LITE <= 1.9.217 - Unauthenticated CSV Injection4.7 Medium
- horea radu one page express companionOne Page Express Companion <= 1.6.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via one_page_express_contact_form Shortcode6.4 Medium
- royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 moreRoyal Elementor Addons and Templates <= 1.3.976 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 moreRoyal Elementor Addons and Templates <= 1.3.976 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads6.4 Medium
- extend themes colibri page builderColibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode6.4 Medium
- jankarres wp stackerWP Stacker <= 1.8.5 - Stored XSS via CSRF5.4 Medium
- unknown wp backpackWP Backpack <= 2.1 - Admin+ Stored XSS5.4 Medium
- reputeinfosystems arforms, unknown arforms - premium wordpress form builder plugin, reputeinfosystems arforms form builder +2 moreArForms < 6.6 - Admin+ Stored XSS4.8 Medium
- reputeinfosystems arforms, unknown arforms - premium wordpress form builder plugin, reputeinfosystems arforms form builder +2 moreArForms < 6.6 - Unauthenticated RCE9.8 Critical
- logichunt logo sliderLogo Slider < 4.0.0 - Contributor+ Stored XSS5.4 Medium
- expresstech quiz and survey master, quiz and survey master (qsm) – easy quiz and survey maker +1 moreQuiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL Injection9.9 Critical
- wpchill strong testimonialsStrong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification4.3 Medium
- tablepress, tobiasbg tablepress – tables in wordpress made easy +1 moreTablePress – Tables in WordPress made easy <= 2.3 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebind6.4 Medium
- pickplugins post grid, comboblocks +1 morePost Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel - Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attribute6.4 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.7.1 -Authenticated (Administrator+) SQL Injection7.2 High
- bdthemes prime slider – addons for elementor, prime slider +1 morePrime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget6.4 Medium
- essential addons for elementor pro, wpdeveloper essential addons for elementor +1 moreEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox and Modal Widget6.4 Medium
- codepeople music store - wordpress ecommerce, music store +1 moreSQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows...6.5 Medium
- roundcube webmailRoundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 on Windows allows command injection via...9.8 Critical
- lightpress lightbox, firelightwp lightpress lightbox +1 moreWP jQuery Lightbox <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Attribute6.4 Medium
- pickplugins post gridPost Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- qodeinteractive qi addons for elementorQi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Local File Inclusion7.5 High
- Show moreLoading…