CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- stylemixthemes megamenu, megamenu max mega menu, stylemixthemes mega menu +2 moreWordPress MegaMenu plugin <= 2.3.12 - Unauthenticated Local File Inclusion vulnerability9.0 Critical
- themehigh checkout field editor for woocommerce (pro), checkout field editor for woocommerce +1 moreWordPress Checkout Field Editor for WooCommerce (Pro) plugin <= 3.6.2 - Unauthenticated Arbitrary File Deletion vulnerability8.6 High
- melapress login securityWordPress MelaPress Login Security plugin <= 1.3.0 - Remote File Inclusion vulnerability4.9 Medium
- aruphash crafthemes demo import, crafthemes demo import +1 moreWordPress Crafthemes Demo Import plugin <= 3.3 - Arbitrary plugin Installation vulnerability7.6 High
- unknown advanced custom fields pro, wpengine advanced custom field pro +1 moreWordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Local File Inclusion vulnerability9.9 Critical
- advancedcustomfields advanced custom fields, unknown advanced custom fields pro +1 moreWordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Arbitrary Function Execution vulnerability8.5 High
- salesagility suitecrmSuiteCRM vulnerable to open redirects5.4 Medium
- linux, linux kernel +1 moreaf_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock.7.8 High
- lollms lollms-webui, parisneo parisneo/lollms-webui +1 moreCSRF in restart_program in parisneo/lollms-webui4.4 Medium
- artica pandora fms, pandora fms fms +1 moreArgument Injection Leading to Remote Code Execution in Realtime Graph Extension9.4 Critical
- artica pandora fms, pandora fms fms +1 moreOS Command injection in Ajax PHP files through HTTP Request8.7 High
- artica pandora fms, pandora fms fms +1 moreUnauth Time-Based SQL Injection via API8.9 High
- artica pandora fms, pandora fms fms +1 moreSystem command injection through Netflow function9.3 Critical
- open-quantum-safe liboqsControl-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other options5.9 Medium
- comtrend wld71-t1 v2.0.201820Cross-Site Request Forgery vulnerability in Comtrend router6.5 Medium
- comtrend wld71-t1, wld71-t1 v2.0.201820 +1 moreCommand injection vulnerability in Comtrend router8.0 High
mmapcrates.iommap unmaintainedNo score- checkmkMissing brute-force protection for two factor authentication5.9 Medium
- estomed simple careHardcoded password in Estomed Sp. z o.o. Simple Care software9.3 Critical
- dreryk gabinetHardcoded password in drEryk Gabinet9.3 Critical
- eurosoft przychodnia, eurosoftsp.zo.o eurosoft przychodina +1 moreHardcoded password in Eurosoft Przychodnia9.3 Critical
- android kernel, debian linux +1 morenet: fix __dst_negative_advice() race7.8 High
- avirtum ipages flipbook, ipages flipbook project flipbook +1 moreWordPress iPages Flipbook plugin <= 1.5.1 - Broken Access Control vulnerability5.3 Medium
- rafflepress giveaways and contests by rafflepress, seedprod rafflepress +1 moreWordPress Giveaways and Contests by RafflePress plugin <= 1.12.4 - Broken Access Control vulnerability4.3 Medium
- aa web servant 12 step meeting listWordPress 12 Step Meeting List plugin <= 3.14.28 - Broken Access Control vulnerability4.3 Medium
- ameliabooking ameliaWordPress Amelia plugin <= 1.0.98 - Broken Access Control vulnerability5.3 Medium
- rabbitloaderWordPress RabbitLoader plugin <= 2.19.13 - Broken Access Control vulnerability5.4 Medium
- ontraport pilotpressWordPress PilotPress plugin <= 2.0.30 - Broken Access Control vulnerability5.3 Medium
- netgsmWordPress Netgsm plugin <= 2.9.32 - Broken Access Control + CSRF vulnerability4.3 Medium
- a wp life media slider – photo sleder, video slider, link slider, carousal slideshow, awplife media slider +1 moreWordPress Media Slider plugin <= 1.3.9 - Broken Access Control vulnerability4.3 Medium
- a wp life album gallery – wordpress gallery, awplife album gallery +1 moreWordPress Album Gallery – WordPress Gallery plugin <= 1.5.7 - Broken Access Control vulnerability4.3 Medium
- a wp life image gallery – lightbox gallery, responsive photo gallery, masonry gallery, awplife image gallery +1 moreWordPress Image Gallery plugin <= 1.4.5 - Broken Access Control vulnerability4.3 Medium
- a wp life slider responsive slideshow – image slider, gallery slideshow, awplife slider responsive slideshow +1 moreWordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerability4.3 Medium
- andrew dashboard to-do listWordPress Dashboard To-Do List plugin <= 1.2.0 - Broken Access Control vulnerability4.3 Medium
- bosa themes elementor addons and templates for woocommerce, bosathemes bosa elementor addons and templates for woocommerce +1 moreWordPress Bosa Elementor Addons and Templates for WooCommerce plugin <= 1.0.12 - Broken Access Control vulnerability4.3 Medium
- la-studio element kit for elementorWordPress LA-Studio Element Kit for Elementor plugin <= 1.3.6 - Broken Access Control vulnerability4.3 Medium
- themekraft woobuddy, buddypress woocommerce my account integration. create woocommerce member pages +1 moreWordPress WooBuddy plugin <= 3.4.19 - Broken Access Control vulnerability4.3 Medium
- actpro extra product options for woocommerceWordPress Extra Product Options for WooCommerce plugin <= 3.0.6 - Broken Access Control vulnerability4.3 Medium
- tickeraWordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerability5.3 Medium
- codepeople wp time slots booking formWordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability5.3 Medium
- awesome support team support, awesomesupport awesome support +1 moreWordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability4.3 Medium
- code parrots easy forms for mailchimpWordPress Easy Forms for Mailchimp plugin <= 6.9.0 - Broken Access Control vulnerability5.3 Medium
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreCSRF in clear_personality_files_list in parisneo/lollms-webui4.0 Medium
- pq-crystals kyberThe Kyber reference implementation before 9b8d306, when compiled by LLVM Clang through 18.x with...7.5 High
- securenvoy mfa, multi-factor authentication solutions +1 moreMultiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper...7.5 High
- langflowLangflow remote code execution vulnerability9.8 Critical
- nukeviet, nukeviet egovernment +1 morenukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code...5.7 Medium
- nukeviet, nukeviet egovernment +1 morenukeviet Deserialization of Untrusted Data vulnerability8.8 High
- No product listedA Directory Traversal vulnerability in iceice666 ResourcePack Server before v1.0.8 allows a...6.5 Medium
- sisoftware sandraAn issue in SiSoftware SANDRA v31.66 (SANDRA.sys 15.18.1.1) and before allows an attacker to...7.8 High
- Show moreLoading…