CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- apple ipados, macos, ios and ipados +2 more +4 moreThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, macOS...8.8 High
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed by adding additional logic. This issue is fixed in tvOS 17.5, iOS 16.7.8...6.5 Medium
- apple ios, ipados, macos +3 more +5 moreAn authentication issue was addressed with improved state management. This issue is fixed in...4.6 Medium
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed by restricting options offered on a locked device. This issue is fixed in...2.4 Low
- apple ios, ipados, macos +5 more +7 moreAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple ipados, macos, ios and ipados +1 more +3 moreThis issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma...3.3 Low
- apple ios, ipados, macos +5 more +7 moreThe issue was addressed with improved checks. This issue is fixed in tvOS 17.5, visionOS 1.2, iOS...7.8 High
- apple ipados, ios and ipados, iphone os +2 moreA privacy issue was addressed with improved handling of temporary files. This issue is fixed in...3.3 Low
- apple visionosThe issue was addressed with improvements to the file handling protocol. This issue is fixed in...6.5 Medium
- apple ipados, tvos, visionos +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in visionOS 1.2,...7.8 High
- apple ios, ipados, macos +4 more +6 moreAn issue was addressed with improved validation of environment variables. This issue is fixed in...5.5 Medium
- apple ipados, macos, watchos +2 more +4 moreThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, watchOS...5.5 Medium
- apple ipados, macos, ios and ipados +2 more +4 moreThis issue was addressed with improved permissions checking. This issue is fixed in macOS Sonoma...7.8 High
- apple macos, safari, visionos +2 moreThe issue was addressed with improved checks. This issue is fixed in visionOS 1.2, macOS Sonoma...5.5 Medium
- salesagility suitecrmSuiteCRM authenticated RCE using connectors8.6 High
- salesagility suitecrmSuiteCRM v4 API Excessive log data DOS8.6 High
- salesagility suitecrmSuiteCRM Stored XSS Vulnerability Allows Code Execution via Malicious iFrame5.7 Medium
- salesagility suitecrmSuiteCRM Improper Control of Filename for Include Statement in PHP and Unrestricted Upload of File with Dangerous content leads to authenticated remote code execution9.1 Critical
- cloud foundry routing release, cloudfoundry cf-deployment +1 moreGoRouter Denial of Service Attack5.9 Medium
- salesagility suitecrmSuiteCRM authenticated Server-Side Request Forgery7.7 High
- salesagility suitecrmSuiteCRM authenticated Reflected Cross-Site Scripting8.9 High
- salesagility suitecrmSuiteCRM unauthenticated SQL Injection10.0 Critical
- salesagility suitecrmSuiteCRM authenticated SQL Injection in EmailUIAjax displayView controller9.6 Critical
- apple macosAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS...7.1 High
- apple macosThe issue was addressed with improved restriction of data container access. This issue is fixed...5.5 Medium
- apple macosAn access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS...7.8 High
- apple macosA memory corruption issue was addressed with improved validation. This issue is fixed in macOS...7.8 High
- apple macosThis issue was addressed by adding an additional prompt for user consent. This issue is fixed in...5.5 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4, macOS...8.6 High
github.com/moby/mobyGo,github.com/docker/dockerGo +1 moreMoby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsingNo scoregithub.com/mostynb/go-grpc-compressionGogo-grpc-compression has a zstd decompression bombing vulnerability7.5 High- salesagility suitecrmSuiteCRM authenticated SQL Injection in EmailUIAjax messages count controller9.6 Critical
- salesagility suitecrmSuiteCRM authenticated SQL Injection in TreeData entrypoint9.6 Critical
- fuji electric monitouch v-sftFuji Electric Monitouch V-SFT Type Confusion8.5 High
- uniview nvr301-04s2-p4, nvr301-04s2-p4 firmware +1 moreUniview NVR301-04S2-P4 Cross-site Scripting4.8 Medium
- salesagility suitecrmSuiteCRM authenticated SQL Injection in Alerts9.6 Critical
- ovic team importerWordPress Ovic Importer plugin <= 1.6.3 - Arbitrary File Download vulnerability7.5 High
- acurax under construction / maintenance mode from acurax, under construction \/ maintenance mode +1 moreWordPress Under Construction / Maintenance Mode from Acurax plugin <= 2.6 - IP Bypass vulnerability3.7 Low
- salesagility suitecrmSuiteCRM unauthenticated user password reset on php73.7 Low
- contact form builder project form builder, wpdevart contact form builder, contact widget +1 moreWordPress Contact Form Builder, Contact Widget plugin <= 2.1.7 - Bypass Vulnerability vulnerability5.3 Medium
- asghar hatampoor buddypress cover, buddypress cover project cover +1 moreWordPress BuddyPress Cover plugin <= 2.1.4.2 - Arbitrary File Upload vulnerability10.0 Critical
- gabriel somoza / joseph fitzgibbons strategery migrations, strategery-migrations project strategery-migrations +1 moreWordPress Strategery Migrations plugin <= 1.0 - Arbitrary File Deletion vulnerability7.5 High
- ravidhu dissanayake upunzipperWordPress Upunzipper plugin <= 1.0.0 - Arbitrary File Deletion vulnerability8.6 High
- sc filechecker project filechecker, siteclean sc filechecker +1 moreWordPress SC filechecker plugin <= 0.6 - Arbitrary File Deletion vulnerability8.6 High
- themeisle ppom for woocommerce, product addons \& fields for woocommerce +1 moreWordPress Product Addons & Fields for WooCommerce plugin <= 32.0.20 - Content Injection vulnerability5.3 Medium
- avast antivirusElevation of Privelage via symlinked file in Avast Antivirus7.3 High
linux-laptopUbuntulinux-laptop vulnerabilitiesNo score- jetbrains aqua, clion, datagrip +10 more +12 moreGitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1...9.3 Critical
- jordy meow database cleanerWordPress Database Cleaner: Clean, Optimize & Repair plugin <= 1.0.5 - Arbitrary File Read vulnerability4.9 Medium
- yith woocommerce product add-ons, yithemes yith woocommerce product add-ons +1 moreWordPress YITH WooCommerce Product Add-Ons plugin <= 4.9.2 - Content Injection vulnerability5.3 Medium
- Show moreLoading…