CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- sap financial consolidationCross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation8.1 High
- dell openmanage server administratorDell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege...7.3 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of...7.0 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory...8.6 High
- mozilla firefox, firefox esr, thunderbird +2 moreOffscreen Canvas did not properly track cross-origin tainting, which could be used to access...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreBy tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented...4.7 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy monitoring the time certain operations take, an attacker could have guessed which external...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf a garbage collection was triggered at the right time, a use-after-free could have occurred...8.1 High
- videolan vlc media playerVLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer...8.0 High
- linksys velop whw0101 firmware, whw01v1 firmware +1 moreInsecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate...6.8 Medium
- mz-automation libiec61850libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength...7.4 High
- totolink a3100r, a3100r firmware +1 moreTOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the...7.5 High
- No product listedImproper exception handling in McAfee Security: Antivirus VPN for Android before 8.3.0 could...5.3 Medium
- mcafee antivirus vpn for androidImproper deep link validation in McAfee Security: Antivirus VPN for Android before 8.3.0 could...9.1 Critical
- No product listedAn issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout,...6.5 Medium
- hp inc. pc products, hp elite slice firmware, elite slice for meeting rooms firmware +24 more +26 moreHP PC BIOS May 2024 Security Updates for Potential Stack Buffer Overflows6.8 Medium
- hp inc. pc products, hp elite slice firmware, elite slice for meeting rooms firmware +24 more +26 moreHP PC BIOS May 2024 Security Updates for Potential Stack Buffer Overflows6.8 Medium
- apache alluraApache Allura: sensitive information exposure via DNS rebinding7.5 High
- grpc, grpc grpc-node +1 more@grpc/grpc-js can allocate memory for incoming messages well above configured limits5.3 Medium
- gurgunday ghtmlghtml Cross-Site Scripting (XSS) vulnerability8.9 High
- composer, fedoraproject fedora +1 moreComposer vulnerable to command injection via malicious git/hg branch names8.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreAn improper access control vulnerability in Trend Micro Apex One could allow a local attacker to...7.8 High
- trend micro, inc. micro vpn proxy one pro, trendmicro vpn proxy one +1 moreTrend Micro VPN Proxy One Pro, version 5.8.1012 and below is vulnerable to an arbitrary file...5.3 Medium
- trend micro, inc. micro interscan web security virtual appliance, trendmicro interscan web security virtual appliance +1 moreA cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual...5.4 Medium
- trend micro, inc. micro deep security agent, trendmicro deep security agent +1 moreA link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreA security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service...4.7 Medium
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreA link following vulnerability in the Trend Micro Apex One and Apex One as a Service Damage...6.1 Medium
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreA security agent link following vulnerability in Trend Micro Apex One could allow a local...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreA Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreAn origin validation vulnerability in the Trend Micro Apex One security agent could allow a local...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +1 more +3 moreAn origin validation vulnerability in the Trend Micro Apex One security agent could allow a local...7.8 High
- composer, fedoraproject fedora +1 moreComposer vulnerable to command injection via malicious git branch name8.8 High
- trend micro, inc. micro maximum security (consumer), trendmicro maximum security, maximum security 2022 +1 more +3 moreTrend Micro Security 17.x (Consumer) is vulnerable to a Privilege Escalation vulnerability that...7.8 High
- salesagility suitecrm, suitecrm-core +1 moreSuiteCRM-Core Host Header Injection in /legacy4.3 Medium
- apple ipados, macos, safari +6 more +8 moreThe issue was addressed with improved bounds checks. This issue is fixed in tvOS 17.5, visionOS 1...8.8 High
- apple ipados, macos, safari +5 more +7 moreThis issue was addressed through improved state management. This issue is fixed in tvOS 17.5,...6.5 Medium
- apple ipados, macos, tvos +3 more +5 moreThis issue was addressed with improved environment sanitization. This issue is fixed in macOS...5.5 Medium
- apple ios, ipados, macos +6 more +8 moreThe issue was addressed with improved checks. This issue is fixed in tvOS 17.5, visionOS 1.2, iOS...7.8 High
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5,...4.3 Medium
- apple macosThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS...6.3 Medium
- apple ipados, macos, safari +4 more +6 moreThis issue was addressed with improvements to the noise injection algorithm. This issue is fixed...6.5 Medium
- apple ios, ipados, macos +4 more +6 moreAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...7.8 High
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple ios, ipados, macos +6 more +8 moreThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13...6.5 Medium
- apple ipados, macos, visionos +2 more +4 moreThe issue was addressed with improved checks. This issue is fixed in visionOS 1.2, macOS Sonoma...7.8 High
- apple ipados, macos, tvos +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6...6.3 Medium
- apple ipados, macos, tvos +5 more +7 moreThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.7, macOS...7.8 High
- apple ipados, macos, tvos +5 more +7 moreThe issue was addressed with improved checks. This issue is fixed in tvOS 17.5, visionOS 1.2, iOS...7.8 High
- apple watchosThis issue was addressed through improved state management. This issue is fixed in watchOS 10.5....2.4 Low
- apple ipados, macos, tvos +5 more +7 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...7.8 High
- Show moreLoading…