CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- siemens simatic cp 1542sp-1, simatic cp 1542sp-1 irc, simatic cp 1543sp-1 +5 more +7 moreA vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions <...6.9 Medium
- siemens tia administratorA vulnerability has been identified in TIA Administrator (All versions < V3 SP2). The affected...4.8 Medium
- anders norén radcliffe 2WordPress Radcliffe 2 theme <= 2.0.17 - Broken Access Control vulnerability5.3 Medium
- webcodingplace product expiry for woocommerceWordPress Product Expiry for WooCommerce plugin <= 2.5 - Broken Access Control vulnerability5.4 Medium
- moreconvert mc woocommerce wishlistWordPress WooCommerce Wishlist plugin <= 1.7.8 - Broken Access Control vulnerability5.3 Medium
- smallweigit avuesmallweigit Avue avueUeditor cross site scripting5.3 Medium
- ladela online scheduling and appointment booking system – booklyWordPress Online Booking and Scheduling Plugin – Bookly <= 23.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Color Profile Parameter6.4 Medium
- themeboy sportspress, sportspress – sports club & league manager +1 moreWordPress SportsPress – Sports Club & League Manager plugin <= 2.7.20 - Broken Access Control vulnerability4.3 Medium
- wedevs woocommerce conversion trackingWordPress WooCommerce Conversion Tracking plugin <= 2.0.11 - Broken Access Control vulnerability4.3 Medium
- addonmaster load more anythingWordPress Load More Anything plugin <= 3.3.3 - Broken Access Control vulnerability5.4 Medium
- woo product vendors, woocommerce product vendors +1 moreWordPress WooCommerce Product Vendors plugin <= 2.2.2 - Unauthenticated Broken Access Control vulnerability5.3 Medium
- termly cookie consent, gdpr cookie consent banner +1 moreWordPress GDPR/CCPA Cookie Consent Banner plugin <= 3.2 - Broken Access Control vulnerability5.3 Medium
- copymatic, copymatic – ai content writer & generator, ryanfaber copymatic – ai content writer & generator +2 moreWordPress Copymatic plugin <= 1.9 - Broken Access Control vulnerability6.5 Medium
- elementor website builderWordPress Elementor plugin <= 3.13.2 - Broken Access Control vulnerability4.3 Medium
- yoast seo premium, seo +1 moreWordPress Yoast SEO Premium plugin <= 20.4 - Unauthenticated Zapier API Key Reset vulnerability5.3 Medium
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.1.8 - Multiple Broken Access Control vulnerabilities8.3 High
- oceanwp ocean extraOcean Extra <= 2.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flickr Widget6.4 Medium
- roxnor metform – contact form, survey, quiz, & custom form builder for elementor, wpmet metform elementor contact form builder +1 moreMetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive Information Exposure5.3 Medium
- netiq access manager, opentext netiq access manager +1 morePotential information leakage in administrator enabled debug mode6.5 Medium
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection9.9 Critical
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreImproper handling of extra values issue exists in Cybozu Garoon 5.0.0 to 5.15.2. If this...4.9 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreExcessive platform resource consumption within a loop issue exists in Cybozu Garoon 5.0.0 to 5.15...6.5 Medium
- vsourz1td advanced contact form 7 dbAdvanced Contact form 7 DB <= 2.0.2 - Missing Authorization to Unauthenticated Information Disclosure5.3 Medium
- vsourz1td advanced contact form 7 db, vsourz advanced cf7 db +1 moreAdvanced Contact form 7 DB <= 2.0.2 - Sensitive Information Exposure5.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreIncorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreInsertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.2....4.3 Medium
- hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 moreShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Hor…6.4 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreInsertion of sensitive information into sent data issue exists in Cybozu Garoon 5.5.0 to 6.0.0,...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreIncorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 6.0.0 allows a remote...5.4 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated...9.0 Critical
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreInsertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.0....6.5 Medium
- keisuke nakayama awkblogOS command injection vulnerability exists in awkblog v0.0.1 (commit hash...9.8 Critical
- veeam recovery orchestratorHard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator9.0 Critical
- buildapp build app onlineBuild App Online <= 1.0.22 - Account Takeover via Weak Password Reset Mechanism8.1 High
- sap se s/4hana (manage incoming payment files), sap s4hana, s\/4 hana +2 moreMissing Authorization check in SAP S/4HANA (Manage Incoming Payment Files)6.5 Medium
- sap businessobjects business intelligence platformInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Scheduling)3.7 Low
- sap netweaver, sap se netweaver as java, sap netweaver application server java +2 moreInformation Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures)5.3 Medium
- sap student life cycle managementMissing Authorization check in SAP Student Life Cycle Management (SLcM)5.4 Medium
- sap se bw, sap bw\/4hana, sap se bw/4hana transformation and data transfer process +1 more +3 moreMissing Authorization check in SAP BW/4HANA Transformation and DTP5.5 Medium
- sap customer relationship management webclient ui, sap se crm webclient ui +1 moreCross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)6.1 Medium
- sap document builderUnrestricted file upload in SAP Document Builder (HTTP service)6.5 Medium
- sap se netweaver and abap platform, sap netweaver application server abap +1 moreDenial of service (DOS) in SAP NetWeaver and ABAP platform6.5 Medium
- sap netweaver, sap se netweaver as java, sap netweaver application server java +2 moreDenial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)7.5 High
- tabrisrp wps hide loginWPS Hide Login <= 1.9.15.2 - Login Page Disclosure5.3 Medium
- hiroaki miyashita custom field templateCustom Field Template <= 2.6.1 - Authenticated (Admin+) Stored Cross-Site Scritping4.4 Medium
- hiroaki miyashita custom field templateCustom Field Template <= 2.6.1 - Authenticated(Contributor+) Information Exposure4.3 Medium
- hiroaki miyashita custom field templateCustom Field Template <= 2.6.1 - Authenticated(Constibutor+) Stored Cross-Site Scripting via Custom Field Name6.4 Medium
- gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 moreSiteOrigin Widgets Bundle <= 1.61.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog Widget6.4 Medium
- hiroaki miyashita custom field templateCustom Field Template <= 2.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode6.4 Medium
- sap se financial consolidationCross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation5.0 Medium
- Show moreLoading…