CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- tenable security centerImproper privilege management5.4 Medium
- oretnom23 employee and visitor gate pass logging system, sourcecodester employee visitor gatepass logging system +1 moreSourceCodester Employee and Visitor Gate Pass Logging System cross site scripting6.9 Medium
- tenable security centerStored Cross Site Scripting3.5 Low
- oretnom23 employee and visitor gate pass logging systemSourceCodester Employee and Visitor Gate Pass Logging System save_users sql injection6.9 Medium
- jupyterhub oauthenticatorGlobus `identity_provider` restriction ignored when used with `allow_all` in JupyterHub 5.08.1 High
- automattic woocommerceWooCommerce has a Cross-Site Scripting Vulnerability in checkout & registration forms5.4 Medium
- dell common event enablerDell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization...7.8 High
- hp inc. advance mobile applicationHP Advance Mobile Application – Potential Information Disclosure6.2 Medium
- oretnom23 employee and visitor gate pass logging system, sourcecodester employee visitor gatepass logging system +1 moreSourceCodester Employee and Visitor Gate Pass Logging System delete_users sql injection5.3 Medium
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop manage_product.php sql injection6.9 Medium
- strapi@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass7.1 High
- strapi@strapi/plugin-upload has a Denial-of-Service via Improper Exception Handling5.3 Medium
- strapi@strapi/plugin-content-manager leaks data via relations via the Admin Panel2.3 Low
- oretnom23 cab management systemSourceCodester Cab Management System sql injection5.3 Medium
- microsoft nugetgalleryNuGetGallery's Markdown Autolinks Processing Vulnerable to Cross-site Scripting6.1 Medium
- apache submarine, apache software foundation submarine server core +1 moreApache Submarine Server Core: authorization bypass9.8 Critical
- apache submarine, apache software foundation submarine commons utils +1 moreApache Submarine Commons Utils: default secret9.8 Critical
- apache submarine, apache software foundation submarine server core +1 moreApache Submarine Server Core: SQL injection8.1 High
- elastic elasticsearchElasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictions6.5 Medium
- jan syski megabipArbitrary File Upload in MegaBIP9.3 Critical
- jan syski megabipRemote Code Execution in MegaBIP9.3 Critical
- jan syski megabipSQL Injection in MegaBIP9.3 Critical
- redhat quay, red hat quay 3 +1 moreQuay: unauthorized user may authenticate via oauth application token4.2 Medium
- dell networking os10, smartfabric os10 software, smartfabric os10 +2 moreDell OS10 Networking Switches, versions10.5.6.x, 10.5.5.x, 10.5.4.x and 10.5.3.x ,contain an...8.8 High
- schneider electric evlink home smart, schneider-electric evlink home firmware +1 moreCWE-668: Exposure of the Resource Wrong Sphere vulnerability exists that exposes a SSH interface...6.5 Medium
- schneider electric modicon m340, network module, modicon m340, ethernet tcp/ip bmxnoe0110, network module, modicon m340, modbus/tcp bmxnoe0100 +5 more +7 moreCWE-552: Files or Directories Accessible to External Parties vulnerability exists which may...6.5 Medium
ubuntu-advantage-proTuxCare,ubuntu-advantage-toolsTuxCare,ubuntu-pro-auto-attachTuxCare +2 more +4 moreUpdate of alt-phpNo score- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 morePath Traversal to Arbitrary File Read/Delete/Overwrite, DoS Attack, and Admin Account Takeover in mintplex-labs/anything-llm9.1 Critical
- newsletter, the newsletter team newsletter - api v1 and v2 addon for newsletter +1 moreNewsletter - API v1 and v2 addon for Newsletter <= 2.4.5 - Missing Authorization to Email Subscribers Management6.5 Medium
- netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 moreEvents Manager – Calendar, Bookings, Tickets, and more! <= 6.4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_category Shortcodes6.4 Medium
- codename065 download managerDownload Manager <= 3.2.86 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting4.4 Medium
- instawp connect – 1-click wp staging & migration, connect +1 moreInstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation9.8 Critical
- himalaya saxena highcompress image compressorWordPress Highcompress Image Compressor plugin <= 6.0.0 - Broken Access Control vulnerability6.5 Medium
- gangesh matta simple org chartWordPress Simple Org Chart plugin <= 2.3.4 - Broken Access Control vulnerability5.3 Medium
- unknown pricing deals for woocommerceWordPress Pricing Deals for WooCommercePricing Deals for WooCommerce plugin <= 2.0.3.2 - Broken Access Control vulnerability5.3 Medium
- bastianon massimo wp gpx map, devfarm wp gpx maps +1 moreWordPress WP GPX Maps plugin <= 1.7.08 - Broken Access Control vulnerability4.3 Medium
- buy me a coffee me a coffee, buymeacoffee buy me a coffee +1 moreWordPress Buy Me a Coffee plugin <= 3.7 - Broken Access Control vulnerability4.3 Medium
- afzal multani wp clone menuWordPress WP Clone Menu plugin <= 1.0.1 - Broken Access Control vulnerability5.4 Medium
- hardik chavada sticky social media iconsWordPress Sticky Social Media Icons plugin <= 2.1 - Broken Access Control vulnerability5.4 Medium
- webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 moreElementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget5.4 Medium
- icegram express, email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress +1 moreIcegram Express <= 5.7.22 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]8.8 High
- lim kai yang grab & saveWordPress Grab & Save plugin <= 1.0.4 - Cross-Site Request Forgery (CSRF) vulnerability4.3 Medium
- consensu.ioWordPress Consensu.io plugin <= 1.0.1 - Broken Access Control vulnerability7.5 High
- piotnet formsWordPress Piotnet Forms plugin <= 1.0.29 - Broken Access Control vulnerability5.3 Medium
- mandrill wpmandrill, millermedia mandrill +1 moreWordPress wpMandrill plugin <= 1.33 - Broken Access Control vulnerability4.3 Medium
- boldgrid weformsWordPress weForms plugin <= 1.6.18 - Broken Access Control vulnerability4.3 Medium
- brett shumaker simple staff listWordPress Simple Staff List plugin <= 2.2.4 - Broken Access Control vulnerability4.3 Medium
- awesome support team support, awesomesupport awesome support, awesome support wordpress helpdesk \& support +2 moreWordPress Awesome Support plugin <= 6.1.5 - Broken Access Control vulnerability5.3 Medium
- funnelkit checkoutWordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Arbitrary Plugin Activation vulnerability4.3 Medium
- funnelkit checkoutWordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Plugin Settings Change vulnerability5.4 Medium
- Show moreLoading…