CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- ueranismUERANSIM before 3.2.6 allows out-of-bounds read when a RLS packet is sent to gNodeB with...5.5 Medium
- itsourcecode billing systemA SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to...9.8 Critical
- totolink a3700r firmwareTOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the...9.8 Critical
- totolink a3700r firmwareTOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the...9.8 Critical
- totolink a3700r firmwareTOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the...8.8 High
- totolink a3700r firmwareTOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the password...9.8 Critical
- totolink a3700r firmwareTOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the File...8.8 High
- dlink dir-605l firmwareD-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc...8.8 High
- rhaiRhai stack overflow vulenrability7.5 High
- churchcrmA stored cross-site scripting (XSS) vulnerability in Church CRM v5.8.0 allows attackers to...5.4 Medium
- No product listedAn issue in Annonshop.app DecentralizeJustice/anonymousLocker commit 2b2b4 to ba9fd and...4.3 Medium
- No product listedAn issue in Annonshop.app DecentralizeJustice/ anonymousLocker commit 2b2b4 allows attackers to...6.5 Medium
- dnscrypt dnscrypt-proxyInsecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to...7.8 High
- adguard adguardhomeAdGuardHome privilege escalation vulnerability8.8 High
- openeclass, gunet open eclass platform +1 moreCross-site scripting (XSS) vulnerability in GUnet OpenEclass E-learning Platform version 3.15 and...5.4 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +5 more +7 moreAn issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos...8.4 High
- samsung exynos 1480 firmware, exynos 2200 firmware, exynos 2400 firmware +2 moreAn issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400. It...8.4 High
- openeclass, gunet open eclass platform +1 moreFile Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary...9.8 Critical
ntfs-3gAzure Linux,ntfs-3g_ntfsprogsopenSUSE +1 moreNTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c. NOTE:...4.5 Medium- moderncampus omni cmsA Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote,...5.3 Medium
- moderncampus omni cmsA Reflected Cross-Site Scripting (XSS) vulnerability in the blog function of Modern Campus - Omni...6.1 Medium
- moderncampus omni cmsXPath Injection vulnerabilities in the blog and RSS functions of Modern Campus - Omni CMS 2023.1...5.3 Medium
- gitlabUncontrolled Resource Consumption in GitLab6.5 Medium
- gitlabUncontrolled Resource Consumption in GitLab6.5 Medium
- gitlabUncontrolled Resource Consumption in GitLab6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab4.4 Medium
- aveva pi web apiDeserialization of Untrusted Data in AVEVA PI Web API8.4 High
- aveva pi asset framework clientDeserialization of Untrusted Data in AVEVA PI Asset Framework Client7.0 High
invenio-communitiesPyPIInvenio-Communities has a Cross-Site Scripting (XSS) vulnerability in React components6.3 Medium- hashicorp vault, vault enterprise +1 moreVault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims2.6 Low
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- schneider electric ecostruxure it gatewayCWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege...7.8 High
- schneider electric powerlogic p5, schneider-electric powerlogic p5 firmware +1 moreCWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause...6.1 Medium
- schneider electric easergy studioCWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could...7.8 High
- schneider electric sage 1410, sage 1430, sage 1450 +4 more +6 moreCWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability...5.4 Medium
- schneider electric sage 1410, sage 1430, sage 1450 +4 more +6 moreCWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the...5.9 Medium
- schneider electric sage 1410, sage 1430, sage 1450 +5 more +7 moreCWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated...7.5 High
- schneider electric sage 1410, sage 1430, sage 1450 +4 more +6 moreCWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’)...8.1 High
- schneider electric sage 1410, sage 1430, sage 1450 +5 more +7 moreCWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass...9.8 Critical
- schneider electric sage 1410, sage 1430, sage 1450 +4 more +6 moreCWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the device...5.3 Medium
- angeljudesuarez payroll management system, payroll management system project management system +1 moreitsourcecode Payroll Management System print_payroll.php sql injection5.3 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows User Can Disable the Agent6.8 Medium
- schneider electric spacelogic as-b, spacelogic as-p, schneider-electric spacelogic as-b firmware +1 more +3 moreCWE-532: Insertion of Sensitive Information into Log File vulnerability exists that could cause...4.5 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Encrypted Credential Exposure via Log Files5.5 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Privilege Escalation (PE) Vulnerability5.2 Medium
- schneider electric spacelogic as-b, spacelogic as-p, schneider-electric spacelogic as-b firmware +1 more +3 moreCWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists that could cause...6.4 Medium
- palo alto networks prisma cloud compute, paloaltonetworks prisma cloud +1 morePrisma Cloud Compute: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface4.8 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows User Can Disrupt Functionality of the Agent2.0 Low
- Show moreLoading…