CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Improper Input Validation (CWE-20)3.5 Low
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- elespare, elespare – news, magazine and blog addons for elementor +1 moreElespare – Blog, Magazine and Newspaper Addons for Elementor with Templates, Widgets, Kits, and Header/Footer Builder. One Click Import: No Coding Required! <= 3.1.2 - Authenticated (Contributor+) Sto…6.4 Medium
- wpbakery page builder, wpbakery page builder clipboard project page builder clipboard +1 moreWPBakery Page Builder <= 7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via VC Single Image link attribute6.4 Medium
- tibco ebxTIBCO EBX File Inclusion Vulnerability5.3 Medium
- premio floating chat widget, unknown floating chat widget: contact chat icons, whatsapp, telegram chat, line messenger, wechat, email, sms, call button, premio chaty +2 moreFloating Chat Widget < 3.2.3 - Admin+ Stored XSS4.8 Medium
- unknown search & replace, wp-media search \& replace, wp media sas seach and replace +2 moreSearch & Replace < 3.2.2 - Admin+ SQL injection7.2 High
- salephpscripts web directory freeWeb Directory Free < 1.7.0 - Unauthenticated SQL Injection9.8 Critical
- themify builder, themifyme themify builder +1 moreThemify Builder < 7.5.8 - Open Redirect6.1 Medium
- fooplugins foogallery, unknown foogallery-premium +1 moreFooGallery < 2.4.15 - Author+ Stored XSS5.4 Medium
- citrix hypervisor, xenserver +1 morePotential Denial of Service affecting XenServer and Citrix Hypervisor6.0 Medium
- ideabox powerpack addons for elementor, ideaboxcreations powerpack addons for elementor (free widgets, extensions and templates) +1 morePowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Effects Widget6.4 Medium
- brainstorm force ultimate addons for elementor, brainstormforce elementor - header\, footer \& blocks template +1 moreElementor Header & Footer Builder <= 1.6.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Title Widget6.4 Medium
- codename065 download managerDownload Manager <= 3.2.89 - Improper Authorization via protectMediaLibrary7.5 High
- dokan, dokan pro, wedevs dokan pro +2 moreDokan Pro <= 3.10.3 - Unauthenticated SQL Injection10.0 Critical
arduinojsonOSS-FuzzHeap-buffer-overflow in ArduinoJson::V704HB22::detail::MsgPackDeserializer<ArduinoJson::V704HB22::detailNo score- alcasarALCASAR before 3.6.1 allows still_connected.php remote code execution.9.8 Critical
- alcasarALCASAR before 3.6.1 allows email_registration_back.php remote code execution.9.8 Critical
- alcasarALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php.9.6 Critical
- Show moreLoading…