CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- cvat computer vision annotation tool, cvat +1 moreCVAT's export and backup-related API endpoints are susceptible to CSRF7.1 High
- cvat computer vision annotation tool, cvat-ai cvat +1 moreCVAT SSRF via custom cloud storage endpoints7.1 High
- crate, cratedb +1 moreClient initialized Session-Renegotiation DoS5.3 Medium
- ibm maximo application suite, maximo asset management +1 moreIBM Maximo Application Suite information disclosure3.3 Low
- boxy studio cookedWordPress Cooked Plugin - Authenticated (Contributor+) Persistent Cross-Site Scripting Vulnerability5.4 Medium
- ibm jazz reporting serviceIBM Jazz Reporting Service information disclosure4.4 Medium
- dell alienware area 51m r2 firmware, alienware aurora r11 firmware, alienware aurora r12 firmware +20 more +22 moreDell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally...7.5 High
- dell alienware area 51m r2 firmware, alienware aurora r10 firmware, alienware aurora r11 firmware +23 more +25 moreDell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally...7.5 High
- dell alienware area 51m r2 firmware, alienware aurora r10 firmware, alienware aurora r11 firmware +23 more +25 moreDell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally...7.5 High
- verint wfo, workforce optimization +1 moreVerint - CWE-434: Unrestricted Upload of File with Dangerous Type8.8 High
- verint wfo, workforce optimization +1 moreVerint - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.1 Medium
- dell alienware area 51m r2 firmware, alienware aurora r10 firmware, alienware aurora r11 firmware +21 more +23 moreDell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally...5.1 Medium
- adobe acrobat mobile sign android, acrobat reader +1 moreAcrobat Android : OverSecured Finding : Access to arbitrary* content providers via insecure Intent configuration5.5 Medium
- adobe acrobat mobile sign android, acrobat reader +1 moreAcrobat Android : OverSecured Finding : Overwriting arbitrary files via attacker-controlled output file paths7.5 High
- adobe coldfusionColdFusion | Weak Cryptography for Passwords (CWE-261)5.5 Medium
- adobe coldfusionColdFusion CFDOCUMENT file retrieval / access control bypass7.5 High
- adobe creative cloud desktop, creative cloud desktop application +1 moreAdobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation7.1 High
- adobe substance3d - stager, substance 3d stager +1 moreZDI-CAN-24054: Adobe Substance 3D Stager SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe framemaker publishing serverTenable Vulnerability Disclosure | Sensitive Information Disclosure Via Fake FMPS Worker9.8 Critical
- adobe framemaker publishing serverTenable Vulnerability Disclosure | API Auth Bypass10.0 Critical
- adobe photoshop, photoshop desktop +1 moreAdobe Photoshop PDF File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- microsoft telemetry dashboard, dell wyse 5070 thin client +1 moreTelemetry Dashboard v1.0.0.8 for Dell ThinOS 2402 contains a sensitive information disclosure...7.5 High
- adobe media encoderAdobe Media Encoder 2024 TGA File parsing memory corruption5.5 Medium
- adobe commerce, commerce webhooks, magento +2 moreInsecure Direct Object Reference - An attacker can able to erase the victim quote details5.3 Medium
- adobe commerce, commerce webhooks, magento +2 moreCustomer account takeover via web API call & subsequent password reset8.1 High
- adobe commerce, commerce webhooks, magento +2 moreAdobe Commerce | Improper Input Validation (CWE-20)7.2 High
- adobe commerce, commerce webhooks, magento +2 moreSSRF in service connector6.5 Medium
- adobe commerce, commerce webhooks, magento +2 moreRCE in the Adobe Commerce Webhook module through a legit webhook definition7.2 High
- adobe commerce, commerce webhooks, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)5.3 Medium
- adobe commerce, commerce webhooks, magento +2 moreStored Cross Site Scripting in Order Comment4.8 Medium
- adobe commerce, commerce webhooks, magento +2 moreAdobe Commerce | Improper Authorization (CWE-285)8.2 High
- adobe commerce, commerce and magento open source, commerce webhooks +1 more +3 moreXXE can expose crypt key and other secrets granting full admin access9.8 Critical
- adobe commerce, commerce webhooks, magento +1 more +3 moreLarge attack surface through legit webhook usage in Adobe Commerce9.1 Critical
- trellix edr xconsole, xconsole, edr ui (xconsole) +2 moreAn Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker...4.1 Medium
- codexpert codesigner, codesigner – all in one elementor woocommerce builder +1 moreCoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Unauthenticated PHP Object Injection9.0 Critical
- plugin-planet dashboard widgets suiteDashboard Widgets Suite <= 3.4.3 - Reflected Cross-Site Scripting6.1 Medium
- wp-ecommerce easy wp smtp, smub easy wp smtp – wordpress smtp and email logs: gmail, office 365, outlook, custom smtp, and more +1 moreEasy WP SMTP by SendLayer <= 2.3.0 - Exposure of Sensitive Information via the UI2.7 Low
- wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 moreEmbedPress <= 3.9.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via PDF Widget URL6.4 Medium
- adobe auditionAdobe Audition 2024 MP4 File Parsing Null Pointer Dereference5.5 Medium
- adobe auditionAdobe Audition 2024 M2V File Parsing Memory corruption5.5 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Improper Input Validation (CWE-20)3.5 Low
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- Show moreLoading…