CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreHardcoded root password7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp)Leak of authentication sessions in secure logs6.8 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp)Leak of authentication sessions in secure logs6.8 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLocal Privilege Escalation and Remote Code Execution using insecure permissions7.7 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 morePasswords are stored in clear-text logs.6.2 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLocal Privilege Escalation and Remote Code Execution7.4 High
- asus rt-ac68u, rt-ac68u firmware, rt-ac86u +11 more +13 moreASUS Router - Improper Authentication9.8 Critical
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLocal Privilege Escalation and Remote Code Execution using insecure permissions7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLocal Privilege Escalation and Remote Code Execution using insecure permissions7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLocal Privilege Escalation and Remote Code Execution using insecure LD_LIBRARY_PATH7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLocal Privilege Escalation and Remote Code Execution using insecure LD_PRELOAD7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLocal Privilege Escalation and Remote Code Execution using insecure PATH7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLocal Privilege Escalation and Remote Code Execution using snmpd7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLack of privileges separation6.7 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreMultiple Post-authenticated Remote Code Execution9.8 Critical
- asus rt-ac68u, rt-ac68u firmware, rt-ac86u +11 more +13 moreASUS Router - Stack-based Buffer Overflow7.2 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 morePre-authenticated Remote Code Execution9.8 Critical
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 morePre-authenticated Remote Code Execution9.8 Critical
- toshiba tec corporation tec e-studio multi-function peripheral (mfp)Pre-authenticated XXE injection5.9 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +40 more +42 morePre-authenticated Time-Based Blind XXE injection5.9 Medium
- mayurik best online news portalSourceCodester Best Online News Portal index.php sql injection5.3 Medium
- itsourcecode online bookstore, online book store project, phpgurukul online book store +2 moreitsourcecode Online Bookstore book.php sql injection6.9 Medium
- itsourcecode online bookstore, online book store project, online book store project book store +2 moreitsourcecode Online Bookstore bookPerPub.php sql injection6.9 Medium
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 8.1.16 - Broken Access Control vulnerability5.3 Medium
- angeljudesuarez online house rental systemitsourcecode Online House Rental System manage_user.php sql injection5.3 Medium
- business directory team directory plugin, businessdirectoryplugin business directory +1 moreWordPress Business Directory Plugin – Easy Listing Directories for WordPress plugin <= 6.3.9 - Broken Access Control vulnerability5.4 Medium
- writersystem woocommerce easy duplicate productWordPress WooCommerce Easy Duplicate Product plugin <= 0.3.0.7 - Broken Access Control vulnerability4.3 Medium
- google chromeInappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote...9.6 Critical
- itsourcecode payroll management systemItsourcecode Payroll Management System 1.0 is vulnerable to SQL Injection in payroll_items.php...9.8 Critical
- trendnet tew-814dap, tew-814dap firmware +1 moreTRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow vulnerability via...8.8 High
- trendnet tew-814dap, tew-814dap firmware +1 moreTRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a hardcoded password vulnerability...8.8 High
- trendnet tew-814dap, tew-814dap firmware +1 moreTRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow vulnerability via...8.8 High
- trendnet tew-814dap firmwareTRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a command injection vulnerability...9.1 Critical
- trendnet tew-814dap, tew-814dap firmware +1 moreTRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow via the submit-url...8.8 High
- totolink a3700r firmwareTOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in...8.8 High
- totolink a3700r firmwareTOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via eport in the...8.8 High
- totolink a3700r, a3700r firmware +1 moreTOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in...9.8 Critical
- minthcmIn MintHCM 4.0.3, a registered user can execute arbitrary JavaScript code and achieve a reflected...6.1 Medium
- gnu libcdioBuffer Overflow Vulnerability in libcdio v2.1.0 allows an attacker to execute arbitrary code via...8.4 High
- aegon life insurance management systemA cross-site scripting (XSS) vulnerability in Aegon Life v1.0 allows attackers to execute...6.1 Medium
- projectworlds life insurance management systemAn arbitrary file upload vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary...8.1 High
- projectworlds life insurance management systemAegon Life v1.0 was discovered to contain a SQL injection vulnerability via the client_id...8.8 High
- terra-master tosHardcoded credentials in TerraMaster TOS firmware through 5.1 allow a remote attacker to...9.4 Critical
- lb-link bl-w1210m, bl-w1210m firmware +1 moreLB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the...8.1 High
- lb-link bl-w1210m, bl-w1210m firmware +1 moreLB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's...9.8 Critical
- lb link bl w1210mIncorrect access control in the UART/Serial interface on the LB-LINK BL-W1210M v2.0 router allows...9.8 Critical
- lb-link bl-w1210m firmwareAn issue in the LB-LINK BL-W1210M v2.0 router allows attackers to bypass password complexity...6.3 Medium
- mgt-commerce cloudpanelDirectory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4.0 allows a remote...8.8 High
- nervythemes sku label changer for woocommerceWordPress SKU Label Changer For WooCommerce plugin <= 3.0 - Broken Access Control vulnerability6.5 Medium
- pressified sendpress, sendpress newsletters, unknown sendpress newsletters +2 moreWordPress SendPress Newsletters plugin <= 1.23.11.6 - Broken Access Control vulnerability5.3 Medium
- Show moreLoading…