CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- nextcloud notes, kiteworks security-advisories +1 moreNextcloud Notes app can be tricked into using a received share created before the user logged in4.6 Medium
- nextcloud calendar, kiteworks security-advisories +1 moreNextcloud Calendar's event create can create attachments that link to other websites4.6 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server's read-only users can restore old versions3.5 Low
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Photos' shared albums have no restriction on photo removal3.5 Low
- nextcloud server, kiteworks security-advisories +1 moreNextcloud server allows the by-pass the second factor7.3 High
- kiteworks security-advisories, nextcloud user oidc +1 moreNextcloud user_oidc app's ID4me feature is available even when disabled6.3 Medium
- lnbitsLNbits improperly handles potential network and payment failures when using Eclair backend8.1 High
- rockwell automation factorytalk® view se, rockwellautomation factorytalk view +1 moreRockwell Automation FactoryTalk® View SE v11 Information Leakage Vulnerability via Authentication Restriction8.2 High
- elastic kibanaKibana open redirect issue6.1 Medium
- rockwell automation factorytalk® view se, rockwellautomation factorytalk view +1 moreRockwell Automation FactoryTalk® View SE v12 Information Leakage Vulnerability via Authentication Restriction8.2 High
rubyRocky Linux,rubygem-abrtRocky Linux,rubygem-mysql2Rocky Linux +1 more +3 moreModerate: ruby:3.1 security, bug fix, and enhancement updateNo scorepython39Rocky Linux,python-idnaRocky Linux,CythonRocky Linux +31 more +33 moreImportant: python39:3.9 and python39-devel:3.9 security updateNo scoregolangRocky Linux,go-toolsetRocky Linux,delveRocky Linux +2 moreImportant: go-toolset:rhel8 security updateNo scorebuildahRocky Linux,podmanRocky Linux,runcRocky Linux +17 more +19 moreImportant: container-tools:rhel8 security updateNo scoregstreamer1-plugins-goodRocky LinuxModerate: gstreamer1-plugins-good security updateNo score- trellix intrusion prevention system (ips) managerA vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow...6.8 Medium
- trellix intrusion prevention system (ips) manager, intrusion prevention system manager +1 moreInsecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote...9.8 Critical
- premio folders proFolders Pro <= 3.0.2 - Authenticated(Author+) Arbitrary File Upload via handle_folders_file_upload8.8 High
- premio folders, folders pro, galdub folders – unlimited folders to organize media library folder, pages, posts, file manager +2 moreFolders <= 3.0 and Folders Pro <= 3.0.2 - Directory Traversal via handle_folders_file_upload4.3 Medium
- broadcom symantec siteminderCross-Site Scripting Vulnerability in Symantec SiteMinder Web Agent8.4 High
- brainstorm force projecthuddle client site, brainstormforce surefeedback +1 moreWordPress ProjectHuddle Client Site plugin <= 1.0.34 - Broken Access Control vulnerability4.3 Medium
- grokability, inc. snipe-itBroken Function Level Authorization (BFLA) in snipe/snipe-it7.6 High
- acronis cloud managerLocal privilege escalation due to insecure folder permissions. The following products are...4.4 Medium
- latepoint, latepoint plugin +1 moreLatePoint Plugin <= 4.9.9 - Missing Authorization and Sensitive Information Exposure via IDOR9.1 Critical
- asus dsl-ac51, dsl-ac52, dsl-ac52u +23 more +25 moreASUS Router - Upload arbitrary firmware9.8 Critical
- mattermost, mattermost desktop +1 moreLack of permissions prompting when opening external URLs4.7 Medium
- mattermost, mattermost desktop +1 moreBypass of TCC restrictions on macOS3.8 Low
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleFont Parameter6.4 Medium
- apache airflowApache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache5.5 Medium
- trol intermedia 2clickportalReflected XSS in 2ClickPortal5.3 Medium
- mcnardelli where i was, where i will beWhere I Was, Where I Will Be <= 1.1.1 - Unauthenticated Remote File Inclusion9.8 Critical
- huawei emui, harmonyos +1 moreFunction vulnerabilities in the Calendar module Impact: Successful exploitation of this...5.9 Medium
- huawei emui, harmonyos +1 moreVulnerability of insufficient permission verification in the NearLink module Impact: Successful...4.0 Medium
- huawei emui, harmonyos +1 moreMemory management vulnerability in the Gralloc module Impact: Successful exploitation of this...7.3 High
- huawei emui, harmonyos +1 moreOut-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this...7.9 High
- huawei emui, harmonyos +1 moreMemory management vulnerability in the boottime module Impact: Successful exploitation of this...5.6 Medium
- huawei emui, harmonyos +1 morePrivilege escalation vulnerability in the AMS module Impact: Successful exploitation of this...7.8 High
- scshr hr portalSoar Cloud HR Portal - Insufficient Session Expiration8.8 High
- huawei emui, harmonyos +1 moreVulnerability of unauthorized screenshot capturing in the WMS module Impact: Successful...6.8 Medium
- codecabin wp go maps, wpgmaps wp go maps (formerly wp google maps) +1 moreWP Go Maps (formerly WP Google Maps) <= 9.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- asus download masterASUS Download Master - Buffer Overflow7.2 High
- asus download masterASUS Download Master - OS Command Injection7.2 High
- ravi desai inquiry cartInquiry Cart <= 3.4.2 - Stored XSS via CSRF6.1 Medium
- goprayer prayer, wp prayer, unknown wp prayer ii +2 moreWP Prayer II <= 2.4.7 - Settings Update via CSRF4.3 Medium
- goprayer prayer, unknown wp prayer ii +1 moreWP Prayer II <= 2.4.7 - Email Settings Update via CSRF6.1 Medium
- svgatorSVGator <= 1.2.6 - Stored XSS via SVG Upload4.6 Medium
- andibauer svgmagicSVGMagic <= 1.1 - Stored XSS via SVG Upload5.4 Medium
- labschool social pixelSocial Pixel <= 2.1 - Admin+ Stored XSS4.8 Medium
- omid shamloo azan plugin, wp-master azan +1 moreAZAN Plugin <= 0.6 - Stored XSS via CSRF4.6 Medium
- joshua vandercar amenAmen <= 3.3.1 - Admin+ Stored XSS4.8 Medium
- Show moreLoading…