CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- amirziai flatten jsonflatten-json Prototype Pollution6.3 Medium
- almela obxobx Prototype Pollution9.8 Critical
- strimza project kafka connect rest apiSTRIMZI incorrect access control9.8 Critical
- zenato puppeteer rendererpuppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit...6.5 Medium
- oretnom23 payroll management systemSourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload...9.8 Critical
- unionman jlink ax1800 firmwareInsecure Permissions vulnerability in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows...9.8 Critical
- jlink ax1800An issue in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to...9.8 Critical
- angeljudesuarez real estate management system, real estate management software estate management software +1 moreitsourcecode Real Estate Management System property-detail.php sql injection6.9 Medium
- admerc gym management systemitsourcecode Gym Management System manage_user.php sql injection5.3 Medium
- fengoffice feng officeFeng Office Workspaces sql injection5.3 Medium
- vantiva mediaaccess dga2232, mediaaccess dga2232 firmware +1 moreVantiva - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6.1 Medium
jflexOSS-FuzzSecurity exception in jflex.core.NFA.insertNFANo score- guoxinled synthesis image systemShenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the...9.8 Critical
- guoxinled synthesis image system, shenzen guoxin synthesis image system +1 moreShenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized user information...7.5 High
- guoxinled synthesis image systemShenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password.9.8 Critical
- guoxinled synthesis image systemShenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the...5.3 Medium
- irodsiRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail...9.8 Critical
- irodsirodsServerMonPerf in iRODS before 4.3.2 attempts to proceed with use of a path even if it is not...7.5 High
- sonarsource sonarqubeSonarQube logs sensitive information4.9 Medium
- langchain experimental, langchain-experimental +1 morelangchain_experimental Code Execution via Python REPL access7.8 High
- xenforoXenforo before 2.2.16 allows code injection.8.8 High
- xenforoXenforo before 2.2.16 allows CSRF.8.8 High
- expressionengineExpressionEngine before 7.4.11 allows XSS.6.1 Medium
- gnu globalhtags in GNU Global through 6.6.12 allows code execution in situations where dbpath (aka -d) is...9.1 Critical
- the algorithms cC/sorting/binary_insertion_sort.c in The Algorithms - C through e5dad3f has a segmentation fault...6.2 Medium
- netatalkNetatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of...9.8 Critical
- netatalkNetatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of...7.5 High
- netatalkNetatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of...9.8 Critical
- gnu wgeturl.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and...9.1 Critical
- color demoiccmaxIn International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in...8.8 High
- gnachman iterm2An issue was discovered in iTerm2 3.5.x before 3.5.2. Unfiltered use of an escape sequence to...9.8 Critical
- iterm2In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus...9.8 Critical
- ghostGhost through 5.85.1 allows remote attackers to bypass an authentication rate-limit protection...9.1 Critical
- progress sitefinityProgress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the...5.4 Medium
- itsourcecode online laundry management system, laundry management system project in php with source code +1 moreitsourcecode Online Laundry Management System admin_class.php sql injection5.3 Medium
- itsourcecode online house rental system, online house rental system project in php with source code +1 moreitsourcecode Online House Rental System manage_user.php sql injection5.3 Medium
- itsourcecode document management system, document management system project in php with source code +1 moreitsourcecode Document Management System edithis.php sql injection5.3 Medium
- itsourcecode online book store, online book store project book store, itsourcecode online book store project in php and mysql with source code +2 moreitsourcecode Online Book Store admin_delete.php sql injection5.3 Medium
- itsourcecode event calendar, learning management system project in php with source code +1 moreitsourcecode Event Calendar process.php regDelete sql injection5.3 Medium
- itsourcecode online book store, isourcecode online book store project in php with source code +1 moreitsourcecode Online Book Store edit_book.php sql injection5.3 Medium
- ibm iIBM i privilege escalation7.4 High
- ibm db2 for i, i +1 moreIBM i information disclosure3.3 Low
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway deleteiscgwrouteconf.php sql injection5.3 Medium
- zkteco zkbio cvsecurity v5000, zkbiosecurity v5000 +1 moreZKTeco ZKBio CVSecurity V5000 Summer Schedule cross site scripting5.1 Medium
- jetmonsters stratum widgets for elementorStratum – Elementor Widgets <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget6.4 Medium
- zkteco zkbio cvsecurity v5000, zkbiosecurity v5000 +1 moreZKTeco ZKBio CVSecurity V5000 Department Section cross site scripting5.1 Medium
- baden03 collapse-o-maticCollapse-O-Matic <= 1.8.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- yotuwp video gallery – youtube playlist, channel gallery by yotuwp, video gallery +1 moreVideo Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.13 - Authenticated (Contributor+) Arbitrary File Inclusion via Shortcode6.4 Medium
- yotuwp video gallery – youtube playlist, channel gallery by yotuwp, video gallery +1 moreVideo Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.13 - Unauthenticated Local File Inclusion9.8 Critical
- 3uu shariff wrapperShariff Wrapper <= 4.6.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- Show moreLoading…