CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- websockets wsDenial of service when handling a request with many HTTP headers in ws7.5 High
- ingenico estate manager, estate management +1 moreIngenico Estate Manager News Feed messages cross site scripting5.1 Medium
- lighttpdUse-after-free vulnerabilities in lighttpd <= 1.4.505.3 Medium
- labvantage lims, laboratory information management system +1 moreLabVantage LIMS cross site scripting5.3 Medium
- linux, linux kernel +1 moremisc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe()8.4 High
- nasirkhan laravel starternasirkhan Laravel Starter Password Reset forgot-password observable response discrepancy6.3 Medium
- python software foundation cpythonMemory race condition in ssl.SSLContext certificate store methods7.4 High
- python cpythonIncorrect IPv4 and IPv6 private ranges7.5 High
- devolutions remote desktop managerImproper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024...9.8 Critical
- devolutions remote desktop managerImproper removal of sensitive information in data source export feature in Devolutions Remote...4.7 Medium
- checkmkXSS in inventory view6.5 Medium
- freefrom k.k. "freefrom - the nostr client" app for android, "freefrom - the nostr client" app for ios, freefrom kk the nostr client app +2 moreReusing a nonce, key pair in encryption issue exists in "FreeFrom - the nostr client" App...5.3 Medium
- freefrom k.k. "freefrom - the nostr client" app for android, "freefrom - the nostr client" app for ios, freefrom kk the nostr client app +2 moreReliance on obfuscation or encryption of security-relevant inputs without integrity checking...5.3 Medium
- freefrom k.k. "freefrom - the nostr client" app for android, "freefrom - the nostr client" app for ios, freefrom kk the nostr client app +2 moreImproper verification of cryptographic signature issue exists in "FreeFrom - the nostr client"...5.3 Medium
- openfind mailaudit, mailgates, mailaudit 5.0 +3 more +5 moreOpenfind MailGates and MailAudit - OS Command Injection9.8 Critical
- yokogawa centum cs 3000, centum vp +1 moreDLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa...8.5 High
- unknown post grid gutenberg blocks and wordpress blog plugin, wpxpo postx, wpdownloadmanager gutenberg blocks for wordpress download manager +2 morePostX < 4.1.0 - Contributor+ Stored XSS6.8 Medium
- ghozylab popup builder, gallery for social photo +1 moreEasy Notify Lite < 1.1.33 - Contributor+ Stored XSS5.4 Medium
- geovision gv vs04a, gv vs04h, gv-bx130 firmware +56 more +58 moreGeoVision EOL device - OS Command Injection9.8 Critical
- d-link e15, e30, g403 +15 more +17 moreD-Link router - Hidden Backdoor8.8 High
- tecno com.transsion.carlcareImproper permission settings in com.transsion.carlcare9.8 Critical
- d-link e15, e30, g403 +12 more +14 moreD-Link router - Arbitrary File Reading6.5 Medium
- mayurik best house rental management systemSourceCodester Best House Rental Management System admin_class.php login sql injection6.9 Medium
- ibarn project ibarnzhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS)...6.1 Medium
- ibarn project ibarnzhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS)...6.3 Medium
- No product listedA Directory Traversal vulnerability in KasmVNC 1.3.1.230e50f7b89663316c70de7b0e3db6f6b9340489 and...7.7 High
- angeljudesuarez online book store project, itsource online bookstore project +1 moreSQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to...8.4 High
- itsourcecode learning management system, learning management system project in php +1 moreSQL injection vulnerability in processscore.php in Itsourcecode Learning Management System...8.8 High
- vermeg agile reporterA stored cross-site scripting (XSS) in Vermeg Agile Reporter v23.2.1 allows attackers to execute...4.8 Medium
- phpgurukul beauty parlour management systemCross-site scripting (XSS) vulnerability in search-appointment.php in the Admin Panel in...5.9 Medium
- cvc5A segmentation fault in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service (DoS)...7.5 High
- cvc5Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service ...7.5 High
- mi redmi ax6s firmwareRedmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same...5.2 Medium
- mi redmi ax6s firmwareRedmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks. An attacker in...4.1 Medium
- tp-link tl-7dr5130, tl-7dr5130 firmware +1 moreTP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same...6.3 Medium
- tp-link tl-7dr5130, tl-7dr5130 firmware +1 moreTP-LINK TL-7DR5130 v1.0.23 is vulnerable to forged ICMP redirect message attacks. An attacker in...6.3 Medium
- ibarn project ibarnzhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS)...6.1 Medium
- rockoa xinhuXinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS)...6.1 Medium
- rockoa xinhuXinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS)...6.1 Medium
- rockoa xinhu, xinhu rockoa +1 moreXinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS)...6.1 Medium
- strongshopStrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability...7.2 High
- No product listedPHPVOD v4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via...6.1 Medium
- strongshopStrongShop v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability...6.1 Medium
- byondreal accessorA Prototype Pollution issue in byondreal accessor <= 1.0.0 allows an attacker to execute...8.1 High
- alykoshin mini-deep-assignobject-deep-assign Prototype Pollution9.8 Critical
- prototype solution abw badger databaseBadger Database Prototype Pollution7.6 High
- cdr0 sg@cdr0/sg Prototype Pollution9.8 Critical
- akbr update@akbr/update Prototype Pollution5.9 Medium
- apphp js-object-resolverObject Resolver Prototype Pollution8.3 High
- notabotai getsetpropA Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via...9.8 Critical
- Show moreLoading…