CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- genexis tilgin home gatewayGenexis Tilgin Home Gateway Login cross site scripting6.9 Medium
- bazelbuild intellij plugin, google bazel for android studio, bazel for clion +1 more +3 moreImproper trust check in Bazel Build intellij plugin1.0 Low
- elegant themes diviDivi <= 4.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- axis os, os 2020, os 2022 +2 moreJohan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may...5.3 Medium
- expert invoice project invoice, unknown expert invoice, expert invoice export invoice +2 moreExpert Invoice <= 1.0.2 -Admin+ Stored XSS4.8 Medium
- sharethis simple share buttons adderSimple Share Buttons Adder < 8.5.1 - Admin+ Stored XSS5.4 Medium
- fooplugins foobox, foobox-image-lightbox-premium, unknown lightbox & modal popup wordpress plugin +1 more +3 moreFooBox (Free and Premium) < 2.7.28 - Admin+ Stored XSS4.8 Medium
- fsas technologies inc. fujitsu business application id link manager ii, fujitsu software id link manager, fujitsu software time creator id link manager +1 more +3 moreObservable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR...6.3 Medium
- fujitsu id link manager, fsas technologies inc. fujitsu business application id link manager ii, fujitsu software id link manager +3 more +5 moreAbsolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR...8.6 High
- fsas technologies inc. fujitsu business application id link manager ii, fujitsu software id link manager, fujitsu software time creator id link manager +1 more +3 moreMissing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU...6.5 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains multiple local privilege escalation vulnerabilities due to...7.8 High
- vmware vcenter server, cloud foundation +1 morevCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC...9.8 Critical
- vmware vcenter server, broadcom vmware vcenter server, vmware cloud foundation +2 morevCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC...9.8 Critical
- businessdirectoryplugin business directory, strategy11team business directory plugin, business directory plugin – easy listing directories for wordpress +2 moreBusiness Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injection7.4 High
- tickera, tickera – sell tickets & manage events +1 moreTickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion4.3 Medium
- vowelweb ibtana, ibtana – wordpress website builder +1 moreIbtana - WordPress Website Builder <= 1.2.3.3 - Unauthenticated reCAPTCHA Settings Update5.3 Medium
- start booking scheduling plugin – online booking for wordpress, startbooking scheduling plugin +1 moreScheduling Plugin – Online Booking for WordPress <= 3.5.10 - Missing Authorization to Unauthenticated Service Disconnection6.5 Medium
- redlettuce pdf viewer for elementorPDF Viewer for Elementor <= 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via render6.4 Medium
- averta master slider – responsive touch slider, master slider +1 moreMaster Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode6.4 Medium
- itsourcecode pool of bethesda online reservation systemitsourcecode Pool of Bethesda Online Reservation System uploadImage unrestricted upload6.9 Medium
- code-projects health care hospital management system, health care hospital management system project care hospital management system +1 moreCodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL...8.8 High
- codeprojects health care hospital management system, health care hospital management system project care hospital management system +1 moreCodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL...8.8 High
- dolibarr erp\/crmDolibarr arbitrary file upload vulnerability8.8 High
- health care hospital management system project care hospital management systemMultiple stored cross-site scripting (XSS) vulnerabilities in CodeProjects Health Care hospital...5.4 Medium
- codeprojects health care hospital management system, health care hospital management system project care hospital management system +1 moreCodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL...8.8 High
- code-projects restaurant reservation systemCodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site...6.1 Medium
- code-projects restaurant reservation systemCodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection...5.4 Medium
- duxcms project duxcmsDuxCMS3 v3.1.3 was discovered to contain a SQL injection vulnerability via the keyword parameter...6.0 Medium
- corsair icueCORSAIR iCUE 5.9.105 with iCUE Murals on Windows allows unprivileged users to insert DLL files in...7.8 High
- phpvibePHPVibe Media Upload Page upload-mp3.php unrestricted upload5.3 Medium
- phpvibePHPVibe Global Options Page functionalities.global.php cross site scripting5.1 Medium
- intelbras incontrolIntelbras InControl incontrolWebcam Service unquoted search path8.5 High
- suse rancherRancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec7.1 High
- suse rancherRancher's External RoleTemplates can lead to privilege escalation7.5 High
- rancherRancher's External RoleTemplates can lead to privilege escalation7.5 High
- suse rkerke's credentials are stored in the RKE1 Cluster state ConfigMap9.9 Critical
- suse rancherRancher does not automatically clean up a user deleted or disabled from the configured Authentication Provider8.7 High
- music class enrollment system project class enrollment system, oretnom23 music class enrollment system +1 moreSourceCodester Music Class Enrollment System sql injection5.3 Medium
- mayurik best house rental management systemSourceCodester Best House Rental Management System payment_report.php sql injection5.3 Medium
- itsourcecode bakery online ordering systemitsourcecode Bakery Online Ordering System index.php sql injection6.9 Medium
- gpacGPAC MP4Box loader_xmt.c xmt_node_end use after free4.8 Medium
- gpacGPAC MP4Box dmx_m2ts.c m2tsdmx_on_event null pointer dereference4.8 Medium
- open-quantum-safe oqs-provider, open quantum safe oqs provider +1 moreBuffer overflow in deserialization in oqs-provider8.2 High
- firefly-iiiMFA bypass in oauth flow in Firefly III5.9 Medium
- flipped-aurora gin-vue-adminSQL injection vulnerability in Gin-vue-admin8.8 High
- gpacGPAC MP4Box load_text.c swf_svg_add_iso_sample null pointer dereference4.8 Medium
- gpacGPAC MP4Box isoffin_read.c isoffin_process infinite loop4.8 Medium
- lobehub lobe-chat, lobe chat +1 moreAPI Key Leak in lobe-chat5.7 Medium
- deepjavalibrary djlPath thraversal in DeepJavaLibrary10.0 Critical
- python urllib3, debian linux, netapp active iq unified manager +2 moreProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 Medium
- Show moreLoading…