CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- google chromeUse after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to...8.8 High
- google chromeOut of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote...8.8 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to...8.8 High
- prestashop pk customlinksIn the module "Custom links" (pk_customlinks) <= 2.3 from Promokit.eu for PrestaShop, a guest can...9.8 Critical
- promokit pkfacebookIn the module "Facebook" (pkfacebook) <=1.0.1 from Promokit.eu for PrestaShop, a guest can...7.5 High
- prestashop livechatproIn the module "Module Live Chat Pro (All in One Messaging)" (livechatpro) <=8.4.0, a guest can...10.0 Critical
- promokit, promokit pk themesettings +1 moreIn the module "Theme settings" (pk_themesettings) <= 1.8.8 from Promokit.eu for PrestaShop, a...9.8 Critical
- prestashop loginascustomerproIn the module "Login as customer PRO" (loginascustomerpro) <1.2.7 from Weblir for PrestaShop, a...7.5 High
- prestashop channableIn the module "Channable" (channable) up to version 3.2.1 from Channable for PrestaShop, a guest...9.8 Critical
- bamboosolutions bulk exportIn the module "Bulk Export products to Google Merchant-Google Shopping" (bagoogleshopping) up to...6.3 Medium
- prestashop helpdeskIn the module "Help Desk - Customer Support Management System" (helpdesk) up to version 2.4.0...10.0 Critical
- prestashopmodules jamarketplaceIn the module "JA Marketplace" (jamarketplace) up to version 9.0.1 from JA Module for PrestaShop,...9.8 Critical
- actiontec wcb6200q, wcb6200q firmware +1 moreActiontec WCB6200Q uh_get_postdata_withupload Stack-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- actiontec wcb6200q, wcb6200q firmware +1 moreActiontec WCB6200Q Cookie Format String Remote Code Execution Vulnerability8.8 High
- actiontec wcb6200q, wcb6200q firmware +1 moreActiontec WCB6200Q Multipart Boundary Stack-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- actiontec wcb6200q, wcb6200q firmware +1 moreActiontec WCB6200Q uh_tcp_recv_header Buffer Overflow Remote Code Execution Vulnerability8.8 High
- actiontec wcb6200q, wcb6200q firmware +1 moreActiontec WCB6200Q uh_tcp_recv_content Buffer Overflow Remote Code Execution Vulnerability8.8 High
- maxfoundry maxgalleriaMaxGalleria <= 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via maxgallery_thumb Shortcode6.4 Medium
- spa-cart, spa-cart spa-cartcms +1 morespa-cartcms Username login observable behavioral discrepancy6.3 Medium
- spa-cart, spa-cart spa-cartcms +1 morespa-cartcms Checkout Page checkout behavioral workflow6.9 Medium
- moodle, fedoraproject fedora +1 moremoodle: QR login key and auto-login key for the Moodle mobile app should be generated as separate keys5.4 Medium
- moodle, fedoraproject fedora +1 moremoodle: CSRF risks due to misuse of confirm_sesskey8.8 High
- moodlemoodle: HTTP authorization header is preserved between "emulated redirects"7.5 High
- moodle, fedoraproject fedora +1 moremoodle: stored XSS via calendar's event title when deleting the event6.1 Medium
- moodle, fedoraproject fedora +1 moremoodle: BigBlueButton web service leaks meeting joining information to users who should not have access5.4 Medium
- linux, linux kernel +1 moreusb: dwc3: Wait unconditionally after issuing EndXfer command7.8 High
- linux, linux kernel +1 moreRevert "media: v4l2-ctrls: show all owned controls in log_status"5.5 Medium
- linux, linux kernel +1 moreKEYS: trusted: Do not use WARN when encode fails5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenet/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP7.8 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +23 more +25 moreA potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 ...8.2 High
- pocketbasePassword auth and OAuth2 unverified email linking5.4 Medium
- atlassian jira core data center, jira core, jira data center +1 more +3 moreThis High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0,...7.4 High
- mindersec minderDenial of service from maliciously configured Git repository in Minder5.7 Medium
- fortra filecatalyst direct, filecatalyst workflow +1 moreHard-coded password in FileCatalyst Direct 3.8.10 Build 138 TransferAgent (and earlier) and FileCatalyst Workflow 5.1.6 Build 130 (and earlier)7.8 High
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite improper input validation7.1 High
- clive 21 simple online hotel reservation systemitsourcecode Simple Online Hotel Reservation System edit_room.php unrestricted upload6.9 Medium
- clive 21 simple online hotel reservation systemitsourcecode Simple Online Hotel Reservation System add_room.php unrestricted upload6.9 Medium
- itsourcecode monbela tourist inn online reservation systemitsourcecode Monbela Tourist Inn Online Reservation System controller.php unrestricted upload6.9 Medium
- itsourcecode pool of bethesda online reservation systemitsourcecode Pool of Bethesda Online Reservation System index.php sql injection6.9 Medium
- itsourcecode pool of bethesda online reservation systemitsourcecode Pool of Bethesda Online Reservation System login.php sql injection6.9 Medium
- red hat build of keycloak, build of keycloak 22, single sign-on 7 +4 more +6 moreKeycloak: leak of configured ldap bind credentials through the keycloak admin console2.7 Low
- dalek curve25519-dalekcurve25519-dalek has timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub`2.9 Low
- itsourcecode magbanua beach resort online reservation systemitsourcecode Magbanua Beach Resort Online Reservation System controller.php unrestricted upload6.9 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System addmeasurement.php sql injection5.3 Medium
- jetbrains hubIn JetBrains Hub before 2024.2.34646 stored XSS via project description was possible3.5 Low
- jetbrains youtrackIn JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the...6.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site5.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files...4.3 Medium
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 for rhel 8, directory server 11.9 for rhel 8 +9 more +11 more389-ds-base: malformed userpassword hash may cause denial of service5.7 Medium
- Show moreLoading…