CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- linux, linux kernel +1 morei2c: virtio: fix completion handling7.8 High
- linux, linux kernel +1 morenfc: fix segfault in nfc_genl_dump_devices_done5.5 Medium
- linux, linux kernel +1 moremac80211: validate extended element ID is present8.1 High
- linux, linux kernel +1 moredrm/msm: Fix null ptr access msm_ioctl_gem_submit()5.5 Medium
- linux, linux kernel +1 morefirmware: arm_scpi: Fix string overflow in SCPI genpd driver7.8 High
- revolution slider slider revolutionWordPress Slider Revolution plugin < 6.7.0 - Unauthenticated Broken Access Control vulnerability7.1 High
- linux, linux kernel +1 morebpf: Fix kernel address leakage in atomic fetch5.5 Medium
- linux, linux kernel +1 morebpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg5.5 Medium
- linux, linux kernel +1 morenet: netlink: af_netlink: Prevent empty skb by adding a check on len.5.5 Medium
- linux, linux kernel +1 morevduse: fix memory corruption in vduse_dev_ioctl()7.8 High
- linux, linux kernel +1 morevduse: check that offset is within bounds in get_config()7.1 High
- linux, linux kernel +1 moreaudit: improve robustness of the audit queue handling4.4 Medium
- linux, linux kernel +1 moremac80211: track only QoS data frames for admission control5.5 Medium
- linux, linux kernel +1 moretee: amdtee: fix an IS_ERR() vs NULL bug5.5 Medium
- linux, linux kernel +1 moredm btree remove: fix use after free in rebalance_children()7.8 High
- linux, linux kernel +1 morebtrfs: use latest_dev in btrfs_show_devname4.7 Medium
- linux, linux kernel +1 moresch_cake: do not call cake_destroy() from cake_init()7.8 High
- linux, linux kernel +1 moreinet_diag: fix kernel-infoleak for UDP sockets5.5 Medium
- linux, linux kernel +1 morenet: hns3: fix use-after-free bug in hclgevf_send_mbx_msg7.8 High
- linux, linux kernel +1 morenet/sched: sch_ets: don't remove idle classes from the round-robin list5.5 Medium
- linux, linux kernel +1 moremptcp: never allow the PM to close a listener subflow5.5 Medium
- linux, linux kernel +1 moremptcp: clear 'kern' flag from fallback sockets5.5 Medium
- linux, linux kernel +1 morenet: stmmac: fix tc flower deletion for VLAN priority Rx steering5.5 Medium
- revolution slider slider revolutionWordPress Slider Revolution plugin < 6.7.11 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- linux, linux kernel +1 moremptcp: remove tcp ulp setsockopt support5.5 Medium
- linux, linux kernel +1 moremptcp: fix deadlock in __mptcp_push_pending()5.5 Medium
- linux, linux kernel +1 moreigbvf: fix double free in `igbvf_probe`7.8 High
- linux, linux kernel +1 moresit: do not call ipip6_dev_free() from sit_init_net()7.8 High
- linux, linux kernel +1 morenet: systemport: Add global locking for descriptor lifecycle9.8 Critical
- linux, linux kernel +1 morenet: stmmac: dwmac-rk: fix oob read in rk_gmac_setup5.5 Medium
- linux, linux kernel +1 morebtrfs: fix memory leak in __add_inode_ref()5.5 Medium
- linux, linux kernel +1 moreiocost: Fix divide-by-zero on donation from low hweight cgroup5.5 Medium
- linux, linux kernel +1 moremedia: mxl111sf: change mutex_init() location5.5 Medium
- linux, linux kernel +1 moreUSB: core: Make do_proc_control() and do_proc_bulk() killable5.5 Medium
- linux, linux kernel +1 morescsi: scsi_debug: Fix type in min_t to avoid stack OOB7.1 High
- linux, linux kernel +1 moreovl: fix warning in ovl_create_real()5.5 Medium
- linux, linux kernel +1 morescsi: scsi_debug: Don't call kcalloc() if size arg is zero5.5 Medium
- linux, linux kernel +1 moreio-wq: check for wq exit after adding new worker task_work7.8 High
- linux, linux kernel +1 morescsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()7.8 High
- spring by vmware tanzu cloud skipperArbitrary File Write Vulnerability in Spring Cloud Data Flow8.8 High
- gamipressWordPress GamiPress plugin <= 2.5.6 - CSRF Leading to Settings Change Vulnerability5.4 Medium
- hennessey attorneyWordPress Attorney theme <= 3 - Unauth. Arbitrary Content Deletion vulnerability6.5 Medium
- theme-fusion avadaWordPress Avada theme <= 7.11.1 - Auth. Unrestricted Zip Extraction vulnerability9.1 Critical
- thimpress learnpressWordPress LearnPress plugin <= 4.2.3 - Unauthenticated Broken Access Control vulnerability7.3 High
- thimpress learnpressWordPress LearnPress plugin <= 4.2.3 - Authenticated Broken Access Control vulnerability7.6 High
- ninjaforma ninja formsWordPress Ninja Forms plugin <= 3.6.25 - Subscriber+ Broken Access Control vulnerability7.6 High
- artbees jupiter x core, jupiterx core +1 moreWordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability5.4 Medium
- themefusion fusion builderWordPress Avada Builder plugin <= 3.11.1 - Authenticated Broken Access Control vulnerability5.4 Medium
- linux, linux kernel +1 moreALSA: timer: Set lower bound of start tick time5.5 Medium
- linux, linux kernel +1 morekunit/fortify: Fix mismatched kvalloc()/vfree() usage5.5 Medium
- Show moreLoading…