CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- 3uu shariff wrapperShariff Wrapper <= 4.6.13 - Unauthenticated Local File Inclusion9.8 Critical
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreusb-storage: alauda: Check whether the media is initialized5.5 Medium
- zte zxhn h388x, zxhn h388x firmware +1 morePermission and Access Control Vulnerability in ZTE H388X7.1 High
- bplugins html5 video playerHTML5 Video Player < 2.5.27 - Unauthenticated SQLi6.5 Medium
- lepileppanen responsive video embedResponsive video embed < 0.5.1 - Contributor+ Stored XSS5.4 Medium
- advancedcustomfields advanced custom fields, unknown advanced custom fields (acf), advanced custom fields pro +1 more +3 moreAdvanced Custom Fields < 6.3 - Contributor+ Custom Field Access6.5 Medium
- itsourcecode monbela tourist inn online reservation system, monbela tourist inn online reservation system project tourist inn online reservation system +1 moreitsourcecode Monbela Tourist Inn Online Reservation System login.php sql injection6.9 Medium
- wpzoom addons for elementor, addons for elementor – starter templates & widgets +1 moreWPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget6.4 Medium
- depicter, averta depicter — popup & slider builder +1 moreDepicter <= 3.0.2 - Authenticated (Contributor+) Arbitrary Nonce Generation6.5 Medium
- david lingren media library assistantMedia Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order Parameter8.8 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreExposure of Sensitive Information in mintplex-labs/anything-llm5.3 Medium
- custom field suite project field suite, mgibbs189 custom field suite +1 moreCustom Field Suite <= 2.6.7 - Authenticated (Contributor+) PHP Code Injection via Loop Custom Field8.8 High
- custom field suite project field suite, mgibbs189 custom field suite +1 moreCustom Field Suite <= 2.6.7 - Authenticated (Contributor+) SQL Injection via Term Custom Field8.8 High
- seopress, rainbowgeek seopress – on-site seo & analytics +1 moreSEOPress – On-site SEO <= 7.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Social Image URL6.4 Medium
- extendthemes materialisMaterialis <= 1.1.24 - Missing Authorization to Limited Arbitrary Options Update6.5 Medium
- custom field suite project field suite, mgibbs189 custom field suite +1 moreCustom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title]6.4 Medium
- myrecorp export wp page to static html\/css, recorp export wordpress pages to static html & pdf — static site export +1 moreExport WP Page to Static HTML/CSS <= 2.2.2 - Open Redirect7.1 High
- thimpress wp hotel bookingWP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection10.0 Critical
- crocoblock jetwidgets for elementorJetWidgets For Elementor <= 1.0.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_type and id Parameters6.4 Medium
- webinane lifeline donationLifeline Donation <= 1.2.6 - Authentication Bypass9.8 Critical
- kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 moreYouzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.2.5 - Authenticated (Contributor+) SQL Injection6.5 Medium
- kraftplugins wheel of life: coaching and assessment tool for life coach, wheel of life +1 moreWheel of Life: Coaching and Assessment Tool for Life Coach <= 1.1.7 - Missing Authorization on Several AJAX Endpoints5.4 Medium
- promolayer popup builder, promolayerpopupbuilder promolayer – popup builder & abandonment preventer +1 morePop ups, Exit intent popups, email popups, banners, bars, countdowns and cart savers – Promolayer <= 1.1.0 - Missing Authorization4.3 Medium
- lg supersign cmsXSS vulnerability in LG SuperSign CMS4.8 Medium
- lg supersign cmsXSS vulnerability in LG SuperSign CMS4.8 Medium
- lg supersign cmsXSS vulnerability in LG SuperSign CMS4.8 Medium
- lg electronics supersign cmsPort scanning vulnerability in LG SuperSign CMS4.8 Medium
hdf5OSS-FuzzUNKNOWN READ in H5SL_removeNo scoresendmailDebiansendmail - regression updateNo score- strapiStrapi Server-Side Request Forgery (SSRF)8.6 High
- softnews media group datalife engineAn issue in DataLife Engine v.17.1 and before is vulnerable to SQL Injection in dboption.9.8 Critical
- htopAn issue in htop-dev htop v.2.20 allows a local attacker to cause an out-of-bounds access in the...8.4 High
- moodleCross Site Scripting vulnerability in Moodle CMS v3.10 allows a remote attacker to execute...5.5 Medium
- totolink a6000r firmwareA command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote...8.8 High
- samsung magicianSamsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the...6.3 Medium
- h3c seasql dwsSQL Injection vulnerability in H3C SeaSQL DWS v.2.0 allows a remote attacker to execute arbitrary...6.3 Medium
- oretnom23 computer laboratory management systemA Cross Site Scripting (XSS) vulnerability exists in Computer Laboratory Management System...6.1 Medium
- silversky email serviceCross-site scripting (XSS) vulnerability in SilverSky E-mail service version 5.0.3126 allows...6.1 Medium
- anuj kumar daily expenses management systemDaily Expenses Management System version 1.0, developed by PHP Gurukul, contains a time-based...7.3 High
- js2py disable pyimportjs2py allows remote code execution5.3 Medium
- northern.tech menderNorthern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect...8.8 High
- No product listedNorthern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and...6.5 Medium
- mudler localai, mudler/localai +1 morePath Traversal in mudler/localai7.5 High
- dzikoysk reposilitePath traversal while serving Reposilite javadoc expanded files8.6 High
- dzikoysk reposilitePath traversal in Reposilite javadoc file expansion7.5 High
- dzikoysk reposiliteStored Cross site scripting in Reposilite artifacts7.1 High
- provectus kafka-ui, ui +1 moreRemote code execution via JNDI resolution in JMX metrics collection in Kafka UI8.1 High
- socket socket.ioUnhandled 'error' event in socket.io7.3 High
- linux, linux kernel +1 moreRDMA: Fix use-after-free in rxe_queue_cleanup7.8 High
- linux, linux kernel +1 moreRDMA/irdma: Fix a user-after-free in add_pble_prm7.8 High
- Show moreLoading…