CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- authzed spicedbPermissions processing error in spacedb3.7 Low
github.com/traefik/traefikGo,github.com/traefik/traefik/v2Go,github.com/traefik/traefik/v3Go +2 moreACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability6.8 Medium- xwiki, xwiki xwiki-platform +1 moreDisabling a user account changes its author, allowing RCE from user account in XWiki9.1 Critical
- drakkan sftpgoInsufficient access control for password reset in sftpgo5.4 Medium
- itsourcecode banking management system, banking management system project in php +1 moreitsourcecode Banking Management System admin_class.php sql injection6.9 Medium
- itsourcecode tailoring management system, tailoring management system in php with source code +1 moreitsourcecode Tailoring Management System orderadd.php sql injection5.3 Medium
- itsourcecode tailoring management system, tailoring management system in php with source code +1 moreitsourcecode Tailoring Management System editmeasurement.php sql injection5.3 Medium
- itsourcecode vehicle management system, vehicle management system project in php and mysql with source code +1 moreitsourcecode Vehicle Management System driverprofile.php sql injection6.9 Medium
- angeljudesuarez loan management systemitsourcecode Loan Management System Login Page login.php sql injection6.9 Medium
- red hat eap 8.0.1, build of apache camel - hawtio 4, build of apache camel 4.4.1 for spring boot 3.2 +11 more +13 moreUndertow: url-encoded request path information can be broken on ajp-listener7.5 High
- angeljudesuarez student management systemitsourcecode Student Management System Login Page login.php sql injection6.9 Medium
- angeljudesuarez farm management system, farm management system project management system +1 moreitsourcecode Farm Management System Login index.php sql injection6.9 Medium
- averta master sliderWordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ux-themes flatsomeFlatsome <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- tenda a301, tendacn a301 firmware +1 moreTenda A301 WifiExtraSet fromSetWirelessRepeat stack-based overflow8.7 High
- parsec automation tracksysParsec Automation TrackSYS pagedefinition direct request6.9 Medium
- ibm websphere application serverIBM WebSphere Application Server identity spoofing8.8 High
- ruijie rg-uac, rg-uac firmware +1 moreRuijie RG-UAC sub_commit.php os command injection5.3 Medium
- kiuwan local analyzer, sast local analyzer +1 moreSensitive Data Stored Insecurely in Kiuwan SAST Local Analyzer7.8 High
- kiuwan sastInsecure Direct Object Reference in Kiuwan SAST6.5 Medium
- kiuwan sastReflected Cross-Site-Scripting in Kiuwan SAST6.5 Medium
- ruijie rg-uac, rg-uac firmware +1 moreRuijie RG-UAC commit.php os command injection5.3 Medium
- kiuwan local analyzer, sast +1 moreXML External Entity Injection in Kiuwan SAST7.2 High
- linux, linux kernel +1 moreisdn: cpai: check ctr->cnr to avoid array index out of bound7.8 High
- ruijie rg-uac, rg-uac firmware, rg uac +2 moreRuijie RG-UAC commit.php get_ip_addr_details os command injection5.3 Medium
- linux, linux kernel +1 moredrm/amdgpu: Fix possible null pointer dereference7.5 High
- ruijie rg-uac, rg-uac firmware +1 moreRuijie RG-UAC reboot_commit.php os command injection5.3 Medium
- ez-suite ez-partnerEZ-Suite EZ-Partner Forgot Password cross site scripting6.9 Medium
- linux, linux kernel +1 moredrm/vmwgfx: Fix stale file descriptors on failed usercopy7.8 High
- linux, linux kernel +1 morebpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()5.5 Medium
- linux, linux kernel +1 moreefi: runtime: avoid EFIv2 runtime services on Apple x86 machines5.5 Medium
- linux, linux kernel +1 moretracing/histogram: Fix a potential memory leak for kstrdup()5.5 Medium
- linux, linux kernel +1 moreceph: properly put ceph_string reference after async create attempt5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU.5.5 Medium
- linux, linux kernel +1 moreKVM: LAPIC: Also cancel preemption timer during SET_LAPIC5.5 Medium
- linux, linux kernel +1 moreKVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}5.3 Medium
- linux, linux kernel +1 moreKVM: x86: Forcibly leave nested virt when SMM state is toggled5.5 Medium
- linux, linux kernel +1 morearm64: extable: fix load_unaligned_zeropad() reg indices7.8 High
- linux, linux kernel +1 moreusb: xhci-plat: fix crash when suspend if remote wake enable5.3 Medium
- linux, linux kernel +1 moreUSB: core: Fix hang in usb_kill_urb by adding memory barriers7.1 High
- linux, linux kernel +1 morerpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev7.8 High
- linux, linux kernel +1 morescsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()5.5 Medium
- linux, linux kernel +1 morenet: fix information leakage in /proc/net/ptype7.1 High
- linux, linux kernel +1 moredrm/msm/dsi: invalid parameter check in msm_dsi_phy_enable5.5 Medium
- linux, linux kernel +1 morepowerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.065.5 Medium
- linux, linux kernel +1 morephylib: fix potential use-after-free7.8 High
- linux, linux kernel +1 moreblock: fix memory leak in disk_register_independent_access_ranges5.5 Medium
- linux, linux kernel +1 morepowerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending5.5 Medium
- linux, linux kernel +1 morenet/smc: Transitional solution for clcsock race issue7.8 High
- linux, linux kernel +1 morehwmon: (nct6775) Fix crash in clear_caseopen5.5 Medium
- Show moreLoading…