CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- convertkit - email marketing\, email newsletter and landing pages, kit (formerly convertkit) – email newsletter, email marketing, membership, subscribers and landing pages +1 moreConvertKit <= 2.4.9 - Missing Authorization5.3 Medium
- posimyth the plus addons for elementor, posimyththemes the plus addons for elementor page builder pro, wordpress plus addon for elementor page builder +2 moreThe Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.6 - Authenticated (Contributor+) Local File Inclusion8.8 High
- wp republic hide dashboard notificationsHide Dashboard Notifications <= 1.3 - Missing Authorization to Authenticated(Contributor+) Plugin Settings Modification4.3 Medium
- wpmudev smush – image optimization, compression, lazy load, webp & cdnSmush – Lazy Load Images, Optimize & Compress Images <= 3.16.4 - Missing Authorization to Resmush List Deletion4.3 Medium
- wen-solutions wp child theme generatorWP Child Theme Generator <= 1.1.1 - Missing Authorization to Unauthenticated Child Theme Creation/Activation5.3 Medium
- saad iqbal license manager for woocommerceLicense Manager for WooCommerce <= 3.0.6 - Improper Authorization to Authenticated(Contributor+) Sensitive Information Exposure6.5 Medium
- codevibrant wp blog post layouts, wp blogpost layouts +1 moreWP Blog Post Layouts <= 1.1.3 - Authenticated (Contributor+) Local File Inlcusion8.8 High
- posimyth the plus addons for elementor, posimyththemes the plus addons for elementor page builder pro +1 moreThe Plus Addons for Elementor Page Builder <= 5.5.6 - Reflected Cross-Site Scripting via WP Login and Register Widget6.1 Medium
- admerc vehicle management systemitsourcecode Vehicle Management System busprofile.php sql injection6.9 Medium
- oretnom23 food ordering management systemSourceCodester Food Ordering Management System user-router.php sql injection5.3 Medium
- oretnom23 food ordering management systemSourceCodester Food Ordering Management System add-users.php sql injection5.3 Medium
- oretnom23 food ordering management systemSourceCodester Food Ordering Management System view-ticket-admin.php sql injection5.3 Medium
- oretnom23 food ordering management systemSourceCodester Food Ordering Management System add-item.php sql injection5.3 Medium
- oretnom23 food ordering management systemSourceCodester Food Ordering Management System Login Panel login.php sql injection6.9 Medium
- oretnom23 simple student attendance systemSourceCodester Simple Student Attendance System student_form.php get_student cross site scripting5.3 Medium
- typo3 events2events2 TYPO3 extension insecure direct object reference (IDOR) vulnerability5.4 Medium
- typo3 friendlycaptcha officialFriendlyCaptcha Plugin for TYPO3 Captcha Check Bypass5.3 Medium
- tessi docubaseCross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a...5.4 Medium
- tessi docubase, docubase document management +1 moreCross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a...5.4 Medium
- tessi docubaseCross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a...5.4 Medium
- tessi docubaseCross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a...5.4 Medium
- No product listedAn issue in BAS-IP AV-01D, AV-01MD, AV-01MFD, AV-01ED, AV-01KD, AV-01BD, AV-01KBD, AV-02D, AV...6.1 Medium
- openkruise kruiseInsecure permissions in kruise v1.6.2 allows attackers to access sensitive data and escalate...10.0 Critical
- tvsmotor tvs connectTVS Motor Company Limited TVS Connect Android v4.6.0 and IOS v5.0.0 was discovered to insecurely...7.5 High
- prestashopIn the module RSI PDF/HTML catalog evolution (prestapdf) <= 7.0.0 from RSI for PrestaShop, a...9.8 Critical
- cmsimple-xh cmsimple xhCMSimple_XH 1.7.6 allows XSS by uploading a crafted SVG document.6.1 Medium
- kostal piko mp plus hmi oemIn Kostal PIKO 1.5-1 MP plus HMI OEM p 1.0.1, the web application for the Solar Panel is...4.8 Medium
- classgraphClassGraph XML External Entity Reference7.5 High
- actualscripts actualanalyzerActual Analyzer through 2014-08-29 allows code execution via shell metacharacters because...9.8 Critical
- distinct intranet serversMultiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10...9.1 Critical
- westermo l210-f2g lynx, l210-f2g firmware +1 moreWestermo L210-F2G Lynx Improper Control of Interaction Frequency8.7 High
- westermo l210-f2g lynx, l210-f2g lynx firmware +1 moreWestermo L210-F2G Lynx Improper Control of Interaction Frequency8.7 High
- westermo l210-f2g lynx, l210-f2g firmware, l210-f2g lynx firmware +2 moreWestermo L210-F2G Lynx Cleartext Transmission of Sensitive Information6.9 Medium
- github enterprise serverA Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that...7.6 High
- parallels desktopParallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability8.2 High
- parallels desktopParallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability7.8 High
- hp poly plantronics hub, plantronics hub, poly plantronics hub +2 morePoly Plantronics Hub Link Following Local Privilege Escalation Vulnerability7.8 High
- microsoft edge, edge (chromium-based) +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.7 Medium
- microsoft edge, edge (chromium-based) +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- lightning network daemon project network daemon, lightningnetwork lnd +1 moreLightning Network Daemon Onion Bomb6.5 Medium
- absolute secure accessCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.064.5 Medium
- absolute secure accessCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.064.5 Medium
- absolute secure accessCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.066.5 Medium
- absolute secure accessCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.064.5 Medium
- absolute secure accessCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.064.5 Medium
- absolute secure accessCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.064.5 Medium
- absolute secure accessInsufficient input validation vulnerability in the Absolute Secure Access Warehouse prior to 13.064.9 Medium
- absolute secure accessCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.065.3 Medium
- absolute secure accessCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.064.5 Medium
- absolute secure accessCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.064.8 Medium
- Show moreLoading…