CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- linux, linux kernel +1 morevfio/pci: fix potential memory leak in vfio_intx_enable()5.5 Medium
- linux, linux kernel +1 moreiio: adc: PAC1934: fix accessing out of bounds array index7.8 High
- linux, linux kernel +1 morewatchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger7.8 High
- linux, linux kernel +1 moredmaengine: idxd: Avoid unnecessary destruction of file_ida7.8 High
- linux, linux kernel +1 moreusb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.7.8 High
- linux, linux kernel +1 morestm class: Fix a double free in stm_register_device()7.8 High
- linux, linux kernel +1 morefuse: clear FR_SENT when re-adding requests into pending list7.8 High
- linux, linux kernel +1 morefs/ntfs3: Check 'folio' pointer for NULL5.5 Medium
- linux, linux kernel +1 morefs/ntfs3: Use 64 bit variable to avoid 32 bit overflow5.5 Medium
- linux, linux kernel +1 morefs/ntfs3: Use variable length array instead of fixed size7.8 High
- linux, linux kernel +1 moredrm/msm/dpu: Add callback function pointer check before its call5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moremedia: stk1160: fix bounds checking in stk1160_copy_video()7.1 High
- linux, linux kernel +1 moredrm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails5.5 Medium
- linux, linux kernel +1 moreALSA: hda/cs_dsp_ctl: Use private_free for control cleanup7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenfc: nci: Fix uninit-value in nci_rx_work8.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moretcp: Fix shift-out-of-bounds in dctcp_update_alpha().5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moretls: fix missing memory barrier in tls_init5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 morenet: relax socket state check at accept time.5.5 Medium
- linux, linux kernel +1 morenull_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 morenetfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()7.8 High
- linux, linux kernel +1 morenet/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenetfilter: tproxy: bail out if IP has been disabled on the device5.5 Medium
- linux, linux kernel +1 morenet/sched: taprio: extend minimum interval restriction to entire cycle too5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moreipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound5.5 Medium
- linux, linux kernel +1 moreefi: libstub: only free priv.runtime_map when allocated7.8 High
- linux, linux kernel +1 moregenirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline5.5 Medium
- linux, linux kernel +1 moreInput: cyapa - add missing input core locking to suspend/resume functions4.4 Medium
- themify product filter, woocommerce product filter, themifyme themify – woocommerce product filter +2 moreThemify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameter9.8 Critical
- ibm iIBM i privilege escalation7.8 High
- vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 moreAppointment Booking and Online Scheduling <= 4.4.2 - Reflected Cross-Site Scripting6.1 Medium
- kubiq wp svg imagesWP SVG Images <= 4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG6.4 Medium
- ameliabooking booking for appointments and events calendar – amelia, tms-outsource amelia, amelia booking for appointments and events calendar – amelia pro +2 moreAmelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- eset safe server, small business security, internet security +13 more +15 moreLocal Privilege Escalation in Quarantine of ESET products for Windows7.3 High
- wpmudev branda, branda – white label & branding, free login page customizer +1 moreBranda – White Label WordPress, Custom Login Page Customizer <= 3.4.17 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload6.4 Medium
- cozmoslabs user profile pictureUser Profile Picture <= 2.6.1 - Authenticated (Author+) Insecure Direct Object Reference to Profile Picture Update4.3 Medium
- unknown paypal pay now, buy now, donation and cart buttons shortcode, mohsinrasool paypal pay now\, buy now\, donation and cart buttons shortcode, wordpress paypal buy now button +3 more +5 morePayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Contributor+ Stored XSS5.4 Medium
- unknown paypal pay now, buy now, donation and cart buttons shortcode, mohsin rasool paypal pay now buy now donation and cart buttons shortcode, mohsinrasool paypal pay now\, buy now\, donation and cart buttons shortcode +2 morePayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Admin+ Stored XSS4.8 Medium
- devnath verma widget bundleWidget Bundle <= 2.0.0 - Admin+ Stored XSS4.8 Medium
- devnath verma widget bundle, siteorigin widgets bundle +1 moreWidget Bundle <= 2.0.0 - Widget Disable/Enable via CSRF4.3 Medium
- erikeng google cseGoogle CSE <= 1.0.7 - Admin+ Stored XSS4.8 Medium
- devnath verma widget bundleWidget Bundle <= 2.0.0 - Unauthencated Reflected XSS6.1 Medium
- onetarek wp logs book, wp-logs-book +1 moreWP Logs Book <= 1.0.1 - Unauthenticated Stored XSS5.4 Medium
- onetarek wp logs book, wp-logs-book +1 moreWP Logs Book <= 1.0.1 - Log Clearing via CSRF4.3 Medium
- onetarek wp logs book, wp-logs-book +1 moreWP Logs Book <= 1.0.1 - Disable Logging via CSRF4.3 Medium
- dmonnier cssable countdownCSSable Countdown <= 1.5 - Admin+ Stored XSS4.8 Medium
- unknown cb (legacy), wielebenwir commonsbooking +1 moreCB (legacy) <= 0.9.4.18 - Code/Timeframe/Booking Deletion via CSRF6.5 Medium
- unknown cb (legacy), wielebenwir commonsbooking +1 moreCB (legacy) <= 0.9.4.18 - Admin+ Stored XSS4.8 Medium
- unknown dop shortcodes, dotonpaper dot on paper shortcodes +1 moreDOP Shortcodes <= 1.2 - Contributor+ Stored XSS via Shortcode5.4 Medium
- freedesktop poppler, red hat enterprise linux 10, enterprise linux 6 +4 more +6 morePoppler: pdfinfo: crash in broken documents when using -dests parameter7.5 High
- icegram express, email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress, email subscribers \& newsletters +2 moreIcegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin9.8 Critical
- Show moreLoading…