CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- prestashop helpdeskSQL Injection vulnerability in the module "Help Desk - Customer Support Management System" ...8.8 High
- prestashop quadra informatiqueIn the module "Axepta" (axepta) before 1.3.4 from Quadra Informatique for PrestaShop, a guest can...7.5 High
- prestashop ask for a quoteSQL injection vulnerability in the module "Complete for Create a Quote in Frontend + Backend Pro"...9.8 Critical
- vpl jail systemAn issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a...9.8 Critical
- moodle virtual programming lab, vpl jail system +1 moreVirtual Programming Lab for Moodle up to v4.2.3 was discovered to contain a cross-site scripting ...6.1 Medium
- axiros axessAxiros AXESS Auto Configuration Server (ACS) 4.x and 5.0.0 has Incorrect Access Control. An...9.8 Critical
- virtosoftware virto bulk file download, sharepoint bulk file download +1 moreAn issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The...5.3 Medium
- virtosoftware sharepoint bulk file downloadAn issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. It...5.3 Medium
- virtosoftware virto bulk file download, sharepoint bulk file download +1 moreAn issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The...9.8 Critical
- asus rt-ax88u firmwareBuffer Overflow vulnerability in ASUS router RT-AX88U with firmware versions v3.0.0.4.388_24198...9.8 Critical
- prestashop m4 pdfPHP Injection vulnerability in the module "M4 PDF Extensions" (m4pdf) up to version 3.3.2 from...10.0 Critical
- trudesk project trudeskTruDesk Help Desk/Ticketing Solution v1.1.11 is vulnerable to a Cross-Site Request Forgery (CSRF)...6.5 Medium
- oretnom23 clinic queuing systemSourceCodester Clinic Queuing System patient_side.php save_patient cross site scripting6.9 Medium
- lollms lollms-webui, parisneo parisneo/lollms-webui +1 morePath Traversal in parisneo/lollms-webui4.0 Medium
- ruijie rg-uac, rg-uac firmware +1 moreRuijie RG-UAC HTTP POST Request sxh_vpnlic.php get_ip.addr_details command injection5.1 Medium
- lahirudanushka school management systemlahirudanushka School Management System Login Page login.php sql injection6.9 Medium
- oretnom23 service provider management systemSourceCodester Service Provider Management System System Info Page index.php cross site scripting5.1 Medium
- pearadmin pear admin bootPear Admin Boot loadDictItem sql injection5.3 Medium
- No product listedClick Studios Passwordstate Core before 9.8 build 9858 allows Authentication Bypass.6.5 Medium
- No product listedMENDELSON AS4 before 2024 B376 has a client-side vulnerability when a trading partner provides...6.5 Medium
- gnu emacsIn Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when...9.8 Critical
- ibm security soar, soar +1 moreIBM Security SOAR code execution7.5 High
- parisneo lollms, parisneo/lollms +1 moreRemote Code Execution via Path Traversal in parisneo/lollms9.8 Critical
- itsourcecode online food ordering systemitsourcecode Online Food Ordering System purchase.php sql injection6.9 Medium
- skycaijiZorlan SkyCaiji Task cross site scripting5.1 Medium
- playsmsplaySMS New Phonebook cross site scripting5.1 Medium
- apache alluraApache Allura: Stored authenticated XSS4.8 Medium
- sevenspark ubermenuUberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings Reset7.2 High
- armember premium – membership plugin, content restriction, member levels, user profile & user signupARMember Premium <= 6.7 - Cross-Site Request Forgery via multiple functions6.3 Medium
- gradio-app gradio-app/gradio, gradio project gradio +1 moreOpen Redirect in gradio-app/gradio5.4 Medium
- opencartCross site scripting in opencart2.1 Low
- opencartArbitrary File Creation in opencart6.6 Medium
- opencartSQL injection in opencart7.4 High
- opencartZip slip in opencart7.2 High
- opencartCross site scripting in opencart2.1 Low
- opencartCross site scripting in opencart2.1 Low
- bricks builder, bricksbuilder bricks, bricks builder +2 moreBricks Builder <= 1.9.8 - Insecure Direct Object Reference4.3 Medium
- wildweblab mosaicMosaic <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode6.4 Medium
- grey opaque project opaque, ppfeufer grey opaque +1 moreGrey Opaque <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Download-Button Shortcode6.4 Medium
- fusionplugin table addons for elementorTable Addons for Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter6.4 Medium
- vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 moreAppointment Booking and Online Scheduling <= 4.4.2 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting7.2 High
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets6.4 Medium
- ux-themes flatsomeFlatsome | Multi-Purpose Responsive WooCommerce Theme <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes6.4 Medium
ghostscriptOSS-FuzzHeap-use-after-free in sputsNo score- sparklewpthemes sparkle demo importerSparkle Demo Importer <= 1.4.7 - Missing Authorization to Authorized(Subscriber+) Post/Pages/Attachements Deletion and Demo Data Import6.5 Medium
- joplin project joplinSafe mode Cross-site Scripting (XSS) vulnerability in Joplin8.2 High
- joplin project joplinCross-site Scripting (XSS) when pasting HTML into the rich text editor in Joplin8.2 High
- joplin project joplinCross site scripting (XSS) when clicking on an untrusted `<map>` link in Joplin8.2 High
- joplin project joplinArbitrary code execution on click of PDF links in Joplin8.9 High
- pearadmin pear admin bootPear Admin Boot getDictItems sql injection5.3 Medium
- Show moreLoading…