CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- membership software wishlist member x, wishlistmember wishlist member +1 moreWordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary PHP Code Execution vulnerability9.9 Critical
- membership software wishlist member xWordPress WishList Member X plugin < 3.26.7 - Authenticated Privilege Escalation vulnerability8.8 High
- stylemixthemes consulting elementor widgetsWordPress Consulting Elementor Widgets plugin <= 1.3.0 - Local File Inclusion vulnerability8.5 High
- stylemixthemes consulting elementor widgets, masterstudy elementor widgets +1 moreWordPress Consulting Elementor Widgets plugin <= 1.3.0 - Remote Code Execution (RCE) vulnerability9.9 Critical
- stylemixthemes consulting elementor widgetsWordPress Consulting Elementor Widgets plugin <= 1.3.0 - Unauthenticated Local File Inclusion vulnerability9.0 Critical
chrono-englishcrates.ioThe maintainer of chrono-english is unresponsiveNo score- manageengine opmanagerStored XSS6.3 Medium
- apache streampipesApache StreamPipes, Apache StreamPipes: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Recovery Token Generation9.1 Critical
- jan syski megabipSQL Injection in MegaBIP9.3 Critical
- faronics winselect, winselect (standard + enterprise) +1 moreUnhashed Storage of Password9.1 Critical
- faronics winselect, winselect (standard + enterprise) +1 moreHardcoded Credentials7.5 High
- next4biz crm & bpm software business process manangement (bpm)Stored XSS in Next4Biz's BPM5.4 Medium
- next4biz crm & bpm software business process manangement (bpm), next4biz crm and bpm software business process manangement +1 moreRemote Code Execution in Next4Biz's BPM9.8 Critical
- faronics winselect, winselect (standard + enterprise) +1 moreRead/Write Permissions for Everyone on Configuration File7.7 High
- apache jspwikiApache JSPWiki: Cross-site scripting vulnerability on upload page6.1 Medium
- bluditBludit - Insecure Token Generation6.0 Medium
- bluditBludit uses SHA1 as Password Hashing Algorithm5.9 Medium
- bluditBludit is Vulnerable to Session Fixation5.6 Medium
- bluditBludit - Remote Code Execution (RCE) through Image API8.9 High
- bluditBludit - Remote Code Execution (RCE) through File API8.9 High
- seopressSEOPress < 7.8 - Contributor+ Open Redirect6.1 Medium
- seopressSEOPress < 7.8 - Contributor+ Stored XSS5.0 Medium
- lollms, parisneo parisneo/lollms, lollms-webui +2 moreCSRF Vulnerability in parisneo/lollms XTTS Server7.6 High
- oretnom23 simple online bidding systemSourceCodester Simple Online Bidding System unrestricted upload5.3 Medium
- lahirudanushka school management systemlahirudanushka School Management System Exam Results Page examresults-par.php sql injection5.3 Medium
- lahirudanushka school management system, school management system project management system +1 morelahirudanushka School Management System Subject Page subject.php sql injection5.1 Medium
- lahirudanushka school management systemlahirudanushka School Management System Student Page student.php sql injection5.1 Medium
- lahirudanushka school management systemlahirudanushka School Management System Teacher Page teacher.php sql injection5.1 Medium
- lahirudanushka school management systemlahirudanushka School Management System Parent Page parent.php sql injection5.1 Medium
- lahirudanushka school management systemlahirudanushka School Management System Attendance Report Page attendancelist.php sql injection5.1 Medium
- lollms, parisneo parisneo/lollms +1 moreRemote Code Execution in create_conda_env function in parisneo/lollms6.8 Medium
composerDebiancomposer - regression updateNo score- h3c magic r230, magic r230 firmware +1 moreH3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary...4.1 Medium
- h3c magic r230, magic r230 firmware +1 moreH3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc...9.8 Critical
- wavlink wn551k1 firmwareWAVLINK WN551K1'live_check.shtml enables attackers to obtain sensitive router information.5.3 Medium
- wavlink wn551k1 firmwareWAVLINK WN551K1 found a command injection vulnerability through the start_hour parameter of /cgi...5.3 Medium
- wavlink wn551k1 firmwareWAVLINK WN551K1'live_mfg.shtml enables attackers to obtain sensitive router information.5.3 Medium
- wavlink wn551k1 firmwareWAVLINK WN551K1 found a command injection vulnerability through the IP parameter of /cgi-bin...5.3 Medium
- wavlink wn551k1 firmwareAn issue in Wavlink WN551K1 allows a remote attacker to obtain sensitive information via the...6.5 Medium
- No product listedAn issue in EnvisionWare Computer Access & Reservation Control SelfCheck v1.0 (fixed in OneStop 3...5.4 Medium
- datagearDataGear v5.0.0 and earlier was discovered to contain a SpEL (Spring Expression Language)...9.8 Critical
- anchorcms anchor, anchor cms +1 moreCross Site Scripting vulnerability in Anchor CMS v.0.12.7 allows a remote attacker to execute...6.1 Medium
- shanxichuangxiang cmsAn issue the background management system of Shanxi Internet Chuangxiang Technology Co., Ltd v1.0...6.5 Medium
- finesoft project finesoftHangzhou Meisoft Information Technology Co., Ltd. FineSoft <=8.0 is affected by Cross Site...6.1 Medium
- finesoft project finesoftCross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft...6.1 Medium
- finesoft project finesoftCross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft...5.3 Medium
- access management specialist project management specialist, shenzhenweitillage access management specialist +1 moreAn issue in Shenzhen Weitillage Industrial Co., Ltd the access management specialist V6.62.51215...7.5 High
- No product listedSQL injection vulnerability in the module "Products Alert" (productsalert) before 1.7.4 from...7.3 High
- prestashopmodules themesettingsIn the module "Theme settings" (pk_themesettings) <= 1.8.8 from Promokit.eu for PrestaShop, a...7.5 High
- promokit pk isotopeSQL Injection vulnerability in the module "Isotope" (pk_isotope) <=1.7.3 from Promokit.eu for...9.8 Critical
- Show moreLoading…