CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- nepstech ntpl-xpon1gfevn firmwareAn issue in Nepstech Wifi Router xpon (terminal) NTPL-Xpon1GFEVN, hardware verstion 1.0 firmware...8.4 High
- craftcms craft cmsCraft CMS SQL injection vulnerability via the GraphQL API endpoint9.8 Critical
github.com/pingcap/tidbGo,govulncheck-vulndbopenSUSE +1 morePingCAP TiDB nil pointer dereference5.4 Medium- ethz safe exam browserAn issue in Safe Exam Browser for Windows before 3.6 allows an attacker to share clipboard data...8.2 High
- mapos map-osMAP-OS 4.45.0 and earlier is vulnerable to Cross-Site Scripting (XSS). This vulnerability allows...5.4 Medium
- farcryAn arbitrary file upload vulnerability in /fileupload/upload.cfm in Daemon PTY Limited FarCry...9.8 Critical
- No product listedAn issue in Daemon PTY Limited FarCry Core framework before 7.2.14 allows attackers to access...5.9 Medium
- No product listedAn issue was discovered in VirtoSoftware Virto Kanban Board Web Part before 5.3.5.1 for...6.1 Medium
- emby media serverStored Cross Site Scripting vulnerability in Emby Media Server Emby Media Server 4.8.3.0 allows a...6.1 Medium
- openvpnOpenVPN 2.6.10 and earlier in a server role accepts multiple exit notifications from...4.3 Medium
- gigadevice gd32e103c8t6GigaDevice GD32E103C8T6 devices have Incorrect Access Control.9.8 Critical
- artery at32f415cbt7, at32f421c8t7 +1 moreArtery AT32F415CBT7 and AT32F421C8T7 devices have Incorrect Access Control.7.4 High
- No product listedGeehy APM32F103CCT6, APM32F103RCT6, APM32F103RCT7, and APM32F103VCT6 devices have Incorrect...5.3 Medium
- sandisk ibi web app, western digital wd cloud web app, my cloud home web app +1 more +3 moreCross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps5.9 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to...8.8 High
- adminer, adminerevo +1 moreAdminer and AdminerEvo SSRF6.9 Medium
- adminer, adminerevo +1 moreAdminer and AdminerEvo denial of service via HTTP redirect6.9 Medium
- cyclonedx cyclonedx-core-java, core java +1 moreImproper Restriction of XML External Entity Reference in org.cyclonedx:cyclonedx-core-java7.5 High
- hashicorp retryablehttp, shared library +1 morego-retryablehttp can leak basic auth credentials to log files6.0 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki programming rights may be inherited by inclusion10.0 Critical
- amazon freertos-plus-tcpFreeRTOS-Plus-TCP Buffer Over-Read in DNS Response Parser9.6 Critical
- ericsson codecheckerPath traversal in `CodeChecker server` in the endpoint of `CodeChecker store`6.5 Medium
- renesas rcar gen3, rcar gen3 firmware, rcar gen3 v2.5 +2 moreIncorrect Address Range Calculations7.5 High
- renesas rcar gen3, rcar gen3 v2.5 +1 moreInteger Underflow in Memory Range Check in Renesas RCAR7.5 High
- omron corporation nj series cpu unit, nx series cpu unit, omron nj-pa3001 firmware +54 more +56 moreInsufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions...7.5 High
- linux, linux kernel +1 moredrm/xe: Only use reserved BCS instances for usm migrate exec queue5.5 Medium
- linux, linux kernel +1 morefpga: manager: add owner module and take its refcount5.5 Medium
- linux, linux kernel +1 morefpga: bridge: add owner module and take its refcount5.5 Medium
- linux, linux kernel +1 morefpga: region: add owner module and take its refcount5.5 Medium
- linux, linux kernel +1 morePCI: of_property: Return error for int_map allocation failure4.7 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moref2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moref2fs: compress: don't allow unaligned truncation on released compress inode7.1 High
- linux, linux kernel +1 moremedia: ti: j721e-csi2rx: Fix races while restarting DMA7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moreum: Add winch to winch_handlers before registering winch IRQ7.8 High
- linux, linux kernel +1 moredrm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode()7.8 High
- linux, linux kernel +1 moreriscv: prevent pt_regs corruption for secondary idle threads7.8 High
- cruddiyRCE in Cruddiy8.8 High
- linux, linux kernel +1 moredrm: zynqmp_dpsub: Always register bridge7.8 High
- linux, linux kernel +1 moreblk-cgroup: fix list corruption from resetting io stat7.8 High
- linux, linux kernel +1 moreblk-cgroup: fix list corruption from reorder of WRITE ->lqueued7.8 High
- lollms lollms-webui, parisneo parisneo/lollms-webui +1 moreCSRF in Servers Configurations in parisneo/lollms-webui4.4 Medium
- play.htWordPress Play.ht plugin <= 3.6.4 - Broken Access Control vulnerability4.3 Medium
- mia technology inc. mia-med health aplication, miateknoloji mia-med +1 moreBroken or Risky Cryptographic Algorithm in Mia Technology's Mia-Med Health Aplication5.3 Medium
- dimitri grassi salon booking system, salon booking system booking system +1 moreWordPress Salon booking system plugin <= 9.9 - Arbitrary File Deletion vulnerability8.6 High
- instawp connectWordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability10.0 Critical
- membership software wishlist member xWordPress WishList Member X plugin < 3.26.7 - Unauthenticated Denial of Service Attack vulnerability7.5 High
- mia technology inc. mia-med health aplicationUser Enumeration in Mia Technology's Mia-Med Health Aplication7.5 High
- Show moreLoading…