CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- rockwell automation thinmanager® thinserver™, rockwellautomation thinmanager, thinserver +2 moreRockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability9.3 Critical
- dell poweredge platform, poweredge c6615 firmware, poweredge r6615 firmware +4 more +6 moreDell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low...5.3 Medium
- hcl software connectionsHCL Connections is vulnerable to broken access control3.5 Low
- progress moveit transferMOVEit Transfer Authentication Bypass Vulnerability9.1 Critical
- progress moveit gatewayMOVEit Gateway Authentication Bypass Vulnerability9.1 Critical
- linux, linux kernel +1 moredrm/amdgpu: add error handle to avoid out-of-bounds7.8 High
- linux, linux kernel +1 moreeventfs: Fix a possible null pointer dereference in eventfs_find_events()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morenilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors7.1 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moresmb: client: fix deadlock in smb2_find_smb_tcon()7.5 High
- linux, linux kernel +1 moref2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()7.8 High
- linux, linux kernel +1 morethermal/drivers/qcom/lmh: Check for SCM availability at probe5.5 Medium
- linux, linux kernel +1 moremedia: mgb4: Fix double debugfs remove5.5 Medium
- linux, linux kernel +1 moremedia: v4l: async: Fix notifier list entry init5.5 Medium
- linux, linux kernel +1 more9p: add missing locking around taking dentry fid list7.8 High
- linux, linux kernel +1 moreclk: bcm: dvp: Assign ->num before accessing ->hws9.8 Critical
- linux, linux kernel +1 moreclk: bcm: rpi: Assign ->num before accessing ->hws5.5 Medium
- linux, linux kernel +1 moreio_uring: check for non-NULL file pointer in io_file_can_poll()5.5 Medium
- linux, linux kernel +1 morenet/9p: fix uninit-value in p9_client_rpc()5.5 Medium
- linux, linux kernel +1 moremm/memory-failure: fix handling of dissolved but not taken off from buddy pages5.5 Medium
- linux, linux kernel +1 morebonding: fix oops during rmmod4.7 Medium
- linux, linux kernel +1 moreRevert "xsk: Support redirect to any socket bound to the same umem"9.8 Critical
- linux, linux kernel +1 moreext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()5.5 Medium
- linux, linux kernel +1 mores390/ap: Fix crash in AP internal function modify_bitmap()5.5 Medium
- linux, linux kernel +1 moregenirq/irqdesc: Prevent use-after-free in irq_find_at_or_after()7.8 High
- linux, linux kernel +1 morebtrfs: protect folio::private when attaching extent buffer folios7.8 High
- linux, linux kernel +1 morebtrfs: fix crash on racing fsync and size-extending write into prealloc7.8 High
- linux, linux kernel +1 morenilfs2: fix potential kernel bug due to lack of writeback flag waiting7.8 High
- linux, linux kernel +1 moremedia: lgdt3306a: Add a check against null-pointer-def5.5 Medium
- linux, linux kernel +1 morex86/xen: Drop USERGS_SYSRET64 paravirt call8.8 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a denial-of-service vulnerability. A malicious actor with network...5.3 Medium
- vmware esxi, cloud foundation +1 moreVMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local...6.8 Medium
- vmware esxi, cloud foundation +1 moreVMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient...6.8 Medium
- tp-link er7206, er7206 omada gigabit vpn router, er7206 firmware +2 moreA leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link...7.2 High
- dream-theme the7 — website and ecommerce builder for wordpressThe7 — Website and eCommerce Builder for WordPress <= 11.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute6.4 Medium
- automattic wordpressWordPress core < 6.5.5 - Auth. Arbitrary .html File Read (Windows Only) vulnerability5.0 Medium
- conduitUse of a Key Past its Expiration Date in Conduit4.8 Medium
- conduitOrigin Validation Error in Conduit5.3 Medium
- conduitImproper Handling of Insufficient Permissions or Privileges in Conduit8.1 High
- conduitMissing Authorization in Conduit9.9 Critical
- conduitIncomplete Cleanup in Conduit3.7 Low
- automattic wordpressWordPress Core < 6.5.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- libreofficeTLS certificate are not properly verified when utilizing LibreOfficeKit10.0 Critical
- devolutions serverAuthentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an...6.3 Medium
- checkmkXSS in Crash Report Page4.8 Medium
- checkmkXSS in confirmation pop-up5.4 Medium
- wordpress foundation wordpressWordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API6.4 Medium
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreDenial of Service in mintplex-labs/anything-llm7.5 High
- moxa oncell g3150a-lte series, oncell g3470a-lte-eu-t firmware, oncell g3470a-lte-eu firmware +3 more +5 moreOnCell G3470A-LTE Series: Authenticated Format String Errors6.3 Medium
- moxa oncell g3150a-lte series, oncell g3470a-lte-eu-t firmware, oncell g3470a-lte-eu firmware +2 more +4 moreOnCell G3470A-LTE Series: Authenticated Command Injection via sendTestEmail7.1 High
- moxa oncell g3150a-lte series, oncell g3470a-lte-eu-t firmware, oncell g3470a-lte-eu firmware +2 more +4 moreOnCell G3470A-LTE Series: Authenticated Command Injection via webDelIPSec7.1 High
- Show moreLoading…