CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- open-emr openemrAn issue in OpenEMR 7.0.2 allows a remote attacker to escalate privileges viaa crafted POST...9.8 Critical
- No product listedBuffer Overflow vulnerability in SAS Broker 9.2 build 1495 allows attackers to cause denial of...4.3 Medium
- teldat m1, m1 firmware +1 moreIncorrect access control in Teldat M1 v11.00.05.50.01 allows attackers to obtain sensitive...7.5 High
- mapos map-osMAP-OS v4.45.0 and earlier was discovered to contain a cross-site scripting (XSS) vulnerability.6.1 Medium
- w3c xml signature syntax and processingThe W3C XML Signature Syntax and Processing (XMLDsig) specification, starting with 1.0, was...7.3 High
- simplesamlphp xml-securityApache XML Security for C++ through 2.0.4 implements the XML Signature Syntax and Processing ...5.3 Medium
- lumis experience platformA hardcoded privileged ID within Lumisxp v15.0.x to v16.1.x allows attackers to bypass...7.5 High
- lumis experience platformA cross-site scripting (XSS) vulnerability in the component main.jsp of Lumisxp v15.0.x to v16.1...6.1 Medium
- lumis experience platformA cross-site scripting (XSS) vulnerability in the component UrlAccessibilityEvaluation.jsp of...6.1 Medium
- lumis experience platformA cross-site scripting (XSS) vulnerability in the component XsltResultControllerHtml.jsp of...6.1 Medium
- hms-networks anybus x-gateway ab7832-fAn issue was discovered on HMS Anybus X-Gateway AB7832-F firmware version 3. The HICP protocol...8.8 High
- hms-networks anybus x-gateway ab7832-f3An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web...7.5 High
- No product listedAn issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes an...4.0 Medium
- softexpert excellence suiteFile upload vulnerability found in Softexpert Excellence Suite v.2.1 allows attackers to execute...6.3 Medium
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS versions prior to v9.0 have default community strings8.1 High
- brocade fabric os, broadcom fabric operating system +1 morepassword management API prints sensitive information in log files5.9 Medium
- wpeka wp cookie consent, wplegalpages cookie banner for gdpr / ccpa – wplp cookie consent +1 moreWP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header7.2 High
- brocade fabric os, broadcom fabric operating system +1 moreEncoded session passwords on session storage for Virtual Fabric platforms4.3 Medium
- mitmproxy pdocpdoc embeds link to malicious CDN if math mode is enabled0.0 None
- golang image, golang.org/x/image golang.org/x/image/tiff +1 morePanic when parsing invalid palette-color images in golang.org/x/image7.5 High
- phloc webscopesAn information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with...9.3 Critical
- hcl software connectionsHCL Connections is vulnerable to a cross-site scripting (XSS) vulnerability5.4 Medium
- progress whatsup goldWhatsUp Gold LoadCSSUsingBasePath Directory Traversal Information Disclosure Vulnerability5.3 Medium
- progress whatsup goldWhatsUp Gold LoadUsingBasePath Directory Traversal Information Disclosure Vulnerability5.3 Medium
- progress whatsup goldWhatsUp Gold AppProfileImport path traversal vulnerability6.5 Medium
- progress whatsup goldWhatsUp Gold OnMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability7.2 High
- progress whatsup gold, whatsupgold +1 moreWhatsUp Gold SessionControler Server-Side Request Forgery Information Disclosure Vulnerability7.1 High
- progress whatsup goldWhatsUp Gold GetASPReport Server-Side Request Forgery Information Disclosure7.1 High
- progress whatsup goldWhatsUp Gold InstallController Denial-of-Service Vulnerability7.5 High
- progress whatsup goldWhatsUp Gold Missing Authentication GetWindowsCredential Information Disclosure Vulnerability8.6 High
- hewlett packard enterprise (hpe) hpe athonet mobile core, hpe athonet mobile care +1 moreA security vulnerability has been identified in HPE Athonet Mobile Core software. The core...7.5 High
- progress whatsup goldWhatsUp Gold TestController Chart denial of service vulnerability7.5 High
- progress whatsup goldWhatsUp Gold TestController multiple information disclosure vulnerabilities7.5 High
- progress whatsup goldWhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation Vulnerability8.4 High
- progress whatsup goldWhatsUp Gold APM Unrestricted File Upload Remote Code Execution Vulnerability8.8 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal and RFI Vulnerability in parisneo/lollms-webui7.7 High
- progress whatsup goldWhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability9.8 Critical
- progress whatsup goldWhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution Vulnerability9.8 Critical
- progress whatsup goldWhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability9.8 Critical
- squid-cache squidSquid vulnerable to heap corruption in ESI assign6.3 Medium
- enalean tuleapTuleap has improper permissions of the backlog items4.3 Medium
- fortra filecatalyst, filecatalyst workflow +1 moreSQL Injection Vulnerability in FileCatalyst Workflow 5.1.6 Build 135 (and earlier)9.8 Critical
- aimeos ai-client-htmlAimeos HTML client may potentially reveal sensitive information in error log8.8 High
- dspaceDSpace Cross Site Scripting (XSS) via a deposited HTML/XML document2.6 Low
- clive 21 simple online hotel reservation systemitsourcecode Simple Online Hotel Reservation System index.php sql injection6.9 Medium
- hashicorp go-getter, shared library +1 moreHashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation8.4 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4 Installation Directory permission issue7.4 High
emacsMageiaUpdated emacs packages fix security vulnerabilityNo score- rockwell automation thinmanager® thinserver™, rockwellautomation thinmanager, thinserver +2 moreThinManager® ThinServer™ Improper Input Validation Vulnerability8.7 High
- rockwell automation thinmanager® thinserver™, rockwellautomation thinmanager, thinserver +2 moreRockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability9.3 Critical
- Show moreLoading…