CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- softether vpn, softethervpn +1 moreSoftEther VPN with L2TP - 2.75x Amplification5.3 Medium
- fastly js-compute-runtime@fastly/js-compute use-after-free in some host call implementations5.3 Medium
- jenkins bitbucket branch source, jenkins project bitbucket branch source plugin +1 moreBitbucket OAuth access token exposed in the build log by Bitbucket Branch Source Plugin4.3 Medium
- jenkins plain credentials, jenkins project plain credentials plugin +1 moreSecret file credentials stored unencrypted in rare cases by Plain Credentials Plugin4.3 Medium
- jenkins structs, jenkins project structs plugin +1 moreExposure of secrets through system log in Jenkins Structs Plugin3.1 Low
- devolutions remote desktop managerImproper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and...7.2 High
- google nearbyAuth Bypass in Quick Share7.1 High
- google nearbyDenial of Service in Quick Share5.9 Medium
- magarsus consultancy sso (single sign on)Open Redirect in Magarsus Consultancy's SSO6.1 Medium
- magarsus consultancy sso (single sign on), margarsus consultancy sso +1 moreSQLi in Magarsus Consultancy's SSO9.8 Critical
- octobercms octoberReflected XSS via X-October-Request-Handler Header3.1 Low
derivativecrates.io`derivative` is unmaintained; consider using an alternativeNo score- sequoia-pgp sequoia, sequoia-openpgp +1 moreLow severity (DoS) vulnerability in sequoia-openpgp2.9 Low
- blossom themes blossomthemes email newsletter, blossomthemes email newsletter +1 moreWordPress BlossomThemes Email Newsletter plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability4.4 Medium
- zkteco zkbio cvsecurity v5000, zkbiosecurity v5000 +1 moreZKTeco ZKBio CVSecurity V5000 Push Configuration Section cross site scripting4.8 Medium
- icegram email subscribers & newsletters, email subscribers \& newsletters +1 moreWordPress Email Subscribers by Icegram Express plugin <= 5.7.25 - SQL Injection vulnerability9.3 Critical
- checkmkAutomation user secrets written to audit log2.7 Low
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets6.4 Medium
- magazine3 easy table of contentsEasy Table of Contents < 2.0.66 - Admin+ Stored XSS5.9 Medium
- unknown simple photoswipeSimple Photoswipe <= 0.1 - Admin+ Stored XSS4.0 Medium
- unknown spotify play buttonSpotify Play Button <= 1.0 - Contributor+ Stored XSS5.4 Medium
- nikodev video widget, nikohk video-widget +1 moreVideo Widget <= 1.2.3 - Admin+ Stored XSS via Widget4.8 Medium
- unknown booksterBookster <= 1.1.0 - Unauthenticated Appointment Status Update6.5 Medium
- j-breuer frontend checklistFrontend Checklist <= 2.3.2 - Admin+ Stored XSS via Items4.8 Medium
- j-breuer frontend checklistFrontend Checklist <= 2.3.2 - Admin+ Stored XSS4.3 Medium
- muslim prayer time bd prayer time bd, realwebcare muslim prayer time bd +1 moreMuslim Prayer Time BD <= 2.4 - Settings Reset via CSRF7.6 High
- unknown webp & svg support, rezakhan995 webp \& svg support, webp and svg support and svg support +2 moreWebP & SVG Support <= 1.4.0 - Author+ Stored XSS via SVG5.4 Medium
- exclusiveaddons exclusive addons for elementorExclusive Addons for Elementor <= 2.6.9.8 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Card Widget6.4 Medium
- yokogawa electric corporation ci server, fast/tools, fast tools +2 moreA vulnerability has been found in FAST/TOOLS and CI Server. The affected products have built-in...5.3 Medium
- yokogawa electric corporation ci server, fast/tools +1 moreA vulnerability has been found in FAST/TOOLS and CI Server. The affected product's WEB HMI server...5.8 Medium
- django-rest-framework django rest frameworkCross-site Scripting in djangorestframework5.3 Medium
- dell powerprotect dd, data domain operating system +1 moreDell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an...3.5 Low
- dell powerprotect dd, data domain operating system +1 moreDell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an...8.8 High
- dell powerprotect dd, data domain operating system +1 moreDell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an...6.5 Medium
- dell powerprotect dd, data domain operating system +1 moreDell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 on DDMC...4.1 Medium
- apple airpods, airpods firmware, airpods max firmware +3 more +5 moreAn authentication issue was addressed with improved state management. This issue is fixed in...4.3 Medium
- dell data domain operating system, powerprotect dd +1 moreDell PowerProtect Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.40, LTS 7.10.1.30 contain an...5.9 Medium
- dell data domain operating system, powerprotect dd +1 moreDell Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.30, LTS 7.10.1.20 contain an SQL...4.4 Medium
- mudler localai, mudler/localai +1 moreCommand Injection in mudler/localai9.8 Critical
- dell powerprotect dd, data domain operating system +1 moreDell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a...6.8 Medium
- dell powerprotect dd, data domain operating system +1 moreDell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a...2.7 Low
- dell powerprotect dd, data domain operating system +1 moreDell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a...8.8 High
- dell powerprotect dd, data domain operating system +1 moreDell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a...5.9 Medium
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settings6.4 Medium
- octobercms octoberOctober Open Redirect for Administrator Accounts3.5 Low
- skycaijiAn issue discovered in skycaiji 2.8 allows attackers to run arbitrary code via crafted POST...9.8 Critical
- skycaijiA cross-site scripting (XSS) vulnerability in skycaiji v2.8 allows attackers to execute arbitrary...6.1 Medium
- skycaijiCross Site Scripting (XSS) vulnerability in skycaiji 2.8 allows attackers to run arbitrary code...6.1 Medium
- struktur libde265Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application...6.5 Medium
- struktur libde265Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application...6.5 Medium
- Show moreLoading…