CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.42 - Authenticated (Contributor+) Stored Cross-Site Scripting in Google Maps Widget6.4 Medium
- ka-yue auto featured image, auto-featured-image project auto-featured-image +1 moreAuto Featured Image <= 1.2 - Authenticated (Contributor+) Arbitrary File Upload8.8 High
spirv-toolsOSS-FuzzUNKNOWN READ in spvtools::disassemble::InstructionDisassembler::EmitInstructionNo score- canonical ubuntu advantage desktop daemon, ubuntu advantage desktop pro +1 moreMarco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks...5.9 Medium
- No product listedAn issue was discovered in the Agent in Delinea Privilege Manager (formerly Thycotic Privilege...7.0 High
- nltkntlk unsafe deserialization vulnerability9.8 Critical
- soffid iamIn the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java...9.8 Critical
- luci app sms tool app sms toolluci-app-sms-tool v1.9-6 was discovered to contain a command injection vulnerability via the...6.3 Medium
- luciapplucky luci-app-luckyluci-app-lucky v2.8.3 was discovered to contain hardcoded credentials.9.8 Critical
- luarocks lua-shmemlua-shmem v1.0-1 was discovered to contain a buffer overflow via the shmem_write function.8.2 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...3.8 Low
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...3.8 Low
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...6.8 Medium
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...4.7 Medium
- gdraheim zziplibA Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of...7.5 High
- zziplib project zziplibHeap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of...4.3 Medium
- dumptsA NULL Pointer Dereference vulnerability in DumpTS v0.1.0-nightly allows attackers to cause a...6.5 Medium
- wangf1978 dumptsA NULL Pointer Dereference discovered in DumpTS v0.1.0-nightly allows attackers to cause a denial...7.5 High
- No product listedHeap Buffer Overflow vulnerability in DumpTS v0.1.0-nightly allows attackers to cause a denial of...5.3 Medium
- d-link dir-1950 firmwareD-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest...6.8 Medium
- netwrix cososys endpoint, cososys unify +1 moreNetwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote...6.5 Medium
- netwrix cososys endpoint protector, cososys unify +1 moreNetwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote...7.2 High
- netwrix cososys endpoint protector, cososys unify +1 moreNetwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote...7.2 High
- netwrix cososys endpoint protector, cososys unify +1 moreNetwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote...9.8 Critical
- kalkitech ase61850 iedsmartDirectory Traversal vulnerability in Kalkitech ASE ASE61850 IEDSmart upto and including version 2...9.4 Critical
- No product listedDESIGNA ABACUS v.18 and before allows an attacker to bypass the payment process via a crafted QR...6.3 Medium
- threerings openvpn-auth-ldapBuffer overflow in the extract_openvpn_cr function in openvpn-cr.c in openvpn-auth-ldap (aka the...6.3 Medium
- phpseclibName confusion in x509 Subject Alternative Name fields7.5 High
linuxDebian,kernel-defaultSUSE,kernel-ec2SUSE +69 more +71 moreIn the Linux kernel before 4.8, usb_parse_endpoint in drivers/usb/core/config.c does not validate...8.4 High- gitlabUncontrolled Resource Consumption in GitLab6.5 Medium
- gitlabUncontrolled Resource Consumption in GitLab5.3 Medium
- gitlabImproper Access Control in GitLab5.3 Medium
- gitlabExposure of Sensitive Information to an Unauthorized Actor in GitLab4.3 Medium
- gitlabImproper Authorization in GitLab6.5 Medium
- gitlabImproper Access Control in GitLab3.1 Low
- gitlabUncontrolled Resource Consumption in GitLab6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab8.7 High
- gitlabImproper Access Control in GitLab9.6 Critical
- gitlabImproper Access Control in GitLab6.8 Medium
- gitlabImproper Isolation or Compartmentalization in GitLab7.5 High
- hitachi pentaho business analytics serverHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8.8 High
- hitachi pentaho business analytics serverHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8.8 High
- hitachi pentaho business analytics serverHitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference7.1 High
- twinpictures, baden03 jquery t(-) countdown widgetWordPress jQuery T(-) Countdown Widget plugin <= 2.3.25 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cryoutcreations animaWordPress Anima theme <= 1.4.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- genexis tilgin fiber home gateway hg1522Genexis Tilgin Fiber Home Gateway HG1522 cross site scripting6.9 Medium
- intrado 911 emergency gateway, 911 emergency gateway (egw), 911 emergency gateway firmware +2 moreIntrado 911 Emergency Gateway login form is vulnerable to an unauthenticated blind time-based SQL...10.0 Critical
- mermaid-js zenuml-coreCross-site Scripting in ZenUML5.4 Medium
- Show moreLoading…