CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- berriai berriai/litellm, litellm +1 moreRemote Code Execution in BerriAI/litellm9.8 Critical
- vanna-ai vanna, vanna-ai/vanna +1 moreRemote Code Execution via Prompt Injection in vanna-ai/vanna9.8 Critical
- h2o, h2oai h2oai/h2o-3, h2oai\/h2o-3 +2 moreDenial of Service via Invalid Argument in h2oai/h2o-37.5 High
- spotfire analyst, for aws marketplace, server +3 more +5 moreSpotfire Remote Code Execution Vulnerability9.9 Critical
- silabs sisdkDenial of service in multi-protocol gateway - Zigbee + Thread6.5 Medium
- arista networks wireless access points, arista wireless access point firmware +1 morePrivilege escalation in Arista Wireless Access Points8.4 High
- ibm security access manager docker, security access manager +1 moreIBM Security Access Manager Docker information disclosure7.5 High
- ibm security access manager docker, security access manager +1 moreIBM Security Access Manager Docker information disclosure5.5 Medium
- ibm security access manager docker, security access manager +1 moreIBM Security Access Manager Docker privilege escalation7.8 High
- ibm security access manager docker, security access manager +1 moreIBM Security Access Manager Docker privilege escalation7.8 High
- silabs emberznet sdk, silabs.com ember znet sdk +1 moreZigbee co-ordinator realignment packet may lead to denial of service7.5 High
- ibm security access manager docker, security access manager +1 moreIBM Security Access Manager Docker information disclosure5.9 Medium
- ibm sterling b2b integrator standard edition, sterling b2b integrator +1 moreIBM Sterling B2B Integrator Standard Edition cross-site scripting5.4 Medium
- ibm openbmcIBM OpenBMC information disclosure7.5 High
- ibm sterling b2b integrator standard edition, sterling b2b integrator +1 moreIBM Sterling B2B Integrator Standard Edition tapjacking4.3 Medium
- stitionai devika, stitionai/devika +1 moreDirectory Traversal in stitionai/devika7.5 High
- stitionai devika, stitionai/devika +1 moreDirectory Traversal in stitionai/devika7.5 High
- stitionai devika, stitionai/devika +1 moreLocal File Read in stitionai/devika7.5 High
- microsoft power platformMicrosoft Dataverse Remote Code Execution Vulnerability8.0 High
- ibm websphere application serverIBM WebSphere Application Server cross-site scripting4.8 Medium
- markoni markoni-d (compact) fm transmitters, markoni-d \(compact\) firmware, markoni-d fm transmitter +3 more +5 moreImproper Access Control In TELSAT MarKoni FM Transmitter9.3 Critical
- markoni markoni-d (compact) fm transmitters, markoni-d \(compact\) firmware, markoni-dh (exciter+amplifiers) fm transmitters +1 more +3 moreUse of Client-Side Authentication in TELSAT marKoni FM Transmitter9.3 Critical
- markoni markoni-d (compact) fm transmitters, markoni-d \(compact\) firmware, markoni-d fm transmitter +3 more +5 moreUse of Hard-coded Credentials in TELSAT marKoni FM Transmitter9.3 Critical
- markoni markoni-d (compact) fm transmitters, markoni-d \(compact\) firmware, markoni-d fm transmitter +3 more +5 moreImproper Neutralization of Special Elements used in a Command in TELSAT marKoni FM Transmitter9.3 Critical
- ibm security verify accessIBM Security Verify Access information disclosure5.5 Medium
- ibm security verify accessIBM Security Verify Access denial of service5.3 Medium
- lahirudanushka school management systemlahirudanushka School Management System Subject Page subject.php cross site scripting5.3 Medium
- talya informatics travel appsSQL Injection Vulnerability in Talya Informatics' Travel APPS4.6 Medium
- talya informatics travel appsIDOR in Talya Informatics' Travel APPS9.8 Critical
- itsourcecode online food ordering systemitsourcecode Online Food Ordering System addproduct.php unrestricted upload6.9 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System customeradd.php sql injection5.3 Medium
- itsourcecode pool of bethesda online reservation systemitsourcecode Pool of Bethesda Online Reservation System controller.php sql injection6.9 Medium
- labvantage lims, laboratory information management system +1 moreLabVantage LIMS POST Request cross site scripting5.3 Medium
- labvantage lims, laboratory information management system +1 moreLabVantage LIMS POST Request cross site scripting5.3 Medium
- labvantage, labvantage lims, laboratory information management system +2 moreLabVantage LIMS POST Request cross site scripting5.3 Medium
- labvantage lims, laboratory information management system +1 moreLabVantage LIMS POST Request cross site scripting5.3 Medium
- awordpresslife portfolio filter galleryPortfolio Gallery – Image Gallery Plugin <= 1.6.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4 Medium
- openssl, debian linux, netapp 500f firmware +40 more +42 moreSSL_select_next_proto buffer overread9.1 Critical
- talya informatics elektrawebImproper Access Control in Talya Informatics' Elektraweb9.8 Critical
- microsoft office, softmaker software gmbh freeoffice +1 moreLocal Privilege Escalation via MSI installer5.3 Medium
- talya informatics elektrawebCookies Manipulation in Talya Informatics' Elektraweb9.8 Critical
- posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 moreThe Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.0- Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- catch themes createCreate by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode6.4 Medium
- rocklobster contact form 7Contact Form 7 < 5.9.5 - Unauthenticated Open Redirect6.1 Medium
- ninjateam wp chat appWP Chat App < 3.6.5 - Admin+ Stored XSS4.8 Medium
- h5p, unknown interactive content +1 moreH5P < 1.15.8 - Contributor+ Stored XSS5.4 Medium
- kadencewp kadence blocks pro, unknown kadence-blocks-pro +1 moreKadence Blocks Pro < 2.3.8 - Contributor+ Arbitrary Option Access4.3 Medium
- detheme dethemekit for elementorDethemeKit For Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via URL Parameter of the De Gallery Widget5.4 Medium
- webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 moreElementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 moreElementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- Show moreLoading…