CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- synology camera firmware, bc500 firmware, tc500 firmware +2 moreA vulnerability regarding improper limitation of a pathname to a restricted directory ('Path...5.3 Medium
- synology camera firmware, bc500 firmware, tc500 firmware +2 moreA vulnerability regarding improper neutralization of special elements used in an OS command ('OS...7.2 High
- mahype pagerank toolsPagerank Tools <= 1.1.5 - Reflected XSS6.1 Medium
- alexdtn simple al sliderSimple AL Slider <= 1.2.10 - Reflected XSS6.1 Medium
- alexdtn animated al listAnimated AL List <= 1.0.6 - Reflected XSS5.4 Medium
- apidaze widget4callWidget4Call <= 1.0.7 - Reflected XSS4.7 Medium
- tobias cichon simple photoswipeSimple Photoswipe <= 0.1 - Subscriber+ Arbitrary Settings Update6.5 Medium
- hcl software dryice aexLack of Clickjacking Protection vulnerability affects DRYiCE AEX v103.7 Low
- elastic cloud enterpriseIt was identified that under certain specific preconditions, an API key that was originally...8.1 High
- bfintal stackable – page builder gutenberg blocksStackable – Page Builder Gutenberg Blocks <= 3.13.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4 Medium
- brechtvds easy affiliate linksEasy Affiliate Links <= 3.7.3 - Missing Authorization to Authenticated (Subscriber+) Settings Reset4.3 Medium
- brechtvds easy image collageEasy Image Collage <= 1.13.5 - Missing Authorization to Authenticated (Contributor+) Data Clearance5.4 Medium
libopenmptMageiaUpdated libopenmpt packages fix security vulnerabilitiesNo score- dell cloudlinkDell Key Trust Platform, v3.0.6 and prior, contains Use of a Cryptographic Primitive with a Risky...3.8 Low
- r74n sandboxelsR74n Sandboxels 1.9 through 1.9.5 allows XSS via a message in a modified saved-game file.6.1 Medium
- unknown-corp melty blood actress again current codeSoft Circle French-Bread Melty Blood: Actress Again: Current Code through 1.07 Rev. 1.4.0 allows...9.8 Critical
- openplcproject openplc v3 firmwareOpenPLC 3 through 9cd8f1b allows XSS via an SVG document as a profile picture.5.4 Medium
- mit kerberos 5, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS...9.1 Critical
- mit kerberos 5, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count...7.5 High
- rordenlab dcm2niixAn issue in dc2niix before v.1.0.20240202 allows a local attacker to execute arbitrary code via...7.8 High
- offis dcmtkBuffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via...8.1 High
- gin-contrib corsGin mishandles a wildcard at the end of an origin string9.1 Critical
- ptc creo elements/direct license, creo elements\/direct license +1 morePTC Creo Elements/Direct License Server Missing Authorization10.0 Critical
- jamf compliance editorLack of Client Validation in Jamf Compliance Editor's Helper Service May Result in Privilege Escalation7.3 High
- python software foundation cpythonBuffer overread when using an empty list with SSLContext.set_npn_protocols()6.5 Medium
- vmware cloud director object storage extensionVMware Cloud Director Object Storage Extension contains an Insertion of Sensitive Information...5.3 Medium
- No product listedVMware Cloud Director contains an Improper Privilege Management vulnerability. An...4.9 Medium
- vmware workspace one uemVMware Workspace One UEM update addresses an information exposure vulnerability. A malicious...6.8 Medium
- juniper session smart conductor, session smart router, wan assurance router +2 moreSession Smart Router(SSR): On redundant router deployments API authentication can be bypassed10.0 Critical
- bc security empireBC Security Empire Path Traversal RCE9.8 Critical
- scidsg hushlineHush Line OTP issue7.5 High
- sdg pnpscadaMissing Authorization in SDG Technologies PnPSCADA9.3 Critical
- spotfire analyst, desktop, enterprise runtime for r - server edition +2 more +4 moreSpotfire: NTLM token leakage6.8 Medium
- lightning-ai lightning-ai/pytorch-lightning, lightning ai ai\/pytorch lightning, lightningai pytorch lightning +2 moreArbitrary File Write via /v1/runs API endpoint in lightning-ai/pytorch-lightning9.1 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreCross-site Scripting (XSS) in parisneo/lollms-webui6.1 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Access Control in lunary-ai/lunary5.3 Medium
- parisneo parisneo/lollms, lollms-webui +1 morePath Traversal in parisneo/lollms7.3 High
- imartinez imartinez/privategpt, privategpt +1 moreCSRF Vulnerability in imartinez/privategpt5.4 Medium
- lunary, lunary-ai lunary-ai/lunary, lunary-ai\/lunary +2 moreEmail Validation Bypass in lunary-ai/lunary5.3 Medium
- imartinez imartinez/privategpt, privategpt +1 moreOpen Redirect in imartinez/privategpt4.3 Medium
- parisneo parisneo/lollms, lollms-webui +1 morePath Traversal in parisneo/lollms7.4 High
- quivr, stangirard stangirard/quivr +1 moreServer-Side Request Forgery (SSRF) in stangirard/quivr8.6 High
- parisneo lollms, parisneo/lollms +1 morePath Traversal in parisneo/lollms8.6 High
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreServer-Side Request Forgery (SSRF) in gaizhenbiao/ChuanhuChatGPT7.3 High
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Access Control in lunary-ai/lunary7.4 High
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreReDoS Vulnerability in gaizhenbiao/chuanhuchatgpt7.5 High
- parisneo parisneo/lollms-webui, lollms web ui, parisneo parisneo\/lollms-webui +2 moreAbsolute Path Traversal in parisneo/lollms-webui7.5 High
- berriai berriai/litellm, litellm +1 moreImproper Access Control in Team Management in berriai/litellm5.3 Medium
- stitionai devika, stitionai/devika +1 moreUnprotected WebSocket in stitionai/devika7.6 High
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 morePath Traversal Vulnerability in gaizhenbiao/chuanhuchatgpt7.5 High
- Show moreLoading…