CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
netplan.ioUbuntunetplan.io regressionNo score- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM Cloud Pak for Security information disclosure4.0 Medium
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +351 more +353 moreA potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP...7.8 High
- ibm cognos analyticsIBM Cognos Analytics cross-site scripting5.4 Medium
- ibm cognos analyticsIBM Cognos Analytics improper certificate validation5.9 Medium
- ibm storage defender - resiliency service, storage defender resiliency service +1 moreIBM Storage Defender information disclosure5.3 Medium
- ibm storage defender - resiliency service, storage defender +1 moreIBM Storage Defender information disclosure6.5 Medium
- ibm mqIBM MQ denial of service5.9 Medium
- ibm mqIBM MQ information disclosure6.5 Medium
- chatgptnextweb nextchat, chatgpt-next-web +1 moreNextChat Server-Side Request Forgery (SSRF)7.4 High
- goauthentik authentikInsufficient access control for OAuth2 Device Code flow in authentik8.6 High
- ibm mqIBM MQ information disclosure6.5 Medium
- ibm mqIBM MQ privilege escalation7.5 High
- ibm mqIBM MQ denial of service5.9 Medium
- goauthentik authentikImproper Access Control and Incorrect Authorization in github.com/goauthentik/authentik8.8 High
- hushline hush line, scidsg hushline +1 moreCSP bypass in Hush Line6.3 Medium
- tenda a301, a301 firmware +1 moreTenda A301 SetOnlineDevName formWifiBasicSet stack-based overflow7.1 High
- tenda a301, a301 firmware +1 moreTenda A301 SetOnlineDevName fromSetWirelessRepeat stack-based overflow7.1 High
cupsUbuntucups regressionNo score- ibm security access manager, security verify access docker +1 moreIBM Security Access Manager Docker information disclosure6.2 Medium
- hushline hush line, scidsg hushline +1 morePersistent Cross-Site Scripting (XSS) in hushline inbox8.8 High
- ibm security access manager, security verify access docker +1 moreIBM Security Access Manager Docker information disclosure6.2 Medium
github.com/cometbft/cometbftGoCometBFT is unstability during blocksync when syncing from malicious peerNo score- nixos nixNix sandbox escape3.6 Low
- concept intermedia s@m cms, conceptintermedia s\@m cms +1 moreSQLi in S@M CMS9.8 Critical
- concept intermedia s@m cms, conceptintermedia s\@m cms +1 moreXSS in S@M CMS6.1 Medium
- concept intermedia s@m cms, conceptintermedia s\@m cms +1 moreXSS in S@M CMS6.1 Medium
- admiror-design-studio admirorframes, admiror frames +1 moreHTML Injection in AdmirorFrames Joomla! Extension6.3 Medium
- admiror-design-studio admirorframesSSRF in AdmirorFrames Joomla! Extension8.2 High
- admiror-design-studio admirorframesFull Path Disclosure in AdmirorFrames Joomla! Extension6.3 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd: read request memory leak denial-of-service vulnerability4.0 Medium
linux-firmwareTuxCare,iwl1000-firmwareTuxCare,iwl100-firmwareTuxCare +18 more +20 moreUpdate of linux-firmwareNo scorelinux-firmwareTuxCare,iwl1000-firmwareTuxCare,iwl100-firmwareTuxCare +18 more +20 moreUpdate of linux-firmwareNo score- tislam100 scylla liteScylla lite <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode6.4 Medium
- bdthemes ultimate post kit addons for elementorUltimate Post Kit Addons For Elementor – (Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline, Post Ticker, Tag Cloud) <= 3.11.7 - Authenticated (Contributor+) Stored Cross-Site…6.4 Medium
- tislam100 theron liteTheron Lite <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode6.4 Medium
- gallerycreator mixed media gallery blocksGallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via galler…6.4 Medium
- hcl software dryice aexSensitive Information Disclosure vulnerability affects DRYiCE AEX v103.3 Low
- tatvic conversios: google analytics (ga4), google ads, conversion and analytics tracking for multi-channelsConversios.io - All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce <= 7.1.0 - Reflected Cross-Site Scripting4.7 Medium
- ravichandra infiniteInfinite <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via project_url Parameter6.4 Medium
- looswebstudio seo simple packSEO SIMPLE PACK <= 3.2.1 - Information Exposure5.3 Medium
- nattywp silesiaSilesia <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode6.4 Medium
- synology camera firmware, bc500 firmware, tc500 firmware +2 moreA vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-middle attackers to obtain privileges without consent via unspecified vectors. Th…7.5 High
- hcl software dryice aexMissing Root Detection vulnerability affects DRYiCE AEX v103.3 Low
- synology router manager, router manager (srm) +1 moreDownload of code without integrity check vulnerability in AirPrint functionality in Synology...7.5 High
- synology router manager, router manager (srm) +1 moreIncorrect default permissions vulnerability in firewall functionality in Synology Router Manager ...5.9 Medium
- hcl software dryice aexLack of input validation vulnerability affects DRYiCE AEX v103.7 Low
- synology camera firmware, bc500 firmware, tc500 firmware +2 moreA vulnerability regarding incorrect authorization is found in the firmware upgrade functionality....4.9 Medium
- synology camera firmware, bc500 firmware, tc500 firmware +2 moreA vulnerability regarding improper neutralization of special elements used in an OS command ('OS...7.2 High
- synology camera firmware, bc500 firmware, tc500 firmware +2 moreA vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow')...9.8 Critical
- Show moreLoading…