Skip to content
OpenAdvisories

Archive

7 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /7 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

136 results · Feed

  • Medium 5.4
    CVE-2023-6876

    Clever Fox – One Click Website Importer by Nayra Themes <= 25.2.0 - Missing Authorization to arbitrary theme activation via clever-fox-activate-theme

    The Clever Fox – One Click Website Importer by Nayra Themes plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'clever-fox-activate-theme' function in all versions up to, and including, 25.2.0. Thi…

    nayrathemes Clever Fox Web / CMS
  • Medium 4.3
    CVE-2024-1689

    WooCommerce Tools <= 1.2.9 - Missing Authorization to Authenticated (Subscriber+) Plugin Module Deactivation

    The WooCommerce Tools plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the woocommerce_tool_toggle_module() function in all versions up to, and including, 1.2.9. This makes it possible for authentica…

    ThemeFarmer WooCommerce Tools Web / CMS
  • Medium 6.5
    CVE-2022-4968

    netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected.

    Canonical Netplan netplan.io netplan.io Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2023-49222

    Precor touchscreen console P82 contains a private SSH key that corresponds to a default public key. A remote attacker c…

  • High 8.8
    CVE-2023-49223

    Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the …

  • High 8.0
    CVE-2023-49224

    Precor touchscreen console P62, P80, and P82 contains a default SSH public key in the authorized_keys file. A remote at…

  • High 7.8
    CVE-2023-49221

    Precor touchscreen console P62, P80, and P82 could allow a remote attacker (within the local network) to bypass securit…

  • High 8.4
    CVE-2024-32502

    An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos…

  • High 7.5
    CVE-2024-36827

    ebookmeta XML External Entity vulnerability

    An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of ebookmeta before v1.2.8 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.

    ebookmeta PyPI
  • Medium 6.8
    CVE-2024-31958

    An issue was discovered in Samsung Mobile Processor EExynos 2200, Exynos 1480, Exynos 2400. It lacks a check for the va…

  • High 8.4
    CVE-2024-31959

    An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400. It lacks a check for the val…

  • High 7.2
    CVE-2024-30162

    Invision Community through 4.7.16 allows remote code execution via the applications/core/modules/admin/editor/toolbar.p…

  • Critical 9.8
    CVE-2024-30163 Scanner template

    Invision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front/store/store.php IPS\nexus…

  • Critical 9.1
    CVE-2024-37388

    ebookmeta XML External Entity vulnerability

    An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of lxml before v4.9.1 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.

    ebookmeta PyPI
  • Medium 6.1
    CVE-2024-37384

    Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via list columns from user preferences.

    roundcube roundcube Debian Ubuntu
  • Medium 6.1
    CVE-2024-37383 Exploited Public exploit EPSS 74%

    Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.

    roundcube roundcube Debian Ubuntu
    KEV Oct 24, 2024