Skip to content
OpenAdvisories

Archive

11 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /11 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

125 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-5090

    SiteOrigin Widgets Bundle <= 1.61.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog Widget

    The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's SiteOrigin Blog Widget in all versions up to, and including, 1.61.1 due to insufficient input sanitization and output escaping on user supplied at…

    gpriday SiteOrigin Widgets Bundle Web / CMS
  • Medium 6.4
    CVE-2023-6745

    Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

    The Custom Field Template plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cpt' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied post meta. Thi…

    hiroaki-miyashita Custom Field Template Web / CMS
  • Medium 5.0
    CVE-2024-37178

    Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation

    SAP Financial Consolidation does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. These endpoints are exposed over the network. The vulnerability can exploit resources beyond the vulnerable component. On s…

    SAP SAP Financial Consolidation
  • Medium 5.3
    CVE-2024-34406

    Improper exception handling in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to cause…

  • Medium 6.5
    CVE-2024-26330

    An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remai…