Skip to content
OpenAdvisories

Archive

15 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /15 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.4
    CVE-2024-27275

    IBM i privilege escalation

    IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability caused by an insufficient authority requirement. A local user without administrator privilege can configure a physical file trigger to execute with the privileges of a user socia…

    IBM i
  • High 7.1
    CVE-2024-6000

    FooEvents for WooCommerce <= 1.19.20 - Improper Authorization to (Contributor+) Arbitrary File Upload

    The FooEvents for WooCommerce plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improper capability setting on the 'display_ticket_themes_page' function in versions up to, and including, 1.19.20. This makes it possible for au…

    FooEvents FooEvents for WooCommerce Web / CMS
  • High 8.1
    CVE-2023-6696

    Popup Builder – Create highly converting, mobile friendly marketing popups <= 4.3.1 - Missing Authorization and Nonce Exposure

    The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 4.3.1. Whil…

    Popup-Builder Popup Builder – Create highly converting, mobile friendly marketing popups. Web / CMS
  • High 8.8
    CVE-2024-3813

    tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode

    The tagDiv Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.8 via the 'td_block_title' shortcode 'block_template_id' attribute. This makes it possible for authenticated attackers, with contributor-lev…

    tagDiv tagDiv Composer Web / CMS
  • High 7.4
    CVE-2024-2544

    Popup Builder <= 4.3.0 - Missing Authorization in Multiple AJAX Actions

    The Popup Builder plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on all AJAX actions. This makes it possible for authenticated attackers, with subscriber-level access and above, to pe…

    Popup-Builder Popup Builder – Create highly converting, mobile friendly marketing popups. Web / CMS