Skip to content
OpenAdvisories

Archive

June 2024

Vulnerabilities first published in this month (UTC), newest first.

← May 2024 2024 / June July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

1,633 results · Clear filters · Feed

  • Medium 6.7
    CVE-2024-29060

    Visual Studio Elevation of Privilege Vulnerability

    Visual Studio Elevation of Privilege Vulnerability

    Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
  • Medium 5.5
    CVE-2024-35255

    Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

    Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

    Microsoft Azure Identity Library for .NET Microsoft Authentication Library Azure Identity Library for C++ Azure Linux Wolfi npm Maven PyPI Go NuGet
  • Medium 6.8
    CVE-2024-30076

    Windows Container Manager Service Elevation of Privilege Vulnerability

    Windows Container Manager Service Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Medium 4.7
    CVE-2024-30069

    Windows Remote Access Connection Manager Information Disclosure Vulnerability

    Windows Remote Access Connection Manager Information Disclosure Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Medium 5.3
    CVE-2024-34763

    WordPress Builder for WooCommerce reviews shortcodes – ReviewShort plugin <= 1.01.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Saleswonder Team: Tobias Builder for WooCommerce reviews shortcodes – ReviewShort woo-product-reviews-shortcode.This issue affects Builder for WooCommerce reviews shortcodes – ReviewShort: from n/a through <= 1.01.5.

    Saleswonder Team: Tobias Builder for WooCommerce reviews shortcodes – ReviewShort Web / CMS
  • Medium 5.3
    CVE-2024-34768

    WordPress Fastly plugin <= 1.2.25 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25.

    Fastly Fastly
  • Medium 6.5
    CVE-2024-34799

    WordPress BookingPress plugin <= 1.0.82 - Appointment Duration Manipulation vulnerability

    Missing Authorization vulnerability in Repute Infosystems BookingPress.This issue affects BookingPress: from n/a through 1.0.82.

    Repute InfoSystems BookingPress
  • Medium 5.3
    CVE-2023-48273

    WordPress Preloader for Website plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerability

    Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Preloader for Website.This issue affects Preloader for Website: from n/a through 1.2.2.

    WP OnlineSupport, Essential Plugin Preloader for Website
  • Medium 4.3
    CVE-2023-52227

    WordPress MailerLite – WooCommerce integration plugin <= 2.0.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in MailerLite MailerLite – WooCommerce integration.This issue affects MailerLite – WooCommerce integration: from n/a through 2.0.8.

    MailerLite MailerLite – WooCommerce integration Web / CMS
  • Medium 5.4
    CVE-2024-34804

    WordPress Tagembed plugin <= 5.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Tagembed.This issue affects Tagembed: from n/a through 5.8.

    Tagembed Tagembed
  • Medium 5.4
    CVE-2024-34815

    WordPress Import and export users and customers plugin <= 1.26.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through <= 1.26.5.

    Javier Carazo Import and export users and customers
  • Medium 4.3
    CVE-2023-52224

    WordPress Revolut Gateway for WooCommerce plugin <= 4.9.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Revolut Revolut Gateway for WooCommerce.This issue affects Revolut Gateway for WooCommerce: from n/a through 4.9.7.

    Revolut Revolut Gateway for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2024-34758

    WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.6.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Wpmet WP Fundraising Donation and Crowdfunding Platform.This issue affects WP Fundraising Donation and Crowdfunding Platform: from n/a through 1.6.4.

    Wpmet WP Fundraising Donation and Crowdfunding Platform
  • Medium 5.3
    CVE-2024-34819

    WordPress MC Woocommerce Wishlist plugin <= 1.7.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This issue affects MC Woocommerce Wishlist: from n/a through <= 1.7.2.

    Moreconvert Team MC Woocommerce Wishlist Web / CMS
  • Medium 4.3
    CVE-2024-23503

    WordPress Ninja Tables plugin <= 5.0.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.6.

    WP ManageNinja Ninja Tables
  • Medium 5.3
    CVE-2024-34821

    WordPress Contact List plugin <= 2.9.87 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Anssi Laitila Contact List contact-list.This issue affects Contact List: from n/a through <= 2.9.87.

    Anssi Laitila Contact List
  • Medium 5.3
    CVE-2024-34753

    WordPress Radio Player plugin <= 2.0.73 - Broken Access Control vulnerability

    Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.

    SoftLab Radio Player
  • Medium 4.3
    CVE-2023-51519

    WordPress Slider by Soliloquy – Responsive Image Slider for WordPress plugin <= 2.7.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Soliloquy Team Slider by Soliloquy.This issue affects Slider by Soliloquy: from n/a through 2.7.2.

    Soliloquy Team Slider by Soliloquy Web / CMS
  • Medium 5.4
    CVE-2024-32144

    WordPress Welcart e-Commerce plugin <= 2.9.14 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14.

    Welcart Welcart e-Commerce
  • Medium 5.9
    CVE-2024-5813

    SSH Private Key Leak in BeyondInsight PasswordSafe

    A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.

    BeyondTrust BeyondInsight PasswordSafe
  • Medium 5.3
    CVE-2024-23521

    WordPress Happyforms plugin <= 1.25.10 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Happyforms.This issue affects Happyforms: from n/a through 1.25.10.

    Happyforms Happyforms
  • Medium 5.3
    CVE-2023-51682

    WordPress MC4WP plugin <= 4.9.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ibericode MC4WP.This issue affects MC4WP: from n/a through 4.9.9.

    ibericode MC4WP
  • Medium 5.3
    CVE-2024-34822

    WordPress weMail plugin <= 1.14.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in weDevs weMail.This issue affects weMail: from n/a through 1.14.2.

    wedevs weMail
  • Medium 6.3
    CVE-2024-34826

    WordPress CF7 WOW Styler plugin <= 1.6.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler.This issue affects CF7 WOW Styler: from n/a through <= 1.6.4.

    Saleswonder Team: Tobias CF7 WOW Styler
  • Medium 6.5
    CVE-2024-34820

    WordPress If-So Dynamic Content Personalization plugin <= 1.7.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in If So Plugin If-So Dynamic Content Personalization.This issue affects If-So Dynamic Content Personalization: from n/a through 1.7.1.

    If So Plugin If-So Dynamic Content Personalization
  • Medium 4.3
    CVE-2024-32148

    WordPress Pardot plugin <= 2.1.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Salesforce Pardot.This issue affects Pardot: from n/a through 2.1.0.

    Salesforce Pardot
  • Medium 5.3
    CVE-2024-37296

    Aimeos HTML client vulnerable to digital products download without proper payment status check

    The Aimeos HTML client provides Aimeos HTML components for e-commerce projects. Starting in version 2020.04.1 and prior to versions 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5, digital downloads sold in online shops can be downloaded without…

    aimeos ai-client-html aimeos/ai-client-html Packagist
  • Medium 4.3
    CVE-2024-35168

    WordPress WP Discourse plugin <= 2.5.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Discourse WP Discourse.This issue affects WP Discourse: from n/a through 2.5.1.

    Discourse WP Discourse
  • Medium 5.3
    CVE-2023-51498

    WordPress WooCommerce Canada Post Shipping plugin <= 2.8.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Woo WooCommerce Canada Post Shipping.This issue affects WooCommerce Canada Post Shipping: from n/a through 2.8.3.

    Woo WooCommerce Canada Post Shipping Web / CMS
  • Medium 6.7
    CVE-2024-26010

    A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, Forti…

    Fortinet FortiOS FortiProxy FortiPAM Network devices
  • Medium 6.3
    CVE-2023-46720

    A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through…

    Fortinet FortiOS Network devices
  • Medium 5.9
    CVE-2023-23775

    Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerabilities [CWE-89] in…

    Fortinet FortiSOAR Network devices
  • Medium 6.2
    CVE-2024-23111

    An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in Forti…

    Fortinet FortiOS FortiProxy Network devices
  • Medium 4.3
    CVE-2024-35628

    WordPress Photo Gallery by 10Web plugin <= 1.8.25 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.25.

    Photo Gallery Team Photo Gallery by 10Web
  • Medium 6.5
    CVE-2022-40225

    A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (…

    Siemens TIM 1531 IRC SIPLUS TIM 1531 IRC ICS / OT
  • Medium 5.4
    CVE-2024-35663

    WordPress WP Translate plugin <= 5.3.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in HahnCreativeGroup WP Translate.This issue affects WP Translate: from n/a through 5.3.0.

    HahnCreativeGroup WP Translate
  • Medium 5.5
    CVE-2024-37294

    Aimeos denial of service vulnerability in SaaS and marketplace setups

    Aimeos is an Open Source e-commerce framework for online shops. All SaaS and marketplace setups using Aimeos version from 2022/2023/2024 are affected by a potential denial of service attack. Users should upgrade to versions 2022.10.17, 2023.10.17, or 2024.04 …

    aimeos aimeos-core aimeos/aimeos-core Packagist
  • Medium 6.5
    CVE-2023-52199

    WordPress ActivityPub plugin <= 1.0.5 - Unauthenticated Broken Access Control vulnerability

    Missing Authorization vulnerability in Matthias Pfefferle & Automattic ActivityPub.This issue affects ActivityPub: from n/a through 1.0.5.

    Matthias Pfefferle & Automattic ActivityPub
  • Medium 4.4
    CVE-2024-35235

    Cupsd Listen arbitrary chmod 0140777

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine
  • Medium 5.3
    CVE-2024-35665

    WordPress Insert Post Ads plugin <= 1.3.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in namithjawahar Insert Post Ads.This issue affects Insert Post Ads: from n/a through 1.3.2.

    namithjawahar Insert Post Ads