# CVEs published 2024-06-09

107 CVEs were published on June 9, 2024: 3 critical, 25 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2024-5389](https://cve.now/CVE-2024-5389.md): Insufficient Access Control in lunary-ai/lunary (CVSS 5.7, lunary-ai/lunary)
- [CVE-2024-2408](https://cve.now/CVE-2024-2408.md): PHP is vulnerable to the Marvin Attack (CVSS 5.9, PHP Group PHP)
- [CVE-2024-4577](https://cve.now/CVE-2024-4577.md): Argument Injection in PHP-CGI (CVSS 9.8, KEV, PHP Group PHP)
- [CVE-2024-35748](https://cve.now/CVE-2024-35748.md): WordPress WooCommerce Dropshipping plugin \<= 5.0.4 - Unauthenticated Arbitrary Email Sending vulnerability (CVSS 5.3, OPMC WooCommerce Dropshipping)
- [CVE-2024-32081](https://cve.now/CVE-2024-32081.md): WordPress Filter Custom Fields & Taxonomies Light plugin \<= 1.05 - Broken Access Control vulnerability (CVSS 4.3, Websupporter Filter Custom Fields & Taxonomies Light)
- [CVE-2024-5585](https://cve.now/CVE-2024-5585.md): Command injection via array-ish $command parameter of proc\_open() (bypass CVE-2024-1874 fix) (CVSS 7.7, PHP Group PHP)
- [CVE-2024-34802](https://cve.now/CVE-2024-34802.md): WordPress AdFoxly plugin \<= 1.8.5 - Broken Access Control vulnerability (CVSS 5.3, AdFoxly – Ad Manager, AdSense Ads & Ads.txt)
- [CVE-2024-35661](https://cve.now/CVE-2024-35661.md): WordPress Upload Fields for WPForms plugin \<= 1.0.2 - Broken Access Control vulnerability (CVSS 5.3, SoftLab Upload Fields for WPForms)
- [CVE-2024-35662](https://cve.now/CVE-2024-35662.md): WordPress Simple COD Fees for WooCommerce plugin \<= 2.0.2 - Broken Access Control vulnerability (CVSS 5.4, Andreas Sofantzis Simple COD Fees for WooCommerce)
- [CVE-2024-5458](https://cve.now/CVE-2024-5458.md): Filter bypass in filter\_var (FILTER\_VALIDATE\_URL) (CVSS 5.3, PHP Group PHP)
- [CVE-2024-31275](https://cve.now/CVE-2024-31275.md): WordPress EventPrime plugin \<= 3.3.4 - Booking Price Manipulation vulnerability (CVSS 8.2, Metagauss EventPrime)
- [CVE-2024-31276](https://cve.now/CVE-2024-31276.md): WordPress Products, Order & Customers Export for WooCommerce plugin \<= 2.0.8 - Broken Access Control vulnerability (CVSS 5.3, WPFactory Products, Order & Customers Export for WooCommerce)
- [CVE-2024-31283](https://cve.now/CVE-2024-31283.md): WordPress Advanced Local Pickup for WooCommerce plugin \<=1.6.2 - Broken Access Control vulnerability (CVSS 7.5, zorem Advanced Local Pickup for WooCommerce)
- [CVE-2024-31284](https://cve.now/CVE-2024-31284.md): WordPress EmbedPress plugin \<= 3.9.8 - Broken Access Control vulnerability (CVSS 6.5, WPDeveloper EmbedPress)
- [CVE-2024-31304](https://cve.now/CVE-2024-31304.md): WordPress MultiVendorX Marketplace \<= 4.1.3 - Broken Access Control vulnerability (CVSS 7.1, MultiVendorX WC Marketplace)
- [CVE-2024-31307](https://cve.now/CVE-2024-31307.md): WordPress Easy Social Share Buttons plugin \<= 9.4 - Multiple Broken Access Control vulnerability (CVSS 6.3, appscreo Easy Social Share Buttons)
- [CVE-2024-31347](https://cve.now/CVE-2024-31347.md): WordPress Tracking Code Manager plugin \<= 2.1.0 - Broken Access Control vulnerability (CVSS 4.3, Data443 Tracking Code Manager)
- [CVE-2024-31350](https://cve.now/CVE-2024-31350.md): WordPress AWP Classifieds plugin \<= 4.3.1 - Broken Access Control vulnerability (CVSS 4.3, AWP Classifieds Team AWP Classifieds)
- [CVE-2024-31352](https://cve.now/CVE-2024-31352.md): WordPress Icegram Express plugin \<= 5.7.13 - Broken Access Control vulnerability (CVSS 5.3, Email Subscribers & Newsletters)
- [CVE-2024-31359](https://cve.now/CVE-2024-31359.md): WordPress Premmerce Product Filter for WooCommerce plugin \<= 3.7.2 - Broken Access Control vulnerability (CVSS 4.3, Premmerce Product Filter for WooCommerce)
- [CVE-2024-32701](https://cve.now/CVE-2024-32701.md): WordPress InstaWP Connect plugin \<= 0.1.0.24 - Broken Access Control vulnerability (CVSS 4.3, InstaWP Connect)
- [CVE-2024-32703](https://cve.now/CVE-2024-32703.md): WordPress ARForms plugin \<= 6.4 - Subscriber+ Arbitrary File Deletion vulnerability (CVSS 7.7, reputeinfosystems ARForms)
- [CVE-2024-31423](https://cve.now/CVE-2024-31423.md): WordPress WP Accessibility Helper (WAH) plugin \<= 0.6.2.5 - Broken Access Control vulnerability (CVSS 4.3, Alex Volkov WP Accessibility Helper)
- [CVE-2024-32704](https://cve.now/CVE-2024-32704.md): WordPress ARForms plugin \<= 6.4 - Subscriber+ Arbitrary WordPress Options Removal vulnerability (CVSS 7.1, reputeinfosystems ARForms)
- [CVE-2024-32705](https://cve.now/CVE-2024-32705.md): WordPress ARForms plugin \<= 6.4 - Subscriber+ Arbitrary Plugin Activation/Deactivation Vulnerability (CVSS 7.1, reputeinfosystems ARForms)
- [CVE-2024-32713](https://cve.now/CVE-2024-32713.md): WordPress AI Post Generator | AutoWriter plugin \<= 3.3 - Broken Access Control vulnerability (CVSS 5.4, AI Post Generator | AutoWriter)
- [CVE-2024-32714](https://cve.now/CVE-2024-32714.md): WordPress Academy LMS plugin \<= 1.9.16 - Broken Access Control vulnerability (CVSS 4.3, Academy LMS)
- [CVE-2024-32715](https://cve.now/CVE-2024-32715.md): WordPress Olive One Click Demo Import plugin \<= 1.1.1 - Arbitrary File Download vulnerability (CVSS 7.5, Olive Themes Olive One Click Demo Import)
- [CVE-2024-32725](https://cve.now/CVE-2024-32725.md): WordPress 5 Stars Rating Funnel plugin 1.2.67 - Broken Access Control vulnerability (CVSS 5.3, Saleswonder Team: Tobias 5 Stars Rating Funnel)
- [CVE-2024-32727](https://cve.now/CVE-2024-32727.md): WordPress RomethemeForm For Elementor plugin \<= 1.1.2 - Broken Access Control vulnerability (CVSS 5.3, RomethemeForm For Elementor)
- [CVE-2024-32777](https://cve.now/CVE-2024-32777.md): WordPress BizPrint plugin \<= 4.3.39 - Broken Access Control vulnerability (CVSS 7.5, BizSwoop a CPF Concepts, LLC Brand BizPrint)
- [CVE-2024-32778](https://cve.now/CVE-2024-32778.md): WordPress Contest Gallery plugin \<= 21.3.4 - Arbitrary File Deletion vulnerability (CVSS 8.5, Wasiliy Strecker / ContestGallery developer Contest Gallery)
- [CVE-2024-32779](https://cve.now/CVE-2024-32779.md): WordPress Vision – Image Map Builder plugin \<= 1.7.1 - Broken Access Control vulnerability (CVSS 5.3, Avirtum Vision Interactive)
- [CVE-2024-32783](https://cve.now/CVE-2024-32783.md): WordPress Advanced Testimonial Carousel for Elementor plugin \<= 3.0.0 - Broken Access Control vulnerability (CVSS 4.3, wpcreativeidea Advanced Testimonial Carousel for Elementor)
- [CVE-2024-32784](https://cve.now/CVE-2024-32784.md): WordPress CookieHub plugin \<= 1.1.0 - Broken Access Control vulnerability (CVSS 4.3, CookieHub)
- [CVE-2024-32787](https://cve.now/CVE-2024-32787.md): WordPress Secure Copy Content Protection and Content Locking plugin \<= 3.7.1 - Broken Access Control vulnerability (CVSS 4.3, Copy Content Protection Team Secure Copy Content Protection…)
- [CVE-2024-32792](https://cve.now/CVE-2024-32792.md): WordPress Hummingbird plugin \<= 3.7.3 - Broken Access Control vulnerability (CVSS 4.3, WPMU DEV - Your All-in-One WordPress Platform Hummingbird)
- [CVE-2024-32797](https://cve.now/CVE-2024-32797.md): WordPress WP LinkedIn Auto Publish plugin \<= 8.11 - Broken Access Control vulnerability (CVSS 5.4, Martin Gibson WP LinkedIn Auto Publish)
- [CVE-2024-32798](https://cve.now/CVE-2024-32798.md): WordPress WP Travel Engine plugin \<= 5.8.0 - Price Manipulation vulnerability (CVSS 7.5, WP Travel Engine)
- [CVE-2024-32799](https://cve.now/CVE-2024-32799.md): WordPress Easy Property Listings plugin \<= 3.5.3 - Broken Access Control vulnerability (CVSS 5.3, Merv Barrett Easy Property Listings)
- [CVE-2024-32804](https://cve.now/CVE-2024-32804.md): WordPress WP GoToWebinar plugin \<= 14.46 - Broken Access Control vulnerability (CVSS 4.3, Martin Gibson WP GoToWebinar)
- [CVE-2024-32805](https://cve.now/CVE-2024-32805.md): WordPress Social Snap plugin \<= 1.3.5 - Broken Access Control vulnerability (CVSS 6.5, Social Snap)
- [CVE-2024-32811](https://cve.now/CVE-2024-32811.md): WordPress USPS Shipping for WooCommerce – Live Rates plugin \<= 1.9.4 - Sensitive Data Exposure via Log File vulnerability (CVSS 5.3, Octolize USPS Shipping for WooCommerce – Live Rates)
- [CVE-2024-32813](https://cve.now/CVE-2024-32813.md): WordPress Integrate Google Drive plugin \<= 1.3.9 - Broken Access Control vulnerability (CVSS 5.3, SoftLab Integrate Google Drive)
- [CVE-2024-32814](https://cve.now/CVE-2024-32814.md): WordPress Advanced Local Pickup for WooCommerce plugin \<= 1.6.1 - Broken Access Control vulnerability (CVSS 5.3, Zorem Advanced Local Pickup for WooCommerce)
- [CVE-2024-32818](https://cve.now/CVE-2024-32818.md): WordPress MDTF – Meta Data and Taxonomies Filter plugin \<= 1.3.3 - Broken Access Control vulnerability (CVSS 4.3, realmag777 WordPress Meta Data and Taxonomies Filter)
- [CVE-2024-32820](https://cve.now/CVE-2024-32820.md): WordPress Social Share Icons & Social Share Buttons plugin \<= 3.6.2 - Broken Access Control lead to Notice Dismissal vulnerability (CVSS 5.3, Social Share Pro Social Share Icons & Social Share Buttons)
- [CVE-2024-32821](https://cve.now/CVE-2024-32821.md): WordPress Total Poll Lite plugin \<= 4.9.9 - Broken Access Control vulnerability (CVSS 4.3, TotalSuite Total Poll Lite)
- [CVE-2023-45188](https://cve.now/CVE-2023-45188.md): IBM Engineering Lifecycle Optimization Publishing file upload (CVSS 6.5, IBM Engineering Lifecycle Optimization Publishing)
- [CVE-2024-32824](https://cve.now/CVE-2024-32824.md): WordPress Evergreen Content Poster plugin \<= 1.4.2 - Broken Access Control vulnerability (CVSS 5.4, Evergreen Content Poster)
- [CVE-2024-33543](https://cve.now/CVE-2024-33543.md): WordPress WP Time Slots Booking Form plugin \<= 1.2.06 - Broken Access Control vulnerability (CVSS 7.5, CodePeople WP Time Slots Booking Form)
- [CVE-2024-33545](https://cve.now/CVE-2024-33545.md): WordPress WZone plugin \<= 14.0.10 - Unauthenticated Broken Access Control vulnerability (CVSS 5.3, AA-Team WZone)
- [CVE-2024-33547](https://cve.now/CVE-2024-33547.md): WordPress WZone plugin \<= 14.0.10 - Site Wide Broken Access Control vulnerability (CVSS 8.3, AA-Team WZone)
- [CVE-2024-33555](https://cve.now/CVE-2024-33555.md): WordPress XStore Core plugin \<= 5.3.8 - Multiple Authenticated Broken Access Control vulnerability (CVSS 8.1, 8theme XStore Core)
- [CVE-2024-33561](https://cve.now/CVE-2024-33561.md): WordPress XStore theme \<= 9.3.8 - Unauthenticated Broken Access Control vulnerability (CVSS 7.5, 8theme XStore)
- [CVE-2024-33563](https://cve.now/CVE-2024-33563.md): WordPress XStore theme \<= 9.3.8 - Broken Access Control vulnerability (CVSS 7.6, 8theme XStore)
- [CVE-2024-33564](https://cve.now/CVE-2024-33564.md): WordPress XStore theme \<= 9.3.8 - Arbitrary Option Update vulnerability (CVSS 8.8, 8theme XStore)
- [CVE-2024-33565](https://cve.now/CVE-2024-33565.md): WordPress Barcode Scanner with Inventory & Order Manager plugin \<= 1.5.3 - Unauthenticated Broken Access Control vulnerability (CVSS 9.1, UkrSolution Barcode Scanner with Inventory & Order Manager)
- [CVE-2024-33572](https://cve.now/CVE-2024-33572.md): WordPress Nexter Blocks plugin \<= 3.2.5 - Broken Access Control vulnerability (CVSS 4.3, POSIMYTH Nexter Blocks)
- [CVE-2024-34435](https://cve.now/CVE-2024-34435.md): WordPress Aiomatic plugin \<= 1.9.3 - Broken Access Control vulnerability (CVSS 4.3, CodeRevolution Aiomatic)
- [CVE-2024-35660](https://cve.now/CVE-2024-35660.md): WordPress Master Addons for Elementor plugin \<= 2.0.5.4.1 - Broken Access Control on API vulnerability (CVSS 6.5, Jewel Theme Master Addons for Elementor)
- [CVE-2024-35669](https://cve.now/CVE-2024-35669.md): WordPress Debug Log Manager plugin \<= 2.3.1 - Broken Access Control vulnerability (CVSS 4.3, Bowo Debug Log Manager)
- [CVE-2024-31274](https://cve.now/CVE-2024-31274.md): WordPress EmbedPress plugin \<= 3.9.11 - Broken Access Control vulnerability (CVSS 5.3, WPDeveloper EmbedPress)
- [CVE-2024-31273](https://cve.now/CVE-2024-31273.md): WordPress JS Help Desk plugin \<= 2.8.3 - Broken Access Control vulnerability (CVSS 5.3, JS Help Desk – Best Help Desk & Support Plugin)
- [CVE-2024-31267](https://cve.now/CVE-2024-31267.md): WordPress Flexible Checkout Fields for WooCommerce plugin \<= 4.1.2 - Broken Access Control vulnerability (CVSS 4.3, WP Desk Flexible Checkout Fields for WooCommerce)
- [CVE-2024-31261](https://cve.now/CVE-2024-31261.md): WordPress Announcer – Notification & message bars plugin \<= 6.0 - Broken Access Control vulnerability (CVSS 4.3, Aakash Chakravarthy Announcer – Notification & message bars)
- [CVE-2024-31252](https://cve.now/CVE-2024-31252.md): WordPress Responsive Lightbox & Gallery plugin \<= 2.4.6 - Broken Access Control vulnerability (CVSS 4.3, dFactory Responsive Lightbox)
- [CVE-2024-31248](https://cve.now/CVE-2024-31248.md): WordPress All-in-One Video Gallery plugin \<= 3.5.2 - Broken Access Control vulnerability (CVSS 4.3, Team Plugins360 All-in-One Video Gallery)
- [CVE-2024-31244](https://cve.now/CVE-2024-31244.md): WordPress Bricksforge plugin \<= 2.0.17 - Unauthenticated Arbitrary WordPress Settings Change vulnerability (CVSS 9.8, Bricksforge)
- [CVE-2024-31243](https://cve.now/CVE-2024-31243.md): WordPress Bricksforge plugin \<= 2.0.17 - Unauthenticated Arbitrary WordPress Setting Deletion vulnerability (CVSS 7.5, Bricksforge)
- [CVE-2024-30544](https://cve.now/CVE-2024-30544.md): WordPress Whizzy plugin \<= 1.1.18 - Broken Access Control vulnerability (CVSS 5.3, UPQODE Whizzy)
- [CVE-2024-30529](https://cve.now/CVE-2024-30529.md): WordPress Tainacan plugin \<= 0.20.7 - Broken Access Control vulnerability (CVSS 5.3, Tainacan)
- [CVE-2024-30517](https://cve.now/CVE-2024-30517.md): WordPress Sliced Invoices plugin \<= 3.9.2 - Broken Access Control vulnerability (CVSS 4.3, Sliced Invoices)
- [CVE-2024-30515](https://cve.now/CVE-2024-30515.md): WordPress Events Manager plugin \<= 6.4.6.4 - Broken Access Control vulnerability (CVSS 4.3, Pixelite Events Manager)
- [CVE-2024-30512](https://cve.now/CVE-2024-30512.md): WordPress weForms plugin \<= 1.6.20 - Broken Access Control vulnerability (CVSS 3.7, weForms)
- [CVE-2024-30485](https://cve.now/CVE-2024-30485.md): WordPress Finale Lite plugin \<= 2.18.0 - Subscriber+ Arbitrary Plugin Installation/Activation vulnerability (CVSS 8.8, XLPlugins Finale Lite)
- [CVE-2024-30481](https://cve.now/CVE-2024-30481.md): WordPress JCH Optimize plugin \<= 4.0.0 - Broken Access Control vulnerability (CVSS 6.5, Samuel Marshall JCH Optimize)
- [CVE-2024-30470](https://cve.now/CVE-2024-30470.md): WordPress YITH WooCommerce Account Funds Premium plugin \<= 1.32.0 - Broken Access Control vulnerability (CVSS 6.5, YITH WooCommerce Account Funds Premium)
- [CVE-2024-30467](https://cve.now/CVE-2024-30467.md): WordPress Essential Blocks plugin \<= 4.4.9 - Broken Access Control vulnerability (CVSS 6.5, WPDeveloper Essential Blocks for Gutenberg)
- [CVE-2024-30466](https://cve.now/CVE-2024-30466.md): WordPress WooCommerce Multilingual & Multicurrency plugin \<= 5.3.4 - Broken Access Control vulnerability (CVSS 5.4, OnTheGoSystems WooCommerce Multilingual & Multicurrency)
- [CVE-2024-30465](https://cve.now/CVE-2024-30465.md): WordPress PageLayer plugin \<= 1.8.1 - Broken Access Control vulnerability (CVSS 6.5, Pagelayer Team PageLayer)
- [CVE-2024-30464](https://cve.now/CVE-2024-30464.md): WordPress Social Icons Widget & Block by WPZOOM plugin \<= 4.2.15 - Broken Access Control vulnerability (CVSS 5.4, Social Icons Widget & Block by WPZOOM)
- [CVE-2024-25929](https://cve.now/CVE-2024-25929.md): WordPress Product Catalog Mode For Woocommerce plugin \<= 5.0.5 - Broken Access Control vulnerability (CVSS 6.5, Product Catalog Enquiry for WooCommerce by MultiVendorX)
- [CVE-2024-25092](https://cve.now/CVE-2024-25092.md): WordPress NextMove Lite plugin \<= 2.17.0 - Subscriber+ Arbitrary Plugin Installation/Activation vulnerability (CVSS 8.8, XLPlugins NextMove Lite)
- [CVE-2024-24716](https://cve.now/CVE-2024-24716.md): WordPress Awesome Support plugin \<= 6.1.6 - Broken Access Control vulnerability (CVSS 5.4, Awesome Support Team Awesome Support)
- [CVE-2023-34003](https://cve.now/CVE-2023-34003.md): WordPress WooCommerce Box Office plugin \<= 1.1.51 - Unauthenticated Save Ticket Barcode vulnerability (CVSS 6.5, WooCommerce Box Office)
- [CVE-2023-31080](https://cve.now/CVE-2023-31080.md): WordPress Unlimited Elements For Elementor plugin \<= 1.5.65 - Multiple Broken Access Control vulnerability (CVSS 8.3, Unlimited Elements For Elementor)
- [CVE-2023-23640](https://cve.now/CVE-2023-23640.md): WordPress MainWP UpdraftPlus Extension Plugin \<= 4.0.6 - Subscriber+ Arbitrary Plugin Activation Vulnerability (CVSS 5.4, MainWP UpdraftPlus Extension)
- [CVE-2023-23639](https://cve.now/CVE-2023-23639.md): WordPress MainWP Staging Extension Plugin \<= 4.0.3 - Subscriber+ Arbitrary Plugin Activation Vulnerability (CVSS 5.4, MainWP Staging Extension)
- [CVE-2023-51494](https://cve.now/CVE-2023-51494.md): WordPress WooCommerce Product Vendors plugin \<= 2.2.1 - Broken Access Control vulnerability (CVSS 5.3, WooCommerce Product Vendors)
- [CVE-2023-52230](https://cve.now/CVE-2023-52230.md): WordPress Booster Plus for WooCommerce plugin \< 7.1.3 - Authenticated Arbitrary WordPress Option Disclosure Vulnerability (CVSS 6.5, Pluggabl Booster Plus for WooCommerce)
- [CVE-2023-52232](https://cve.now/CVE-2023-52232.md): WordPress Booster Plus for WooCommerce plugin \< 7.1.2 - Authenticated Arbitrary Post/Page Deletion Vulnerability (CVSS 6.5, Pluggabl Booster Plus for WooCommerce)
- [CVE-2024-30539](https://cve.now/CVE-2024-30539.md): WordPress Awesome Support plugin \<= 6.1.7 - Broken Access Control vulnerability (CVSS 5.3, Awesome Support Team Awesome Support)
- [CVE-2024-30534](https://cve.now/CVE-2024-30534.md): WordPress Calendarista Basic Edition plugin \<= 3.0.5 - Broken Access Control vulnerability (CVSS 6.5, typps Calendarista Basic Edition)
- [CVE-2024-30537](https://cve.now/CVE-2024-30537.md): WordPress WPC Badge Management for WooCommerce plugin \<= 2.4.0 - Broken Access Control vulnerability (CVSS 4.3, WPClever WPC Badge Management for WooCommerce)
- [CVE-2024-30538](https://cve.now/CVE-2024-30538.md): WordPress DELUCKS SEO plugin \<= 2.5.4 - Broken Access Control vulnerability (CVSS 5.3, DELUCKS SEO)
- [CVE-2024-31098](https://cve.now/CVE-2024-31098.md): WordPress New Order Notification for Woocommerce plugin \<= 2.0.2 - Broken Access Control vulnerability (CVSS 7.1, Mr.Ebabi New Order Notification for Woocommerce)
- [CVE-2024-31246](https://cve.now/CVE-2024-31246.md): WordPress PostX plugin \<= 3.2.3 - Author+ Post/Page Duplication vulnerability (CVSS 5.4, WPXPO PostX)
- [CVE-2024-31294](https://cve.now/CVE-2024-31294.md): WordPress WP Sort Order plugin \<= 1.3.1 - Broken Access Control vulnerability (CVSS 4.3, Fahad Mahmood WP Sort Order)
- [CVE-2024-5775](https://cve.now/CVE-2024-5775.md): SourceCodester Vehicle Management System updatebill.php sql injection (CVSS 6.9, SourceCodester Vehicle Management System)
- [CVE-2024-5774](https://cve.now/CVE-2024-5774.md): SourceCodester Stock Management System Login index.php sql injection (CVSS 6.9, SourceCodester Stock Management System)
- [CVE-2024-5773](https://cve.now/CVE-2024-5773.md): Netentsec NS-ASG Application Security Gateway deletemacbind.php sql injection (CVSS 5.3, Netentsec NS-ASG Application Security Gateway)
- [CVE-2024-5772](https://cve.now/CVE-2024-5772.md): Netentsec NS-ASG Application Security Gateway deleteiscuser.php sql injection (CVSS 5.3, Netentsec NS-ASG Application Security Gateway)
- [CVE-2024-37535](https://cve.now/CVE-2024-37535.md): GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related (CVSS 4.4)
- [CVE-2024-37568](https://cve.now/CVE-2024-37568.md): lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys. (CVSS 7.5, authlib)
- [CVE-2024-37569](https://cve.now/CVE-2024-37569.md): An issue was discovered on Mitel 6869i through 4.5.0.41 and 5.x through 5.0.0.1018 devices. (CVSS 8.3)
- [CVE-2024-37570](https://cve.now/CVE-2024-37570.md): On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update (upgrade.html) page does not perform sanitization on the username and path param (CVSS 8.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-06-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.