CVEs published June 13, 2024
320 CVEs were published on June 13, 2024: 17 critical, 72 high. 2 are now in CISA KEV.
- Published
- 320
- Critical
- 17
- High
- 72
- Medium
- 225
- Low
- 6
- Unrated
- 0
- Now in CISA KEV
- 2
- Fix available
- 30
Most affected products
- Adobe Experience Manager
- 143
- Google Android
- 45
- Adobe Commerce · magento/community-edition
- 7
- Dell Secure Connect Gateway-Application · Dell Secure Conne…
- 7
- Motorola Solutions Vigilant Fixed LPR Coms Box
- 7
- Deep Sea Electronics DSE855
- 6
- nvidia vGPU software and Cloud Gaming
- 6
- Dell CPG BIOS
- 4
- nvidia GPU display driver, vGPU software, and Cloud Gaming
- 4
- Adobe Commerce
- 3
Critical 17
- CVE-2024-32913In wl_notify_rx_mgmt_frame of wl_cfg80211.c, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2024-32905In circ_read of link_device_memory_legacy.c, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2024-32900In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking.Google Android
- CVE-2024-32895In BCMFASTPATH of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-22441HPE Cray Parallel Application Launch Service (PALS) is subject to an authentication bypass.Hewlett Packard Enterprise (HPE) Cray System Management Sof…
- CVE-2024-30300Tenable Vulnerability Disclosure | Sensitive Information Disclosure Via Fake FMPS WorkerAdobe Framemaker Publishing Server
- CVE-2024-30299Tenable Vulnerability Disclosure | API Auth BypassAdobe Framemaker Publishing Server
- CVE-2024-34102XXE can expose crypt key and other secrets granting full admin accessAdobe Commerce · magento/community-edition
- CVE-2024-34108Large attack surface through legit webhook usage in Adobe CommerceAdobe Commerce
- CVE-2024-4371CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Unauthenticated PHP Object Injectioncodexpert CoDesigner – All in One Elementor WooCommerce Bui…
- CVE-2024-3552Web Directory Free < 1.7.0 - Unauthenticated SQL InjectionWeb Directory Free
- CVE-2024-3922Dokan Pro <= 3.10.3 - Unauthenticated SQL Injectionwedevs Dokan Pro
- CVE-2024-31777File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary code via a crafted file to the certbadge.p
- CVE-2024-37634TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiEasyCfg.
- CVE-2024-37635TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg
- CVE-2024-37849A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the us
- CVE-2024-38293ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php.
High 72
- CVE-2024-0084CVEnvidia vGPU software and Cloud Gaming
- CVE-2024-0099CVEnvidia vGPU software and Cloud Gaming
- CVE-2024-0091CVEnvidia GPU display driver, vGPU software, and Cloud Gaming
- CVE-2024-0089CVEnvidia GPU display driver, vGPU software, and Cloud Gaming
- CVE-2024-0090CVEnvidia GPU display driver, vGPU software, and Cloud Gaming
- CVE-2024-32925In dhd_prot_txstatus_process of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-32924In DeregAcceptProcINT of cn_NrmmStateDeregInit.cpp, there is a possible denial of service due to a logic error in the code.Google Android
- CVE-2024-32922In gpu_pm_power_on_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a logic error in the code.Google Android
- CVE-2024-32921In lwis_initialize_transaction_fences of lwis_fence.c, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-32920In set_secure_reg of sac_handler.c, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-32919In lwis_add_completion_fence of lwis_fence.c, there is a possible escalation of privilege due to type confusion.Google Android
- CVE-2024-32917In pl330_dma_from_peri_start() of fp_spi_dma.c, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-32911There is a possible escalation of privilege due to improperly used crypto.Google Android
- CVE-2024-32909In handle_msg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2024-32908In sec_media_protect of media.c, there is a possible permission bypass due to a race condition.Google Android
- CVE-2024-32907In memcall_add of memlog.c, there is a possible buffer overflow due to improper input validation.Google Android
- CVE-2024-32906In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data.Google Android
- CVE-2024-32903In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validation.Google Android
- CVE-2024-32902Remote prevention of access to cellular service with no user interaction (for example, crashing the cellular radio service with a malformed Google Android
- CVE-2024-32901In v4l2_smfc_qbuf of smfc-v4l2-ioctls.c, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-32899In gpu_pm_power_off_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a race condition.Google Android
- CVE-2024-32896there is a possible way to bypass due to a logic error in the code.Google Android
- CVE-2024-32894In bc_get_converted_received_bearer of bc_utilities.c, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-32893In _s5e9865_mif_set_rate of exynos_dvfs.c, there is a possible out of bounds read due to improper casting.Google Android
- CVE-2024-32892In handle_init of goodix/main/main.c, there is a possible memory corruption due to type confusion.Google Android
- CVE-2024-32891In sec_media_unprotect of media.c, there is a possible memory corruption due to a race condition.Google Android
- CVE-2024-29787In lwis_process_transactions_in_queue of lwis_transaction.c, there is a possible use after free due to a use after free.Google Android
- CVE-2024-29784In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2024-29781In ss_AnalyzeOssReturnResUssdArgIe of ss_OssAsnManagement.c, there is a possible out of bounds read due to improper input validation.Google Android
- CVE-2024-32929In gpu_slc_get_region of pixel_gpu_slc.c, there is a possible EoP due to a use after free.Google Android
- CVE-2024-4696A privilege escalation vulnerability was reported in Lenovo Service Bridge prior to version 5.0.2.17 that could allow operating system commaLenovo Service Bridge
- CVE-2024-5948Deep Sea Electronics DSE855 Multipart Boundary Stack-Based Buffer Overflow Remote Code Execution VulnerabilityDeep Sea Electronics DSE855
- CVE-2024-5950Deep Sea Electronics DSE855 Multipart Value Handling Stack-Based Buffer Overflow Remote Code Execution VulnerabilityDeep Sea Electronics DSE855
- CVE-2024-5951Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service VulnerabilityDeep Sea Electronics DSE855
- CVE-2024-5924Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass VulnerabilityDropbox Desktop
- CVE-2024-38285Insufficiently Protected Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)Motorola Solutions Vigilant Fixed LPR Coms Box
- CVE-2024-37022Fuji Electric Tellus Lite V-Simulator Out-of-bounds WriteFuji Electric Tellus Lite V-Simulator
- CVE-2024-37029Fuji Electric Tellus Lite V-Simulator Stack-based Buffer OverflowFuji Electric Tellus Lite V-Simulator
- CVE-2024-38284Authentication Bypass by Capture-replay in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)Motorola Solutions Vigilant Fixed LPR Coms Box
- CVE-2024-38282Insufficiently Protected Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)Motorola Solutions Vigilant Fixed LPR Coms Box
- CVE-2024-38281Use of Hard-coded Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)Motorola Solutions Vigilant Fixed LPR Coms Box
- CVE-2024-38280Cleartext Storage in a File or on Disk in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)Motorola Solutions Vigilant Fixed LPR Coms Box
- CVE-2024-37307Cilium leaks sensitive information in cilium-bugtoolcilium · github.com/cilium/cilium
- CVE-2024-37131SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability.Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2024-37306CVAT's export and backup-related API endpoints are susceptible to CSRFcvat-ai cvat
- CVE-2024-37164CVAT SSRF via custom cloud storage endpointscvat-ai cvat
- CVE-2024-32860Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component.Dell CPG BIOS
- CVE-2024-32858Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component.Dell CPG BIOS
- CVE-2024-32859Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component.Dell CPG BIOS
- CVE-2024-36396Verint - CWE-434: Unrestricted Upload of File with Dangerous TypeVerint WFO
- CVE-2024-34129Acrobat Android : OverSecured Finding : Overwriting arbitrary files via attacker-controlled output file pathsAdobe Acrobat Mobile Sign Android
- CVE-2024-34112ColdFusion CFDOCUMENT file retrieval / access control bypassAdobe ColdFusion
- CVE-2024-34116Adobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege EscalationAdobe Creative Cloud Desktop
- CVE-2024-34115ZDI-CAN-24054: Adobe Substance 3D Stager SKP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Substance3D - Stager
- CVE-2024-20753Adobe Photoshop PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityAdobe Photoshop Desktop
- CVE-2024-30472Telemetry Dashboard v1.0.0.8 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability.Dell Wyse 5070 Thin Client
- CVE-2024-34103Customer account takeover via web API call & subsequent password resetAdobe Commerce · magento/community-edition
- CVE-2024-34109Adobe Commerce | Improper Input Validation (CWE-20)Adobe Commerce
- CVE-2024-34110RCE in the Adobe Commerce Webhook module through a legit webhook definitionAdobe Commerce
- CVE-2024-34104Adobe Commerce | Improper Authorization (CWE-285)Adobe Commerce · magento/community-edition
- CVE-2024-26029Adobe Experience Manager | Improper Access Control (CWE-284)Adobe Experience Manager
- CVE-2024-2098Download Manager <= 3.2.89 - Improper Authorization via protectMediaLibrarycodename065 Download Manager
- CVE-2024-31956An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400.
- CVE-2024-32504An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, E
- CVE-2024-36586An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary.github.com/AdguardTeam/AdGuardHome
- CVE-2024-36587Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting
- CVE-2024-36760A stack overflow vulnerability was found in version 1.18.0 of rhai.rhai
- CVE-2024-37630D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as ro
- CVE-2024-37631TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the File parameter in function UploadCustomModule.
- CVE-2024-37633TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiGuestCfg
- CVE-2024-38294ALCASAR before 3.6.1 allows email_registration_back.php remote code execution.
- CVE-2024-38295ALCASAR before 3.6.1 allows still_connected.php remote code execution.
Medium, low and unrated 231
- CVE-2023-29174WordPress SKU Label Changer For WooCommerce plugin <= 3.0 - Broken Access Control vulnerabilityNervyThemes SKU Label Changer For WooCommerce
- CVE-2023-35040WordPress SendPress Newsletters plugin <= 1.23.11.6 - Broken Access Control vulnerabilitySendPress Newsletters
- CVE-2023-35045WordPress Fat Rat Collect plugin <= 2.6.7 - Broken Access Control vulnerabilityFat Rat Collect
- CVE-2023-36504WordPress BBS e-Popup plugin <= 2.4.5 - Broken Access Control vulnerabilityBBS e-Theme BBS e-Popup
- CVE-2023-36694WordPress Kingkong Board plugin <= 2.1.0.2 - Broken Access Control vulnerabilityBryan Lee Kingkong Board
- CVE-2023-36695WordPress Sublanguage plugin <= 2.9 - Broken Access Control vulnerabilityMaxime Schoeni Sublanguage
- CVE-2023-37394WordPress WP Dummy Content Generator plugin <= 2.3.0 - Broken Access Control vulnerabilityDeepak anand WP Dummy Content Generator
- CVE-2024-0086CVEnvidia vGPU software and Cloud Gaming
- CVE-2024-0094CVEnvidia vGPU software and Cloud Gaming
- CVE-2024-0085CVEnvidia vGPU software and Cloud Gaming
- CVE-2024-0092CVEnvidia GPU display driver, vGPU software, and Cloud Gaming
- CVE-2024-0093CVEnvidia vGPU software and Cloud Gaming
- CVE-2024-0095CVENVIDIA Triton Inference Server
- CVE-2024-0103CVENVIDIA Triton Inference Server
- CVE-2024-32930In plugin_ipc_handler of slc_plugin.c, there is a possible information disclosure due to uninitialized data.Google Android
- CVE-2024-32926there is a possible information disclosure due to side channel information disclosure.Google Android
- CVE-2024-32923there is a possible cellular denial of service due to a logic error in the code.Google Android
- CVE-2024-32918Permission Bypass allowing attackers to disable HDCP 2.2 encryption by not completing the HDCP Key Exchange initialization stepsGoogle Android
- CVE-2024-32916In fvp_freq_histogram_init of fvp.c, there is a possible Information Disclosure due to uninitialized data.Google Android
- CVE-2024-32915In CellInfoListParserV2::FillCellInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-32914In tpu_get_int_state of tpu.c, there is a possible information disclosure due to uninitialized data.Google Android
- CVE-2024-32912there is a possible persistent Denial of Service due to test/debugging code left in a production build.Google Android
- CVE-2024-32910In handle_msg_shm_map_req of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to uninitialized data.Google Android
- CVE-2024-32904In ProtocolVsimOperationAdapter() of protocolvsimadapter.cpp, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-32898In ProtocolCellIdentityParserV4::Parse() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-32897In ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() of protocolsmsadapter.cpp, there is a possible out of bounds read due to a missing bounds Google Android
- CVE-2024-29786In pktproc_fill_data_addr_without_bm of link_rx_pktproc.c, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-29785In aur_get_state of aurora.c, there is a possible information disclosure due to uninitialized data.Google Android
- CVE-2024-29780In hwbcc_ns_deprivilege of trusty/user/base/lib/hwbcc/client/hwbcc.c, there is a possible uninitialized stack data disclosure due to uninitiGoogle Android
- CVE-2024-29778In ProtocolPsDedicatedBearInfoAdapter::processQosSession of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bGoogle Android
- CVE-2024-5976SourceCodester Employee and Visitor Gate Pass Logging System log_employee sql injectionSourceCodester Employee and Visitor Gate Pass Logging System
- CVE-2024-38312When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed Mozilla Firefox for iOS
- CVE-2024-38313In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual websiteMozilla Firefox for iOS
- CVE-2024-5947Deep Sea Electronics DSE855 Configuration Backup Missing Authentication Information Disclosure VulnerabilityDeep Sea Electronics DSE855
- CVE-2024-5949Deep Sea Electronics DSE855 Multipart Boundary Infinite Loop Denial-of-Service VulnerabilityDeep Sea Electronics DSE855
- CVE-2024-5952Deep Sea Electronics DSE855 Restart Missing Authentication Denial-of-Service VulnerabilityDeep Sea Electronics DSE855
- CVE-2024-38083Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft Edge for Android · Microsoft Edge for iOS
- CVE-2024-30057Microsoft Edge for iOS Spoofing VulnerabilityMicrosoft Edge for iOS
- CVE-2024-30058Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft Edge
- CVE-2024-38283Missing Encryption of Sensitive Data in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)Motorola Solutions Vigilant Fixed LPR Coms Box
- CVE-2024-37279Kibana Broken Access Control issueElastic Kibana
- CVE-2024-38279Authentication Bypass Using an Alternate Path or Channel in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)Motorola Solutions Vigilant Fixed LPR Coms Box
- CVE-2024-37280Elasticsearch StackOverflow vulnerabilityElasticsearch · org.elasticsearch:elasticsearch
- CVE-2024-29169Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST API.Dell Secure Connect Gateway-Application · Dell Secure Conne…
- CVE-2024-29168Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST API.Dell Secure Connect Gateway-Application · Dell Secure Conne…
- CVE-2024-28969Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API Dell Secure Connect Gateway-Application · Dell Secure Conne…
- CVE-2024-28968Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for internal email and collectioDell Secure Connect Gateway-Application · Dell Secure Conne…
- CVE-2024-28967Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal maintenance RESTDell Secure Connect Gateway-Application · Dell Secure Conne…
- CVE-2024-28966Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API Dell Secure Connect Gateway-Application · Dell Secure Conne…
- CVE-2024-28965Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal enable REST API Dell Secure Connect Gateway-Application · Dell Secure Conne…
- CVE-2024-37309Client initialized Session-Renegotiation DoScrate · io.crate:crate
- CVE-2024-22333IBM Maximo Application Suite information disclosureIBM Maximo Application Suite · IBM Maximo Asset Management
- CVE-2024-37308WordPress Cooked Plugin - Authenticated (Contributor+) Persistent Cross-Site Scripting VulnerabilityXjSv Cooked
- CVE-2024-25052IBM Jazz Reporting Service information disclosureIBM Jazz Reporting Service
- CVE-2024-36395Verint - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)Verint WFO
- CVE-2024-32856Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component.Dell CPG BIOS
- CVE-2024-34130Acrobat Android : OverSecured Finding : Access to arbitrary* content providers via insecure Intent configurationAdobe Acrobat Mobile Sign Android
- CVE-2024-34113ColdFusion | Weak Cryptography for Passwords (CWE-261)Adobe ColdFusion
- CVE-2024-30278Adobe Media Encoder 2024 TGA File parsing memory corruptionAdobe Media Encoder
- CVE-2024-34106Insecure Direct Object Reference - An attacker can able to erase the victim quote detailsAdobe Commerce · magento/community-edition
- CVE-2024-34111SSRF in service connectorAdobe Commerce · magento/community-edition
- CVE-2024-34107Adobe Commerce | Improper Access Control (CWE-284)Adobe Commerce · magento/community-edition
- CVE-2024-34105Stored Cross Site Scripting in Order CommentAdobe Commerce · magento/community-edition
- CVE-2024-4176An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-InjectTrellix EDR UI
- CVE-2024-0979Dashboard Widgets Suite <= 3.4.3 - Reflected Cross-Site Scriptingspecialk Dashboard Widgets Suite
- CVE-2024-1565EmbedPress <= 3.9.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via PDF Widget URLwpdevteam EmbedPress – PDF Embedder, Embed YouTube Videos,…
- CVE-2024-3073Easy WP SMTP by SendLayer <= 2.3.0 - Exposure of Sensitive Information via the UIsmub Easy WP SMTP – WordPress SMTP and Email Logs: Gmail, O…
- CVE-2024-30285Adobe Audition 2024 MP4 File Parsing Null Pointer DereferenceAdobe Audition
- CVE-2024-30276Adobe Audition 2024 M2V File Parsing Memory corruptionAdobe Audition
- CVE-2024-36213Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26126Adobe Experience Manager | Improper Input Validation (CWE-20)Adobe Experience Manager
- CVE-2024-36150Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36238Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36239Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26037Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36156Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36229Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-20769Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36236Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36157Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-34120Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26082Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26088Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36211Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36224Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36233Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36225Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26110Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36206Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36153Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36160Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26075Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36230Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26074Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36144Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26111Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36222Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26060Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36173Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26083Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26090Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26072Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36165Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36186Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36220Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36215Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36204Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26053Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36217Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36147Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36196Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36154Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36175Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36205Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36179Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26092Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26093Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36207Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36192Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26123Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26095Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36234Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36189Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36143Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36188Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36181Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36190Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36231Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36170Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36201Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36171Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26078Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36151Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36184Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36235Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-20784Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26039Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36162Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36177Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36218Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36194Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36169Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36228Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36174Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36198Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26071Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36168Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26066Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26114Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36200Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36146Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26121Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-34119Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26070Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36159Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26036Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36202Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36141Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36197Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26089Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36180Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36216Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36164Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36183Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36158Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36214Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36149Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36148Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36163Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36193Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26127Adobe Experience Manager | Improper Input Validation (CWE-20)Adobe Experience Manager
- CVE-2024-26049Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26116Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36221Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36187Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36209Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26085Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36212Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26077Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26115Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36178Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36142Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36166Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36172Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26117Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36182Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26058Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26054Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36152Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26091Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26113Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36176Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36167Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36226Adobe Experience Manager | Improper Input Validation (CWE-20)Adobe Experience Manager
- CVE-2024-36219Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36227Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36203Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36191Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36208Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26068Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26086Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36155Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36185Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26057Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36210Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26081Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36195Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26055Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36161Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36199Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-36232Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-4615Elespare – Blog, Magazine and Newspaper Addons for Elementor with Templates, Widgets, Kits, and Header/Footer Builder. One Click Import: No Coding Required! <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Horizontal Nav Menu WidgetEleSpare – News, Magazine and Blog Addons for Elementor
- CVE-2024-5265WPBakery Page Builder <= 7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via VC Single Image link attributeWPBakery Page Builder
- CVE-2024-4576TIBCO EBX File Inclusion VulnerabilityTibco EBX
- CVE-2024-4149Floating Chat Widget < 3.2.3 - Admin+ Stored XSSFloating Chat Widget: Contact Chat Icons, WhatsApp, Telegra…
- CVE-2024-4145Search & Replace < 3.2.2 - Admin+ SQL injectionSearch & Replace
- CVE-2024-3032Themify Builder < 7.5.8 - Open RedirectThemify Builder
- CVE-2024-2762FooGallery < 2.4.15 - Author+ Stored XSSFooGallery · foogallery-premium
- CVE-2024-5661Potential Denial of Service affecting XenServer and Citrix HypervisorCitrix Hypervisor · Citrix XenServer
- CVE-2024-5787PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Effects Widgetideaboxcreations PowerPack Addons for Elementor
- CVE-2024-5757Elementor Header & Footer Builder <= 1.6.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Title Widgetbrainstormforce Ultimate Addons for Elementor
- CVE-2023-35858XPath Injection vulnerabilities in the blog and RSS functions of Modern Campus - Omni CMS 2023.1 allow a remote, unauthenticated attacker to
- CVE-2023-35859A Reflected Cross-Site Scripting (XSS) vulnerability in the blog function of Modern Campus - Omni CMS 2023.1 allows a remote attacker to inj
- CVE-2023-35860A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system in
- CVE-2023-52890NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c.
- CVE-2024-33253Cross-site scripting (XSS) vulnerability in GUnet OpenEclass E-learning Platform version 3.15 and before allows a authenticated privileged a
- CVE-2024-36588An issue in Annonshop.app DecentralizeJustice/ anonymousLocker commit 2b2b4 allows attackers to send messages erroneously attributed to arbi
- CVE-2024-36589An issue in Annonshop.app DecentralizeJustice/anonymousLocker commit 2b2b4 to ba9fd and DecentralizeJustice/anonBackend commit 57837 to cd81
- CVE-2024-36647A stored cross-site scripting (XSS) vulnerability in Church CRM v5.8.0 allows attackers to execute arbitrary web scripts or HTML via a craft
- CVE-2024-37632TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the password parameter in function loginAuth .
- CVE-2024-37877UERANSIM before 3.2.6 allows out-of-bounds read when a RLS packet is sent to gNodeB with malformed PDU length.