# CVEs published 2024-06-18

65 CVEs were published on June 18, 2024: 3 critical, 19 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2024-6146](https://cve.now/CVE-2024-6146.md): Actiontec WCB6200Q uh\_get\_postdata\_withupload Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8, Actiontec WCB6200Q)
- [CVE-2024-6145](https://cve.now/CVE-2024-6145.md): Actiontec WCB6200Q Cookie Format String Remote Code Execution Vulnerability (CVSS 8.8, Actiontec WCB6200Q)
- [CVE-2024-6144](https://cve.now/CVE-2024-6144.md): Actiontec WCB6200Q Multipart Boundary Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8, Actiontec WCB6200Q)
- [CVE-2024-6143](https://cve.now/CVE-2024-6143.md): Actiontec WCB6200Q uh\_tcp\_recv\_header Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8, Actiontec WCB6200Q)
- [CVE-2024-6142](https://cve.now/CVE-2024-6142.md): Actiontec WCB6200Q uh\_tcp\_recv\_content Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8, Actiontec WCB6200Q)
- [CVE-2024-5970](https://cve.now/CVE-2024-5970.md): MaxGalleria \<= 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via maxgallery\_thumb Shortcode (CVSS 6.4, maxfoundry MaxGalleria)
- [CVE-2024-6129](https://cve.now/CVE-2024-6129.md): spa-cartcms Username login observable behavioral discrepancy (CVSS 6.3, spa-cartcms)
- [CVE-2024-6128](https://cve.now/CVE-2024-6128.md): spa-cartcms Checkout Page checkout behavioral workflow (CVSS 6.9, spa-cartcms)
- [CVE-2024-38277](https://cve.now/CVE-2024-38277.md): moodle: QR login key and auto-login key for the Moodle mobile app should be generated as separate keys (CVSS 5.4, Moodle · moodle/moodle)
- [CVE-2024-38276](https://cve.now/CVE-2024-38276.md): moodle: CSRF risks due to misuse of confirm\_sesskey (CVSS 8.8, Moodle · moodle/moodle)
- [CVE-2024-38275](https://cve.now/CVE-2024-38275.md): moodle: HTTP authorization header is preserved between "emulated redirects" (CVSS 7.5, Moodle · moodle/moodle)
- [CVE-2024-38274](https://cve.now/CVE-2024-38274.md): moodle: stored XSS via calendar's event title when deleting the event (CVSS 6.1, Moodle · moodle/moodle)
- [CVE-2024-38273](https://cve.now/CVE-2024-38273.md): moodle: BigBlueButton web service leaks meeting joining information to users who should not have access (CVSS 5.4, Moodle · moodle/moodle)
- [CVE-2024-36977](https://cve.now/CVE-2024-36977.md): usb: dwc3: Wait unconditionally after issuing EndXfer command (CVSS 7.8, Linux)
- [CVE-2024-36976](https://cve.now/CVE-2024-36976.md): Revert "media: v4l2-ctrls: show all owned controls in log\_status" (no CVSS, Linux)
- [CVE-2024-36975](https://cve.now/CVE-2024-36975.md): KEYS: trusted: Do not use WARN when encode fails (no CVSS, Linux)
- [CVE-2024-36974](https://cve.now/CVE-2024-36974.md): net/sched: taprio: always validate TCA\_TAPRIO\_ATTR\_PRIOMAP (CVSS 7.8, Linux)
- [CVE-2022-23829](https://cve.now/CVE-2022-23829.md): A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native Syst (CVSS 8.2, AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series… +17)
- [CVE-2024-37904](https://cve.now/CVE-2024-37904.md): Denial of service from maliciously configured Git repository in Minder (CVSS 5.7, stacklok minder · github.com/stacklok/minder)
- [CVE-2024-38351](https://cve.now/CVE-2024-38351.md): Password auth and OAuth2 unverified email linking (CVSS 5.4, pocketbase · github.com/pocketbase/pocketbase)
- [CVE-2024-21685](https://cve.now/CVE-2024-21685.md): This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Core Data Center. (CVSS 7.4, Atlassian Jira Core Data Center)
- [CVE-2024-5275](https://cve.now/CVE-2024-5275.md): Hard-coded password in FileCatalyst Direct 3.8.10 Build 138 TransferAgent (and earlier) and FileCatalyst Workflow 5.1.6 Build 130 (and earlier) (CVSS 7.8, Fortra FileCatalyst Direct · Fortra FileCatalyst Workflow)
- [CVE-2023-47726](https://cve.now/CVE-2023-47726.md): IBM QRadar Suite improper input validation (CVSS 7.1, IBM QRadar Suite Software · IBM Cloud Pak for Security)
- [CVE-2024-6116](https://cve.now/CVE-2024-6116.md): itsourcecode Simple Online Hotel Reservation System edit\_room.php unrestricted upload (CVSS 6.9, itsourcecode Simple Online Hotel Reservation System)
- [CVE-2024-6115](https://cve.now/CVE-2024-6115.md): itsourcecode Simple Online Hotel Reservation System add\_room.php unrestricted upload (CVSS 6.9, itsourcecode Simple Online Hotel Reservation System)
- [CVE-2024-6114](https://cve.now/CVE-2024-6114.md): itsourcecode Monbela Tourist Inn Online Reservation System controller.php unrestricted upload (CVSS 6.9, itsourcecode Monbela Tourist Inn Online Reservation System)
- [CVE-2024-6112](https://cve.now/CVE-2024-6112.md): itsourcecode Pool of Bethesda Online Reservation System index.php sql injection (CVSS 6.9, itsourcecode Pool of Bethesda Online Reservation System)
- [CVE-2024-6111](https://cve.now/CVE-2024-6111.md): itsourcecode Pool of Bethesda Online Reservation System login.php sql injection (CVSS 6.9, itsourcecode Pool of Bethesda Online Reservation System)
- [CVE-2024-5967](https://cve.now/CVE-2024-5967.md): Keycloak: leak of configured ldap bind credentials through the keycloak admin console (CVSS 2.7, keycloak · Red Hat Build of Keycloak +3)
- [CVE-2024-6110](https://cve.now/CVE-2024-6110.md): itsourcecode Magbanua Beach Resort Online Reservation System controller.php unrestricted upload (CVSS 6.9, itsourcecode Magbanua Beach Resort Online Reservation System)
- [CVE-2024-6109](https://cve.now/CVE-2024-6109.md): itsourcecode Tailoring Management System addmeasurement.php sql injection (CVSS 5.3, itsourcecode Tailoring Management System)
- [CVE-2024-38507](https://cve.now/CVE-2024-38507.md): In JetBrains Hub before 2024.2.34646 stored XSS via project description was possible (CVSS 3.5, JetBrains Hub)
- [CVE-2024-38506](https://cve.now/CVE-2024-38506.md): In JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the auto-attach option for workflows (CVSS 6.3, JetBrains YouTrack)
- [CVE-2024-38505](https://cve.now/CVE-2024-38505.md): In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site (CVSS 5.3, JetBrains YouTrack)
- [CVE-2024-38504](https://cve.now/CVE-2024-38504.md): In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles (CVSS 4.3, JetBrains YouTrack)
- [CVE-2024-5953](https://cve.now/CVE-2024-5953.md): 389-ds-base: malformed userpassword hash may cause denial of service (CVSS 5.7, 389-ds-base · Red Hat Directory Server 11.5 E4S for RHEL +6)
- [CVE-2024-6108](https://cve.now/CVE-2024-6108.md): Genexis Tilgin Home Gateway Login cross site scripting (CVSS 6.9, Genexis Tilgin Home Gateway)
- [CVE-2024-5899](https://cve.now/CVE-2024-5899.md): Improper trust check in Bazel Build intellij plugin (CVSS 1.0, BazelBuild intellij plugin · github.com/bazelbuild/intellij)
- [CVE-2024-5533](https://cve.now/CVE-2024-5533.md): Divi \<= 4.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, Elegant Themes Divi)
- [CVE-2024-0066](https://cve.now/CVE-2024-0066.md): Johan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may expose sensitive traffic between the client (Ax (CVSS 5.3, Axis Communications AB AXIS OS)
- [CVE-2024-5172](https://cve.now/CVE-2024-5172.md): Expert Invoice \<= 1.0.2 -Admin+ Stored XSS (CVSS 4.8, Expert Invoice)
- [CVE-2024-4094](https://cve.now/CVE-2024-4094.md): Simple Share Buttons Adder \< 8.5.1 - Admin+ Stored XSS (CVSS 5.4, Simple Share Buttons Adder)
- [CVE-2024-3276](https://cve.now/CVE-2024-3276.md): FooBox (Free and Premium) \< 2.7.28 - Admin+ Stored XSS (CVSS 6.1, Lightbox & Modal Popup WordPress Plugin · foobox-image-ligh…)
- [CVE-2024-34024](https://cve.now/CVE-2024-34024.md): Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. (CVSS 6.3, Fsas Technologies FUJITSU Business Application ID Link M… +1)
- [CVE-2024-33620](https://cve.now/CVE-2024-33620.md): Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. (CVSS 8.6, Fsas Technologies FUJITSU Business Application ID Link M… +1)
- [CVE-2024-33622](https://cve.now/CVE-2024-33622.md): Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. (CVSS 6.5, Fsas Technologies FUJITSU Business Application ID Link M… +1)
- [CVE-2024-37081](https://cve.now/CVE-2024-37081.md): The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. (CVSS 7.8, VMware vCenter Server · VMware Cloud Foundation)
- [CVE-2024-37080](https://cve.now/CVE-2024-37080.md): vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. (CVSS 9.8, VMware vCenter Server · VMware Cloud Foundation)
- [CVE-2024-37079](https://cve.now/CVE-2024-37079.md): vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. (CVSS 9.8, KEV, VMware vCenter Server · VMware Cloud Foundation)
- [CVE-2023-5527](https://cve.now/CVE-2023-5527.md): Business Directory Plugin \<= 6.4.3 - Authenticated (Author+) CSV Injection (CVSS 7.4, strategy11team Business Directory Plugin – Easy Listing Dir…)
- [CVE-2024-5860](https://cve.now/CVE-2024-5860.md): Tickera \<= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion (CVSS 4.3, Tickera – Sell Tickets & Manage Events)
- [CVE-2024-5541](https://cve.now/CVE-2024-5541.md): Ibtana - WordPress Website Builder \<= 1.2.3.3 - Unauthenticated reCAPTCHA Settings Update (CVSS 5.3, vowelweb Ibtana – WordPress Website Builder)
- [CVE-2024-1634](https://cve.now/CVE-2024-1634.md): Scheduling Plugin – Online Booking for WordPress \<= 3.5.10 - Missing Authorization to Unauthenticated Service Disconnection (CVSS 6.5, startbooking Scheduling Plugin – Online Booking for WordPre…)
- [CVE-2024-0845](https://cve.now/CVE-2024-0845.md): PDF Viewer for Elementor \<= 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via render (CVSS 6.4, redlettuce PDF Viewer for Elementor)
- [CVE-2024-4375](https://cve.now/CVE-2024-4375.md): Master Slider – Responsive Touch Slider \<= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms\_layer Shortcode (CVSS 6.4, averta Master Slider – Responsive Touch Slider)
- [CVE-2024-6084](https://cve.now/CVE-2024-6084.md): itsourcecode Pool of Bethesda Online Reservation System uploadImage unrestricted upload (CVSS 6.9, itsourcecode Pool of Bethesda Online Reservation System)
- [CVE-2024-22002](https://cve.now/CVE-2024-22002.md): CORSAIR iCUE 5.9.105 with iCUE Murals on Windows allows unprivileged users to insert DLL files in the cuepkg-1.2.6 subdirectory of the insta (CVSS 7.8)
- [CVE-2024-37791](https://cve.now/CVE-2024-37791.md): DuxCMS3 v3.1.3 was discovered to contain a SQL injection vulnerability via the keyword parameter at /article/Content/index?class\_id. (CVSS 6.0)
- [CVE-2024-37799](https://cve.now/CVE-2024-37799.md): CodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the reserv\_id parameter at view\_ (CVSS 5.4)
- [CVE-2024-37800](https://cve.now/CVE-2024-37800.md): CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Date (CVSS 6.1)
- [CVE-2024-37802](https://cve.now/CVE-2024-37802.md): CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Patient Info module (CVSS 9.4)
- [CVE-2024-37803](https://cve.now/CVE-2024-37803.md): Multiple stored cross-site scripting (XSS) vulnerabilities in CodeProjects Health Care hospital Management System v1.0 allows attackers to e (CVSS 5.4)
- [CVE-2024-37821](https://cve.now/CVE-2024-37821.md): An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM up to v19.0.1 allows attackers to execute arbitra (CVSS 8.8, dolibarr/dolibarr)
- [CVE-2024-38347](https://cve.now/CVE-2024-38347.md): CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Room Information mod (CVSS 8.8)
- [CVE-2024-38348](https://cve.now/CVE-2024-38348.md): CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module vi (CVSS 6.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-06-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.