# CVEs published 2024-06-19

223 CVEs were published on June 19, 2024: 16 critical, 86 high. Days are UTC.

- [CVE-2024-6102](https://cve.now/CVE-2024-6102.md): Out of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruptio (CVSS 8.8, Google Chrome)
- [CVE-2024-6101](https://cve.now/CVE-2024-6101.md): Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to perform out of bounds memory access (CVSS 8.8, Google Chrome)
- [CVE-2024-6100](https://cve.now/CVE-2024-6100.md): Type Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (CVSS 8.8, Google Chrome)
- [CVE-2024-6103](https://cve.now/CVE-2024-6103.md): Use after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a craft (CVSS 8.8, Google Chrome)
- [CVE-2024-5182](https://cve.now/CVE-2024-5182.md): Path Traversal in mudler/localai (CVSS 7.5, mudler/localai · github.com/go-skynet/LocalAI)
- [CVE-2024-38357](https://cve.now/CVE-2024-38357.md): TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements (CVSS 6.1, tinymce · tinymce/tinymce +1)
- [CVE-2024-38356](https://cve.now/CVE-2024-38356.md): TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable\_regexp option (CVSS 6.1, tinymce · tinymce/tinymce +1)
- [CVE-2024-38358](https://cve.now/CVE-2024-38358.md): Symlink bypasses filesystem sandbox in wasmer (CVSS 2.9, wasmerio wasmer · wasmer)
- [CVE-2024-38355](https://cve.now/CVE-2024-38355.md): Unhandled 'error' event in socket.io (CVSS 7.3, socketio socket.io · socket.io)
- [CVE-2024-36117](https://cve.now/CVE-2024-36117.md): Path traversal while serving Reposilite javadoc expanded files (CVSS 8.6, dzikoysk reposilite · com.reposilite:reposilite-backend)
- [CVE-2024-36116](https://cve.now/CVE-2024-36116.md): Path traversal in Reposilite javadoc file expansion (CVSS 7.5, dzikoysk reposilite · com.reposilite:reposilite-backend)
- [CVE-2024-36115](https://cve.now/CVE-2024-36115.md): Stored Cross site scripting in Reposilite artifacts (CVSS 7.1, dzikoysk reposilite · com.reposilite:reposilite-backend)
- [CVE-2024-32030](https://cve.now/CVE-2024-32030.md): Remote code execution via JNDI resolution in JMX metrics collection in Kafka UI (CVSS 8.1, provectus kafka-ui)
- [CVE-2021-47616](https://cve.now/CVE-2021-47616.md): RDMA: Fix use-after-free in rxe\_queue\_cleanup (CVSS 7.8, Linux)
- [CVE-2021-47614](https://cve.now/CVE-2021-47614.md): RDMA/irdma: Fix a user-after-free in add\_pble\_prm (CVSS 7.8, Linux)
- [CVE-2021-47613](https://cve.now/CVE-2021-47613.md): i2c: virtio: fix completion handling (CVSS 7.8, Linux)
- [CVE-2021-47612](https://cve.now/CVE-2021-47612.md): nfc: fix segfault in nfc\_genl\_dump\_devices\_done (no CVSS, Linux)
- [CVE-2021-47611](https://cve.now/CVE-2021-47611.md): mac80211: validate extended element ID is present (CVSS 8.1, Linux)
- [CVE-2021-47610](https://cve.now/CVE-2021-47610.md): drm/msm: Fix null ptr access msm\_ioctl\_gem\_submit() (no CVSS, Linux)
- [CVE-2021-47609](https://cve.now/CVE-2021-47609.md): firmware: arm\_scpi: Fix string overflow in SCPI genpd driver (no CVSS, Linux)
- [CVE-2024-34444](https://cve.now/CVE-2024-34444.md): WordPress Slider Revolution plugin \< 6.7.0 - Unauthenticated Broken Access Control vulnerability (CVSS 7.1, ThemePunch OHG Slider Revolution)
- [CVE-2021-47608](https://cve.now/CVE-2021-47608.md): bpf: Fix kernel address leakage in atomic fetch (no CVSS, Linux)
- [CVE-2021-47607](https://cve.now/CVE-2021-47607.md): bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg (no CVSS, Linux)
- [CVE-2021-47606](https://cve.now/CVE-2021-47606.md): net: netlink: af\_netlink: Prevent empty skb by adding a check on len. (no CVSS, Linux)
- [CVE-2021-47605](https://cve.now/CVE-2021-47605.md): vduse: fix memory corruption in vduse\_dev\_ioctl() (CVSS 7.8, Linux)
- [CVE-2021-47604](https://cve.now/CVE-2021-47604.md): vduse: check that offset is within bounds in get\_config() (CVSS 7.1, Linux)
- [CVE-2021-47603](https://cve.now/CVE-2021-47603.md): audit: improve robustness of the audit queue handling (no CVSS, Linux)
- [CVE-2021-47602](https://cve.now/CVE-2021-47602.md): mac80211: track only QoS data frames for admission control (no CVSS, Linux)
- [CVE-2021-47601](https://cve.now/CVE-2021-47601.md): tee: amdtee: fix an IS\_ERR() vs NULL bug (no CVSS, Linux)
- [CVE-2021-47600](https://cve.now/CVE-2021-47600.md): dm btree remove: fix use after free in rebalance\_children() (CVSS 7.8, Linux)
- [CVE-2021-47599](https://cve.now/CVE-2021-47599.md): btrfs: use latest\_dev in btrfs\_show\_devname (no CVSS, Linux)
- [CVE-2021-47598](https://cve.now/CVE-2021-47598.md): sch\_cake: do not call cake\_destroy() from cake\_init() (CVSS 7.8, Linux)
- [CVE-2021-47597](https://cve.now/CVE-2021-47597.md): inet\_diag: fix kernel-infoleak for UDP sockets (no CVSS, Linux)
- [CVE-2021-47596](https://cve.now/CVE-2021-47596.md): net: hns3: fix use-after-free bug in hclgevf\_send\_mbx\_msg (no CVSS, Linux)
- [CVE-2021-47595](https://cve.now/CVE-2021-47595.md): net/sched: sch\_ets: don't remove idle classes from the round-robin list (no CVSS, Linux)
- [CVE-2021-47594](https://cve.now/CVE-2021-47594.md): mptcp: never allow the PM to close a listener subflow (no CVSS, Linux)
- [CVE-2021-47593](https://cve.now/CVE-2021-47593.md): mptcp: clear 'kern' flag from fallback sockets (no CVSS, Linux)
- [CVE-2021-47592](https://cve.now/CVE-2021-47592.md): net: stmmac: fix tc flower deletion for VLAN priority Rx steering (CVSS 5.5, Linux)
- [CVE-2021-47591](https://cve.now/CVE-2021-47591.md): mptcp: remove tcp ulp setsockopt support (no CVSS, Linux)
- [CVE-2024-34443](https://cve.now/CVE-2024-34443.md): WordPress Slider Revolution plugin \< 6.7.11 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, ThemePunch OHG Slider Revolution)
- [CVE-2021-47590](https://cve.now/CVE-2021-47590.md): mptcp: fix deadlock in \_\_mptcp\_push\_pending() (no CVSS, Linux)
- [CVE-2021-47589](https://cve.now/CVE-2021-47589.md): igbvf: fix double free in \`igbvf\_probe\` (no CVSS, Linux)
- [CVE-2021-47588](https://cve.now/CVE-2021-47588.md): sit: do not call ipip6\_dev\_free() from sit\_init\_net() (CVSS 7.8, Linux)
- [CVE-2021-47587](https://cve.now/CVE-2021-47587.md): net: systemport: Add global locking for descriptor lifecycle (CVSS 9.8, Linux)
- [CVE-2021-47586](https://cve.now/CVE-2021-47586.md): net: stmmac: dwmac-rk: fix oob read in rk\_gmac\_setup (CVSS 5.5, Linux)
- [CVE-2021-47585](https://cve.now/CVE-2021-47585.md): btrfs: fix memory leak in \_\_add\_inode\_ref() (no CVSS, Linux)
- [CVE-2021-47584](https://cve.now/CVE-2021-47584.md): iocost: Fix divide-by-zero on donation from low hweight cgroup (no CVSS, Linux)
- [CVE-2021-47583](https://cve.now/CVE-2021-47583.md): media: mxl111sf: change mutex\_init() location (no CVSS, Linux)
- [CVE-2021-47582](https://cve.now/CVE-2021-47582.md): USB: core: Make do\_proc\_control() and do\_proc\_bulk() killable (no CVSS, Linux)
- [CVE-2021-47580](https://cve.now/CVE-2021-47580.md): scsi: scsi\_debug: Fix type in min\_t to avoid stack OOB (CVSS 7.1, Linux)
- [CVE-2021-47579](https://cve.now/CVE-2021-47579.md): ovl: fix warning in ovl\_create\_real() (no CVSS, Linux)
- [CVE-2021-47578](https://cve.now/CVE-2021-47578.md): scsi: scsi\_debug: Don't call kcalloc() if size arg is zero (no CVSS, Linux)
- [CVE-2021-47577](https://cve.now/CVE-2021-47577.md): io-wq: check for wq exit after adding new worker task\_work (CVSS 7.8, Linux)
- [CVE-2021-47576](https://cve.now/CVE-2021-47576.md): scsi: scsi\_debug: Sanity check block descriptor length in resp\_mode\_select() (CVSS 7.8, Linux)
- [CVE-2024-22263](https://cve.now/CVE-2024-22263.md): Arbitrary File Write Vulnerability in Spring Cloud Data Flow (CVSS 8.8, Spring by VMware Tanzu Spring Cloud Skipper)
- [CVE-2023-25697](https://cve.now/CVE-2023-25697.md): WordPress GamiPress plugin \<= 2.5.6 - CSRF Leading to Settings Change Vulnerability (CVSS 5.4, GamiPress)
- [CVE-2022-45832](https://cve.now/CVE-2022-45832.md): WordPress Attorney theme \<= 3 - Unauth. Arbitrary Content Deletion vulnerability (CVSS 6.5, Hennessey Digital Attorney)
- [CVE-2023-39312](https://cve.now/CVE-2023-39312.md): WordPress Avada theme \<= 7.11.1 - Auth. Unrestricted Zip Extraction vulnerability (CVSS 9.1, ThemeFusion Avada)
- [CVE-2023-36515](https://cve.now/CVE-2023-36515.md): WordPress LearnPress plugin \<= 4.2.3 - Unauthenticated Broken Access Control vulnerability (CVSS 7.3, ThimPress LearnPress)
- [CVE-2023-36516](https://cve.now/CVE-2023-36516.md): WordPress LearnPress plugin \<= 4.2.3 - Authenticated Broken Access Control vulnerability (CVSS 7.6, ThimPress LearnPress)
- [CVE-2023-38393](https://cve.now/CVE-2023-38393.md): WordPress Ninja Forms plugin \<= 3.6.25 - Subscriber+ Broken Access Control vulnerability (CVSS 7.6, Saturday Drive Ninja Forms)
- [CVE-2023-38394](https://cve.now/CVE-2023-38394.md): WordPress Jupiter X Core plugin \<= 3.3.0 - Multiple Auth. Broken Access Control vulnerability (CVSS 5.4, Artbees JupiterX Core)
- [CVE-2023-39310](https://cve.now/CVE-2023-39310.md): WordPress Avada Builder plugin \<= 3.11.1 - Authenticated Broken Access Control vulnerability (CVSS 5.4, ThemeFusion Fusion Builder)
- [CVE-2024-38618](https://cve.now/CVE-2024-38618.md): ALSA: timer: Set lower bound of start tick time (CVSS 5.3, Linux)
- [CVE-2024-38617](https://cve.now/CVE-2024-38617.md): kunit/fortify: Fix mismatched kvalloc()/vfree() usage (no CVSS, Linux)
- [CVE-2024-38616](https://cve.now/CVE-2024-38616.md): wifi: carl9170: re-fix fortified-memset warning (CVSS 8.2, Linux)
- [CVE-2024-38615](https://cve.now/CVE-2024-38615.md): cpufreq: exit() callback is optional (no CVSS, Linux)
- [CVE-2024-38614](https://cve.now/CVE-2024-38614.md): openrisc: traps: Don't send signals to kernel mode threads (CVSS 7.8, Linux)
- [CVE-2024-38613](https://cve.now/CVE-2024-38613.md): m68k: Fix spinlock race in kernel thread creation (no CVSS, Linux)
- [CVE-2024-38612](https://cve.now/CVE-2024-38612.md): ipv6: sr: fix invalid unregister error path (CVSS 7.0, Linux)
- [CVE-2024-38611](https://cve.now/CVE-2024-38611.md): media: i2c: et8ek8: Don't strip remove function when driver is builtin (CVSS 7.3, Linux)
- [CVE-2024-38610](https://cve.now/CVE-2024-38610.md): drivers/virt/acrn: fix PFNMAP PTE checks in acrn\_vm\_ram\_map() (CVSS 7.8, Linux)
- [CVE-2024-38609](https://cve.now/CVE-2024-38609.md): wifi: mt76: connac: check for null before dereferencing (no CVSS, Linux)
- [CVE-2024-38608](https://cve.now/CVE-2024-38608.md): net/mlx5e: Fix netif state handling (no CVSS, Linux)
- [CVE-2023-36676](https://cve.now/CVE-2023-36676.md): WordPress Spectra plugin \<= 2.6.6 - Broken Access Control vulnerability (CVSS 5.4, Brainstorm Force Spectra)
- [CVE-2023-36683](https://cve.now/CVE-2023-36683.md): WordPress Schema Pro plugin \<= 2.7.8 - Broken Access Control vulnerability (CVSS 6.5, WP SCHEMA PRO Schema Pro)
- [CVE-2023-36684](https://cve.now/CVE-2023-36684.md): WordPress Convert Pro plugin \<= 1.7.5 - Broken Access Control vulnerability (CVSS 7.1, Brainstorm Force Convert Pro)
- [CVE-2024-38607](https://cve.now/CVE-2024-38607.md): macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (no CVSS, Linux)
- [CVE-2024-38606](https://cve.now/CVE-2024-38606.md): crypto: qat - validate slices count returned by FW (CVSS 7.1, Linux)
- [CVE-2024-38605](https://cve.now/CVE-2024-38605.md): ALSA: core: Fix NULL module pointer assignment at card init (CVSS 7.8, Linux)
- [CVE-2024-38604](https://cve.now/CVE-2024-38604.md): block: refine the EOF check in blkdev\_iomap\_begin (no CVSS, Linux)
- [CVE-2024-38603](https://cve.now/CVE-2024-38603.md): drivers/perf: hisi: hns3: Actually use devm\_add\_action\_or\_reset() (no CVSS, Linux)
- [CVE-2024-38602](https://cve.now/CVE-2024-38602.md): ax25: Fix reference count leak issues of ax25\_dev (no CVSS, Linux)
- [CVE-2024-38601](https://cve.now/CVE-2024-38601.md): ring-buffer: Fix a race between readers and resize checks (no CVSS, Linux)
- [CVE-2024-23443](https://cve.now/CVE-2024-23443.md): A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted (CVSS 4.9, Elastic Kibana)
- [CVE-2023-37869](https://cve.now/CVE-2023-37869.md): WordPress Premium Addons PRO plugin \<= 2.9.0 - Broken Access Control vulnerability (CVSS 6.5, Premium Addons PRO)
- [CVE-2024-38600](https://cve.now/CVE-2024-38600.md): ALSA: Fix deadlocks with kctl removals at disconnection (no CVSS, Linux)
- [CVE-2024-38599](https://cve.now/CVE-2024-38599.md): jffs2: prevent xattr node from overflowing the eraseblock (CVSS 7.8, Linux)
- [CVE-2024-38598](https://cve.now/CVE-2024-38598.md): md: fix resync softlockup when bitmap size is less than array size (no CVSS, Linux)
- [CVE-2024-38597](https://cve.now/CVE-2024-38597.md): eth: sungem: remove .ndo\_poll\_controller to avoid deadlocks (no CVSS, Linux)
- [CVE-2024-38596](https://cve.now/CVE-2024-38596.md): af\_unix: Fix data races in unix\_release\_sock/unix\_stream\_sendmsg (no CVSS, Linux)
- [CVE-2024-38595](https://cve.now/CVE-2024-38595.md): net/mlx5: Fix peer devlink set for SF representor devlink port (no CVSS, Linux)
- [CVE-2024-38594](https://cve.now/CVE-2024-38594.md): net: stmmac: move the EST lock to struct stmmac\_priv (no CVSS, Linux)
- [CVE-2024-38593](https://cve.now/CVE-2024-38593.md): net: micrel: Fix receiving the timestamp in the frame for lan8841 (CVSS 5.5, Linux)
- [CVE-2024-38592](https://cve.now/CVE-2024-38592.md): drm/mediatek: Init \`ddp\_comp\` with devm\_kcalloc() (CVSS 7.8, Linux)
- [CVE-2024-38591](https://cve.now/CVE-2024-38591.md): RDMA/hns: Fix deadlock on SRQ async events. (no CVSS, Linux)
- [CVE-2024-38590](https://cve.now/CVE-2024-38590.md): RDMA/hns: Modify the print level of CQE error (CVSS 7.1, Linux)
- [CVE-2024-38589](https://cve.now/CVE-2024-38589.md): netrom: fix possible dead-lock in nr\_rt\_ioctl() (no CVSS, Linux)
- [CVE-2023-37872](https://cve.now/CVE-2023-37872.md): WordPress WooCommerce Ship to Multiple Addresses plugin \<= 3.8.5 - Broken Access Control vulnerability (CVSS 6.5, WooCommerce Ship to Multiple Addresses)
- [CVE-2024-38329](https://cve.now/CVE-2024-38329.md): IBM Storage Protect for Virtual Environments: Data Protection for VMware security bypass (CVSS 7.7, IBM Storage Protect for Virtual Environments: Data Protecti…)
- [CVE-2024-38588](https://cve.now/CVE-2024-38588.md): ftrace: Fix possible use-after-free issue in ftrace\_location() (CVSS 7.8, Linux)
- [CVE-2024-38587](https://cve.now/CVE-2024-38587.md): speakup: Fix sizeof() vs ARRAY\_SIZE() bug (CVSS 7.8, Linux)
- [CVE-2024-38586](https://cve.now/CVE-2024-38586.md): r8169: Fix possible ring buffer corruption on fragmented Tx packets. (no CVSS, Linux)
- [CVE-2024-38585](https://cve.now/CVE-2024-38585.md): tools/nolibc/stdlib: fix memory error in realloc() (no CVSS, Linux)
- [CVE-2024-38584](https://cve.now/CVE-2024-38584.md): net: ti: icssg\_prueth: Fix NULL pointer dereference in prueth\_probe() (no CVSS, Linux)
- [CVE-2024-38583](https://cve.now/CVE-2024-38583.md): nilfs2: fix use-after-free of timer for log writer thread (CVSS 7.8, Linux)
- [CVE-2024-38582](https://cve.now/CVE-2024-38582.md): nilfs2: fix potential hang in nilfs\_detach\_log\_writer() (CVSS 5.3, Linux)
- [CVE-2024-38581](https://cve.now/CVE-2024-38581.md): drm/amdgpu/mes: fix use-after-free issue (CVSS 7.8, Linux)
- [CVE-2024-38580](https://cve.now/CVE-2024-38580.md): epoll: be better about file lifetimes (CVSS 7.8, Linux)
- [CVE-2024-38579](https://cve.now/CVE-2024-38579.md): crypto: bcm - Fix pointer arithmetic (no CVSS, Linux)
- [CVE-2024-38578](https://cve.now/CVE-2024-38578.md): ecryptfs: Fix buffer size for tag 66 packet (CVSS 7.8, Linux)
- [CVE-2024-38577](https://cve.now/CVE-2024-38577.md): rcu-tasks: Fix show\_rcu\_tasks\_trace\_gp\_kthread buffer overflow (CVSS 7.0, Linux)
- [CVE-2024-38576](https://cve.now/CVE-2024-38576.md): rcu: Fix buffer overflow in print\_cpu\_stall\_info() (CVSS 7.0, Linux)
- [CVE-2024-38575](https://cve.now/CVE-2024-38575.md): wifi: brcmfmac: pcie: handle randbuf allocation failure (no CVSS, Linux)
- [CVE-2024-38574](https://cve.now/CVE-2024-38574.md): libbpf: Prevent null-pointer dereference when prog to load has no BTF (no CVSS, Linux)
- [CVE-2024-38573](https://cve.now/CVE-2024-38573.md): cppc\_cpufreq: Fix possible null pointer dereference (CVSS 7.5, Linux)
- [CVE-2024-38572](https://cve.now/CVE-2024-38572.md): wifi: ath12k: fix out-of-bound access of qmi\_invoke\_handler() (CVSS 7.8, Linux)
- [CVE-2024-38571](https://cve.now/CVE-2024-38571.md): thermal/drivers/tsens: Fix null pointer dereference (no CVSS, Linux)
- [CVE-2024-38570](https://cve.now/CVE-2024-38570.md): gfs2: Fix potential glock use-after-free on unmount (CVSS 9.8, Linux)
- [CVE-2024-38569](https://cve.now/CVE-2024-38569.md): drivers/perf: hisi\_pcie: Fix out-of-bound access when valid event group (CVSS 7.8, Linux)
- [CVE-2024-38568](https://cve.now/CVE-2024-38568.md): drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group (CVSS 7.8, Linux)
- [CVE-2024-38567](https://cve.now/CVE-2024-38567.md): wifi: carl9170: add a proper sanity check for endpoints (no CVSS, Linux)
- [CVE-2024-38566](https://cve.now/CVE-2024-38566.md): bpf: Fix verifier assumptions about socket-\>sk (no CVSS, Linux)
- [CVE-2024-38565](https://cve.now/CVE-2024-38565.md): wifi: ar5523: enable proper endpoint verification (CVSS 6.5, Linux)
- [CVE-2024-38564](https://cve.now/CVE-2024-38564.md): bpf: Add BPF\_PROG\_TYPE\_CGROUP\_SKB attach type enforcement in BPF\_LINK\_CREATE (CVSS 7.8, Linux)
- [CVE-2024-38563](https://cve.now/CVE-2024-38563.md): wifi: mt76: mt7996: fix potential memory leakage when reading chip temperature (no CVSS, Linux)
- [CVE-2024-38562](https://cve.now/CVE-2024-38562.md): wifi: nl80211: Avoid address calculations via out of bounds array indexing (CVSS 7.8, Linux)
- [CVE-2024-38561](https://cve.now/CVE-2024-38561.md): kunit: Fix kthread reference (no CVSS, Linux)
- [CVE-2024-38560](https://cve.now/CVE-2024-38560.md): scsi: bfa: Ensure the copied buf is NUL terminated (no CVSS, Linux)
- [CVE-2024-38559](https://cve.now/CVE-2024-38559.md): scsi: qedf: Ensure the copied buf is NUL terminated (CVSS 4.4, Linux)
- [CVE-2024-38558](https://cve.now/CVE-2024-38558.md): net: openvswitch: fix overwriting ct original tuple for ICMPv6 (CVSS 10.0, Linux)
- [CVE-2024-38557](https://cve.now/CVE-2024-38557.md): net/mlx5: Reload only IB representors upon lag disable/enable (no CVSS, Linux)
- [CVE-2024-38556](https://cve.now/CVE-2024-38556.md): net/mlx5: Add a timeout to acquire the command queue semaphore (CVSS 7.8, Linux)
- [CVE-2024-38555](https://cve.now/CVE-2024-38555.md): net/mlx5: Discard command completions in internal error (CVSS 7.0, Linux)
- [CVE-2024-38554](https://cve.now/CVE-2024-38554.md): ax25: Fix reference count leak issue of net\_device (no CVSS, Linux)
- [CVE-2024-38553](https://cve.now/CVE-2024-38553.md): net: fec: remove .ndo\_poll\_controller to avoid deadlocks (no CVSS, Linux)
- [CVE-2024-38552](https://cve.now/CVE-2024-38552.md): drm/amd/display: Fix potential index out of bounds in color transformation function (CVSS 7.3, Linux)
- [CVE-2024-38551](https://cve.now/CVE-2024-38551.md): ASoC: mediatek: Assign dummy when codec not specified for a DAI link (no CVSS, Linux)
- [CVE-2024-38550](https://cve.now/CVE-2024-38550.md): ASoC: kirkwood: Fix potential NULL dereference (CVSS 4.4, Linux)
- [CVE-2024-38549](https://cve.now/CVE-2024-38549.md): drm/mediatek: Add 0 size check to mtk\_drm\_gem\_obj (no CVSS, Linux)
- [CVE-2024-38548](https://cve.now/CVE-2024-38548.md): drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference (CVSS 5.5, Linux)
- [CVE-2024-38547](https://cve.now/CVE-2024-38547.md): media: atomisp: ssh\_css: Fix a null-pointer dereference in load\_video\_binaries (no CVSS, Linux)
- [CVE-2024-38546](https://cve.now/CVE-2024-38546.md): drm: vc4: Fix possible null pointer dereference (no CVSS, Linux)
- [CVE-2024-38545](https://cve.now/CVE-2024-38545.md): RDMA/hns: Fix UAF for cq async event (CVSS 7.8, Linux)
- [CVE-2024-38544](https://cve.now/CVE-2024-38544.md): RDMA/rxe: Fix seg fault in rxe\_comp\_queue\_pkt (CVSS 9.8, Linux)
- [CVE-2024-38543](https://cve.now/CVE-2024-38543.md): lib/test\_hmm.c: handle src\_pfns and dst\_pfns allocation failure (no CVSS, Linux)
- [CVE-2024-38542](https://cve.now/CVE-2024-38542.md): RDMA/mana\_ib: boundary check before installing cq callbacks (CVSS 7.8, Linux)
- [CVE-2024-38541](https://cve.now/CVE-2024-38541.md): of: module: add buffer overflow check in of\_modalias() (CVSS 7.8, Linux)
- [CVE-2024-38540](https://cve.now/CVE-2024-38540.md): bnxt\_re: avoid shift undefined behavior in bnxt\_qplib\_alloc\_init\_hwq (CVSS 4.4, Linux)
- [CVE-2024-38539](https://cve.now/CVE-2024-38539.md): RDMA/cma: Fix kmemleak in rdma\_core observed during blktests nvme/rdma use siw (CVSS 7.5, Linux)
- [CVE-2024-38538](https://cve.now/CVE-2024-38538.md): net: bridge: xmit: make sure we have at least eth header len bytes (CVSS 7.3, Linux)
- [CVE-2024-36979](https://cve.now/CVE-2024-36979.md): net: bridge: mst: fix vlan use-after-free (CVSS 7.8, Linux)
- [CVE-2023-38386](https://cve.now/CVE-2023-38386.md): WordPress Ninja Forms plugin \<= 3.6.25 - Contributor+ Broken Access Control vulnerability (CVSS 7.6, Saturday Drive Ninja Forms)
- [CVE-2023-36512](https://cve.now/CVE-2023-36512.md): WordPress AutomateWoo plugin \<= 5.7.5 - Broken Access Control vulnerability (CVSS 6.5, AutomateWoo)
- [CVE-2023-37870](https://cve.now/CVE-2023-37870.md): WordPress WooCommerce Warranty Requests plugin \<= 2.1.9 - Broken Access Control vulnerability (CVSS 8.1, WooCommerce Warranty Requests)
- [CVE-2023-35050](https://cve.now/CVE-2023-35050.md): WordPress Elementor Pro plugin \<= 3.13.0 - Auth. Broken Access Control vulnerability (CVSS 5.4, Elementor Pro)
- [CVE-2023-35049](https://cve.now/CVE-2023-35049.md): WordPress WooCommerce Stripe Payment Gateway plugin \<= 7.4.0 - Unauthenticated Broken Access Control vulnerability (CVSS 7.5, WooCommerce Stripe Payment Gateway)
- [CVE-2023-41805](https://cve.now/CVE-2023-41805.md): Broken Access Control vulnerability in multiple Brainstorm Force plugins (CVSS 6.5, Brainstorm Force Premium Starter Templates · Brainstorm For…)
- [CVE-2023-39922](https://cve.now/CVE-2023-39922.md): WordPress Avada theme \<= 7.11.1 - Authenticated Broken Access Control vulnerability (CVSS 4.3, ThemeFusion Avada)
- [CVE-2023-39990](https://cve.now/CVE-2023-39990.md): WordPress Paid Memberships Pro plugin \<= 1.2.3 - Broken Access Control vulnerability (CVSS 5.4, Paid Memberships Pro)
- [CVE-2023-39993](https://cve.now/CVE-2023-39993.md): WordPress ElementsKit Lite plugin \<= 2.9.0 - Broken Access Control vulnerability (CVSS 4.3, Wpmet Elements kit Elementor addons)
- [CVE-2023-39998](https://cve.now/CVE-2023-39998.md): WordPress BeTheme theme \<= 27.1.1 - Author+ Broken Access Control vulnerability (CVSS 8.2, Muffingroup Betheme)
- [CVE-2023-40004](https://cve.now/CVE-2023-40004.md): Unauth. Access Token Manipulation vulnerability in multiple ServMask WordPress plugins (CVSS 7.3, ServMask All-in-One WP Migration Box Extension · ServMas… +2)
- [CVE-2023-40608](https://cve.now/CVE-2023-40608.md): WordPress Paid Memberships Pro CCBill Gateway plugin \<= 0.3 - Unauthenticated Broken Access Control vulnerability (CVSS 8.2, Paid Memberships Pro CCBill Gateway)
- [CVE-2023-44148](https://cve.now/CVE-2023-44148.md): WordPress Astra Bulk Edit plugin \<= 1.2.7 - Broken Access Control vulnerability (CVSS 5.4, Brainstorm Force Astra Bulk Edit)
- [CVE-2023-44151](https://cve.now/CVE-2023-44151.md): WordPress Pre-Publish Checklist plugin \<= 1.1.1 - Broken Access Control vulnerability (CVSS 5.4, Brainstorm Force Pre-Publish Checklist)
- [CVE-2023-45658](https://cve.now/CVE-2023-45658.md): WordPress Nexter theme \<= 2.0.3 - Broken Access Control vulnerability (CVSS 7.6, POSIMYTH Nexter)
- [CVE-2023-46146](https://cve.now/CVE-2023-46146.md): WordPress Themify Ultra theme \<= 7.3.5 - Multiple Broken Access Control vulnerability (CVSS 8.3, Themify Ultra)
- [CVE-2023-46148](https://cve.now/CVE-2023-46148.md): WordPress Themify Ultra theme \<= 7.3.5 - Authenticated Arbitrary Settings Change vulnerability (CVSS 8.8, Themify Ultra)
- [CVE-2023-47770](https://cve.now/CVE-2023-47770.md): WordPress BeTheme theme \<= 27.1.1 - Contributor+ Broken Access Control vulnerability (CVSS 7.6, Muffin Group Betheme)
- [CVE-2023-47681](https://cve.now/CVE-2023-47681.md): WordPress WooCommerce Checkout Manager plugin \<= 7.3.0 - Broken Access Control vulnerability (CVSS 6.5, QuadLayers WooCommerce Checkout Manager)
- [CVE-2023-47771](https://cve.now/CVE-2023-47771.md): WordPress Essential Grid plugin \<= 3.0.18 - Multiple Authenticated Broken Access Control vulnerability (CVSS 8.3, ThemePunch OHG Essential Grid)
- [CVE-2023-47783](https://cve.now/CVE-2023-47783.md): WordPress Thrive Theme Builder theme \< 3.24.0 - Multiple Authenticated Broken Access Control vulnerability (CVSS 8.3, Thrive Themes Thrive Theme Builder)
- [CVE-2023-47788](https://cve.now/CVE-2023-47788.md): WordPress Jetpack plugin \< 12.7 - Contributor+ Broken Access Control vulnerability (CVSS 4.3, Automattic Jetpack)
- [CVE-2023-48759](https://cve.now/CVE-2023-48759.md): WordPress JetElements For Elementor plugin \<= 2.6.13 - Unauthenticated Arbitrary Attachment Download vulnerability (CVSS 7.5, Crocoblock JetElements For Elementor)
- [CVE-2023-48760](https://cve.now/CVE-2023-48760.md): WordPress JetElements For Elementor plugin \<= 2.6.13 - Unauthenticated Broken Access Control vulnerability (CVSS 8.2, Crocoblock JetElements For Elementor)
- [CVE-2023-48761](https://cve.now/CVE-2023-48761.md): WordPress JetElements For Elementor plugin \<= 2.6.13 - Broken Access Control vulnerability (CVSS 6.3, Crocoblock JetElements For Elementor)
- [CVE-2024-35765](https://cve.now/CVE-2024-35765.md): WordPress Greenshift – animation and page builder blocks plugin \<= 8.8.9.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Wpsoul Greenshift – animation and page builder blocks)
- [CVE-2024-35780](https://cve.now/CVE-2024-35780.md): WordPress Page Builder: Live Composer plugin \<= 1.5.42 - Contributor+ PHP Object Injection vulnerability (CVSS 8.5, Live Composer Team Page Builder: Live Composer)
- [CVE-2023-50900](https://cve.now/CVE-2023-50900.md): WordPress Master Slider plugin \<= 3.9.10 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Averta Master Slider)
- [CVE-2024-5676](https://cve.now/CVE-2024-5676.md): Paradox IP150 Internet Module Cross-Site Request Forgery (CVSS 6.8, Paradox Security Systems (Bahamas) IP150 Internet Module)
- [CVE-2024-4632](https://cve.now/CVE-2024-4632.md): WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce \<= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, brainstormforce CartFlows – Funnel Builder & Checkout Plugi…)
- [CVE-2023-6495](https://cve.now/CVE-2023-6495.md): YARPP – Yet Another Related Posts Plugin \<= 5.30.9 - Authenticated(Administrator+) Cross-Site Scripting (CVSS 4.4, jeffparker YARPP – Yet Another Related Posts Plugin)
- [CVE-2024-0383](https://cve.now/CVE-2024-0383.md): WP Recipe Maker \<= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group\_tag' (CVSS 6.4, brechtvds WP Recipe Maker)
- [CVE-2024-0789](https://cve.now/CVE-2024-0789.md): WP Maintenance \<= 6.1.9.2 - IP Spoofing to Maintenance Mode Bypass (CVSS 5.3, florent73 WP Maintenance)
- [CVE-2024-1407](https://cve.now/CVE-2024-1407.md): Paid Memberships Pro \<= 2.12.10 - Cross-Site Request Forgery to Membership Modification (CVSS 5.4, strangerstudios Paid Memberships Pro – Content Restriction,…)
- [CVE-2024-3894](https://cve.now/CVE-2024-3894.md): Photo Gallery, Images, Slider in Rbs Image Gallery \<= 3.2.19 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title (CVSS 6.4, robosoft Robo Gallery – Photo & Image Slider)
- [CVE-2024-37387](https://cve.now/CVE-2024-37387.md): Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. (CVSS 4.0, RICOH COMPANY Ricoh Streamline NX PC Client)
- [CVE-2024-37124](https://cve.now/CVE-2024-37124.md): Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. (CVSS 9.8, RICOH COMPANY Ricoh Streamline NX PC Client)
- [CVE-2024-36480](https://cve.now/CVE-2024-36480.md): Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. (CVSS 9.8, CVE-2024-36480 Ricoh Streamline NX PC Client)
- [CVE-2024-36252](https://cve.now/CVE-2024-36252.md): Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. (CVSS 6.3, RICOH COMPANY Ricoh Streamline NX PC Client)
- [CVE-2024-37881](https://cve.now/CVE-2024-37881.md): SiteGuard WP Plugin provides a functionality to customize the path to the login page wp-login.php and implements a measure to avoid redirect (CVSS 5.3, EG Secure Solutions SiteGuard WP Plugin)
- [CVE-2024-36978](https://cve.now/CVE-2024-36978.md): net: sched: sch\_multiq: fix possible OOB write in multiq\_tune() (CVSS 7.8, Linux · :linux\_kernel:)
- [CVE-2024-5208](https://cve.now/CVE-2024-5208.md): Uncontrolled Resource Consumption in mintplex-labs/anything-llm (CVSS 6.5, mintplex-labs/anything-llm)
- [CVE-2024-5853](https://cve.now/CVE-2024-5853.md): Image Optimizer, Resizer and CDN – Sirv \<= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload (CVSS 9.9, Image Optimizer, Resizer and CDN – Sirv)
- [CVE-2024-6132](https://cve.now/CVE-2024-6132.md): Pexels: Free Stock Photos \<= 1.2.2 - Authenticated (Contributor+) Arbitrary File Upload (CVSS 8.8, raajtram Pexels: Free Stock Photos)
- [CVE-2023-6692](https://cve.now/CVE-2023-6692.md): Ultimate Blocks – WordPress Blocks Plugin \<= 3.0.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via metabox (CVSS 6.4, ultimateblocks Ultimate Blocks – 25+ Gutenberg Blocks for B…)
- [CVE-2024-5574](https://cve.now/CVE-2024-5574.md): WP Magazine Modules Lite \<= 1.1.2 - Authenticated (Contributor+) Local File Inclusion (CVSS 7.5, codevibrant WP Magazine Modules Lite)
- [CVE-2024-5343](https://cve.now/CVE-2024-5343.md): Photo Gallery, Images, Slider in Rbs Image Gallery \<= 3.2.19 - Cross-Site Request Forgery to Post Creation and Limited Data Loss (CVSS 8.8, robosoft Robo Gallery – Photo & Image Slider)
- [CVE-2024-35298](https://cve.now/CVE-2024-35298.md): Improper authorization in handler for custom URL scheme issue in 'ZOZOTOWN' App for Android versions prior to 7.39.6 allows an attacker to l (CVSS 4.3, 'ZOZOTOWN' App for Android)
- [CVE-2024-3229](https://cve.now/CVE-2024-3229.md): Salon Booking System \<= 10.2 - Unauthenticated Arbitrary File Upload (CVSS 9.8, wordpresschef Salon Booking System – Free Version)
- [CVE-2024-2381](https://cve.now/CVE-2024-2381.md): AliExpress Dropshipping with AliNext Lite \<= 3.3.5 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8, ali2woo AliExpress Dropshipping Plugin for WooCommerce & Wo…)
- [CVE-2024-4623](https://cve.now/CVE-2024-4623.md): Blogmentor – Blog Layouts for Elementor \<= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via pagination\_style Parameter (CVSS 6.4, auburnforest Blogmentor – Blog Layouts for Elementor)
- [CVE-2024-5768](https://cve.now/CVE-2024-5768.md): MIMO Woocommerce Order Tracking \<= 1.0.2 - Missing Authorization to Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, surakrai MIMO Woocommerce Order Tracking)
- [CVE-2024-5649](https://cve.now/CVE-2024-5649.md): Universal Slider \<= 1.6.5 - Authenticated (Contributor+) PHP Object Injection (CVSS 5.4, webhuntinfotech Universal Slider)
- [CVE-2024-5724](https://cve.now/CVE-2024-5724.md): Photo Video Gallery Master \<= 1.5.3 - Authenticated (Contributor+) PHP Object Injection (CVSS 8.8, webhuntinfotech Photo Video Gallery Master)
- [CVE-2024-3984](https://cve.now/CVE-2024-3984.md): EmbedSocial – Social Media Feeds, Reviews and Galleries \<= 1.1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, EmbedSocial – Social Media Feeds, Reviews and Galleries)
- [CVE-2024-4873](https://cve.now/CVE-2024-4873.md): Replace Image \<= 1.1.10 - Insecure Direct Object Reference (CVSS 4.3, aspengrovestudios Replace Image)
- [CVE-2024-4541](https://cve.now/CVE-2024-4541.md): Custom Product List Table \<= 3.0.0 - Cross-Site Request Forgery (CVSS 4.3, viitorcloudvc Custom Product List Table)
- [CVE-2024-4663](https://cve.now/CVE-2024-4663.md): OSM Map Widget for Elementor \<= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter (CVSS 6.4, garbowza OSM Map Widget for Elementor)
- [CVE-2024-5021](https://cve.now/CVE-2024-5021.md): WordPress Picture / Portfolio / Media Gallery \<= 3.0.1 - Unauthenticated Server-Side Request Forgery (CVSS 9.3, nimble3 WordPress Picture / Portfolio / Media Gallery)
- [CVE-2024-4787](https://cve.now/CVE-2024-4787.md): Cost Calculator Builder PRO \<= 3.1.75 - Unauthenticated Arbitrary Email Sending (CVSS 5.8, StylemixThemes Cost Calculator Builder PRO)
- [CVE-2024-4450](https://cve.now/CVE-2024-4450.md): AliExpress Dropshipping with AliNext Lite \<= 3.3.6 - Missing Authorization via Several Functions (CVSS 6.3, ali2woo AliExpress Dropshipping Plugin for WooCommerce & Wo…)
- [CVE-2024-6125](https://cve.now/CVE-2024-6125.md): Login with phone number \<= 1.7.34 - Insecure Password Reset Mechanism (CVSS 8.1, glboy OTP Login With Phone Number, OTP Verification)
- [CVE-2024-33836](https://cve.now/CVE-2024-33836.md): In the module "JA Marketplace" (jamarketplace) up to version 9.0.1 from JA Module for PrestaShop, a guest can upload files with extensions . (CVSS 9.8)
- [CVE-2024-34990](https://cve.now/CVE-2024-34990.md): In the module "Help Desk - Customer Support Management System" (helpdesk) up to version 2.4.0 from FME Modules for PrestaShop, a customer ca (CVSS 10.0)
- [CVE-2024-34993](https://cve.now/CVE-2024-34993.md): In the module "Bulk Export products to Google Merchant-Google Shopping" (bagoogleshopping) up to version 1.0.26 from Buy Addons for PrestaSh (CVSS 6.3)
- [CVE-2024-34994](https://cve.now/CVE-2024-34994.md): In the module "Channable" (channable) up to version 3.2.1 from Channable for PrestaShop, a guest can perform SQL injection via \`ChannableFee (CVSS 9.8)
- [CVE-2024-36677](https://cve.now/CVE-2024-36677.md): In the module "Login as customer PRO" (loginascustomerpro) \<1.2.7 from Weblir for PrestaShop, a guest can access direct link to connect to e (CVSS 7.5)
- [CVE-2024-36678](https://cve.now/CVE-2024-36678.md): In the module "Theme settings" (pk\_themesettings) \<= 1.8.8 from Promokit.eu for PrestaShop, a guest can perform SQL injection. (CVSS 9.8)
- [CVE-2024-36679](https://cve.now/CVE-2024-36679.md): In the module "Module Live Chat Pro (All in One Messaging)" (livechatpro) \<=8.4.0, a guest can perform PHP Code injection. (CVSS 10.0)
- [CVE-2024-36680](https://cve.now/CVE-2024-36680.md): In the module "Facebook" (pkfacebook) \<=1.0.1 from Promokit.eu for PrestaShop, a guest can perform SQL injection. (CVSS 7.5)
- [CVE-2024-36684](https://cve.now/CVE-2024-36684.md): In the module "Custom links" (pk\_customlinks) \<= 2.3 from Promokit.eu for PrestaShop, a guest can perform SQL injection. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-06-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.