# CVEs published 2024-06-27

111 CVEs were published on June 27, 2024: 21 critical, 37 high. Days are UTC.

- [CVE-2024-6071](https://cve.now/CVE-2024-6071.md): PTC Creo Elements/Direct License Server Missing Authorization (CVSS 10.0, PTC Creo Elements/Direct License)
- [CVE-2024-4395](https://cve.now/CVE-2024-4395.md): Lack of Client Validation in Jamf Compliance Editor's Helper Service May Result in Privilege Escalation (CVSS 7.3, Jamf Compliance Editor)
- [CVE-2024-5642](https://cve.now/CVE-2024-5642.md): Buffer overread when using an empty list with SSLContext.set\_npn\_protocols() (CVSS 6.5, Python Software Foundation CPython)
- [CVE-2024-22276](https://cve.now/CVE-2024-22276.md): VMware Cloud Director Object Storage Extension contains an Insertion of Sensitive Information vulnerability. (CVSS 5.3, VMware Cloud Director Object Storage Extension)
- [CVE-2024-22272](https://cve.now/CVE-2024-22272.md): VMware Cloud Director contains an Improper Privilege Management vulnerability. (CVSS 4.9, VMware Cloud Director)
- [CVE-2024-22260](https://cve.now/CVE-2024-22260.md): VMware Workspace One UEM update addresses an information exposure vulnerability. (CVSS 6.8, VMware Workspace One UEM)
- [CVE-2024-2973](https://cve.now/CVE-2024-2973.md): Session Smart Router(SSR): On redundant router deployments API authentication can be bypassed (CVSS 10.0, Juniper Networks Session Smart Router · Juniper Networks… +1)
- [CVE-2024-6127](https://cve.now/CVE-2024-6127.md): BC Security Empire Path Traversal RCE (CVSS 9.8, BC Security Empire)
- [CVE-2024-38523](https://cve.now/CVE-2024-38523.md): Hush Line OTP issue (CVSS 7.5, scidsg hushline)
- [CVE-2024-2882](https://cve.now/CVE-2024-2882.md): Missing Authorization in SDG Technologies PnPSCADA (CVSS 9.3, SDG Technologies PnPSCADA)
- [CVE-2024-3331](https://cve.now/CVE-2024-3331.md): Spotfire: NTLM token leakage (CVSS 6.8, Spotfire Enterprise Runtime for R - Server Edition · Spo… +3)
- [CVE-2024-5980](https://cve.now/CVE-2024-5980.md): Arbitrary File Write via /v1/runs API endpoint in lightning-ai/pytorch-lightning (CVSS 9.1, lightning-ai/pytorch-lightning · lightning +1)
- [CVE-2024-5933](https://cve.now/CVE-2024-5933.md): Cross-site Scripting (XSS) in parisneo/lollms-webui (CVSS 6.1, parisneo/lollms-webui)
- [CVE-2024-6086](https://cve.now/CVE-2024-6086.md): Improper Access Control in lunary-ai/lunary (CVSS 5.3, lunary-ai/lunary)
- [CVE-2024-6139](https://cve.now/CVE-2024-6139.md): Path Traversal in parisneo/lollms (CVSS 7.3, parisneo/lollms · lollms)
- [CVE-2024-5935](https://cve.now/CVE-2024-5935.md): CSRF Vulnerability in imartinez/privategpt (CVSS 5.4, imartinez/privategpt)
- [CVE-2024-5755](https://cve.now/CVE-2024-5755.md): Email Validation Bypass in lunary-ai/lunary (CVSS 5.3, lunary-ai/lunary)
- [CVE-2024-5936](https://cve.now/CVE-2024-5936.md): Open Redirect in imartinez/privategpt (CVSS 4.3, imartinez/privategpt)
- [CVE-2024-5824](https://cve.now/CVE-2024-5824.md): Path Traversal in parisneo/lollms (CVSS 7.4, parisneo/lollms · lollms)
- [CVE-2024-5885](https://cve.now/CVE-2024-5885.md): Server-Side Request Forgery (SSRF) in stangirard/quivr (CVSS 8.6, stangirard/quivr)
- [CVE-2024-6085](https://cve.now/CVE-2024-6085.md): Path Traversal in parisneo/lollms (CVSS 8.6, parisneo/lollms · lollms)
- [CVE-2024-5822](https://cve.now/CVE-2024-5822.md): Server-Side Request Forgery (SSRF) in gaizhenbiao/ChuanhuChatGPT (CVSS 7.3, gaizhenbiao/chuanhuchatgpt · chuanhuchatgpt)
- [CVE-2024-5714](https://cve.now/CVE-2024-5714.md): Improper Access Control in lunary-ai/lunary (CVSS 7.4, lunary-ai/lunary)
- [CVE-2024-6038](https://cve.now/CVE-2024-6038.md): ReDoS Vulnerability in gaizhenbiao/chuanhuchatgpt (CVSS 7.5, gaizhenbiao/chuanhuchatgpt · chuanhuchatgpt)
- [CVE-2024-6250](https://cve.now/CVE-2024-6250.md): Absolute Path Traversal in parisneo/lollms-webui (CVSS 7.5, parisneo/lollms-webui)
- [CVE-2024-5710](https://cve.now/CVE-2024-5710.md): Improper Access Control in Team Management in berriai/litellm (CVSS 5.3, berriai/litellm · litellm)
- [CVE-2024-5820](https://cve.now/CVE-2024-5820.md): Unprotected WebSocket in stitionai/devika (CVSS 7.6, stitionai/devika)
- [CVE-2024-6090](https://cve.now/CVE-2024-6090.md): Path Traversal Vulnerability in gaizhenbiao/chuanhuchatgpt (CVSS 7.5, gaizhenbiao/chuanhuchatgpt · chuanhuchatgpt)
- [CVE-2024-5751](https://cve.now/CVE-2024-5751.md): Remote Code Execution in BerriAI/litellm (CVSS 9.8, berriai/litellm · litellm)
- [CVE-2024-5826](https://cve.now/CVE-2024-5826.md): Remote Code Execution via Prompt Injection in vanna-ai/vanna (CVSS 9.8, vanna-ai/vanna · vanna)
- [CVE-2024-5979](https://cve.now/CVE-2024-5979.md): Denial of Service via Invalid Argument in h2oai/h2o-3 (CVSS 7.5, h2oai/h2o-3 · h2o)
- [CVE-2024-3330](https://cve.now/CVE-2024-3330.md): Spotfire Remote Code Execution Vulnerability (CVSS 9.9, Spotfire Analyst · Spotfire Server +1)
- [CVE-2024-3017](https://cve.now/CVE-2024-3017.md): Denial of service in multi-protocol gateway - Zigbee + Thread (CVSS 6.5, silabs.com SiSDK)
- [CVE-2024-4578](https://cve.now/CVE-2024-4578.md): Privilege escalation in Arista Wireless Access Points (CVSS 8.4, Arista Networks Arista Wireless Access Points)
- [CVE-2023-38370](https://cve.now/CVE-2023-38370.md): IBM Security Access Manager Docker information disclosure (CVSS 7.5, IBM Security Access Manager Docker)
- [CVE-2023-38368](https://cve.now/CVE-2023-38368.md): IBM Security Access Manager Docker information disclosure (CVSS 5.5, IBM Security Access Manager Docker)
- [CVE-2023-30997](https://cve.now/CVE-2023-30997.md): IBM Security Access Manager Docker privilege escalation (CVSS 7.8, IBM Security Access Manager Docker)
- [CVE-2023-30998](https://cve.now/CVE-2023-30998.md): IBM Security Access Manager Docker privilege escalation (CVSS 7.8, IBM Security Access Manager Docker)
- [CVE-2024-3043](https://cve.now/CVE-2024-3043.md): Zigbee co-ordinator realignment packet may lead to denial of service (CVSS 7.5, silabs.com Ember ZNet SDK)
- [CVE-2023-38371](https://cve.now/CVE-2023-38371.md): IBM Security Access Manager Docker information disclosure (CVSS 5.9, IBM Security Access Manager Docker)
- [CVE-2023-42014](https://cve.now/CVE-2023-42014.md): IBM Sterling B2B Integrator Standard Edition cross-site scripting (CVSS 5.4, IBM Sterling B2B Integrator Standard Edition)
- [CVE-2024-31916](https://cve.now/CVE-2024-31916.md): IBM OpenBMC information disclosure (CVSS 7.5, IBM OpenBMC)
- [CVE-2023-42011](https://cve.now/CVE-2023-42011.md): IBM Sterling B2B Integrator Standard Edition tapjacking (CVSS 4.3, IBM Sterling B2B Integrator Standard Edition)
- [CVE-2024-24792](https://cve.now/CVE-2024-24792.md): Panic when parsing invalid palette-color images in golang.org/x/image (CVSS 7.5, golang.org/x/image/tiff · golang.org/x/image)
- [CVE-2024-5548](https://cve.now/CVE-2024-5548.md): Directory Traversal in stitionai/devika (CVSS 7.5, stitionai/devika)
- [CVE-2024-5547](https://cve.now/CVE-2024-5547.md): Directory Traversal in stitionai/devika (CVSS 7.5, stitionai/devika)
- [CVE-2024-5334](https://cve.now/CVE-2024-5334.md): Local File Read in stitionai/devika (CVSS 7.5, stitionai/devika)
- [CVE-2024-35260](https://cve.now/CVE-2024-35260.md): Microsoft Dataverse Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Power Platform)
- [CVE-2024-35153](https://cve.now/CVE-2024-35153.md): IBM WebSphere Application Server cross-site scripting (CVSS 4.8, IBM WebSphere Application Server)
- [CVE-2024-39376](https://cve.now/CVE-2024-39376.md): Improper Access Control In TELSAT MarKoni FM Transmitter (CVSS 9.3, Markoni-D (Compact) FM Transmitters · Markoni-DH (Exciter+A…)
- [CVE-2024-39375](https://cve.now/CVE-2024-39375.md): Use of Client-Side Authentication in TELSAT marKoni FM Transmitter (CVSS 9.3, Markoni-D (Compact) FM Transmitters · Markoni-DH (Exciter+A…)
- [CVE-2024-39374](https://cve.now/CVE-2024-39374.md): Use of Hard-coded Credentials in TELSAT marKoni FM Transmitter (CVSS 9.3, Markoni-D (Compact) FM Transmitters · Markoni-DH (Exciter+A…)
- [CVE-2024-39373](https://cve.now/CVE-2024-39373.md): Improper Neutralization of Special Elements used in a Command in TELSAT marKoni FM Transmitter (CVSS 9.3, Markoni-D (Compact) FM Transmitters · Markoni-DH (Exciter+A…)
- [CVE-2023-30430](https://cve.now/CVE-2023-30430.md): IBM Security Verify Access information disclosure (CVSS 5.5, IBM Security Verify Access)
- [CVE-2024-31883](https://cve.now/CVE-2024-31883.md): IBM Security Verify Access denial of service (CVSS 5.3, IBM Security Verify Access)
- [CVE-2024-6388](https://cve.now/CVE-2024-6388.md): Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passin (CVSS 5.9, Canonical Ubuntu Advantage Desktop Pro)
- [CVE-2024-6374](https://cve.now/CVE-2024-6374.md): lahirudanushka School Management System Subject Page subject.php cross site scripting (CVSS 5.3, lahirudanushka School Management System)
- [CVE-2024-1153](https://cve.now/CVE-2024-1153.md): SQL Injection Vulnerability in Talya Informatics' Travel APPS (CVSS 4.6, Talya Informatics Travel APPS)
- [CVE-2024-1107](https://cve.now/CVE-2024-1107.md): IDOR in Talya Informatics' Travel APPS (CVSS 9.8, Talya Informatics Travel APPS)
- [CVE-2024-6373](https://cve.now/CVE-2024-6373.md): itsourcecode Online Food Ordering System addproduct.php unrestricted upload (CVSS 6.9, itsourcecode Online Food Ordering System)
- [CVE-2024-6372](https://cve.now/CVE-2024-6372.md): itsourcecode Tailoring Management System customeradd.php sql injection (CVSS 5.3, itsourcecode Tailoring Management System)
- [CVE-2024-6371](https://cve.now/CVE-2024-6371.md): itsourcecode Pool of Bethesda Online Reservation System controller.php sql injection (CVSS 6.9, itsourcecode Pool of Bethesda Online Reservation System)
- [CVE-2024-6370](https://cve.now/CVE-2024-6370.md): LabVantage LIMS POST Request cross site scripting (CVSS 5.3, LabVantage LIMS)
- [CVE-2024-6369](https://cve.now/CVE-2024-6369.md): LabVantage LIMS POST Request cross site scripting (CVSS 5.3, LabVantage LIMS)
- [CVE-2024-6368](https://cve.now/CVE-2024-6368.md): LabVantage LIMS POST Request cross site scripting (CVSS 5.3, LabVantage LIMS)
- [CVE-2024-6367](https://cve.now/CVE-2024-6367.md): LabVantage LIMS POST Request cross site scripting (CVSS 5.3, LabVantage LIMS)
- [CVE-2024-6262](https://cve.now/CVE-2024-6262.md): Portfolio Gallery – Image Gallery Plugin \<= 1.6.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (CVSS 6.4, awordpresslife Portfolio Filter Gallery)
- [CVE-2024-5535](https://cve.now/CVE-2024-5535.md): SSL\_select\_next\_proto buffer overread (CVSS 9.1, OpenSSL)
- [CVE-2024-0949](https://cve.now/CVE-2024-0949.md): Improper Access Control in Talya Informatics' Elektraweb (CVSS 9.8, Talya Informatics Elektraweb)
- [CVE-2023-7270](https://cve.now/CVE-2023-7270.md): Local Privilege Escalation via MSI installer (CVSS 5.3, SoftMaker Software Office · SoftMaker Software FreeOffice)
- [CVE-2024-0947](https://cve.now/CVE-2024-0947.md): Cookies Manipulation in Talya Informatics' Elektraweb (CVSS 9.8, Talya Informatics Elektraweb)
- [CVE-2024-4983](https://cve.now/CVE-2024-4983.md): The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce \<= 5.6.0- Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, posimyththemes The Plus Addons for Elementor – Addons for E…)
- [CVE-2024-5601](https://cve.now/CVE-2024-5601.md): Create by Mediavine \<= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode (CVSS 6.4, mischiefmarmot Create)
- [CVE-2024-22232](https://cve.now/CVE-2024-22232.md): Specially crafted url can be created which leads to a directory traversal in the salt file server (CVSS 7.7, VMware Salt Project · salt)
- [CVE-2024-22231](https://cve.now/CVE-2024-22231.md): Syndic cache directory creation is vulnerable to a directory traversal attack (CVSS 5.0, VMware Salt Project · salt)
- [CVE-2024-4704](https://cve.now/CVE-2024-4704.md): Contact Form 7 \< 5.9.5 - Unauthenticated Open Redirect (CVSS 6.1, Contact Form)
- [CVE-2024-4664](https://cve.now/CVE-2024-4664.md): WP Chat App \< 3.6.5 - Admin+ Stored XSS (CVSS 4.8, WP Chat App)
- [CVE-2024-3111](https://cve.now/CVE-2024-3111.md): H5P \< 1.15.8 - Contributor+ Stored XSS (CVSS 7.1, Interactive Content)
- [CVE-2024-1330](https://cve.now/CVE-2024-1330.md): Kadence Blocks Pro \< 2.3.8 - Contributor+ Arbitrary Option Access (CVSS 4.3, kadence-blocks-pro)
- [CVE-2024-6283](https://cve.now/CVE-2024-6283.md): DethemeKit For Elementor \<= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via URL Parameter of the De Gallery Widget (CVSS 5.4, DethemeKit for Elementor)
- [CVE-2024-4570](https://cve.now/CVE-2024-4570.md): Elementor Addon Elements \<= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, wpvibes Addon Elements for Elementor)
- [CVE-2024-4569](https://cve.now/CVE-2024-4569.md): Elementor Addon Elements \<= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, wpvibes Addon Elements for Elementor)
- [CVE-2024-5289](https://cve.now/CVE-2024-5289.md): Gutenberg Blocks with AI by Kadence WP – Page Builder Features \<= 3.2.42 - Authenticated (Contributor+) Stored Cross-Site Scripting in Google Maps Widget (CVSS 6.4, stellarwp Kadence Blocks — Page Builder Toolkit for Gutenbe…)
- [CVE-2024-6054](https://cve.now/CVE-2024-6054.md): Auto Featured Image \<= 1.2 - Authenticated (Contributor+) Arbitrary File Upload (CVSS 8.8, ka-yue Auto Featured Image)
- [CVE-2016-20022](https://cve.now/CVE-2016-20022.md): In the Linux kernel before 4.8, usb\_parse\_endpoint in drivers/usb/core/config.c does not validate the wMaxPacketSize field of an endpoint de (CVSS 8.4)
- [CVE-2023-52892](https://cve.now/CVE-2023-52892.md): In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields in TLS certificates (CVSS 7.5, phpseclib/phpseclib)
- [CVE-2024-28820](https://cve.now/CVE-2024-28820.md): Buffer overflow in the extract\_openvpn\_cr function in openvpn-cr.c in openvpn-auth-ldap (aka the Three Rings Auth-LDAP plugin for OpenVPN) 2 (CVSS 6.3)
- [CVE-2024-31802](https://cve.now/CVE-2024-31802.md): DESIGNA ABACUS v.18 and before allows an attacker to bypass the payment process via a crafted QR code. (CVSS 6.3)
- [CVE-2024-36059](https://cve.now/CVE-2024-36059.md): Directory Traversal vulnerability in Kalkitech ASE ASE61850 IEDSmart upto and including version 2.3.5 allows attackers to read/write arbitra (CVSS 9.4)
- [CVE-2024-36072](https://cve.now/CVE-2024-36072.md): Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the loggin (CVSS 9.8)
- [CVE-2024-36073](https://cve.now/CVE-2024-36073.md): Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the shadow (CVSS 7.2)
- [CVE-2024-36074](https://cve.now/CVE-2024-36074.md): Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the Endpoi (CVSS 7.2)
- [CVE-2024-36075](https://cve.now/CVE-2024-36075.md): The CoSoSys Endpoint Protector through 5.9.3 and Unify agent through 7.0.6 is susceptible to an arbitrary code execution vulnerability due t (CVSS 6.5)
- [CVE-2024-36755](https://cve.now/CVE-2024-36755.md): D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL. (CVSS 6.8)
- [CVE-2024-39129](https://cve.now/CVE-2024-39129.md): Heap Buffer Overflow vulnerability in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function PushTSBuf() at /s (CVSS 5.3)
- [CVE-2024-39130](https://cve.now/CVE-2024-39130.md): A NULL Pointer Dereference discovered in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function DumpOneStream( (CVSS 7.5)
- [CVE-2024-39132](https://cve.now/CVE-2024-39132.md): A NULL Pointer Dereference vulnerability in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function VerifyComma (CVSS 6.5)
- [CVE-2024-39133](https://cve.now/CVE-2024-39133.md): Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the \_\_zzip\_parse\_root\_directory() f (CVSS 4.3)
- [CVE-2024-39134](https://cve.now/CVE-2024-39134.md): A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the \_\_zzip\_fetch\_disk\_trailer() (CVSS 7.5)
- [CVE-2024-39153](https://cve.now/CVE-2024-39153.md): idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/info\_deal.php?mudi=del&dataType=news&dat (CVSS 4.7)
- [CVE-2024-39154](https://cve.now/CVE-2024-39154.md): idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord\_deal.php?mudi=del&dataType=word& (CVSS 8.8)
- [CVE-2024-39155](https://cve.now/CVE-2024-39155.md): idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord\_deal.php?mudi=add. (CVSS 6.8)
- [CVE-2024-39156](https://cve.now/CVE-2024-39156.md): idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord\_deal.php?mudi=add. (CVSS 3.8)
- [CVE-2024-39157](https://cve.now/CVE-2024-39157.md): idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord\_deal.php?mudi=del&dataType=&dat (CVSS 3.8)
- [CVE-2024-39158](https://cve.now/CVE-2024-39158.md): idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys\_deal.php?mudi=infoSet. (CVSS 8.8)
- [CVE-2024-39207](https://cve.now/CVE-2024-39207.md): lua-shmem v1.0-1 was discovered to contain a buffer overflow via the shmem\_write function. (CVSS 8.2)
- [CVE-2024-39208](https://cve.now/CVE-2024-39208.md): luci-app-lucky v2.8.3 was discovered to contain hardcoded credentials. (CVSS 9.8)
- [CVE-2024-39209](https://cve.now/CVE-2024-39209.md): luci-app-sms-tool v1.9-6 was discovered to contain a command injection vulnerability via the score parameter. (CVSS 6.3)
- [CVE-2024-39669](https://cve.now/CVE-2024-39669.md): In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. (CVSS 9.8)
- [CVE-2024-39705](https://cve.now/CVE-2024-39705.md): NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download fun (CVSS 9.8, nltk)
- [CVE-2024-39708](https://cve.now/CVE-2024-39708.md): An issue was discovered in the Agent in Delinea Privilege Manager (formerly Thycotic Privilege Manager) before 12.0.1096 on Windows. (CVSS 7.0)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-06-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.