CVEs published in June 2024
48 tracked CVEs from 8 vendors had their first vendor advisory published in June 2024: 3 critical, 33 high, 3 in CISA KEV. Newest first.
9 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2024-4741Medium
OpenSSL Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-21685Medium
This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Core Data…
Atlassian · 1 advisory - Added
CVE-2024-37081High
VMware vCenter Server: The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo
VMware · 1 advisory - Added
CVE-2024-1086HighCISA KEV
Linux Kernel Use-After-Free Vulnerability
NetApp · 1 advisory - Added
CVE-2023-52425High
libexpat Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-5907Medium
Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability
Palo Alto · 1 advisory - Added
CVE-2024-36265Unrated
Apache Submarine Server Core: authorization bypass
Apache · 1 advisory - Added
CVE-2024-35265High
Windows Perception Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30100High
Microsoft SharePoint Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30099High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30097High
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30096Medium
Windows Cryptographic Services Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30095High
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30094High
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30093High
Windows Storage Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30091High
Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30090High
Microsoft Streaming Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30089High
Microsoft Streaming Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30088HighCISA KEV
Microsoft Windows Kernel TOCTOU Race Condition Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30087High
Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30086High
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30085High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30084High
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30083High
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30068High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30067Medium
Winlogon Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30066Medium
Winlogon Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30065Medium
Windows Themes Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30064High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30063Medium
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30062High
Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2024-35250HighCISA KEV
Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30082High
Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30080Critical
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30078High
Windows Wi-Fi Driver Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30077High
Windows OLE Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30076Medium
Windows Container Manager Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30075High
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30074High
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30072High
Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30070High
DHCP Server Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2024-30069Medium
Windows Remote Access Connection Manager Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2024-26010High
stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.14, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.3, FortiProxy 7.2.0 through 7.2.9, FortiProxy 7.0.0 through 7.0.16, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions, FortiSwitchManager 7.2.0 through 7.2.3, FortiSwitchManager 7.0.1 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets
Fortinet · 1 advisory - Added
CVE-2024-33883Critical
Node.js Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-32487High
less Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-24806High
libuv Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-36104Unrated
Apache OFBiz: Path traversal leading to a RCE
Apache · 1 advisory - Added
CVE-2024-29972Critical
** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted HTTP POST request
Zyxel · 1 advisory