cisa.gov | Bulletins
Follow
Vulnerability Summary for the Week of June 10, 2024
- actpro: Missing Authorization in extra_product_options_for_woocommerce.
- adfinis: Remote code execution in Document Merge Service.
- Adobe Commerce: Improper Restriction of XML External Entity Reference ('XXE'), Improper Input Validation, Improper Authentication, Improper Authorization, and Unrestricted Upload of File with Dangerous Type.
- Adobe Experience Manager: Improper Access Control.
- Adobe Framemaker Publishing Server: Improper Authentication and Information Exposure.
- Adobe ColdFusion: Improper Access Control.
- Adobe Photoshop Desktop: Out-of-bounds read.
- Adobe Substance3D - Stager: Out-of-bounds write.
- aimeos: Unauthorized file upload in aimeos-core.
- Apple macOS: Memory corruption, out-of-bounds read, and access issues.
- arraytics: Unauthorized data modification in WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin.
- Aruphash: Missing Authentication for Critical Function in Crafthemes Demo Import.
- arwebdesign: Missing Authorization in Dashboard To-Do List.
- ASUS: Upload functionality vulnerabilities, buffer overflow, and authentication bypass in Download Master, DSL-N17U, ZenWiFi XT8.
- avast: Privilege escalation in antivirus repair function.
- awplife: Missing Authorization in Image Gallery and Slider Responsive Slideshow.
- awslabs: Cross-site scripting (XSS) in AWS Deployment Framework.