Total
11535 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2024-48073 | 2026-06-17 | N/A | 9.8 CRITICAL | ||
| sunniwell HT3300 before 1.0.0.B022.2 is vulnerable to Insecure Permissions. The /usr/local/bin/update program, which is responsible for updating the software in the HT3300 device, is given the execution mode of sudo NOPASSWD. This program is vulnerable to a command injection vulnerability, which could allow an attacker to pass commands to this program via command line arguments to gain elevated root privileges. | |||||
| CVE-2024-48045 | 1 Leevio | 1 Happy Addons For Elementor | 2026-06-17 | N/A | 4.3 MEDIUM |
| Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Happy Addons for Elementor: from n/a through <= 3.12.3. | |||||
| CVE-2024-48044 | 1 Shortpixel | 1 Image Optimizer | 2026-06-17 | N/A | 5.4 MEDIUM |
| Missing Authorization vulnerability in ShortPixel ShortPixel Image Optimizer shortpixel-image-optimiser allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShortPixel Image Optimizer: from n/a through <= 5.6.3. | |||||
| CVE-2024-48039 | 1 Cubewp | 1 Cubewp | 2026-06-17 | N/A | 4.3 MEDIUM |
| Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CubeWP: from n/a through <= 1.1.15. | |||||
| CVE-2024-47790 | 2026-06-17 | N/A | N/A | ||
| ** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in D3D Security IP Camera D8801 due to usage of insecure Real-Time Streaming Protocol (RTSP) version for live video streaming. A remote attacker could exploit this vulnerability by crafting a RTSP packet leading to unauthorized access to live feed of the targeted device. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. | |||||
| CVE-2024-47768 | 1 Lifplatforms | 1 Lif Authentication Server | 2026-06-17 | N/A | 8.1 HIGH |
| Lif Authentication Server is a server used by Lif to do various tasks regarding Lif accounts. This vulnerability has to do with the account recovery system where there does not appear to be a check to make sure the user has been sent the recovery email and entered the correct code. If the attacker knew the email of the target, they could supply the email and immediately prompt the server to update the password without ever needing the code. This issue has been patched in version 1.7.3. | |||||
| CVE-2024-47587 | 2026-06-17 | N/A | 3.5 LOW | ||
| Cash Operations does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges causing low impact to confidentiality to the application. | |||||
| CVE-2024-47585 | 2026-06-17 | N/A | 4.3 MEDIUM | ||
| SAP NetWeaver Application Server for ABAP and ABAP Platform allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks, resulting in privilege escalation. While authorizations for import and export are distinguished, a single authorization is applied for both, which may contribute to these risks. On successful exploitation, this can result in potential security concerns. However, it has no impact on the integrity and availability of the application and may have only a low impact on data confidentiality. | |||||
| CVE-2024-47581 | 2026-06-17 | N/A | 4.3 MEDIUM | ||
| SAP HCM Approve Timesheets Version 4 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.There is low impact on integrity of the application. Confidentiality and availibility are not impacted. | |||||
| CVE-2024-47362 | 1 Wpchill | 1 Strong Testimonials | 2026-06-17 | N/A | 4.3 MEDIUM |
| Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials.This issue affects Strong Testimonials: from n/a through <= 3.1.16. | |||||
| CVE-2024-47361 | 1 Webtechstreet | 1 Elementor Addon Elements | 2026-06-17 | N/A | 6.5 MEDIUM |
| Missing Authorization vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder.This issue affects Elementor Addon Elements: from n/a through <= 1.13.6. | |||||
| CVE-2024-47358 | 1 Code-atlantic | 1 Popup Maker | 2026-06-17 | N/A | 5.3 MEDIUM |
| Missing Authorization vulnerability in Daniel Iser Popup Maker popup-maker.This issue affects Popup Maker: from n/a through <= 1.19.2. | |||||
| CVE-2024-47337 | 2026-06-17 | N/A | 4.3 MEDIUM | ||
| Missing Authorization vulnerability in Phillip Dane Joy Of Text Lite joy-of-text.This issue affects Joy Of Text Lite: from n/a through <= 2.3.1. | |||||
| CVE-2024-47330 | 1 Supsystic | 2 Slider, Social Share Buttons | 2026-06-17 | N/A | 4.3 MEDIUM |
| Missing Authorization vulnerability in Supsystic Slider by Supsystic, Supsystic Social Share Buttons by Supsystic.This issue affects Slider by Supsystic: from n/a through 1.8.6; Social Share Buttons by Supsystic: from n/a through 2.2.9. | |||||
| CVE-2024-47321 | 1 Androidbubbles | 1 Wp Datepicker | 2026-06-17 | N/A | 6.5 MEDIUM |
| Missing Authorization vulnerability in Fahad Mahmood WP Datepicker wp-datepicker.This issue affects WP Datepicker: from n/a through <= 2.1.1. | |||||
| CVE-2024-47318 | 1 Magazine3 | 1 Pwa For Wp \& Amp | 2026-06-17 | N/A | 4.3 MEDIUM |
| Missing Authorization vulnerability in Magazine3 PWA for WP & AMP pwa-for-wp.This issue affects PWA for WP & AMP: from n/a through <= 1.7.72. | |||||
| CVE-2024-47317 | 1 Wpquads | 1 Ads | 2026-06-17 | N/A | 4.3 MEDIUM |
| Missing Authorization vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded.This issue affects Ads by WPQuads: from n/a through <= 2.0.84. | |||||
| CVE-2024-47314 | 1 Sunshinephotocart | 1 Sunshine Photo Cart | 2026-06-17 | N/A | 7.1 HIGH |
| Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.8. | |||||
| CVE-2024-47311 | 1 Kraftplugins | 1 Wheel Of Life | 2026-06-17 | N/A | 5.3 MEDIUM |
| Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wheel of Life: from n/a through <= 1.1.8. | |||||
| CVE-2024-47308 | 1 Templately | 1 Templately | 2026-06-17 | N/A | 6.5 MEDIUM |
| Missing Authorization vulnerability in WPDeveloper Templately templately.This issue affects Templately: from n/a through <= 3.1.2. | |||||