2024-06-27

2024-06-28

2024-06-29

All (4) Critical (8) High (23) Medium (37) Low (4)

CVE-2024-39302 Jun 28, 21:15 LOW Monitor

BigBlueButton is an open-source virtual classroom designed to help teachers teach and learners learn. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Privilege Escalation

NVD GitHub

CVSS 3.1

3.7

EPSS

0.5%

CVE-2024-38531 Jun 28, 14:15 LOW Monitor

Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. Rated low severity (CVSS 3.6). No vendor patch available.

Information Disclosure

NVD GitHub

CVSS 3.1

3.6

EPSS

0.1%

CVE-2024-39307 Jun 28, 21:15 LOW Monitor

Kavita is a cross platform reading server. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS RCE

NVD GitHub

CVSS 3.1

3.5

EPSS

0.5%

CVE-2024-3995 Jun 28, 20:15 LOW Monitor

In Helix ALM versions prior to 2024.2.0, a local command injection was identified. Rated low severity (CVSS 2.0). No vendor patch available.

RCE Command Injection Code Injection

NVD

CVSS 4.0

2.0

EPSS

0.6%