Tag: 2024-06-21

1 Attack Reports | 150 Vulnerabilities

Attack reports

North Korean based backdoor packs a punch

This report analyzes a new threat campaign discovered in late May, featuring multiple layers and ultimately delivering a previously undocumented backdoor. The campaign specifically targets Aerospace and Defense companies, sectors of particular interest to North Korean threat groups. The backdoors a…
backdoor
espionage
defense
northkorea
2024-06-21
nikigo
aerospace
nikihttp
Published: June 21, 2024
Downloadable IOCs: 20
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-5756

9.8
    Email Subscribers by Icegram Express - Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin
  • Version(s): up to 5.7.23
Published: June 21, 2024

CVE-2024-6027

9.8
    Themify - WooCommerce Product Filter plugin for WordPress
  • Version(s): up to 1.4.9
Published: June 21, 2024

CVE-2023-38389

9.8
    Artbees JupiterX Core
  • Version(s): n/a - 3.3.8
Published: June 21, 2024

CVE-2020-27352

9.3
    Docker Snap
Published: June 21, 2024

CVE-2024-35767

9.1
    Bogdan Bendziukov Squeeze
  • Version(s): n/a, 1.4
Published: June 21, 2024

CVE-2023-45673

8.9
    Joplin
  • Version(s): 2.13.3
Published: June 21, 2024

CVE-2024-5503

8.8
    WP Blog Post Layouts plugin for WordPress
  • Version(s): up to 1.1.3
Published: June 21, 2024

CVE-2024-5455

8.8
    Plus Addons for Elementor Page Builder plugin
  • Version(s): up to 5.5.4
Published: June 21, 2024

CVE-2022-43453

8.8
    WP Tools
  • Version(s): n/a, 3.41
Published: June 21, 2024

CVE-2024-37212

8.3
    Ali2Woo Lite
  • Version(s): n/a through 3.3.5
Published: June 21, 2024

CVE-2023-37898

8.2
    Joplin
  • Version(s): 2.12.9
Published: June 21, 2024

CVE-2023-38506

8.2
    Joplin
  • Version(s): 2.12.10 and above
Published: June 21, 2024

CVE-2023-39517

8.2
    Joplin
  • Version(s): 2.12.8
Published: June 21, 2024

CVE-2024-31890

7.8
    IBM TCP/IP Connectivity Utilities for i
  • Version(s): 7.3, 7.4, 7.5
Published: June 21, 2024

CVE-2024-6240

7.7
    Parallels Desktop Software
  • Version(s): before 19.3.0
Published: June 21, 2024

CVE-2024-6213

7.3
    SourceCodester Food Ordering Management System
  • Version(s): up to 1.0
Published: June 21, 2024

CVE-2024-6218

7.3
    Vehicle Management System
  • Version(s): 1.0
Published: June 21, 2024

CVE-2024-2003

7.3
    ESET
Published: June 21, 2024

CVE-2024-35766

7.1
    WPPizza
  • Version(s): n/a through 3.18.13
Published: June 21, 2024

CVE-2024-1639

6.5
    WooCommerce License Manager plugin for WordPress
  • Version(s): up to 3.0.7
Published: June 21, 2024

CVE-2024-35774

6.5
    D'arteweb DImage 360
  • Version(s): n/a - 2.0
Published: June 21, 2024

CVE-2024-35779

6.5
    Live Composer Team Page Builder
  • Version(s): n/a, 1.5.42
Published: June 21, 2024

CVE-2024-5058

6.5
    WPDeveloper Typing Text
  • Version(s): n/a, 1.2.5
Published: June 21, 2024

CVE-2024-35758

6.5
    Interface by Theme Horse
  • Version(s): n/a - 3.1.0
Published: June 21, 2024

CVE-2024-35761

6.5
    vCita Online Booking & Scheduling Calendar for WordPress by vcita
  • Version(s): n/a, 4.4.0
Published: June 21, 2024

CVE-2024-35762

6.5
    Serious Slider
  • Version(s): n/a, 1.2.4
Published: June 21, 2024

CVE-2024-35763

6.5
    Theme Freesia Excellent
  • Version(s): from n/a, 1.2.9
Published: June 21, 2024

CVE-2024-35764

6.5
    Church Admin
  • Version(s): n/a, up to 4.4.4
Published: June 21, 2024

CVE-2022-45803

6.5
    WordPress Form Builder Plugin - Gutenberg Forms
  • Version(s): n/a - 2.2.8.3
Published: June 21, 2024

CVE-2024-6239

6.5
    Poppler
Published: June 21, 2024

CVE-2024-35778

6.5
    John West Slideshow SE
  • Version(s): n/a - 2.5.17
Published: June 21, 2024

CVE-2024-35781

6.5
    YAHMAN Word Balloon
  • Version(s): from n/a through 4.21.1
Published: June 21, 2024

CVE-2024-5191

6.4
    Branda - White Label WordPress, Custom Login Page Customizer plugin
  • Version(s): up to 3.4.17
Published: June 21, 2024

CVE-2024-5945

6.4
    WP SVG Images plugin for WordPress
  • Version(s): up to 4.2
Published: June 21, 2024

CVE-2024-6214

6.3
    SourceCodester Food Ordering Management System
  • Version(s): 1.0
Published: June 21, 2024

CVE-2024-6215

6.3
    SourceCodester Food Ordering Management System
  • Version(s): up to 1.0
Published: June 21, 2024

CVE-2024-6216

6.3
    SourceCodester Food Ordering Management System
  • Version(s): 1.0
Published: June 21, 2024

CVE-2024-6217

6.3
    SourceCodester Food Ordering Management System
  • Version(s): 1.0
Published: June 21, 2024

CVE-2024-6241

6.3
    Pear Admin
  • Version(s): up to 2.0.2
Published: June 21, 2024

CVE-2024-5344

6.1
    The Plus Addons for Elementor Page Builder plugin for WordPress
  • Version(s): up to 5.5.6
Published: June 21, 2024

CVE-2024-5859

6.1
    Online Booking & Scheduling Calendar for WordPress by vcita plugin
  • Version(s): up to 4.4.2
Published: June 21, 2024

CVE-2024-35769

5.9
    John West Slideshow SE
  • Version(s): from n/a, 2.5.17
Published: June 21, 2024

CVE-2024-35757

5.9
    Easy Age Verify
  • Version(s): n/a, 1.8.2
Published: June 21, 2024

CVE-2024-35759

5.9
    WP Job Portal
  • Version(s): n/a, 2.1.3
Published: June 21, 2024

CVE-2024-35760

5.9
    WP Job Portal
  • Version(s): n/a, 2.1.3
Published: June 21, 2024

CVE-2024-35768

5.9
    Live Composer Team Page Builder
  • Version(s): from n/a through 1.5.42
Published: June 21, 2024

CVE-2024-3036

5.7
    ABB 800xA Base
  • Version(s): 6.0.0, 6.1.1-2
Published: June 21, 2024

CVE-2024-38874

5.4
    TYPO3 Events 2 extension
  • Version(s): before 8.3.8, before 9.0.6
Published: June 21, 2024

CVE-2024-37118

5.4
    Uncanny Automator Pro
  • Version(s): n/a, 5.3
Published: June 21, 2024

CVE-2024-3610

5.3
    WP Child Theme Generator plugin for WordPress
  • Version(s): up to 1.1.1
Published: June 21, 2024

CVE-2024-3961

5.3
    ConvertKit – Email Newsletter, Email Marketing, Subscribers and Landing Pages plugin for WordPress
  • Version(s): up to 2.4.9
Published: June 21, 2024

CVE-2024-38873

5.3
    TYPO3
  • Version(s): before 0.1.4
Published: June 21, 2024

CVE-2024-35776

5.3
    phpinfo() WP
  • Version(s): n/a, 5.0
Published: June 21, 2024

CVE-2024-5059

5.3
    A WP Life Event Management Tickets Booking
  • Version(s): n/a - 1.4.0
Published: June 21, 2024

CVE-2022-44587

5.3
    WP 2FA
  • Version(s): n/a, 2.6.3
Published: June 21, 2024

CVE-2024-6225

4.4
    Booking for Appointments and Events Calendar - Amelia plugin for WordPress
  • Version(s): up to 1.1.5 (Pro version: up to 7.5.1)
Published: June 21, 2024

CVE-2023-3352

4.3
    Smush plugin for WordPress
Published: June 21, 2024

CVE-2024-1955

4.3
    Hide Dashboard Notifications plugin for WordPress
  • Version(s): up to 1.3
Published: June 21, 2024

CVE-2024-5639

4.3
    User Profile Picture plugin for WordPress
  • Version(s): up to 2.6.1
Published: June 21, 2024

CVE-2024-35770

4.3
    Vimeography: Vimeo Video Gallery WordPress Plugin
  • Version(s): n/a, 2.4.1
Published: June 21, 2024

CVE-2024-35771

4.3
    Customizr
  • Version(s): n/a, 4.4.21
Published: June 21, 2024

CVE-2024-35772

4.3
    Hueman
  • Version(s): n/a, up to 3.7.24
Published: June 21, 2024

CVE-2023-51375

4.3
    EmbedPress
  • Version(s): n/a - 3.8.3
Published: June 21, 2024

CVE-2024-37198

4.3
    Digital Newspaper
  • Version(s): n/a, 1.0, 1.1.5
Published: June 21, 2024

CVE-2024-37227

4.3
    Tribulant Newsletters
  • Version(s): n/a, 4.9.7
Published: June 21, 2024

CVE-2024-37230

4.3
    Rara Theme Book Landing Page
  • Version(s): n/a, 1.2.3
Published: June 21, 2024

CVE-2022-38055

4.3
    wpForo Forum
  • Version(s): from n/a through 2.0.9
Published: June 21, 2024

CVE-2022-44593

3.7
    SolidWP Solid Security
  • Version(s): n/a - 9.3.1
Published: June 21, 2024

CVE-2024-6212

3.5
    SourceCodester Simple Student Attendance System
  • Version(s): 1.0
Published: June 21, 2024

CVE-2019-15797

None
    UNKNOWN
Published: June 21, 2024

CVE-2019-15798

None
    UNKNOWN
Published: June 21, 2024

CVE-2020-35155

None
    UNKNOWN
Published: June 21, 2024

CVE-2020-35156

None
    UNKNOWN
Published: June 21, 2024

CVE-2020-35157

None
    UNKNOWN
Published: June 21, 2024

CVE-2020-35158

None
    UNKNOWN
Published: June 21, 2024

CVE-2020-35159

None
    UNKNOWN
Published: June 21, 2024

CVE-2020-35160

None
    UNKNOWN
Published: June 21, 2024

CVE-2020-35161

None
    UNKNOWN
Published: June 21, 2024

CVE-2020-35162

None
    UNKNOWN
Published: June 21, 2024

CVE-2021-47621

None
    ClassGraph
  • Version(s): before 4.8.112
Published: June 21, 2024

CVE-2024-4377

None
    DOP Shortcodes WordPress plugin
  • Version(s): 1.2
Published: June 21, 2024

CVE-2024-4381

None
    CB (legacy) WordPress plugin
  • Version(s): 0.9.4.18
Published: June 21, 2024

CVE-2024-4382

None
    CB WordPress plugin
  • Version(s): 0.9.4.18 and below
Published: June 21, 2024

CVE-2024-4384

None
    CSSable Countdown WordPress plugin
  • Version(s): 1.5
Published: June 21, 2024

CVE-2024-4474

None
    WP Logs Book WordPress plugin
  • Version(s): through 1.0.1
Published: June 21, 2024

CVE-2024-4475

None
    WP Logs Book WordPress plugin
  • Version(s): up to 1.0.1
Published: June 21, 2024

CVE-2024-4477

None
    WP Logs Book WordPress plugin
  • Version(s): through 1.0.1
Published: June 21, 2024

CVE-2024-4616

None
    Widget Bundle WordPress plugin
  • Version(s): 2.0.0
Published: June 21, 2024

CVE-2024-4755

None
    Google CSE WordPress plugin
  • Version(s): through 1.0.7
Published: June 21, 2024

CVE-2024-4969

None
    Widget Bundle WordPress plugin
  • Version(s): through 2.0.0
Published: June 21, 2024

CVE-2024-4970

None
    Widget Bundle WordPress plugin
  • Version(s): through 2.0.0
Published: June 21, 2024

CVE-2024-5447

None
    PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode WordPress plugin
  • Version(s): through 1.7
Published: June 21, 2024

CVE-2024-5448

None
    PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode WordPress plugin
  • Version(s): through 1.7
Published: June 21, 2024

CVE-2023-52884

None
    Linux kernel
Published: June 21, 2024

CVE-2024-31076

None
    Linux kernel
Published: June 21, 2024

CVE-2024-33619

None
    Linux kernel
Published: June 21, 2024

CVE-2024-33621

None
    Linux kernel
Published: June 21, 2024

CVE-2024-36244

None
    Linux kernel
Published: June 21, 2024

CVE-2024-36270

None
    Linux kernel
Published: June 21, 2024

CVE-2024-36281

None
    Linux Kernel
  • Version(s): 6.9.0-rc2-rrameshbabu+
Published: June 21, 2024

CVE-2024-36286

None
    Linux kernel
  • Version(s): UNKNOWN
Published: June 21, 2024

CVE-2024-36478

None
    Linux kernel
Published: June 21, 2024

CVE-2024-36484

None
    Linux kernel
  • Version(s): 6.9.0-rc7-g7da7119fe22b and prior
Published: June 21, 2024

CVE-2024-36489

None
    Linux kernel
Published: June 21, 2024

CVE-2024-37353

None
    Linux kernel
  • Version(s): 6.9.0-rc4+
Published: June 21, 2024

CVE-2024-37356

None
    Linux Kernel
Published: June 21, 2024

CVE-2024-38381

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38388

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38390

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38391

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38621

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38622

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38623

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38624

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38625

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38626

None
    Linux kernel
  • Version(s): 6.9.0-rc7
Published: June 21, 2024

CVE-2024-38627

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38628

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38629

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38630

None
    Linux Kernel
Published: June 21, 2024

CVE-2024-38631

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38632

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38633

None
    Linux Kernel
Published: June 21, 2024

CVE-2024-38634

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38635

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38636

None
    Linux kernel
  • Version(s): 6.8.0-rc3+
Published: June 21, 2024

CVE-2024-38637

None
    Linux Kernel
Published: June 21, 2024

CVE-2024-38659

None
    Linux Kernel
Published: June 21, 2024

CVE-2024-34777

None
    Linux kernel
  • Version(s): 6.9.0-rc6
Published: June 21, 2024

CVE-2024-36288

None
    Linux kernel
Published: June 21, 2024

CVE-2024-36477

None
    Linux kernel
Published: June 21, 2024

CVE-2024-36481

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38662

None
    Linux kernel
Published: June 21, 2024

CVE-2024-38780

None
    Linux kernel
Published: June 21, 2024

CVE-2024-39277

None
    Linux kernel
  • Version(s): 6.9.0-rc6
Published: June 21, 2024

CVE-2023-45197

None
    AdminerEvo
  • Version(s): 4.8.3
Published: June 21, 2024

CVE-2024-37790

None
    UNKNOWN
Published: June 21, 2024

CVE-2024-35537

None
    TVS Connect Android
  • Version(s): 4.6.0
    TVS Connect IOS
  • Version(s): 5.0.0
Published: June 21, 2024

CVE-2024-37671

None
    Unknown
Published: June 21, 2024

CVE-2024-37672

None
    Tessi Docubase Document Management
  • Version(s): 5.x
Published: June 21, 2024

CVE-2024-37673

None
    Tessi Docubase Document Management
  • Version(s): 5.x
Published: June 21, 2024

CVE-2024-37675

None
    Tessi Docubase Document Management
  • Version(s): 5.x
Published: June 21, 2024

CVE-2012-6664

None
    Distinct Intranet Servers
  • Version(s): 3.10 and earlier
Published: June 21, 2024

CVE-2014-5470

None
    Actual Analyzer
  • Version(s): through 2014-08-29
Published: June 21, 2024

CVE-2022-42974

None
    Kostal PIKO 1.5-1 MP plus HMI OEM p
  • Version(s): 1.0.1
Published: June 21, 2024

CVE-2024-34452

None
    CMSimple_XH
  • Version(s): 1.7.6
Published: June 21, 2024

CVE-2024-34989

None
    PrestaShop
  • Version(s): <= 7.0.0
Published: June 21, 2024

CVE-2024-36532

None
    kruise
  • Version(s): 1.6.2
Published: June 21, 2024

CVE-2024-37654

None
    BAS-IP Intercom Systems
  • Version(s): before 3.9.2
Published: June 21, 2024

CVE-2024-37694

None
Published: June 21, 2024
Click here to see more Vulnerabilities