CVEs published in December 2019
1,536 vulnerabilities, 253 critical, 19 exploited.
- toshiba configfree utilityMultiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow...7.8 High
- dlink dwr-113 firmwareCross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev. Ax) with firmware before...8.8 High
- visualshortcodes ninjaCross-site scripting (XSS) vulnerability in preview-shortcode-external.php in the Shortcode Ninja...6.1 Medium
- import legacy media project legacy mediaCross-site scripting (XSS) vulnerability in the Import Legacy Media plugin 0.1 and earlier for...6.1 Medium
- katz infusionsoft gravity formsMultiple cross-site scripting (XSS) vulnerabilities in tests...6.1 Medium
- cybercompany swipehq-payment-gateway-woocommerceCross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce...6.1 Medium
- ruven-toolkit project ruven-toolkitCross-site scripting (XSS) vulnerability in tinymce/popup.php in the Ruven Toolkit plugin 1.1 and...6.1 Medium
- podcast channels project channelsCross-site scripting (XSS) vulnerability in the Podcast Channels plugin 0.20 and earlier for...6.1 Medium
- movies project moviesCross-site scripting (XSS) vulnerability in the Movies plugin 0.6 and earlier for WordPress...6.1 Medium
- videowhisper video comments webcam recorderCross-site scripting (XSS) vulnerability in comments/videowhisper2/r_logout.php in the Video...6.1 Medium
- al-enterprise omnivista 4760, omnivista 8770 +1 moreAn issue was discovered on Alcatel-Lucent OmniVista 4760 devices, and 8770 devices before 4.1.2....7.5 High
- al-enterprise omnivista 8770An issue was discovered on Alcatel-Lucent OmniVista 8770 devices before 4.1.2. An authenticated...7.2 High
- al-enterprise omnivista 4760An issue was discovered on Alcatel-Lucent OmniVista 4760 devices. A remote unauthenticated...9.8 Critical
- acme thttpdthttpd 2007 has buffer underflow.9.8 Critical
- o-dyn collabtiveCollabtive 1.0 has incorrect access control9.8 Critical
- vivotek ip7160 firmware, ip7361 firmware, ip8332 firmware +2 moreMultiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream7.5 High
- avtech avn801 dvr firmwareAVTECH AVN801 DVR has a security bypass via the administration login captcha9.8 Critical
- czepol wp-planetCross-site scripting (XSS) vulnerability in rss.class/scripts/magpie_debug.php in the WP-Planet...6.1 Medium
- hikvision ds-2cd7153-e firmwareHikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials9.8 Critical
- hikvision ds-2cd7153-e firmwareHikvision DS-2CD7153-E IP Camera has Privilege Escalation8.8 High
- conversador project conversadorCross-site scripting (XSS) vulnerability in the Conversador plugin 2.61 and earlier for WordPress...6.1 Medium
- karotz apiKarotz API 12.07.19.00: Session Token Information Disclosure5.3 Medium
- ea karotz smart rabbit firmwareElectronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking6.3 Medium
- insteon hub firmwareINSTEON Hub 2242-222 lacks Web and API authentication8.1 High
- reviewboardReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request8.8 High
- magdevgroup magnolia cmsMagnolia CMS before 4.5.9 has multiple access bypass vulnerabilities9.8 Critical
- static http server project http serverStatic HTTP Server 1.0 has a Local Overflow9.8 Critical
- samsung galaxy s3 firmware, galaxy s4 firmware +1 moreSamsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send...4.3 Medium
- samsung galaxy s3 firmware, galaxy s4 firmware +1 moreSamsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages...4.6 Medium
- xorbin analog flash clockXorbin Analog Flash Clock 1.0 extension for Joomia has XSS6.1 Medium
- winampWinamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution7.8 High
- xorbin digital flash clockWordPress Xorbin Digital Flash Clock 1.0 has XSS6.1 Medium
- spbas business automation softwareSPBAS Business Automation Software 2012 has CSRF.6.5 Medium
- spbas business automation softwareSPBAS Business Automation Software 2012 has XSS.6.1 Medium
- sencha connectSencha Labs Connect has XSS with connect.methodOverride()6.1 Medium
- k7computing k7 ultimate securityIn K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly...7.8 High
- tenable nessusTenable Nessus before 6.8 has a stored XSS issue that requires admin-level authentication to the...4.8 Medium
- tenable nessusTenable Nessus before 6.8 has a stored XSS issue that requires admin-level authentication to the...4.8 Medium
- cybercompay swipehq-payment-gateway-wp-e-commerceMultiple cross-site scripting (XSS) vulnerabilities in test-plugin.php in the Swipe Checkout for...6.1 Medium
- winwar wp ebay product feedsCross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in the Ebay Feeds...6.1 Medium
- easy career openings project career openingsCross-site scripting (XSS) vulnerability in the Easy Career Openings plugin 0.4 and earlier for...6.1 Medium
- citrix application delivery controller (adc), gateway, and sd-wan wanop appliance, application delivery controller firmware, gateway firmware +1 more +3 moreAn issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1,...9.8 Critical
- wordpress, debian linux +1 morewp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon...9.8 Critical
- wordpress, debian linux +1 moreWordPress before 5.3.1 allowed an attacker to create a cross-site scripting attack (XSS) in well...6.1 Medium
- wordpress, debian linux +1 moreWordPress before 5.3.1 allowed an unauthenticated user to make a post sticky through the REST API...4.3 Medium
- symonics libmysofalibmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated...6.5 Medium
- matio project matioA stack-based buffer over-read was discovered in Mat_VarReadNextInfo5 in mat5.c in matio 1.5.17.6.5 Medium
- matio project matioA stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17.6.5 Medium
- matio project matioAn attempted excessive memory allocation was discovered in Mat_VarRead5 in mat5.c in matio 1.5.17.6.5 Medium
- matio project matioA stack-based buffer over-read was discovered in ReadNextStructField in mat5.c in matio 1.5.17.6.5 Medium
- Show moreLoading…