CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- google android, unisoc t820, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +2 moreIn wifi service, there is a possible missing permission check. This could lead to local...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn wifi service, there is a possible missing permission check. This could lead to local...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn wifi service, there is a possible missing permission check. This could lead to local...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn wifi service, there is a possible missing permission check. This could lead to local...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn gsp driver, there is a possible out of bounds read due to a missing bounds check. This could...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn gsp driver, there is a possible out of bounds read due to a missing bounds check. This could...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn gsp driver, there is a possible out of bounds write due to a missing bounds check. This could...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn ion service, there is a possible missing permission check. This could lead to local escalation...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn gpu driver, there is a possible out of bounds read due to a missing bounds check. This could...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn gpu driver, there is a possible out of bounds write due to a missing bounds check. This could...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn imsservice, there is a possible way to write permission usage records of an app due to a...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn imsservice, there is a possible way to write permission usage records of an app due to a...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn imsservice, there is a possible way to write permission usage records of an app due to a...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn imsservice, there is a possible way to write permission usage records of an app due to a...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn imsservice, there is a possible way to write permission usage records of an app due to a...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn imsservice, there is a possible way to write permission usage records of an app due to a...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn imsservice, there is a possible way to write permission usage records of an app due to a...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn imsservice, there is a possible way to write permission usage records of an app due to a...5.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 command execution7.2 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.9 Medium
gitlabUbuntu[Unknown description]No score- noear solonSolon is vulnerable to Deserialization of Untrusted Data9.8 Critical
- thinkadminThinkAdmin arbitrary file upload vulnerability8.8 High
- thinkadminAn issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to...8.8 High
- microcksMicrocks contains a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download9.8 Critical
- grocy project grocyA Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api...5.4 Medium
- sem-cms semcmsSEMCMS 3.9 is vulnerable to SQL Injection. Due to the lack of security checks on the input of the...7.5 High
- keking kkfileviewkkFileView v4.3.0 is vulnerable to Incorrect Access Control.6.1 Medium
- totolink x6000r firmwareIn TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_417338 function obtains...9.8 Critical
- totolink x6000r firmwareTOTOLINK-X6000R Firmware-V9.4.0cu.852_B20230719 is vulnerable to Command Execution.9.8 Critical
- ezviz studioEzViz Studio v2.2.0 is vulnerable to DLL hijacking.7.8 High
- assaabloy yale keyless smart lock firmwareWeak encryption mechanisms in RFID Tags in Yale Keyless Lock v1.0 allows attackers to create a...6.5 Medium
- assaabloy yale ia-210 firmwareWeak encryption mechanisms in RFID Tags in Yale IA-210 Alarm v1.0 allows attackers to create a...6.5 Medium
- assaabloy yale conexis l1 firmwareWeak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a...6.5 Medium
- connectize ac21000 g6 firmwareAn issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of...9.8 Critical
- connectize ac21000 g6 firmwareA client side rate limit issue discovered in Connectize AC21000 G6 641.139.1.1256 allows...9.8 Critical
- connectize ac21000 g6 firmwareCross Site Scripting (XSS) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers...5.4 Medium
- connectize ac21000 g6 firmwareAn issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain...9.8 Critical
- connectize ac21000 g6 firmwareCross Site Request Forgery (CSRF) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows...8.8 High
- connectize ac21000 g6 firmwareAn Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows...6.8 Medium
- connectize ac21000 g6 firmwareAn issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary...6.8 Medium
- u-tec ultraloq ul3 bt firmwareIncorrect Session Management and Credential Re-use in the Bluetooth LE stack of the Ultraloq UL3...8.1 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.9 Medium
- librespeed speedtestlibrespeed speedtest stats.php cross site scripting3.5 Low
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service6.5 Medium
matioOSS-FuzzHeap-buffer-overflow in H5T__bit_copyNo score- reiner-lemoine-institut nesp2rl-institut NESP2 database.py sql injection7.3 High
- kotchasan online accounting systemระบบบัญชีออนไลน์ Online Accounting System image.php path traversal3.5 Low
- forgejoForgejo before 1.20.5-1 allows remote attackers to test for the existence of private user...5.3 Medium
- Show moreLoading…