CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- linecorp lineAn issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious...5.3 Medium
- zimbra collaborationAn XSS issue was discovered in a web endpoint in Zimbra Collaboration (ZCS) before 10.0.4 via an...6.1 Medium
- zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4. An XSS issue can be...6.1 Medium
- netscout ngeniusoneNETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability...5.4 Medium
- netscout ngeniusoneNetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 4...5.4 Medium
- netscout ngeniusoneNetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 3...5.4 Medium
- netscout ngeniusoneNetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability.6.1 Medium
- netscout ngeniusoneNetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 2...5.4 Medium
- netscout ngeniusoneNetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 1...5.4 Medium
- zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) before 10.0.3. An attacker can gain access...7.5 High
- netscout ngeniuspulseNETSCOUT nGeniusPULSE 3.8 has Weak File Permissions Vulnerability9.1 Critical
- netscout ngeniuspulseNETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability.9.8 Critical
- netscout ngeniuspulseNETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key.9.8 Critical
- insyde insydeh2o, fujitsu celsius c780 firmware, celsius h5511 firmware +184 more +186 moreA LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28...5.5 Medium
- ericsson network managerEricsson Network Manager before 23.2 mishandles Access Control and thus unauthenticated low...8.8 High
- supermicro b12dpe-6 firmware, b12dpt-6 firmware, b12spe-cpu-25g firmware +359 more +361 moreThe configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard...8.8 High
- supermicro b12dpe-6 firmware, b12dpt-6 firmware, b12spe-cpu-25g firmware +359 more +361 moreThe web interface in the Intelligent Platform Management Interface (IPMI) baseboard management...8.8 High
- supermicro b12dpe-6 firmware, b12dpt-6 firmware, b12spe-cpu-25g firmware +359 more +361 moreA web server in the Intelligent Platform Management Interface (IPMI) baseboard management...7.5 High
knative.dev/eventing-githubGoeventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operationsNo score- jellyfinArgument Injection in FFmpeg codec parameters in Jellyfin7.7 High
- red hat build of quarkusQuarkus: potential invalid reuse of context when @cacheresult on a uni is used5.3 Medium
drupal/groupPackagistThe Group module has the ability to make content private to specific groups. When viewing a list of entities, e.g. nodes, a visitor should only see those entities that are either not attached to a gro…No score- ami aptiov, aptio v +1 moreFailure when uploading a Logo image file7.5 High
- ami aptiov, aptio v +1 moreFailure when uploading a Logo image file7.5 High
linux-gcpUbuntulinux-gcp vulnerabilitiesNo score- devolutions remote desktop managerCode injection in Remote Desktop Manager 2023.3.9.3 and earlier on macOS allows an attacker to...7.8 High
suse-build-keyopenSUSESecurity update for suse-build-keyNo score- microfocus filrAdministrator equivalent Filr user can access proxy administrator credentials7.2 High
containerized-data-importeropenSUSESecurity update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, cont…No score- huawei emui, harmonyos +1 morePermission management vulnerability in the module for disabling Sound Booster. Successful...5.3 Medium
- huawei emui, harmonyos +1 moreUnauthorized access vulnerability in the launcher module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreUnauthorized access vulnerability in the card management module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreUnauthorized access vulnerability in the card management module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreUnauthorized access vulnerability in the Huawei Share module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 morePermission management vulnerability in the multi-user module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of unauthorized access to email attachments in the email module. Successful...7.5 High
- huawei emui, harmonyos +1 moreFree broadcast vulnerability in the running management module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreAPI permission control vulnerability in the network management module. Successful exploitation of...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of missing permission verification for APIs in the Designed for Reliability (DFR)...7.5 High
- implem inc. pleasanterPleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability. If this...5.4 Medium
- implem inc. pleasanterOpen redirect vulnerability in Pleasanter 1.3.47.0 and earlier allows a remote unauthenticated...6.1 Medium
- implem inc. pleasanterPleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may...4.3 Medium
- huawei emui, harmonyos +1 moreVulnerability of data verification errors in the kernel module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of unauthorized file access in the Settings app. Successful exploitation of this...5.5 Medium
- huawei emui, harmonyos +1 morePermission verification vulnerability in distributed scenarios. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 morePermission management vulnerability in the PMS module. Successful exploitation of this...9.8 Critical
- huawei ajmd-370s, ajmd-370s firmware +1 moreThe Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass...8.8 High
- mattermost, mattermost server +1 morePublic endpoint /metrics of Calls plugin reveals channel IDs5.3 Medium
- mattermost, mattermost server +1 moreClient side path traversal due to lack of route parameters validation7.1 High
- curl, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreWhen saving HSTS data to an excessively long file name, curl could end up removing all contents,...5.3 Medium
- Show moreLoading…