CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- tenda ax12 firmwareTenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at ...9.8 Critical
- tenda ax12 firmwareTenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter...9.8 Critical
- tenda ax12 firmwareTenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at ...9.8 Critical
- tenda w30e firmwareTenda W30E V16.01.0.12(4843) contains a stack overflow vulnerability via the function...9.8 Critical
- tenda w30e firmwareTenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function via the...9.8 Critical
- tenda ax3 firmwareTenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the...9.8 Critical
- tenda ax3 firmwareTenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function set_device_name.9.8 Critical
- tenda w30e firmwareTenda W30E V16.01.0.12(4843) was discovered to contain a Command Execution vulnerability via the...9.8 Critical
- tenda w30e firmwareTenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function UploadCfg.9.8 Critical
- tenda w30e firmwareTenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function...9.8 Critical
- tenda w30e firmwareTenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the...9.8 Critical
- tenda w30e firmwareTenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function localMsg.9.8 Critical
- gpacgpac 2.3-DEV-rev617-g671976fcc-master contains memory leaks in gf_mpd_resolve_url media_tools/mpd...5.5 Medium
- baidu ttplayerDLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate...7.8 High
- totolink n300rt firmwareTOTOLINK N300RT version 3.2.4-B20180730.0906 has a post-authentication RCE due to incorrect...9.8 Critical
- phpjabbers appointment schedulerAppointment Scheduler 3.0 is vulnerable to CSV Injection via a Language > Labels > Export action.8.8 High
- phpjabbers appointment schedulerA lack of rate limiting in pjActionAjaxSend in Appointment Scheduler 3.0 allows attackers to...7.5 High
- phpjabbers appointment schedulerAppointment Scheduler 3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via...5.4 Medium
- phpjabbers appointment schedulerAppointment Scheduler 3.0 is vulnerable to Multiple HTML Injection issues via the SMS API Key or...5.4 Medium
- phpjabbers car rental scriptCar Rental Script 3.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default...5.4 Medium
- phpjabbers car rental scriptCar Rental Script 3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the...5.4 Medium
- phpjabbers car rental scriptCar Rental Script v3.0 is vulnerable to CSV Injection via a Language > Labels > Export action.8.8 High
- phpjabbers car rental scriptA lack of rate limiting in pjActionAjaxSend in Car Rental v3.0 allows attackers to cause resource...7.5 High
- phpjabbers time slots booking calendarA lack of rate limiting in pjActionAJaxSend in Time Slots Booking Calendar 4.0 allows attackers...7.5 High
- phpjabbers availability booking calendarA lack of rate limiting in pjActionAJaxSend in Availability Booking Calendar 5.0 allows attackers...7.5 High
- phpjabbers shuttle booking softwareShuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export.8.8 High
- phpjabbers time slots booking calendarTime Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS)...5.4 Medium
- phpjabbers time slots booking calendarTime Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name,...5.4 Medium
- phpjabbers time slots booking calendarTime Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the...8.8 High
- phpjabbers availability booking calendarAvailability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key...5.4 Medium
- boidcmsBoidCMS 2.0.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the title,...5.4 Medium
- mayurik courier management systemA Blind SQL injection issue in ajax.php in GaatiTrack Courier Management System 1.0 allows an...9.8 Critical
- phpjabbers availability booking calendarA Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to...6.1 Medium
- phpjabbers availability booking calendarAvailability Booking Calendar 5.0 allows CSV injection via the unique ID field in the...8.8 High
- mayurik courier management systemA Cross Site Scripting (XSS) vulnerability in GaatiTrack Courier Management System 1.0 allows a...6.1 Medium
- jorani leave management systemJorani Leave Management System 1.0.2 allows a remote attacker to spoof a Host header associated...5.3 Medium
- phpjabbers shuttle booking softwareA Cross Site Scripting (XSS) vulnerability in Shuttle Booking Software 2.0 allows a remote...5.4 Medium
- gladysassistant gladys assistantDirectory Traversal in Gladys Assistant6.5 Medium
- mayurik courier management systemCross Site Scripting vulnerability in Best Courier Management System v.1.000 allows a remote...5.4 Medium
- maximawatches maxima max pro power firmwareMaxima Max Pro Power 1.0 486A devices allow BLE traffic replay. An attacker can use GATT...4.3 Medium
- gpacGPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble...5.3 Medium
- squidex.io squidexSquidex before 7.9.0 allows XSS via an SVG document to the Upload Assets feature. This occurs because there is an incomplete blacklist in the SVG inspection, allowing JavaScript in the SRC attribute o…5.4 Medium
- formalmsCross Site Scripting (XSS) vulnerability in FormaLMS before 4.0.5 allows attackers to run...6.1 Medium
- buddho etcd browserAn issue was discovered in server.js in etcd-browser 87ae63d75260. By supplying a /../../../...7.5 High
- linecorp lineAn issue in PARK DANDAN mini-app on Line v13.6.1 allows attackers to send crafted malicious...8.2 High
- linecorp lineAn issue in craftbeer bar canvas mini-app on Line v13.6.1 allows attackers to send crafted...8.2 High
- linecorp lineAn issue in sanTas mini-app on Line v13.6.1 allows attackers to send crafted malicious...8.2 High
- linecorp lineAn issue in DARTS SHOP MAXIM mini-app on Line v13.6.1 allows attackers to send crafted malicious...8.2 High
- linecorp lineAn issue in urban_project mini-app on Line v13.6.1 allows attackers to send crafted malicious...8.2 High
- linecorp lineAn issue in DA BUTCHERS mini-app on Line v13.6.1 allows attackers to send crafted malicious...5.3 Medium
- Show moreLoading…