CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- pluginops landing page builder – lead page – optin page – squeeze page – wordpress landing pages, landing page builder +1 moreWordPress Landing Page Builder Plugin <= 1.5.1.5 is vulnerable to Open Redirection4.7 Medium
- be devious web development password reset with code for wordpress rest apiWordPress Password Reset with Code for WordPress REST API Plugin <= 0.0.15 is vulnerable to Broken Authentication9.8 Critical
- ninjaforms ninja forms, saturday drive ninja forms contact form – the drag and drop form builder for wordpress +1 moreWordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Denial of Service Attack5.3 Medium
- paytm payment gatewayWordPress Paytm Payment Gateway Plugin <= 2.7.0 is vulnerable to Server Side Request Forgery (SSRF)7.2 High
- brainstorm force starter templates — elementor, wordpress & beaver builder templates, brainstormforce starter templates +1 moreWordPress Starter Templates Plugin <= 3.2.4 is vulnerable to Server Side Request Forgery (SSRF)7.1 High
- aa web servant 12 step meeting listWordPress 12 Step Meeting List Plugin <= 3.14.24 is vulnerable to Server Side Request Forgery (SSRF)4.9 Medium
- softaculous speedycache, speedycache – cache, optimization, performance +1 moreWordPress SpeedyCache Plugin <= 1.1.2 is vulnerable to Server Side Request Forgery (SSRF)4.9 Medium
containerized-data-importeropenSUSESecurity update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, cont…No score- apache strutsApache Struts: File upload component had a directory traversal vulnerability9.8 Critical
- commscope, inc. smartzone, zonedirector, ap solo c110 +71 more +73 moreA cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector,...6.1 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: io_uring out of boundary memory access in __io_uaddr_map()5.5 Medium
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreReflected XSS via Content-Type Header in mlflow/mlflow6.5 Medium
- hcl software connectionsHCL Connections is vulnerable to cross-site scripting5.4 Medium
- bowo system dashboardSystem Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_option_value)4.3 Medium
- bowo system dashboardSystem Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_constants)4.3 Medium
- bowo system dashboardSystem Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_db_specs)4.3 Medium
- bowo system dashboardSystem Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_global_value)4.3 Medium
- burst-statistics burst statistics, rogierlankhorst burst statistics – privacy-friendly analytics for wordpress, really simple plugins burst statistics pro +2 moreThe Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is...9.8 Critical
- bowo system dashboardSystem Dashboard <= 2.8.8 - Missing Authorization to Information Disclosure (sd_php_info)4.3 Medium
quickjsOSS-FuzzHeap-buffer-overflow in js_is_live_codeNo score- microweber, microweber microweber/microweber +1 moreBusiness Logic Errors in microweber/microweber5.9 Medium
tzdataDebiantzdata - new timezone databaseNo score- tenda w30e firmwareTenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function...9.8 Critical
- tenda w30e firmwareTenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function...9.8 Critical
- tenda w30e firmwareTenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function...9.8 Critical
- tenda w30e firmwareTenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the...9.8 Critical
- typechoTypecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the...7.5 High
- dallmann-consulting open charge point protocolAn issue was discovered in Dalmann OCPP.Core through 1.2.0 for OCPP (Open Charge Point Protocol)...7.5 High
- dallmann-consulting open charge point protocolAn issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP (Open Charge Point Protocol)...7.5 High
- dallmann-consulting open charge point protocolAn issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP (Open Charge Point Protocol)...7.5 High
- dallmann-consulting open charge point protocolAn issue was discovered in Dalmann OCPP.Core before 1.2.0 for OCPP (Open Charge Point Protocol)...7.5 High
- dedecmsDedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability...6.1 Medium
- dedecmsDedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability...6.1 Medium
- libde265Libde265 v1.0.14 was discovered to contain a global buffer overflow vulnerability in the...8.8 High
- struktur libde265Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the...8.8 High
- struktur libde265Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the...8.8 High
- struktur libheiflibheif v1.17.5 was discovered to contain a segmentation violation via the function...8.8 High
- struktur libheiflibheif v1.17.5 was discovered to contain a segmentation violation via the function find_exif_tag...8.8 High
- struktur libheiflibheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif...8.8 High
- struktur libheiflibheif v1.17.5 was discovered to contain a segmentation violation via the function...8.8 High
- tenda ax12 firmwareTenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the ...9.8 Critical
- tenda ax9 firmwareTenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the ...9.8 Critical
- tenda ax9 firmwareTenda AX9 V22.03.01.46 is vulnerable to command injection.9.8 Critical
- tenda ax9 firmwareTenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list'...9.8 Critical
- tenda ax9 firmwareTenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list'...9.8 Critical
- tenda ax9 firmwareTenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the ...9.8 Critical
- tenda ax9 firmwareTenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the ...9.8 Critical
- tenda ax9 firmwareTenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list'...9.8 Critical
- tenda ax9 firmwareTenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the ...9.8 Critical
- tenda ax12 firmwareTenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the ...9.8 Critical
- Show moreLoading…