CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
apache-poiOSS-FuzzSecurity exception in java.base/javax.crypto.spec.SecretKeySpec.<init>No scoreapache-poiOSS-FuzzSecurity exception in org.apache.poi.hdgf.streams.ChunkStream.findChunksNo score- microweber, microweber microweber/microweber +1 moreMissing Standardized Error Handling Mechanism in microweber/microweber3.1 Low
- jfinalcms project jfinalcmsCross-site Scripting in JFinalCMS5.4 Medium
- jfinalcms project jfinalcmsCross-site Scripting in JFinalCMS5.4 Medium
- jfinalcms project jfinalcmsCross-site Scripting in JFinalCMS5.4 Medium
- iteachyou dreamer cmsDreamer CMS v4.1.3 was discovered to contain a cross-site scripting (XSS) vulnerability in the...5.4 Medium
- html-js doracmsAn arbitrary file upload vulnerability in DoraCMS v2.1.8 allow attackers to execute arbitrary...5.4 Medium
- html-js doracmsDoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and...9.8 Critical
- netgear rbr750 firmwareIn Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr...9.8 Critical
- franklin-electric system sentinel anywareFranklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to...9.8 Critical
- franklin-electric system sentinel anywareFranklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Open...6.1 Medium
- microweberMicroweber allows a remote attacker to obtain sensitive information via the HTTP GET method7.5 High
- evershopCross-site Scripting in evershop6.1 Medium
- evershopCode execution in evershop9.8 Critical
- evershopDirectory Traversal in evershop5.4 Medium
- evershopDirectory Traversal in evershop8.3 High
- evershopCross-site Scripting in evershop6.1 Medium
- evershopCross Site Scripting in evershop6.1 Medium
- evershopDirectory Traversal in evershop5.3 Medium
- mgt-commerce cloudpanelFile-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows the lowest privilege user to achieve OS...8.8 High
- zultys mx-e firmware, mx-se firmware, mx-se ii firmware +3 more +5 moreAn OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and...7.2 High
- zultys mx-e firmware, mx-se firmware, mx-se ii firmware +3 more +5 moreA SQL injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with...8.8 High
- zultys mx-e firmware, mx-se firmware, mx-se ii firmware +3 more +5 moreAn authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with...9.8 Critical
- linecorp lineAn issue in studio kent mini-app on Line v13.6.1 allows attackers to send crafted malicious...8.2 High
- code-projects student information systemStudent Information System v1.0 - Unauthenticated SQL Injection9.8 Critical
- code-projects student information systemStudent Information System v1.0 - Insecure File Upload9.9 Critical
- phoenix securecore™ technology™ 4, phoenixtech securecore technology +1 moreImproper Input Validation in the processing of user-supplied splash screen during system boot in...7.8 High
- d-link dar-7000, dlink dar-7000 firmware +1 moreD-Link DAR-7000 workidajax.php sql injection5.5 Medium
- d-link dir-846, dlink dir-846 firmware +1 moreD-Link DIR-846 QoS POST deserialization8.8 High
- oscommerceosCommerce POST Parameter shopping-cart sql injection7.3 High
- software ag webmethodsSoftware AG WebMethods access control7.3 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability4.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability4.8 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability9.6 Critical
- byzoro patrolflow 2530pro, patrolflow-am-2530pro firmware +1 moreByzoro PatrolFlow 2530Pro mailsendview.php path traversal4.3 Medium
- byzoro s210, smart s210 firmware +1 moreByzoro S210 HTTP POST Request uploadfile.php unrestricted upload6.3 Medium
- byzoro s210, smart s210 firmware +1 moreByzoro S210 HTTP POST Request repair.php sql injection6.3 Medium
- johnson controls facility explorer f4-snc, metasys nae55/sne/snc, johnsoncontrols f4-snc firmware +9 more +11 moreUncontrolled Resource Consumption in Metasys and Facility Explorer7.5 High
- byzoro smart s20, smart s20 firmware +1 moreByzoro Smart S20 HTTP POST Request updateos.php unrestricted upload6.3 Medium
- controlbyweb x-301-24i, x-301-24i firmware, x-301-i +3 more +5 moreCross-site Scripting in ControlByWeb Relays7.5 High
kubevirtopenSUSESecurity update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-containerNo score- citrix workspaceOffline mode is always enabled, even if permission disallows it, in Devolutions Server data...6.5 Medium
- senec storage box v1, enbw senec storage box firmware, senec storage box v2 +1 more +3 moreSENEC Storage Box V1,V2 and V3 accidentially expose a management interface7.2 High
- senec storage box v1, enbw senec storage box firmware, senec storage box v2 +1 more +3 moreSENEC: Storage Box V1,V2 and V3 using default credentials9.8 Critical
- senec storage box v1, enbw senec storage box firmware, senec storage box v2 +1 more +3 moreSENEC: Storage Box V1,V2 and V3 affected by improper access control vulnerability7.5 High
- senec storage box v1, enbw senec storage box firmware, senec storage box v2 +1 more +3 moreSENEC: Storage Box V1,V2 and V3 transmitting sensitive data unencrypted9.1 Critical
- michael uno (miunosoft) responsive column widgetsWordPress Responsive Column Widgets Plugin <= 1.2.7 is vulnerable to Open Redirection4.7 Medium
- princeahmed integrate google drive – browse, upload, download, embed, play, share, gallery, and manage your google drive files into your wordpress site, softlabbd integrate google drive +1 moreWordPress Integrate Google Drive Plugin <= 1.3.2 is vulnerable to Open Redirection4.7 Medium
- crm perks integration for constant contact and contact form 7, wpforms, elementor, ninja forms, crmperks integration for constant contact and contact form 7\, wpforms\, elementor\, ninja +1 moreWordPress Integration for Contact Form 7 and Constant Contact Plugin <= 1.1.4 is vulnerable to Open Redirection4.7 Medium
- Show moreLoading…