CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- canonical ubuntu server, ubuntu linux +1 moreA feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows...5.0 Medium
- monicahq monicaA stored cross-site scripting (XSS) vulnerability exists in Monica (aka MonicaHQ) 4.0.0 via an...5.4 Medium
- hyland alfresco content servicesAn issue was discovered in Hyland Alfresco Community Edition through 7.2.0. By inserting...8.8 High
- dedecmsDedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability...6.1 Medium
- xunruicmsXunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting (XSS) vulnerability...6.1 Medium
- openfilerA cross-site scripting (XSS) vulnerability in Openfiler ESA v2.99.1 allows attackers to execute...6.1 Medium
- totolink a7000r firmwareTOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFilterRules.9.8 Critical
- totolink a7000r firmwareTOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg.9.8 Critical
- jqlang jqdecToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte out-of-bounds write via the " [...7.5 High
- prolion cryptospikeIncorrect user role checking in multiple REST API endpoints in ProLion CryptoSpike 3.0.15P2...8.8 High
- beyondtrust privilege management for macAn issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated,...8.8 High
- beyondtrust privilege management for windowsAn issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. An attacker...8.8 High
- oretnom23 simple student attendance systemSourceCodester Simple Student Attendance System sql injection5.5 Medium
- oretnom23 simple student attendance systemSourceCodester Simple Student Attendance System student_form.php sql injection5.5 Medium
- iperov deepfacelabDeepFaceLab DFLJPG.py deserialization5.0 Medium
- hongjing e-hrHongjing e-HR Login Interface loadhistroyorgtree sql injection7.3 High
- phpemsPHPEMS Session Data session.cls.php deserialization6.3 Medium
- phpgurukul teacher subject allocation management systemPHPGurukul Teacher Subject Allocation Management System Create a new Subject subject.php cross-site request forgery4.3 Medium
- carmelogarcia matrimonial sitecode-projects Matrimonial Site register.php register sql injection7.3 High
- carmelogarcia matrimonial sitecode-projects Matrimonial Site sql injection7.3 High
- oretnom23 simple invoice generator systemSourceCodester Simple Invoice Generator System login.php cross site scripting4.3 Medium
- phpgurukul teacher subject allocation management systemPHPGurukul Teacher Subject Allocation Management System index.php cross site scripting4.3 Medium
- phpgurukul nipah virus testing management systemPHPGurukul Nipah Virus Testing Management System password-recovery.php sql injection6.9 Medium
- amtt hibosAMTT HiBOS sql injection7.3 High
openscOSS-FuzzHeap-use-after-free in authentic_emu_update_tokeninfoNo score- caddyserver caddyHeader spoofing in caddy-geo-ip6.5 Medium
- zammadAn issue was discovered in Zammad before 6.2.0. When listing tickets linked to a knowledge base...4.3 Medium
- zammadAn issue was discovered in Zammad before 6.2.0. An attacker can trigger phishing links in...5.3 Medium
- zammadAn issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email...7.5 High
- zammadAn issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to...5.9 Medium
- zammadAn issue was discovered in Zammad before 6.2.0. It uses the public endpoint /api/v1/signshow for...5.3 Medium
- jfinalcms project jfinalcmsDirectory Traversal in JFinalCMS7.5 High
- mullvad vpnAn issue was discovered in Mullvad VPN Windows app before 2023.6-beta1. Insufficient permissions...7.8 High
- semantic-mediawiki semantic mediawikiCross-site Scripting in Semantic MediaWiki6.1 Medium
- linkdinglinkding cross site scripting3.5 Low
- nanbu welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal4.1 Medium
- supsystic digital publications by supsystic, supsysticcom wordpress flipbook by supsystic +1 moreDigital Publications by Supsystic <= 1.7.6 - Cross-Site Request Forgery via AJAX action5.4 Medium
- ibm api connectIBM API Connect information disclosure6.2 Medium
- ibm informix dynamic server, informix dynamic server on cloud pak for data +1 moreIBM Informix Dynamic Server buffer overflow8.4 High
- ibm informix dynamic server, informix dynamic server on cloud pak for data +1 moreIBM Informix Dynamic Server buffer overflow6.2 Medium
- ibm informix dynamic server, informix dynamic server on cloud pak for data +1 moreIBM Informix Dynamic Server buffer overflow6.2 Medium
- micro focus arcsight management centerMicro Focus ArcSight Management Center Remote Vulnerability5.9 Medium
- quarkus, red hat build of quarkus, build of quarkus 2.13.9 +1 more +3 moreQuarkus: graphql operations over websockets bypass7.4 High
- pyinstallerLocal Privilege Escalation in pyinstaller on Windows8.8 High
harfbuzzOSS-FuzzHeap-buffer-overflow in OT::cff2::accelerator_templ_t<CFF::cff2_private_dict_opset_t, CFF::cff2_private_No scoreselinuxOSS-FuzzHeap-buffer-overflow in is_decl_requires_metNo score- google chromeInsufficient data validation in Extensions in Google Chrome prior to 120.0.6099.62 allowed a...6.3 Medium
- google chromeInsufficient data validation in Updater in Google Chrome prior to 120.0.6099.62 allowed a remote...8.8 High
- linux kernelsec_attest_info in drivers/accel/habanalabs/common/habanalabs_ioctl.c in the Linux kernel through...5.5 Medium
- goodix fingerprint sensor firmwareThe Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the...6.4 Medium
- Show moreLoading…