CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- emlogEmlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid...7.2 High
- enterprisedb postgres advanced serverAn issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x...6.5 Medium
- enterprisedb postgres advanced serverAn issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x...8.8 High
- enterprisedb postgres advanced serverAn issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x...8.8 High
- enterprisedb postgres advanced serverAn issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x...8.8 High
- enterprisedb postgres advanced serverAn issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x...4.3 Medium
- enterprisedb postgres advanced serverAn issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x...6.5 Medium
- enterprisedb postgres advanced serverAn issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x...6.5 Medium
- enterprisedb postgres advanced serverAn issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x...4.3 Medium
- prolion cryptospikeDirectory traversal in the log-download REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows...6.5 Medium
- prolion cryptospikeA SQL Injection in the users searching REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows...4.3 Medium
- prolion cryptospikeHidden and hard-coded credentials in ProLion CryptoSpike 3.0.15P2 allow remote attackers to login...7.2 High
- prolion cryptospikeA missing integrity check in the update system in ProLion CryptoSpike 3.0.15P2 allows attackers...7.2 High
- prolion cryptospikeInsertion of sensitive information in the centralized (Grafana) logging system in ProLion...9.1 Critical
- prolion cryptospikeMissing authentication in the internal data streaming system in ProLion CryptoSpike 3.0.15P2...8.2 High
- prolion cryptospikeA hard-coded cryptographic private key used to sign JWT authentication tokens in ProLion...7.5 High
- beyondtrust privilege management for windowsIn BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation...7.8 High
- beyondtrust privilege management for windowsAn issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding...7.8 High
- beyondtrust privilege management for windowsAn issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. If the...7.8 High
- beyondtrust privilege management for windowsAn issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When...7.8 High
- afichet openexr-viewer, openexr viewer +1 moreOpenEXR-viewer memory overflow vulnerability9.8 Critical
- uptime.kuma uptime kuma, dockge.kuma dockge, louislam uptime-kuma +2 moreUptime Kuma Missing Origin Validation in WebSockets6.0 Medium
- uptime.kuma uptime kuma, dockge.kuma dockge, louislam uptime-kuma +2 moreUptime Kuma Password Change Vulnerability6.7 Medium
Gsemac.NetNuGetStale copy of the public suffix listNo score- koajs cors, cross-origin resource sharing for koa +1 more@koa/cors has overly permissive origin policy8.6 High
- mantisbt-plugins linkedcustomfields, mantisbt linked custom fields +1 moreMantisBT LinkedCustomFields Cross-site Scripting vulnerability6.7 Medium
- mindsdbMindsDB Arbitrary File Write vulnerability5.3 Medium
- codepeople contact form emailContact Form Email < 1.3.44 - Editor+ Stored Cross-Site Scripting4.8 Medium
- unknown embedpressEmbedPress < 3.9.2 - Reflected XSS6.1 Medium
- themeum wp crowdfundingWP Crowdfunding < 2.1.8 - Admin+ Stored XSS4.8 Medium
- unknown wp not login hide (wpnlh), wpajans wp not login hide +1 moreWP Not Login Hide <= 1.0 - Admin+ Stored XSS4.8 Medium
- unknown embedpressEmbedPress < 3.9.2 - Reflected XSS6.1 Medium
- spider-themes eazydocsEazyDocs < 2.3.4 - Subscriber + SQLi8.8 High
- bitapps file managerFile Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal6.5 Medium
- mindsdbMindsDB Server-Side Request Forgery vulnerability6.5 Medium
- enalean tuleapTuleap vulnerable to Cross-site Scripting on the edition page of a release5.4 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreKernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c5.5 Medium
- hitachi vantara system management unit (smu), hitachi system management unit firmware +1 moreSystem Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products is susceptible to unintended information disclosure via unprivileged access to SMU configuratio…7.6 High
- eclipse memory analyzer, eclipse foundation memory analyzer (tools.mat) +1 moreIn Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered...2.8 Low
- open journal systems journal systems, openjournalsystems open journal systems +1 moreCross-Site Request Forgery on OPEN JOURNAL SYSTEMS6.3 Medium
libreofficeUbuntulibreoffice vulnerabilitiesNo scorehplipopenSUSESecurity update for hplipNo score- frauscher fds102 for fadc/fadci, diagnostic system 102 +1 moreFrauscher: FDS102 for FAdC/FAdCi remote code execution vulnerability8.8 High
- google android, chromecast firmware +1 moreAn oversight in BCB handling of reboot reason that allows for persistent code execution9.8 Critical
- google android, chromecast firmware +1 moreU-Boot vulnerability resulting in persistent Code Execution9.8 Critical
- google android, chromecast firmware +1 moreU-Boot shell vulnerability resulting in Privilege escalation in a production device9.8 Critical
- google android, chromecast firmware +1 moreMissing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity...9.8 Critical
- campcodes web-based student clearance system, online college library system +1 moreCampcodes Web-Based Student Clearance System login.php sql injection6.3 Medium
- libreoffice, debian linux, fedoraproject fedora +2 moreLink targets allow arbitrary script execution8.3 High
- libreoffice, debian linux, fedoraproject fedora +2 moreImproper input validation enabling arbitrary Gstreamer pipeline injection8.3 High
- Show moreLoading…