CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- sap master data governanceDirectory Traversal vulnerability in SAP Master Data Governance3.5 Low
- sap commerce cloudImproper Access Control vulnerability in SAP Commerce Cloud8.1 High
- sap biller directCross-Site Scripting (XSS) vulnerability in SAP Biller Direct6.1 Medium
- sap business objects business intelligence platform, sap se business objects bi platform +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform7.5 High
github.com/treeverse/lakefsGolakeFS logs S3 credentials in plain text8.4 High- sap businessobjects web intelligenceCross Site Scripting vulnerability in SAP BusinessObjects Web Intelligence6.8 Medium
github.com/treeverse/lakefsGoUser with permission to write actions can impersonate another user when auth token is configured in environment variable6.2 Medium- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7...7.8 High
- apple macosAn authentication issue was addressed with improved state management. This issue is fixed in...5.5 Medium
- apple macosMultiple memory corruption issues were addressed with improved input validation. This issue is...7.8 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2. An app...5.5 Medium
- apple macosAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS...7.8 High
- apple macosThis issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.2...2.4 Low
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved checks. This issue is fixed in iOS 17.2 and iPadOS 17.2. An...4.6 Medium
- apple macosMultiple memory corruption issues were addressed with improved input validation. This issue is...7.8 High
- apple macosMultiple memory corruption issues were addressed with improved input validation. This issue is...7.8 High
- apple macosMultiple memory corruption issues were addressed with improved input validation. This issue is...8.8 High
- apple macosMultiple memory corruption issues were addressed with improved input validation. This issue is...7.8 High
- apple macosMultiple memory corruption issues were addressed with improved input validation. This issue is...7.8 High
- apple macosMultiple memory corruption issues were addressed with improved input validation. This issue is...7.8 High
- apple macosMultiple memory corruption issues were addressed with improved input validation. This issue is...7.8 High
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2,...7.8 High
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS...5.5 Medium
- apple macosThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...5.5 Medium
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2....7.8 High
- apple macosMultiple memory corruption issues were addressed with improved input validation. This issue is...7.8 High
- apple macosMultiple memory corruption issues were addressed with improved input validation. This issue is...7.8 High
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2, macOS...5.5 Medium
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2,...5.5 Medium
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2, macOS...5.5 Medium
- apple macosMultiple memory corruption issues were addressed with improved input validation. This issue is...7.8 High
- apple macosMultiple memory corruption issues were addressed with improved input validation. This issue is...7.8 High
- apple ipados, macos, watchos +2 more +4 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed through improved state management. This issue is fixed in iOS 17.2 and...5.3 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...5.5 Medium
- apple ipados, macos, tvos +2 more +4 moreThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...5.5 Medium
- apple macosMultiple memory corruption issues were addressed with improved input validation. This issue is...7.8 High
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2,...6.3 Medium
- invisible-island ncurse, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreNCurse v6.4-20230418 was discovered to contain a segmentation fault via the component...6.5 Medium
- espeak-ngEspeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function...5.5 Medium
- espeak-ngEspeak-ng 1.52-dev was discovered to contain a Buffer Overflow via the function ReadClause at...5.3 Medium
- espeak-ngEspeak-ng 1.52-dev was discovered to contain a Stack Buffer Overflow via the function...5.3 Medium
- espeak-ngEspeak-ng 1.52-dev was discovered to contain a Stack Buffer Underflow via the function...5.3 Medium
- espeak-ngEspeak-ng 1.52-dev was discovered to contain a buffer-overflow via the function SetUpPhonemeTable...5.3 Medium
- voltronicpower snmp web proCross Site Scripting (XSS) in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute...6.1 Medium
- archerirm archerArcher Platform 6.x before 6.13 P2 (6.13.0.2) contains an authenticated HTML content injection...5.4 Medium
- archerirm archerArcher Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference...7.5 High
- gl-inet gl-ar300m firmwareIn GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell...9.8 Critical
- gl.inet ar300m, gl-inet gl-ar300m firmware +1 moreIn GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through...7.5 High
- gl-inet gl-ar300m firmwareIn GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell...9.8 Critical
- Show moreLoading…