CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- devolutions remote desktop managerClient side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on...9.8 Critical
- cloudflare quicheUnbounded queuing of path validation messages in cloudflare-quiche5.3 Medium
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +35 more +37 moreA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (All versions < V7.2.2),...7.2 High
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +35 more +37 moreA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (All versions < V8.0),...7.2 High
- siemens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected...6.8 Medium
- siemens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The REST API...2.7 Low
- siemens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The Web UI...2.7 Low
- siemens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The radius...7.2 High
- siemens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected...8.1 High
- siemens opcenter execution foundation, opcenter quality, simatic pcs neo +8 more +10 moreA vulnerability has been identified in Opcenter Quality (All versions), SIMATIC PCS neo (All...7.5 High
- siemens opcenter execution foundation, opcenter quality, simatic pcs neo +8 more +10 moreA vulnerability has been identified in Opcenter Quality (All versions), SIMATIC PCS neo (All...7.5 High
- siemens opcenter execution foundation, opcenter quality, simatic pcs neo +8 more +10 moreA vulnerability has been identified in Opcenter Quality (All versions), SIMATIC PCS neo (All...7.5 High
- siemens opcenter execution foundation, opcenter quality, simatic pcs neo +8 more +10 moreA vulnerability has been identified in Opcenter Quality (All versions), SIMATIC PCS neo (All...7.1 High
- siemens opcenter execution foundation, opcenter quality, simatic pcs neo +8 more +10 moreA vulnerability has been identified in Opcenter Quality (All versions), SIMATIC PCS neo (All...7.1 High
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +150 more +152 moreAffected devices improperly handle specially crafted packets sent to port 102/tcp. This could...7.5 High
- siemens simatic cp 1242-7 v2 (incl. siplus variants), simatic cp 1243-1 (incl. siplus variants), simatic cp 1243-1 dnp3 (incl. siplus variants) +21 more +23 moreA vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions...8.7 High
- siemens simatic s7-400 cpu 412-2 pn v7, simatic s7-400 cpu 414-3 pn/dp v7, simatic s7-400 cpu 414f-3 pn/dp v7 +15 more +17 moreA vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU...7.5 High
- siemens simatic s7-400 cpu 412-2 pn v7, simatic s7-400 cpu 414-3 pn/dp v7, simatic s7-400 cpu 414f-3 pn/dp v7 +15 more +17 moreA vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU...7.5 High
- siemens simatic step 7 (tia portal), simatic step 7 +1 moreA vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An...4.2 Medium
- mattermost, mattermost server +1 moreLeak Inaccessible Playbook Information via Channel Action IDOR3.1 Low
- siemens logo! 12/24rce, logo! 12/24rceo, logo! 230rce +29 more +31 moreA vulnerability has been identified in LOGO! 12/24RCE (All versions >= V8.3), LOGO! 12/24RCEo ...7.6 High
- redhat advanced cluster security, red hat advanced cluster security 3, advanced cluster security 4.2 +2 moreStackrox: missing http security headers allows for clickjacking in web ui6.1 Medium
- sas integration technologiesReflected Cross-Site Scripting in SAS 9.46.3 Medium
- jtekt gc-a22w-cw firmware, gc-a24-m firmware, gc-a24 firmware +17 more +19 moreDenial-of-service (DoS) vulnerability exists in NetBIOS service of HMI GC-A2 series. If a remote...7.5 High
- jtekt gc-a22w-cw firmware, gc-a24-m firmware, gc-a24 firmware +17 more +19 moreDenial-of-service (DoS) vulnerability exists in rfe service of HMI GC-A2 series. If a remote...7.5 High
- jtekt gc-a22w-cw firmware, gc-a24-m firmware, gc-a24 firmware +17 more +19 moreDenial-of-service (DoS) vulnerability exists in commplex-link service of HMI GC-A2 series. If a...7.5 High
- jtekt gc-a22w-cw firmware, gc-a24-m firmware, gc-a24 firmware +17 more +19 moreDenial-of-service (DoS) vulnerability exists in FTP service of HMI GC-A2 series. If a remote...7.5 High
- elecom co.,ltd. wrc-x3000gs, wrc-x3000gsa, wrc-x3000gsn +3 more +5 moreOS command injection vulnerability in WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and earlier, and...6.8 Medium
- acronis cyber protect 16, cyber protect cloud agent, cyber protect home office +1 more +3 moreLocal privilege escalation due to DLL hijacking vulnerability. The following products are...7.3 High
- mattermost, mattermost server +1 moreReflected client side path traversal leading to CSRF in Playbooks7.3 High
- mattermost, mattermost server +1 morePlaybooks access/modification by removed team member3.7 Low
- mattermost, mattermost server +1 morePlaybook plugin crash via missing interface type assertion4.3 Medium
- mattermost, mattermost server +1 moreTodo plugin gets crashed and disabled by member4.3 Medium
- mattermost, mattermost server +1 moreInaccessible Post Information Leak via Run Timeline IDOR6.5 Medium
- mattermost, mattermost server +1 moreIDOR when updating the tasks of a private playbook run4.3 Medium
- mattermost, mattermost server +1 morePlaybook Plugin Crash via Run Checklist4.3 Medium
- huawei ar6000, ar617vw firmware +1 moreA Huawei data communication product has a command injection vulnerability. Successful...6.4 Medium
- huawei ar6000, ar617vw firmware +1 moreAn improper access control vulnerability exists in a Huawei datacom product. Attackers can...4.8 Medium
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreImproper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflow10.0 Critical
- sap sap-xssecEscalation of Privileges in SAP BTP Security Services Integration Library ([Python] cloud-pysec)9.1 Critical
- sap emarsys sdk, sap se emarsys sdk android +1 moreImproper Export of Android Application Components in SAP EMARSYS SDK ANDROID7.1 High
- sap solution managerCommand Injection vulnerability in SAP Solution Manager6.4 Medium
- sap fiori launchpadClient-Side Desynchronization vulnerability in SAP Fiori Launchpad4.3 Medium
- sap cloud-security-client-go, sap se github.com/sap/cloud-security-client-go +1 moreEscalation of Privileges in SAP BTP Security Services Integration Library ([Golang] github.com/sap/cloud-security-client-go)9.1 Critical
- sap cloud-security-services-integration-libraryEscalation of Privileges in SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library)9.1 Critical
- sap se @sap/xssec, sap \@sap\/xssec +1 moreEscalation of Privileges in SAP BTP Security Services Integration Library ([Node.js] @sap/xssec)9.1 Critical
- sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 moreSQL Injection vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform4.1 Medium
- sap se gui for windows and sap gui for java, sap graphical user interface +1 moreInformation disclosure in SAP GUI for Windows and SAP GUI for Java7.3 High
- sap cloud connectorDenial of service (DOS) in SAP Cloud Connector3.5 Low
- sap se hcm (smart paye solution), sap human capital management +1 moreCross-Site Scripting (XSS) vulnerability in the SAP HCM (SMART PAYE solution)6.1 Medium
- Show moreLoading…