CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- dompdf php-svg-libphp-svg-lib possible DoS caused by infinite recursion when parsing SVG document5.3 Medium
- labring lafLaf env causes sensitive information disclosure8.9 High
- dena h2oh2o QUIC state exhaustion DoS3.7 Low
- vmware workspace one launcherPrivilege Escalation Vulnerability4.6 Medium
- dena h2oh2o vulnerable to TLS session resumption misdirection6.1 Medium
- umbraco cms, umbraco-cms +1 moreUmbraco CMS vulnerable to stored XSS via SVG File Upload3.7 Low
- umbraco cms, umbraco-cms +1 moreUmbraco CMS brute force exploit can be used to collect valid usernames5.3 Medium
- umbraco cms, umbraco-cms +1 moreUmbraco CMS SMTP misconfiguration exposes potential registered user email3.7 Low
- umbraco cms, umbraco-cms +1 moreUmbraco CMS vulnerable to Privilege Escalation using Spoofing5.4 Medium
- umbraco cms, umbraco-cms +1 moreUmbraco CMS possible path traversal when creating packages from backoffice7.7 High
- elastic agentElastic Agent Insertion of Sensitive Information into Log File6.8 Medium
- elastic beatsBeats Insertion of Sensitive Information into Log File6.8 Medium
- microsoft azure connected machine agentAzure Connected Machine Agent Elevation of Privilege Vulnerability7.3 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows DNS Spoofing Vulnerability7.5 High
- microsoft dynamics 365, dynamics 365 for finance and operations +1 moreMicrosoft Dynamics 365 Finance and Operations Denial of Service Vulnerability7.5 High
- microsoft office ltsc for mac 2021, office long term servicing channel +1 moreMicrosoft Outlook for Mac Spoofing Vulnerability5.3 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2016 +4 more +6 moreMicrosoft Outlook Information Disclosure Vulnerability6.5 Medium
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +2 more +4 moreWindows Kernel Denial of Service Vulnerability5.5 Medium
- microsoft windows 11 version 21h2, windows 11 version 22h2, windows 11 version 22h3 +4 more +6 moreWindows Bluetooth Driver Remote Code Execution Vulnerability8.0 High
- microsoft windows 10 version 1507, windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +9 more +11 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +18 more +20 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 21h2, windows 11 version 22h2, windows 11 version 22h3 +6 more +8 moreWin32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreInternet Connection Sharing (ICS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +9 more +11 moreMicrosoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +14 more +16 moreWindows Sysmain Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows MSHTML Platform Remote Code Execution Vulnerability8.1 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +7 more +9 moreDHCP Server Service Information Disclosure Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreInternet Connection Sharing (ICS) Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreInternet Connection Sharing (ICS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreMicrosoft ODBC Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +7 more +9 moreDHCP Server Service Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows Telephony Server Elevation of Privilege Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreXAML Diagnostics Elevation of Privilege Vulnerability6.7 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +13 more +15 moreDHCP Server Service Information Disclosure Vulnerability5.3 Medium
- microsoft malware protection platformMicrosoft Defender Denial of Service Vulnerability7.5 High
- microsoft power platform, azure logic apps +1 moreMicrosoft Power Platform Connector Spoofing Vulnerability9.6 Critical
- microsoft azure machine learning, azure machine learning software development kit +1 moreAzure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability4.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Media Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreWin32k Elevation of Privilege Vulnerability7.8 High
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability7.6 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +5 more +7 moreMicrosoft Word Information Disclosure Vulnerability5.5 Medium
- microsoft windows 11 version 22h3, windows 11 version 23h2, windows 11 23h2 +2 moreLocal Security Authority Subsystem Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.8 High
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA)...4.1 Medium
- elastic enterprise searchEnterprise Search Insertion of Sensitive Information into Log File6.8 Medium
- umbraco cms, umbraco-cms +1 moreUmbraco contains a DOM-XSS4.3 Medium
- umbraco cms, umbraco-cms +1 moreUmbraco CMS Backoffice User can bypass "Publish" restriction4.3 Medium
- umbraco cms, umbraco-cms +1 moreUmbraco CMS vulnerable to possible injection of HTML in an unintended form3.5 Low
- Show moreLoading…