CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- fortinet fortiwlmA improper neutralization of special elements used in an os command ('os command injection') in...8.6 High
- nadatel dvr, at-0402e firmware, at-0402l firmware +16 more +18 moreImproper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue...7.5 High
- hanbiro groupwareImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...7.5 High
apache-poiOSS-FuzzSecurity exception in org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlockNo score- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal in mlflow/mlflow9.6 Critical
debian-security-supportDebiandebian-security-support - security updateNo score- google chromeUse after free in CSS in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to...8.8 High
- google chromeUse after free in FedCM in Google Chrome prior to 120.0.6099.109 allowed a remote attacker who...8.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to...8.8 High
- google chromeUse after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to...8.8 High
- google chromeUse after free in Blink in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora, microsoft edge chromium +2 moreType confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to...8.8 High
- debian linux, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +17 more +19 moreXorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty7.6 High
- debian linux, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +17 more +19 moreXorg-x11-server: out-of-bounds memory reads/writes in xkb button actions7.8 High
- canonical ubuntu linux, canonical ltd. ubuntu's gnome-control-center, gnome control center +2 moreIn Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system...4.9 Medium
- primx zedmail, zonecentral, zed\! +2 moreBy default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI...7.5 High
- primx cryhodEncrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 (ANSSI qualification...4.6 Medium
- primx zonecentralEncrypted folders created by PRIMX ZONECENTRAL through 2023.5 can be modified by a local attacker...5.5 Medium
- primx zonecentralEncrypted folders created by PRIMX ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification...5.5 Medium
- primx zedmail, zonecentral, zed\! +2 moreZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission...5.5 Medium
- primx zedmail, zonecentral, zed\! +2 moreZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission...5.3 Medium
- rockoaRockoa <2.3.3 is vulnerable to SQL Injection. The problem exists in the indexAction method in...9.8 Critical
- relyum rely-pcie firmwareRelyum RELY-PCIe 22.2.1 devices suffer from a system group misconfiguration, allowing read access...7.5 High
- relyum rely-pcie firmware, rely-rec firmware +1 moreRelyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices are susceptible to Cross Site Request Forgery...8.8 High
- relyum rely-pcie firmware, rely-rec firmware +1 moreAn issue discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 allows for unauthorized...9.8 Critical
- relyum rely-pcie firmware, rely-rec firmware +1 moreAn issue was discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices, allowing...8.8 High
- relyum rely-pcie firmware, rely-rec firmware +1 moreAn issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices. The web...6.1 Medium
- relyum rely-pcie firmware, rely-rec firmware +1 moreAn issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices. There is a Weak...5.9 Medium
- relyum rely-pcie firmware, rely-rec firmware +1 moreAn issue discovered in Relyum RELY-PCIe 22.2.1 devices. The authorization mechanism is not...8.8 High
- silverpeasBroken access control in Silverpeas4.3 Medium
- silverpeasCross Site Request Forgery in Silverpeas8.8 High
- silverpeasBroken access control in Silverpeas5.4 Medium
- silverpeasCross-site Scripting in silverpeas5.4 Medium
- silverpeasMissing access control in Silverpeas7.5 High
- silverpeasCross Site Request Forgery in Silverpeas8.8 High
- silverpeasBroken access control in Silverpeas4.9 Medium
- silverpeasBroken access control in Silverpeas8.1 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1380 firmware +4 more +6 moreA race condition issue discovered in Samsung Mobile Processor Exynos 9820, 980, 1080, 2100, 2200,...4.0 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +6 more +8 moreSamsung Mobile Processor and Wearable Processor (Exynos 980, 850, 1080, 2100, 2200, 1280, 1380,...4.8 Medium
- samsung mobile exynos, samsung exynos 1080 firmware, exynos 1280 firmware +5 more +7 moreA TOCTOU race condition in Samsung Mobile Processor Exynos 9820, Exynos 980, Exynos 1080, Exynos...6.3 Medium
- emlogA Cross Site Scripting (XSS) vulnerability was discovered in Emlog Pro v2.1.14 via the component ...6.1 Medium
- emlogEmlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting (XSS) vulnerability...6.1 Medium
- common-services soliberteSQL Injection vulnerability in functions/point_list.php in Common Services soliberte before v4.3...9.8 Critical
- tinyxml project tinyxmlStringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a...7.5 High
- hitachi vantara pentaho data integration & analytics, hitachi pentaho data integration and analytics +1 moreHitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')8.5 High
- nautobotNautobot allows unauthenticated db-file-storage views3.7 Low
- modcluster mod proxy cluster, red hat jboss core services for rhel 8, jboss core services on rhel 7 +3 more +5 moreMod_cluster/mod_proxy_cluster: stored cross site scripting5.4 Medium
- redhat ansible, fedoraproject extra packages for enterprise linux, fedora +6 more +8 moreAnsible: template injection7.1 High
- redhat undertow, red hat build of quarkus, data grid 8 +12 more +14 moreUndertow: ajp request closes connection exceeding maxrequestsize7.5 High
- dompdf php-svg-libphp-svg-lib unsafe attributes merge when parsing `use` tag8.3 High
- Show moreLoading…