CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- adobe after effectsZDI-CAN-22174: Adobe After Effects AEP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe after effectsZDI-CAN-22172: Adobe After Effects AEP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe substance 3d sampler, substance3d - sampler +1 moreAdobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability IV7.8 High
- adobe substance 3d sampler, substance3d - sampler +1 moreAdobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability VI7.8 High
- adobe substance 3d sampler, substance3d - sampler +1 moreAdobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability III7.8 High
- adobe substance 3d sampler, substance3d - sampler +1 moreAdobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability I7.8 High
- adobe substance 3d sampler, substance3d - sampler +1 moreAdobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability II7.8 High
- adobe substance 3d sampler, substance3d - sampler +1 moreAdobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability V7.8 High
- vyperlang vyperVyper has incorrect storage layout for contracts containing large arrays7.5 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager v2.1.1 Vulnerability VI5.5 Medium
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager v2.1.1 Vulnerability II5.5 Medium
- adobe dimensionZDI-CAN-22279: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe dimensionZDI-CAN-22278: Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe dimensionZDI-CAN-22249: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe dimensionZDI-CAN-22284: Adobe Dimension GLTF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- dedebizDedeBIZ content_batchup_action.php sql injection4.7 Medium
- dasan networks networks, dasannetworks w-web +1 moreDasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')9.8 Critical
- adobe preludeZDI-CAN-21791: Adobe Prelude MP4 File Uninitialized Variable Information Disclosure Vulnerability5.5 Medium
- alkacon open cms, opencms +1 moreOpen Redirect in Alkacon Software OpenCms6.1 Medium
- alkacon open cms, opencms +1 moreCross-site Scripting in Alkacon Software OpenCms5.4 Medium
- supermailer newsletter software, supermailer +1 moreImproper input validation in Newsletter Software SuperMailer3.3 Low
- europeana repoxUnrestricted Upload of File with Dangerous Type in Repox10.0 Critical
- europeana repoxRelative Path Traversal in Repox7.5 High
- europeana repoxImproper Restriction of XML External Entity Reference in Repox8.3 High
- europeana repoxCross-site Scripting in Repox5.5 Medium
- adobe indesign, indesign desktop +1 moreAdobe InDesign CC 2023 Memory Corruption Vulnerability IV.5.5 Medium
- adobe indesign, indesign desktop +1 moreAdobe InDesign CC 2023 Memory Corruption Vulnerability VI.5.5 Medium
- adobe illustratorAdobe Illustrator 2023 CC 27.7 Memory Corruption Out-Of-Bounds-Write Vulnerability IV.7.8 High
- adobe illustratorZDI-CAN-21812: Adobe Illustrator JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe illustratorZDI-CAN-22006: Adobe Illustrator JP2 File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- europeana repoxCross-site Scripting in Repox6.3 Medium
- europeana repoxAuthentication Bypass Using an Alternate Path or Channel in Repox9.4 Critical
- fortinet fortiwan** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet...8.6 High
- fortinet fortiwan** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory (...8.1 High
- checkmkPrivilege escalation in agent via LD_LIBRARY_PATH8.8 High
- freebsdNFS client data corruption and kernel memory disclosure6.5 Medium
- freebsdTCP spoofing vulnerability in pf(4)7.5 High
- fortinet fortios, fortiproxy +1 moreAn improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and...2.8 Low
- apache couchdb, apache software foundation ibm cloudant +1 moreApache CouchDB, IBM Cloudant: Privilege Escalation Using _design Documents5.7 Medium
- elastic kibanaKibana Insertion of Sensitive Information into Log File8.0 High
- elastic kibanaKibana Insertion of Sensitive Information into Log File8.0 High
- fortinet fortiportalAn improper neutralization of special elements used in a command ('Command Injection')...7.9 High
- fortinet fortios, fortipam +1 moreA double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1...8.3 High
- fortinet fortitesterAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...6.5 Medium
- fortinet fortiadcAn improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7...6.9 Medium
- fortinet fortios, fortipam, fortiproxy +2 moreA use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4,...7.0 High
- fortinet fortisandboxA improper neutralization of input during web page generation ('cross-site scripting') in...3.4 Low
- fortinet fortiwebAn improper output neutralization for logs in Fortinet FortiWeb 6.2.0 - 6.2.8, 6.3.0 - 6.3.23, 7...4.9 Medium
- fortinet fortisandboxAn improper neutralization of input during web page generation ('cross-site scripting') in...3.4 Low
- fortinet fortimail, fortindr, fortirecorder +3 more +5 moreA cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x,...7.5 High
- Show moreLoading…