CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- codeastro pos and inventory management systemCodeAstro POS and Inventory Management System register_account cross site scripting4.3 Medium
- arduino create agent, arduino-create-agent +1 moreArduino Create Agent vulnerable to Reflected Cross-Site Scripting6.3 Medium
- codeastro pos and inventory management systemCodeAstro POS and Inventory Management System User Creation register_account access control4.3 Medium
- otcmsOTCMS ind_backstage.php sql injection4.7 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator2.7 Low
- oretnom23 simple student attendance systemSourceCodester Simple Student Attendance System actions.class.php save_attendance sql injection5.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Plaintext Disclosure of External System Integration Credentials4.9 Medium
- glpi-project glpiGLPI SQL injection through inventory agent request8.6 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface4.3 Medium
- glpi-project glpiGLPI Remote code execution from LDAP server configuration form on PHP 7.47.2 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: OS Command Injection Vulnerability in the Web Interface5.5 Medium
- glpi-project glpiglpi Authenticated SQL Injection6.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: File Upload Vulnerability in the Web Interface5.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: OS Command Injection Vulnerability in the XML API5.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web Interface8.8 High
- remyandrade wedding guest e-bookSourceCodester Wedding Guest e-Book add-guest.php cross site scripting4.3 Medium
- phpgurukul teacher subject allocation management systemPHPGurukul Teacher Subject Allocation Management System Delete Course course.php cross-site request forgery4.3 Medium
- sourcecodester online tours & travels management system, mayurik online tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System email_setup.php prepare sql injection5.5 Medium
- jenkins paaslane estimate, jenkins project paaslane estimate plugin +1 moreMissing permission check in Jenkins PaaSLane Estimate Plugin4.3 Medium
- jenkins paaslane estimate, jenkins project paaslane estimate plugin +1 moreCross-Site Request Forgery in Jenkins PaaSLane Estimate Plugin8.8 High
- jenkins paaslane estimate, jenkins project paaslane estimate plugin +1 moreTokens stored in plain text by PaaSLane Estimate Plugin4.3 Medium
- jenkins paaslane estimate, jenkins project paaslane estimate plugin +1 moreTokens stored in plain text by PaaSLane Estimate Plugin4.3 Medium
- jenkins deployment dashboard, jenkins project deployment dashboard plugin +1 moreCross-site request forgery vulnerability in Jenkins Deployment Dashboard Plugin4.3 Medium
- jenkins project htmlresource plugin, jenkins html resource +1 moreCross-site request forgery vulnerability in Jenkins HTMLResource Plugin8.1 High
- jenkins dingding json pusher, jenkins project dingding json pusher plugin +1 moreDisplayed in plain text by Dingding JSON Pusher Plugin4.3 Medium
- jenkins dingding json pusher, jenkins project dingding json pusher plugin +1 moreTokens stored in plain text by Dingding JSON Pusher Plugin4.3 Medium
- jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 moreOpen redirect vulnerability in Jenkins OpenId Connect Authentication Plugin6.1 Medium
- jenkins openid, jenkins project openid connect authentication plugin +1 morePassword stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin6.7 Medium
- jenkins nexus platform, jenkins project nexus platform plugin +1 moreJenkins Nexus Platform Plugin missing permission check4.3 Medium
- jenkins nexus platform, jenkins project nexus platform plugin +1 moreJenkins Nexus Platform Plugin Cross-Site Request Forgery vulnerability8.8 High
- jenkins nexus platform, jenkins project nexus platform plugin +1 moreJenkins Nexus Platform Plugin missing permission check5.4 Medium
- jenkins nexus platform, jenkins project nexus platform plugin +1 moreJenkins Nexus Platform Plugin Cross-Site Request Forgery vulnerability8.8 High
- jenkins scriptler, jenkins project scriptler plugin +1 moreMissing permission check in Jenkins Scriptler Plugin4.3 Medium
- jenkins scriptler, jenkins project scriptler plugin +1 moreArbitrary file deletion vulnerability in Jenkins Scriptler Plugin8.1 High
container-suseconnectSUSESecurity update for container-suseconnectNo score- thecosy icecmsThecosy IceCMS Article permission5.4 Medium
- thecosy icecmsThecosy IceCMS User Data access control4.3 Medium
- thecosy icecmsThecosy IceCMS user session6.3 Medium
- thecosy icecmsThecosy IceCMS Love resource improper enforcement of a single, unique action5.3 Medium
- thecosy icecmsThecosy IceCMS API PlanetCommentList access control5.3 Medium
- thecosy icecmsThecosy IceCMS API PlanetUser information disclosure5.3 Medium
- adobe substance 3d designer, substance3d - designer +1 moreAdobe Substance 3D Designer 13.0.2 build 6942 Vulnerability III5.5 Medium
- adobe substance 3d designer, substance3d - designer +1 moreAdobe Substance 3D Designer 13.0.2 build 6942 Vulnerability I7.8 High
- adobe substance 3d designer, substance3d - designer +1 moreAdobe Substance 3D Designer 13.0.2 build 6942 Vulnerability II5.5 Medium
- adobe substance 3d designer, substance3d - designer +1 moreAdobe Substance 3D Designer 13.0.2 build 6942 Vulnerability IV5.5 Medium
merakiPyPIImproper validation in meraki7.2 High- wasmerFilesystem sandbox not enforced in wasmer-cli8.4 High
- thecosy icecmsThecosy IceCMS Captcha login excessive authentication5.3 Medium
- adobe after effectsZDI-CAN-22173: Adobe After Effects AEP File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe after effectsZDI-CAN-22175: Adobe After Effects AEP File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- Show moreLoading…