CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- jfinalcms project jfinalcmsCross-site Scripting in JFinalcms5.4 Medium
- leadscloud empirecmsEmpireCMS v7.5 was discovered to contain a SQL injection vulnerability via the ftppassword...9.8 Critical
- iteachyou dreamer cmsDreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...8.8 High
- popojicmsPopojiCMS version 2.0.1 is vulnerable to remote command execution in the Meta Social field.7.2 High
- schedmd slurmAn issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control:...8.2 High
- schedmd slurmAn issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free,...9.8 Critical
- schedmd slurmAn issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer...7.5 High
- schedmd slurmAn issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control...8.8 High
- schedmd slurmAn issue was discovered in SchedMD Slurm 23.11.x. There is SQL Injection against the SlurmDBD...9.8 Critical
- schedmd slurmAn issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper...7.5 High
- ubuntu budgie budgie extrasbudgie-extras vulnerabilities6.0 Medium
- ubuntu budgie budgie extrasbudgie-extras vulnerabilities6.0 Medium
- ubuntu budgie budgie extrasbudgie-extras vulnerabilities6.0 Medium
- ubuntu budgie budgie extrasbudgie-extras vulnerabilities6.0 Medium
- ubuntu budgie budgie extrasbudgie-extras vulnerabilities6.0 Medium
- ubuntu budgie budgie extrasbudgie-extras vulnerabilities6.0 Medium
- buy-addons bavideotabSQL injection vulnerability in Buy Addons bavideotab before version 1.0.6, allows attackers to...9.8 Critical
- nagios xiNagios XI before version 5.11.3 was discovered to contain a remote code execution (RCE)...9.8 Critical
- nagios xiNagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- cybrosys website blog searchA SQL injection vulnerability in Cybrosys Techno Solutions Website Blog Search (aka...9.8 Critical
- dokmee enterprise content managementDokmee ECM 7.4.6 allows remote code execution because the response to a GettingStarted...9.8 Critical
- sunnytoo sturlsSQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate...9.8 Critical
- parallels remote application serverThe Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized...10.0 Critical
- sammycage plutosvgPlutoSVG commit 336c02997277a1888e6ccbbbe674551a0582e5c4 and before was discovered to contain an...9.8 Critical
- softing opc, opc ua c\+\+ software development kit, secure integration server +2 moreAn uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows...7.5 High
- dedebizCross Site Scripting (XSS) vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code...9.6 Critical
- microsoft azure devops server, azure devops server 2020.1.2, azure devops server 2022 +2 moreAzure DevOps Server Spoofing Vulnerability6.5 Medium
- typo3 content consentInsecure Direct Object Reference in extension "Content Consent" (content_consent)5.3 Medium
- typo3 femanagerBroken Access Control in extension "femanager"5.4 Medium
- typo3 direct mailConfiguration Injection in extension "Direct Mail" (direct_mail)8.8 High
- ibm aix, vios +1 moreIBM AIX privilege escalation8.4 High
- ibm aix, vios +1 moreIBM AIX privilege escalation8.4 High
- ibm aix, vios +1 moreIBM AIX privilege escalation8.4 High
- zoom, zoom communications inc. clients, zoom meeting software development kit +2 more +4 moreImproper authentication in some Zoom clients before version 5.16.5 may allow an authenticated...6.4 Medium
- zoom, zoom meeting software development kit, video software development kit +2 more +4 morePath traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for...7.3 High
- zoom, zoom meeting software development kit, video software development kit +1 more +3 moreImproper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5...7.1 High
- zoom, zoom meeting software development kit, video software development kit +1 more +3 moreCryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for...4.9 Medium
- cube-js cube, cube cube.js +1 moreDenial of service attack on the cube-api endpoint6.5 Medium
- clockworkmod scryptedScrypted reflected Cross-site Scripting vulnerability6.1 Medium
- clockworkmod scryptedScrypted reflected Cross-site Scripting vulnerability6.1 Medium
- advplyr audiobookshelfAudiobookshelf Arbitrary File Read Vulnerability7.5 High
- advplyr audiobookshelfAudiobookshelf Server-Side Request Forgery and Arbitrary File Read Vulnerability8.1 High
- jellyfinJellyfin Possible Remote Code Execution via custom FFmpeg binary7.2 High
- dompdfDompdf possible DoS caused by infinite recursion when parsing SVG images5.3 Medium
- jqlang jqjq has stack-based buffer overflow in decNaNs6.2 Medium
- ckanCKAN out of memory error when submitting the dataset form with a specially-crafted field4.5 Medium
- jqlang jqjq has heap-buffer-overflow vulnerability in the function decToString in decNumber.c6.2 Medium
- ibm system storage virtualization engine, virtualization engine ts7760 3957-vec firmware, virtualization engine ts7770 3948-ved firmware +1 more +3 moreIBM System Storage Virtualization Engine information disclosure4.3 Medium
- ibm system storage virtualization engine, virtualization engine ts7760 3957-vec firmware, virtualization engine ts7770 3948-ved firmware +1 more +3 moreIBM System Storage Virtualization Engine information disclosure4.3 Medium
- codeastro pos and inventory management systemCodeAstro POS and Inventory Management System item_con cross site scripting3.5 Low
- Show moreLoading…