CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)4.3 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- wso2 api managerDue to improper error handling, a REST API resource could expose a server side error containing...5.3 Medium
- wso2 api manager, identity server, identity server as key manager +1 more +3 moreReflected XSS vulnerability can be exploited by tampering a request parameter in Authentication...6.1 Medium
- wso2 api manager, carbon identity application authentication endpoint, carbon identity application authentication framework +4 more +6 moreIncorrect Authorization in Multiple WSO2 Products via Federated Authentication with JIT Provisioning Leading to User Impersonation8.5 High
- kaifa technology webitr, kaifa webitr attendance system +1 moreKaifa Technology WebITR - SQL Injection6.5 Medium
- wso2 api manager, api manager analytics, api microgateway +5 more +7 moreWSO2 products vulnerable to XML External Entity attack4.6 Medium
- kaifa technology webitr, kaifa webitr attendance system +1 moreKaifa Technology WebITR - Arbitrary File Upload8.8 High
- kaifa technology webitr, kaifa webitr attendance system +1 moreKaifa Technology WebITR - Error Message Leakage4.3 Medium
- kaifa technology webitr, kaifa webitr attendance system +1 moreKaifa Technology WebITR - Hard-coded Cryptographic Key9.8 Critical
- wso2 api manager, iot server +1 moreWSO2 API Manager allows attackers to change the API rating4.3 Medium
- multisuns easylog web+, easylog web\+ firmware +1 moreMultisuns EasyLog web+ - Command Injection9.8 Critical
- multisuns easylog web+, easylog web\+ firmware +1 moreMultisuns EasyLog web+ - Path Traversal7.5 High
- multisuns easylog web+, easylog web\+, easylog web\+ firmware +2 moreMultisuns EasyLog web+ - Use of Hard-coded Password9.8 Critical
- taiwan-ca(twca) jcicsecuritytoolTAIWAN-CA(TWCA) JCICSecurityTool - Improper Input Validation8.8 High
- armorx global technology corporation spam, armorxgt spamtrap +1 moreArmorX Global Technology Corporation ArmorX Spam - SQL Injectoin9.8 Critical
- softnext mail sqr expertSoftnext Mail SQR Expert - Local File Inclusion-26.5 Medium
- softnext mail sqr expertSoftnext Mail SQR Expert - Local File Inclusion-16.5 Medium
- apache dubboApache Dubbo: Bypass deny serialize list check in Apache Dubbo9.8 Critical
- apache dubboBypass serialize checks in Apache Dubbo9.8 Critical
- softnext mail sqr expertSoftnext Mail SQR Expert - Command Injection7.4 High
- softnext mail sqr expertSoftnext Mail SQR Expert - Blind Server-Side Request Forgey (SSRF)5.3 Medium
- softnext mail sqr expertSoftnext Mail SQR Expert - Path Traversal7.5 High
- smartstar software cws web-base, csharp cws collaborative development platform +1 moreSmartStar Software CWS Web-Base - Arbitrary File Upload9.8 Critical
- smartstar software cws web-base, csharp cws collaborative development platform +1 moreSmartStar Software CWS Web-Base - Broken Access Control8.8 High
- smartstar software cws web-base, csharp cws collaborative development platform +1 moreSmartStar Software CWS Web-Base - Use of Hard-coded Credentials6.5 Medium
- g5plus essential real estateEssential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File Upload7.5 High
- e2pdf, oleksandrz e2pdf – export pdf tool for wordpress +1 moreE2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreUse-after-free in Linux kernel's netfilter: nf_tables component7.8 High
- itpison omicard edm 's sms, omicard edm +1 moreITPison OMICARD EDM 's SMS - Path Traversal7.5 High
- itpison omicard edm 's sms, omicard edm +1 moreITPison OMICARD EDM 's SMS - SQL Injection9.8 Critical
- itpison omicard edm 's sms, omicard edm +1 moreITPison OMICARD EDM 's SMS - Arbitrary File Upload9.8 Critical
- mindsdbMindsDB has arbitrary file write in file.py9.1 Critical
- Show moreLoading…