CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- debian linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moreOut-of-bounds write in Linux kernel's Performance Events system component7.8 High
- mozilla firefox, debian linux +1 moreMemory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory...8.8 High
- mozilla firefoxBrowser tab titles were being leaked by GNOME to system logs. This could potentially expose the...6.5 Medium
- mozilla firefoxUnder certain conditions, Firefox did not display a warning when a user attempted to navigate to...4.3 Medium
- mozilla firefox, firefox focus +1 moreApplications which spawn a Toast notification in a background thread may have obscured fullscreen...4.3 Medium
- mozilla firefoxA `` element could have been manipulated to paint content outside of a sandboxed iframe. This...6.5 Medium
- mozilla firefoxIn some instances, the user-agent would allow push requests which lacked a valid VAPID even...4.3 Medium
- mozilla firefox, firefox esr, debian linux +2 moreThe timing of a button click causing a popup to disappear was approximately the same length as...6.1 Medium
- mozilla firefoxTypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in...8.8 High
- mozilla firefox, firefox esr, debian linux +2 more`EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only...6.5 Medium
- mozilla firefoxMultiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on...8.8 High
- mozilla firefox esr, thunderbird, debian linux +2 moreA use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe `VideoBridge` allowed any content process to use textures produced by remote decoders. This...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA use-after-free condition affected TLS socket creation when under memory pressure. This...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreFirefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM...8.8 High
- debian linux, mozilla firefox, firefox esr +1 more +3 moreWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...8.8 High
- mozilla thunderbird, debian linux +1 moreThe signature of a digitally signed S/MIME email message may optionally specify the signature...4.3 Medium
- mozilla thunderbird, debian linux +1 moreWhen processing a PGP/MIME payload that contains digitally signed text, the first paragraph of...4.3 Medium
- pedroetb tts-apipedroetb tts-api app.js onSpeechDone os command injection5.5 Medium
- huggingface huggingface/transformers, transformers +1 moreDeserialization of Untrusted Data in huggingface/transformers9.0 Critical
- code-projects online student management systemSourceCodester Online Student Management System edit-student-detail.php cross site scripting2.4 Low
- apache supersetApache Superset: Privilege Escalation Vulnerability7.7 High
- apache supersetApache Superset: SQL Injection on where_in JINJA macro6.5 Medium
- apache supersetApache Superset: Allows for uncontrolled resource consumption via a ZIP bomb6.5 Medium
- simple-membership-plugin simple membershipWordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Unauth. Reflected Cross Site Scripting (XSS)7.1 High
- libssh, fedoraproject fedora, red hat enterprise linux 7 +3 more +5 moreLibssh: proxycommand/proxyjump features allow injection of malicious code through hostname4.8 Medium
- gopiplus jquery news tickerJquery news ticker <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- gopi ramasamy image horizontal reel scroll slideshowImage horizontal reel scroll slideshow <= 13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- ibm urbancode deployIBM UrbanCode Deploy HTML injection4.3 Medium
- ethex contractsEthex Contracts Monthly Jackpot EthexJackpot.sol access control4.3 Medium
- corveda phpsandboxCorveda PHPSandbox String protection mechanism4.3 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting5.4 Medium
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreCommand Injection9.0 Critical
- panasonic fpwin pro, control fpwin pro +1 moreOut-of-bouds read vulnerability in FPWin Pro version 7.7.0.0 and all previous versions may allow...7.8 High
- panasonic fpwin pro, control fpwin pro +1 moreStack-based buffer overflow in FPWin Pro version 7.7.0.0 and all previous versions may allow...7.8 High
- jordy meow perfect images (manage image sizes, thumbnails, replace, retina), meowapps perfect images +1 moreWordPress WP Retina 2x Plugin <= 6.4.5 is vulnerable to Sensitive Data Exposure5.3 Medium
- php, fedoraproject fedora +1 morePHP is vulnerable to the Marvin Attack5.9 Medium
- weintek cmt2078x firmwareAn authenticated command injection vulnerability in Weintek cMT2078X easyweb Web Version v2.1.3,...8.8 High
- linotp, linotp virtual appliance +1 moreDefective request context handling in Self Service in LinOTP 3.x before 3.2.5 allows remote...6.8 Medium
- kodcloud kodexplorerReflective Cross Site Scripting (XSS) vulnerability in KodeExplorer version 4.51, allows...6.1 Medium
- pdf24 creatorAn issue was discovered in PDF24 Creator 11.14.0. The configuration of the msi installer file was...7.8 High
- phpsysinfoPhpsysinfo Cross Site Request Forgery (CSRF) vulnerability6.5 Medium
- dlink dir-850l firmwareAn issue in D-Link DIR-850L v.B1_FW223WWb01 allows a remote attacker to execute arbitrary code...9.8 Critical
- thegreenbow vpn clientAn issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard...9.8 Critical
- nintendo ds wireless communicationDS Wireless Communication (DWC) with DWC_VERSION_3 and DWC_VERSION_11 allows remote attackers to...9.8 Critical
- tiencop wp extraWordPress WP EXtra Plugin <= 6.2 is vulnerable to Broken Access Control6.3 Medium
- Show moreLoading…