CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal: '\..\filename'9.8 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreServer-Side Request Forgery (SSRF)8.6 High
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager cross-site scripting5.4 Medium
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager information disclosure5.3 Medium
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager directory traversal4.3 Medium
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager file upload6.6 Medium
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager improper input validation4.3 Medium
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager information disclosure4.0 Medium
- ruijie rg-ws6008 firmware, rg-ws6108 firmware +1 moreRuijie WS6008 v1.x v2.x AC_RGOS11.9(6)W3B2_G2C6-01_10221911 and WS6108 v1.x AC_RGOS11.9(6...9.8 Critical
- tenda i29 firmwareTenda i29 v1.0 V1.0.0.5 was discovered to contain a stack overflow via the ip parameter in the...9.8 Critical
- tenda i29 firmwareTenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the rebootTime parameter...9.8 Critical
- tenda i29 firmwareTenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the...9.8 Critical
- tenda i29 firmwareTenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter...9.8 Critical
- tenda i29 firmwareTenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the...9.8 Critical
- tenda i29 firmwareTenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the...9.8 Critical
- tenda i29 firmwareTenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the lanGw parameter in...9.8 Critical
- tenda i29 firmwareTenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the ip parameter in the...9.8 Critical
- tenda i29 firmwareTenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the...9.8 Critical
- iscute cute http file serverCross Site Scripting (XSS) vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers...5.4 Medium
- libmingBuffer Overflow vulnerability in libming version 0.4.8, allows attackers to execute arbitrary...9.8 Critical
- cesanta mjsBuffer Overflow vulnerability in Cesanta MJS version 2.22.0, allows attackers to execute...9.8 Critical
- ltb-project self service passwordAn issue in LTB Self Service Password before v.1.5.4 allows a remote attacker to execute...9.8 Critical
- cuppacmsSQL Injection vulnerability in components/table_manager/html/edit_admin_table.php in CuppaCMS V1...9.8 Critical
- stormshield network securityAn issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.21, 4.4.0 through...6.5 Medium
- stormshield network securityAn issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.39, 3.11.0...5.3 Medium
- xpand-it write-back managerXpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows...9.1 Critical
- ibm urbancode deployIBM UrbanCode Deploy denial of service5.3 Medium
- ibm urbancode deployIBM UrbanCode Deploy denial of service6.2 Medium
- efacec uc 500e, uc 500e firmware +1 moreImproper Access Control in EFACEC UC 500E4.1 Medium
- ibm urbancode deployIBM UrbanCode Deploy information disclosure5.3 Medium
- efacec uc 500e, uc 500e firmware +1 moreExposure of Sensitive Information to an Unauthorized Actor in EFACEC UC 500E5.3 Medium
- efacec uc 500e, uc 500e firmware +1 moreURL Redirection to Untrusted Site ('Open Redirect') in EFACEC UC 500E4.3 Medium
- efacec uc 500e, uc 500e firmware +1 moreCleartext Transmission of Sensitive Information in EFACEC UC 500E6.3 Medium
- navidromeAuthentication bypass vulnerability in navidrome's subsonic endpoint8.6 High
- efacec bcu 500, bcu 500 firmware +1 moreCross-Site Request Forgery in EFACEC BCU 5008.2 High
- efacec bcu 500, bcu 500 firmware +1 moreUncontrolled Resource Consumption in EFACEC BCU 5009.6 Critical
emailproxyPyPIExpired tokens can be renewed without validating the account password8.1 High- eurotel etl3100, etl3100 firmware +1 moreImproper Access Control in EuroTel ETL31009.4 Critical
- eurotel etl3100, etl3100 firmware +1 moreAuthorization Bypass Through User-Controlled Key in EuroTel ETL31007.5 High
- eurotel etl3100, etl3100 firmware +1 moreImproper Restriction of Excessive Authentication Attempts9.8 Critical
- ibm aix, vios +1 moreIBM AIX denial of service6.2 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM information disclosure4.9 Medium
- softing edgeaggregatorSofting edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability7.2 High
- praveen goswami advanced category templateWordPress Advanced Category Template Plugin <= 0.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- oceanwp ocean extraWordPress Ocean Extra Plugin <= 2.2.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- xwiki, xwiki xwiki-platform +1 moreVelocity execution without script right through tree macro8.3 High
- parcel pro pro, parcelpro parcel pro +1 moreWordPress Parcel Pro Plugin <= 1.6.11 is vulnerable to Open Redirection4.7 Medium
- sound4 ltd. streamWordPress Stream Plugin <= 3.9.2 is vulnerable to Insecure Direct Object References (IDOR)4.3 Medium
github.com/containerd/containerdGocontainerd allows RAPL to be accessible to a containerNo score- apple macosA session rendering issue was addressed with improved session tracking. This issue is fixed in...5.7 Medium
- Show moreLoading…