CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- bcoinbsock uses weak hashing algorithms9.1 Critical
- billahmed qbit matuiCross-Site Scripting (XSS) vulnerability in bill-ahmed qbit-matUI version 1.16.4, allows remote...5.4 Medium
- gstreamerGStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.5 High
- smartertools smartermailSmarterTools SmarterMail 16.x 8495 through 8664 before 8747 allows stored XSS via a crafted...5.4 Medium
- smartertools smartermailSmarterTools SmarterMail 16.x 8495 through 8664 before 8747 allows stored DOM XSS because an XSS...5.4 Medium
- smartertools smartermailSmarterTools SmarterMail 16.x 8495 through 8664 before 8747 allows stored XSS by using image/svg...5.4 Medium
- heimdalsecurity thorAn issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and...9.1 Critical
- heimdalsecurity thorAn issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows...9.8 Critical
- heimdalsecurity thorAn issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and...9.8 Critical
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch is susceptible to a Denial of Service vulnerability5.3 Medium
- aiven journalpumpInformation Disclosure Vulnerability in Journalpump6.5 Medium
- grails, grails grails-core +1 moreGrails® data binding causes JVM crash and/or DoS6.5 Medium
- projectworlds online voting system projectOnline Voting System Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- projectworlds online voting system projectOnline Voting System Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- microsoft windows 10 version 20h2, windows 10 version 21h1, windows 10 version 21h2 +11 more +13 moreWindows Local Session Manager (LSM) Denial of Service Vulnerability6.5 Medium
- kashipara group hotel management, jayesh hotel management system +1 moreHotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)5.4 Medium
- woorockets corsaWordPress Corsa Theme <= 1.5 is vulnerable to Arbitrary File Upload9.9 Critical
- kashipara group hotel management, jayesh hotel management system +1 moreHotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)5.4 Medium
- kashipara group hotel management, jayesh hotel management system +1 moreHotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)5.4 Medium
- zendrop, zendrop – global dropshipping +1 moreWordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to Arbitrary File Upload10.0 Critical
- themely theme demo importWordPress Theme Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload9.1 Critical
- olive themes one click demo import, olivethemes olive one click demo import +1 moreWordPress Olive One Click Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload9.1 Critical
- hm plugin wordpress job board and recruitment plugin – jobwp, hmplugin jobwp +1 moreWordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.0 is vulnerable to Arbitrary File Upload10.0 Critical
- amadercode lab dropshipping & affiliation with amazon, amadercode dropshipping \& affiliation with amazon +1 moreWordPress Dropshipping & Affiliation with Amazon Plugin <= 2.1.2 is vulnerable to Arbitrary File Upload9.9 Critical
- unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates), unlimited-elements unlimited elements for elementor +2 moreWordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload9.9 Critical
- woocommerce automatewooWordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Arbitrary File Upload9.9 Critical
- wp chill download monitorWordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload9.9 Critical
- akshay menariya export import menusWordPress Export Import Menus Plugin <= 1.8.0 is vulnerable to Arbitrary File Upload9.9 Critical
- galdub folders – unlimited folders to organize media library folder, pages, posts, file manager, premio folders +1 moreWordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload9.1 Critical
- jeff starr user submitted posts – enable users to submit posts from the front end, plugin-planet user submitted posts +1 moreWordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload9.0 Critical
- themify ultraWordPress Themify Ultra Theme <= 7.3.5 is vulnerable to Arbitrary File Upload9.9 Critical
- revolution slider slider revolutionWordPress Slider Revolution Plugin <= 6.6.15 is vulnerable to Arbitrary File Upload8.4 High
- symbiostockWordPress Symbiostock Lite Plugin <= 6.0.0 is vulnerable to Arbitrary File Upload9.1 Critical
- code-atlantic popup maker, popup maker – popup for opt-ins, lead gen, & more, unknown popup maker – popup for opt-ins, lead gen, & more +2 moreWordPress Popup Maker Plugin <= 1.17.1 is vulnerable to Sensitive Data Exposure5.3 Medium
- bitapps file manager, file manager by bit form team manager – 100% free & open source file manager plugin for wordpress | bit file manager +1 moreWordPress File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection5.5 Medium
- kashipara group hotel management, jayesh hotel management system +1 moreHotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)5.4 Medium
- spoon themes adifier - classified ads wordpress theme, spoonthemes adifier +1 moreWordPress Adifier System Plugin < 3.1.4 is vulnerable to SQL Injection9.3 Critical
- magic logix msyncWordPress MSync Plugin <= 1.0.0 is vulnerable to SQL Injection7.6 High
- dvsekhvalnov jose2gojose2go vulnerable to denial of service via large p2c value7.5 High
- guelben bravo translateWordPress Bravo Translate Plugin <= 1.2 is vulnerable to SQL Injection7.6 High
- dokan, wedevs dokan – best woocommerce multivendor marketplace solution – build your own amazon, ebay, etsy +1 moreWordPress Dokan Plugin <= 3.7.12 is vulnerable to SQL Injection7.1 High
- contrid slideshow gallery lite, tribulant slideshow gallery +1 moreWordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to SQL Injection6.7 Medium
- page visit counter advanced page visit counter – most wanted analytics plugin for wordpress, pagevisitcounter advanced page visit counter +1 moreWordPress Advanced Page Visit Counter Plugin <= 6.4.2 is vulnerable to SQL Injection7.1 High
- bestwebsoft contact form to db by bestwebsoft – messages database plugin for wordpress, contact form to db +1 moreWordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL Injection8.5 High
- favethemes houzez, houzez - real estate wordpress theme +1 moreWordPress Houzez Theme < 2.8.3 is vulnerable to SQL Injection8.2 High
- themefic ultimate addons for contact form 7WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection8.5 High
- cminds cm popup, creativemindssolutions cm popup plugin for wordpress +1 moreWordPress CM Pop-Up banners Plugin <= 1.5.10 is vulnerable to SQL Injection8.5 High
- bannersky bsk forms blacklistWordPress BSK Forms Blacklist Plugin <= 3.6.2 is vulnerable to SQL Injection7.6 High
drupal/dvfPackagistThis module allows you to turn various data sources (Eg CSV or JSON file) into interactive visualisation. The DVF module provides a field (storage, widget & formatter) that can be added to any entity.…No score- clickhouse, clickhouse cloud +1 moreHeap buffer overflow in T64 codec decompression7.0 High
- Show moreLoading…