CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- phpgurukul student result management systemStudent Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- projectworlds student result management systemStudent Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- projectworlds railway reservation systemRailway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- github enterprise serverImproper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository Data7.5 High
- github enterprise serverIncorrect Authorization allows Read Access to Issue Comments in GitHub Enterprise Server2.7 Low
- github enterprise serverIncorrect Authorization for Issue Comments in GitHub Enterprise Server4.9 Medium
- github enterprise serverInsufficient Entropy in GitHub Enterprise Server Management Console Invitation Token8.3 High
- github enterprise serverRace Condition allows Administrative Access on Organization Repositories6.3 Medium
- github enterprise serverImproper Privilege Management allows for arbitrary workflows to be run6.5 Medium
- github enterprise serverRace Condition allows Unauthorized Outside Collaborator5.8 Medium
- github enterprise serverSensitive Information in Log File in GitHub Enterprise Server7.2 High
- github enterprise serverSensitive Information in Log File in GitHub Enterprise Server8.1 High
- github enterprise serverPath traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages site6.8 Medium
- github enterprise serverA race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on...3.9 Low
- github enterprise serverImproper Privilege Management in GitHub Enterprise Server management console leads to privilege escalation8.0 High
- github enterprise serverImproper access control in all versions of GitHub Enterprise Server allows unauthorized users to...5.3 Medium
- projectworlds railway reservation systemRailway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- silabs.com gsdk, silabs gecko software development kit +1 morePotential Timing vulnerability in CBC PKCS7 padding calculations4.6 Medium
- projectworlds railway reservation systemRailway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()4.4 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +14 more +16 moreKernel: gsm multiplexing race condition leads to privilege escalation7.0 High
- codelyfe stupid simple cmscodelyfe Stupid Simple CMS rename.php path traversal5.4 Medium
- codelyfe stupid simple cmscodelyfe Stupid Simple CMS rename.php path traversal4.3 Medium
- projectworlds leave management system, projectworlds pvt. limited leave management system project +1 moreLeave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi)8.8 High
- projectworlds leave management system, projectworlds pvt. limited leave management system project +1 moreLeave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi)8.8 High
- byzoro s210, smart s210 firmware +1 moreByzoro S210 importexport.php injection6.3 Medium
- blaz k. rate my post – wp rating system, blazzdev rate my post +1 moreWordPress Rate my Post – WP Rating System Plugin <= 3.4.1 is vulnerable to Insecure Direct Object References (IDOR)4.3 Medium
- kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 moreWordPress Youzify Plugin <= 1.2.2 is vulnerable to Insecure Direct Object References (IDOR)6.5 Medium
- redhat keycloak, red hat migration toolkit for applications 6, migration toolkit for applications 7 +21 more +23 moreKeycloak: redirect_uri validation bypass7.1 High
- gradio-app gradioMake the `/file` secure against file traversal attacks5.6 Medium
- woocommerce shipping multiple addressesWordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.3 is vulnerable to Insecure Direct Object References (IDOR)6.5 Medium
- automattic woocommerce bookings, woocommerce bookings +1 moreWordPress WooCommerce Bookings Plugin <= 1.15.78 is vulnerable to Insecure Direct Object References (IDOR)5.4 Medium
- august infotech woocommerce menu extensionWordPress WooCommerce Menu Extension Plugin <= 1.6.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- extend themes colibri page builderWordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- automadautomad User Creation cross-site request forgery4.3 Medium
- mondula multi step formWordPress Multi Step Form Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- villatheme curcy, curcy – multi currency for woocommerce +1 moreWordPress CURCY Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- seosbg seos contact formWordPress Seos Contact Form Plugin <= 1.8.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- aerin loan repayment calculator and application formWordPress Loan Repayment Calculator and Application Form Plugin <= 2.9.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- automadautomad FileController.php import server-side request forgery6.3 Medium
- code-projects online examination systemOnline Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)8.8 High
- code-projects online examination systemOnline Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)8.8 High
- solarwinds access rights managerSensitive Information Disclosure Vulnerability6.5 Medium
- tats w3m, fedora extra packages for enterprise linux, fedora +2 moreW3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)5.5 Medium
- code-projects online examination systemOnline Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)8.8 High
- broadcom tcpreplay, fedora extra packages for enterprise linux, fedora +2 moreTcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c5.5 Medium
- automadautomad Content Type FileCollectionController.php upload unrestricted upload4.7 Medium
- code-projects online examination systemOnline Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)8.8 High
- code-projects online examination systemOnline Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)8.8 High
- code-projects online examination systemOnline Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)8.8 High
- Show moreLoading…