CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- bentley assetwise alim for transportation, eb system management console +1 moreBentley eB System Management Console applications within Assetwise Integrity Information Server...8.6 High
- arraynetworks arrayos agMotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via...9.8 Critical
- mediawikiAn issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1...6.1 Medium
- totolink ex1200l firmwareTOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on the...9.8 Critical
- totolink ex1200l firmwareTOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the...9.8 Critical
- totolink ex1200l firmwareTOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the...9.8 Critical
- totolink ex1800t firmwareTOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution...9.8 Critical
- totolink ex1800t firmwareTOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command...9.8 Critical
- totolink ex1800t firmwareTOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command...9.8 Critical
- totolink ex1800t firmwareTOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitrary command...9.8 Critical
- totolink ex1800t firmwareTOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command...9.8 Critical
- totolink ex1800t firmwareTOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ...9.8 Critical
- totolink ex1800t firmwareTOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command...9.8 Critical
- totolink ex1800t firmwareTOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command...9.8 Critical
- totolink ex1800t firmwareTOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command...9.8 Critical
- totolink ex1800t firmwareTOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command...9.8 Critical
- totolink ex1800t firmwareTOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command...9.8 Critical
- totolink ex1800t firmwareTOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command...9.8 Critical
- totolink ex1800t firmwareTOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command...9.8 Critical
- totolink ex1800t firmwareTOTOLINX EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ...9.8 Critical
- totolink ex1800t firmwareTOTOLINK EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command...9.8 Critical
- totolink ex1800t firmwareTOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command...9.8 Critical
- totolink ex1800t firmwareTOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command...9.8 Critical
- totolink ex1800t firmwareTOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command...9.8 Critical
- totolink a3700r firmwareThere is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the...9.8 Critical
- free5gcfree5GC AMF denial of service vulnerability7.5 High
- glensawyer mp3gainA stack buffer overflow vulnerability in MP3Gain v1.6.2 allows an attacker to cause a denial of...7.5 High
- thirtybees thirty beesA stored cross-site scripting (XSS) vulnerability in the component admin...5.4 Medium
- buildkite elastic ci stackBuildkite Elastic CI for AWS time-of-check-time-of-use race condition vulnerability7.0 High
- buildkite elastic ci stackBuildkite Elastic CI for AWS symbolic link following vulnerability7.8 High
- sudo project sudoSudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege...7.0 High
- rambus tls toolkit, matrixssl +1 moreMatrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow...7.5 High
- filerunFileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users§ion=cpanel...9.8 Critical
- cactiCacti is vulnerable to cross-Site scripting (XSS) DOM5.4 Medium
- kashipara job portalJob Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- kashipara job portalJob Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- beam beta9 workerBeam Exposes sensitive information via joinCleanPath function6.0 Medium
- amazon aws software development kit, aws aws-sdk-php +1 morePotential URI resolution path traversal in the AWS SDK for PHP6.0 Medium
- nextcloud calendar, kiteworks security-advisories +1 moreCalendar app returns full stacktrace when an error happens while editing appointment3.5 Low
- clickhouse, clickhouse cloud +1 moreInteger underflow leading to stack overflow in FPC codec decompression5.9 Medium
- kashipara job portalJob Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- cactiLocal File Inclusion (RCE) in Cacti8.1 High
- kashipara job portalJob Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- hcl software bigfix platformHCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)7.7 High
- phpgurukul online notes sharing systemPHPGurukul Online Notes Sharing System manage-notes.php cross-site request forgery4.3 Medium
- hcl software bigfix platformHCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)7.7 High
- phpgurukul online notes sharing systemPHPGurukul Online Notes Sharing System profile.php cross site scripting3.5 Low
- netapp ontap mediatorCVE-2023-27319 Information Disclosure Vulnerability in ONTAP Mediator5.3 Medium
- phpgurukul student result management systemStudent Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- phpgurukul student result management systemStudent Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- Show moreLoading…