CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- tenda w9 firmwareTenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function...9.8 Critical
- tenda w9 firmwareTenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the...9.8 Critical
- tenda w9 firmwareTenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the...9.8 Critical
- tenda w9 firmwareTenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the...9.8 Critical
- tenda w9 firmwareTenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function...9.8 Critical
- tenda m3 firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function...9.8 Critical
- tenda m3 firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the...9.8 Critical
- tenda m3 firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function...9.8 Critical
- tenda m3 firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.9.8 Critical
- tenda m3 firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function...9.8 Critical
- tenda m3 firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function...9.8 Critical
- passworkPasswork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million...8.1 High
- flask-security-too project flask-security-tooOpen redirect vulnerability in Flask-Security-Too6.1 Medium
- aspnetzero asp.net zeroAn open redirect through HTML injection in user messages in Asp.Net Zero before 12.3.0 allows...6.1 Medium
- stormshield network securityAn issue was discovered in Stormshield Network Security (SNS) before 4.3.17, 4.4.x through 4.6.x...7.5 High
- opencrxOpenCRX Cross-site Scripting vulnerability5.4 Medium
- akilli commerce software technologies ltd. co. e-commerce website, e-commerce website project website +1 morecode-projects E-Commerce Website user_signup.php sql injection7.3 High
- akilli commerce software technologies ltd. co. e-commerce website, code-projects ecommerce website +1 morecode-projects E-Commerce Website sql injection6.3 Medium
- akilli commerce software technologies ltd. co. e-commerce website, code-projects ecommerce website +1 morecode-projects E-Commerce Website index_search.php sql injection4.7 Medium
- sqlite, sqlite sqlite3, fedoraproject fedora +3 more +5 moreSQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow5.5 Medium
- phpgurukul restaurant table booking systemPHPGurukul Restaurant Table Booking System bwdates-report-details.php sql injection5.3 Medium
- phpgurukul nipah virus testing management systemPHPGurukul Nipah Virus Testing Management System bwdates-report-result.php sql injection6.3 Medium
- ibm financial transaction manager for swift services, financial transaction manager +1 moreIBM Financial Transaction Manager for SWIFT Services data manipulation7.5 High
- ibm aspera consoleIBM Aspera Console cross-site scripting7.2 High
- ibm iIBM i code execution7.0 High
- icret easyimages, easyimages2.0 project easyimages2.0 +1 moreicret EasyImages hide.php path traversal3.1 Low
- code-projects water billing systemcode-projects Water Billing System addbill.php sql injection6.3 Medium
- carmelogarcia faculty management systemcode-projects Faculty Management System crud.php sql injection5.1 Medium
- totolink a7100ru, a7100ru firmware +1 moreTotolink A7100RU HTTP POST Request main buffer overflow9.8 Critical
ndpiOSS-FuzzHeap-buffer-overflow in processClientServerHelloNo scorelibrawspeedOSS-FuzzHeap-buffer-overflow in rawspeed::DngDecoder::parseWhiteBalanceNo scorendpiOSS-FuzzHeap-buffer-overflow in processClientServerHelloNo scoreapache-poiOSS-FuzzSecurity exception in org.apache.poi.ddf.EscherContainerRecord.fillFieldsNo score- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway nsasg6.0.tgz information disclosure5.3 Medium
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 6.6.8. rose_ioctl in net/rose/af_rose.c has a...7.0 High
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 6.6.8. atalk_ioctl in net/appletalk/ddp.c has...7.0 High
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a...7.0 High
- linux kernelbt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after...7.0 High
- jose4j project jose4jjose4j denial of service via specifically crafted JWE6.5 Medium
- json-jwt project json-jwtjson-jwt allows bypass of identity checks via a sign/encryption confusion attack8.4 High
- bacnetstack bacnet stack, bacnet protocol stack project protocol stack +1 moreBACnet Stack before 1.3.2 has a decode function APDU buffer over-read in...9.1 Critical
- oneidentity password managerOne Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to...8.8 High
- starnight micro http serverIn MicroHttpServer (aka Micro HTTP Server) through a8ab029, _ParseHeader in lib/server.c allows a...9.8 Critical
- 3cxThe CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a...9.8 Critical
- beyondtrust privilege management for windowsThe Challenge Response feature of BeyondTrust Privilege Management for Windows (PMfW) before 2023...6.7 Medium
- concretecms concrete cmsConcrete CMS Stored XSS2.4 Low
- wolterskluwer b.pointOn a Wolters Kluwer B.POINT 23.70.00 server running Linux on premises, during the authentication...7.2 High
- peplink balance two firmwareAn issue was discovered in Peplink Balance Two before 8.4.0. Command injection in the traceroute...7.2 High
- oneidentity password managerOne Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to...9.8 Critical
- concretecms concrete cmsConcrete CMS Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- Show moreLoading…