CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- rtcamp rtmedia, rtmedia for wordpress, buddypress and bbpress +1 morertMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE7.2 High
- unknown wp mail logWP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint6.5 Medium
- unknown wp mail logWP Mail Log < 1.1.3 – Incorrect Authorization in REST API Endpoints7.6 High
- activity-log.com wp sessions time monitoring full automaticWP Sessions Time Monitoring Full Automatic < 1.0.9 - Unauthenticated SQL injection7.5 High
- unknown wp mail logWP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs endpoint8.8 High
- bernhard kux json content importerJSON Content Importer < 1.5.4 - Reflected XSS6.1 Medium
- unknown wp mail logWP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpoint8.8 High
- unknown wp mail logWP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE8.8 High
- ays pro quiz makerQuiz Maker < 6.4.9.5 - Reflected Cross-Site Scripting6.1 Medium
- rtcamp rtmedia, rtmedia for wordpress, buddypress and bbpress +1 morertMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE8.8 High
- bestwebsoft pluscaptchaPlusCaptcha Plugin cross site scripting3.5 Low
- bestwebsoft portfolio, portfolio plugin +1 moreBestWebSoft Portfolio Plugin bws_menu.php bws_add_menu_render cross site scripting3.5 Low
- apache ofbizApache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability9.8 Critical
- apache ofbizApache OFBiz: Arbitrary file properties reading and SSRF attack7.5 High
- bestwebsoft portfolio, portfolio plugin +1 moreBestWebSoft Portfolio Plugin cross-site request forgery4.3 Medium
- opendesign drawings sdk, open design alliance oda drawings sdk - all versions < 2024.12 +1 moreOut-of-bounds Write vulnerability exists in ODA Drawings SDK before 2024.127.8 High
- buffalo vr-s1000 firmware, buffalo inc. vr-s1000 +1 moreVR-S1000 firmware Ver. 2.37 and earlier allows a network-adjacent unauthenticated attacker who...6.5 Medium
- buffalo vr-s1000 firmware, buffalo inc. vr-s1000 +1 moreVR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an...4.6 Medium
- buffalo vr-s1000 firmware, buffalo inc. vr-s1000 +1 moreImproper neutralization of argument delimiters in a command ('Argument Injection') vulnerability...7.8 High
- buffalo vr-s1000 firmware, buffalo inc. vr-s1000 +1 moreVR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web...6.8 Medium
- growi, inc. growiStored cross-site scripting vulnerability exists in the presentation feature of GROWI versions...5.4 Medium
- growi, inc. growiImproper authorization vulnerability exists in the User Management (/admin/users) page of GROWI...6.5 Medium
- growi, inc. growiThe App Settings (/admin/app) page in GROWI versions prior to v6.0.6 stores sensitive information...6.5 Medium
- growi, inc. growiStored cross-site scripting vulnerability exists in the App Settings (/admin/app) page, the...5.4 Medium
- growi, inc. growiStored cross-site scripting vulnerability when processing the MathJax exists in GROWI versions...5.4 Medium
- growi, inc. growiStored cross-site scripting vulnerability exists in the anchor tag of GROWI versions prior to v6...5.4 Medium
- growi, inc. growiStored cross-site scripting vulnerability exists in the event handlers of the pre tags in GROWI...5.4 Medium
- growi, inc. growiStored cross-site scripting vulnerability via the img tags exists in GROWI versions prior to v6.0...5.4 Medium
- growi, inc. growiStored cross-site scripting vulnerability which is exploiting a behavior of the XSS Filter exists...5.4 Medium
- growi, inc. growiCross-site request forgery (CSRF) vulnerability exists in the User settings (/me) page of GROWI...4.3 Medium
- growi, inc. growiStored cross-site scripting vulnerability when processing profile images exists in GROWI versions...5.4 Medium
- growi, inc. growiStored cross-site scripting vulnerability exists in the App Settings (/admin/app) page and the...5.4 Medium
- growi, inc. growiStored cross-site scripting vulnerability exists in the User Management (/admin/users) page of...5.4 Medium
- alfasado powercms, alfasado inc. powercms (powercms 4 series), powercms (powercms 5 series) +1 more +3 moreOpen redirect vulnerability in PowerCMS (6 Series, 5 Series, and 4 Series) allows a remote...6.1 Medium
- alfasado powercms, alfasado inc. powercms (powercms 4 series), powercms (powercms 5 series) +1 more +3 morePowerCMS (6 Series, 5 Series, and 4 Series) contains a stored cross-site scripting vulnerability....5.4 Medium
- brother industries, ltd. iprint&scan desktop for windows, brother iprint\&scan +1 moreImproper link resolution before file access ('Link Following') issue exists in iPrint&Scan...5.5 Medium
distributionopenSUSESecurity update for distributionNo score- code-projects library management systemcode-projects Library Management System index.php sql injection6.3 Medium
- code-projects library management systemcode-projects Library Management System login.php sql injection7.3 High
- code-projects library management systemcode-projects Library Management System login.php sql injection7.3 High
quickjsOSS-FuzzHeap-buffer-overflow in js_free_function_defNo score- akilli commerce software technologies ltd. co. e-commerce websitecode-projects E-Commerce Website user_signup.php cross site scripting4.3 Medium
- steve-community ocpp-jaxbSteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in...7.5 High
- startutorial php backend for resumable.jsresumable.php (aka PHP backend for resumable.js) 0.1.4 before 3c6dbf5 allows arbitrary file...8.1 High
- artifex mupdfA floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in...7.5 High
- artifex mupdfA floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in...7.5 High
- artifex mupdfA floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in...7.5 High
- artifex mupdfA floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in...7.5 High
- artifex mupdfA floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in...7.5 High
- tenda w9 firmwareTenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function...9.8 Critical
- Show moreLoading…