CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- hihonor vmall, honor com.hihonor.vmall +1 moreSome Honor products are affected by information leak vulnerability, successful exploitation...3.3 Low
- honor magic os, magicos +1 moreSome Honor products are affected by signature management vulnerability, successful exploitation...7.3 High
- honor magic os, magicos +1 moreSome Honor products are affected by signature management vulnerability, successful exploitation...4.0 Medium
- hihonor honorboardappSome Honor products are affected by information leak vulnerability, successful exploitation...4.0 Medium
- gopeak masterlabgopeak MasterLab HTTP POST Request Feature.php sqlInjectDelete sql injection6.3 Medium
- hihonor nth-an00 firmware, honor nth-an00 +1 moreSome Honor products are affected by signature management vulnerability, successful exploitation...4.0 Medium
- hihonor nth-an00 firmware, honor nth-an00 +1 moreSome Honor products are affected by signature management vulnerability, successful exploitation...7.3 High
- gopeak masterlabgopeak MasterLab HTTP POST Request Framework.php sqlInject sql injection6.3 Medium
- hihonor nth-an00 firmware, honor nth-an00 +1 moreSome Honor products are affected by signature management vulnerability, successful exploitation...7.3 High
- gopeak masterlabgopeak MasterLab HTTP POST Request Feature.php sqlInject sql injection6.3 Medium
- code-projects client details systemcode-projects Client Details System regester.php cross site scripting2.4 Low
htslibOSS-FuzzHeap-buffer-overflow in process_one_readNo score- code-projects client details systemcode-projects Client Details System clientview.php sql injection4.3 Medium
- wintercms winterWinter CMS Local File Inclusion through Server Side Template Injection3.3 Low
- kantega-sso kantega saml sso oidc kerberos single sign-onThe Kantega SAML SSO OIDC Kerberos Single Sign-on apps before 6.20.0 for Atlassian products allow...6.1 Medium
- xnview classicXnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6.9.8 Critical
- xnview classicXnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0.9.8 Critical
- jlineJLine vulnerable to out of memory error5.5 Medium
- jeasy easy ruleseasy-rules-mvel vulnerable to remote code execution7.8 High
- seancfoley ipaddressIPAddress Infinite Loop vulnerability (Disputed)5.5 Medium
- openxiangshan xiangshanAn issue was discovered in XiangShan v2.1, allows local attackers to obtain sensitive information...5.5 Medium
- customer support system project support systemSourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in ...8.8 High
- oretnom23 customer support systemSourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in ...8.8 High
- wiremockWireMock with GUI versions 3.2.0.0 through 3.0.4.0 are vulnerable to stored cross-site scripting ...6.1 Medium
- small crm project crmPHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of ...9.8 Critical
- sesami cash point \& transport optimizerCross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8...6.1 Medium
- sesami cash point \& transport optimizerStored Cross Site Scripting (XSS) Vulnerability in Sesami Cash Point & Transport Optimizer (CPTO)...6.1 Medium
- sesami cash point \& transport optimizerAn issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718),...7.5 High
- sesami cash point \& transport optimizerCross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO)...6.1 Medium
- sesami cash point \& transport optimizerCross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO)...4.8 Medium
- sesami cash point \& transport optimizerCSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (...5.3 Medium
- sesami cash point \& transport optimizerCSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (...7.5 High
- sesami cash point \& transport optimizerCSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (...7.5 High
- sesami cash point \& transport optimizerAn issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows...4.3 Medium
- sesami cash point \& transport optimizerAn issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows...5.5 Medium
- documizeSQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute...9.8 Critical
- code-projects client details systemcode-projects Client Details System update-clients.php sql injection4.3 Medium
- code-projects client details systemcode-projects Client Details System manage-users.php sql injection4.3 Medium
- code-projects client details systemcode-projects Client Details System HTTP POST Request regester.php sql injection4.3 Medium
- wintercms winterWinter CMS Stored XSS through Backend ColorPicker FormWidget2.0 Low
- wintercms winterStored XSS through privileged upload of Media Manager file followed by renaming2.0 Low
- code-projects client details systemcode-projects Client Details System HTTP POST Request admin sql injection6.3 Medium
- boxystudio booked, booked - appointment booking for wordpress | calendars +1 moreWordPress Booked Plugin < 2.4.4 is vulnerable to Sensitive Data Exposure5.3 Medium
- code-projects client details systemcode-projects Client Details System HTTP POST Request sql injection6.3 Medium
- code-projects record management systemcode-projects Record Management System Document Type doctype.php cross site scripting2.4 Low
- code-projects record management systemcode-projects Record Management System Offices offices.php cross site scripting2.4 Low
- basix nex-forms – ultimate form builder – contact forms and much more, basixonline nex-forms +1 moreWordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.5 is vulnerable to SQL Injection7.6 High
- js help desk – best help desk & support plugin, wiselyhub js help desk +1 moreWordPress JS Help Desk – Best Help Desk & Support Plugin <= 2.8.1 is vulnerable to SQL Injection9.3 Critical
- sourcecodester medicine tracking system, oretnom23 medicine tracker system +1 moreSourceCodester Medicine Tracking System path traversal6.3 Medium
- oplugins booking managerWordPress Booking Manager Plugin <= 2.1.5 is vulnerable to SQL Injection8.5 High
- Show moreLoading…