CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- debian linux, linux kernel +1 moremedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format7.8 High
- linux, linux kernel +1 morehv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer7.8 High
- google android, linuxfoundation yocto, mediatek mt2737 +12 more +14 moreIn Bluetooth firmware, there is a possible firmware asssert due to improper handling of...6.5 Medium
- google android, mediatek mt3605, mt6985 +9 more +11 moreIn wlan driver, there is a possible out of bound read due to improper input validation. This...7.5 High
- google android, mediatek mt6765, mt6768 +17 more +19 moreIn cmdq, there is a possible out of bounds read due to a missing bounds check. This could lead to...4.4 Medium
- mediatek mt6890, mt7622, mt7915 +4 more +6 moreIn wlan driver, there is a possible client disconnection due to improper handling of exceptional...7.5 High
- google android, mediatek mt2737, mt6781 +30 more +32 moreIn da, there is a possible out of bounds read due to a missing bounds check. This could lead to...6.2 Medium
- google android, mediatek mt6768, mt6781 +11 more +13 moreIn soundtrigger, there is a possible out of bounds write due to a missing bounds check. This...6.7 Medium
- google android, mediatek mt6835, mt6878 +12 more +14 moreIn ril, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- mediatek mt6879, mt6886, mt6895 +10 more +12 moreIn Modem, there is a possible escalation of privilege due to an incorrect bounds check. This...6.7 Medium
- mediatek mt2737, mt6298, mt6879 +16 more +18 moreIn Modem, there is a possible out of bonds write due to a mission bounds check. This could lead...6.7 Medium
- mediatek mt2737, mt2739, mt6789 +31 more +33 moreIn Modem, there is a possible escalation of privilege due to an incorrect bounds check. This...6.7 Medium
- google android, mediatek mt6739, mt6761 +28 more +30 moreIn power, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google android, mediatek mt6580, mt6739 +45 more +47 moreIn Telephony, there is a possible out of bounds read due to a missing bounds check. This could...7.5 High
- google android, mediatek mt6580, mt6739 +45 more +47 moreIn Telephony, there is a possible out of bounds read due to a missing bounds check. This could...7.5 High
- google android, mediatek mt6580, mt6739 +45 more +47 moreIn Telephony, there is a possible out of bounds read due to a missing bounds check. This could...7.5 High
- hewlett packard enterprise hpe icewallHPE IceWall Products, Remote Unauthorized Data Modification3.7 Low
needrestartDebianneedrestart - regression updateNo scoreneedrestartDebianneedrestart - regression updateNo score- victure rx1800 firmwareAn issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware...8.8 High
- victure rx1800 firmwareAn issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware...8.8 High
- victure rx1800 firmwareAn issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware...8.8 High
- victure rx1800 firmwareAn issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware...8.8 High
- victure rx1800 firmwareAn issue was discovered on Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware...8.8 High
- automattic mongooseMongoose search injection vulnerability9.1 Critical
- No product listedA Cross Site Scripting vulnerability in LibrePhotos before commit 32237 allows attackers to...4.8 Medium
- handcent nextcmsIncorrect access control in the component content://com.handcent.messaging.provider...7.5 High
- sangoma asterisk, debian linux +1 moreAn issue in the action_listcategories() function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0...5.5 Medium
- coalescent systems freepbxAn authenticated arbitrary file upload vulnerability in the component /module_admin/upload.php of...2.2 Low
- ever traduoraEver Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard...8.8 High
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to Command Execution via unauthorized execution of deserialization...9.8 Critical
- sysax multi serverSysax Multi Server 6.99 is vulnerable to Cross Site Scripting (XSS) via the /scgi?sid parameter.6.1 Medium
- tp-link archer axe75 firmwareAuthenticated remote code execution (RCE) vulnerabilities affect TP-Link Archer, Deco, and Tapo...8.0 High
- phpgurukul vehicle parking management systemA SQL injection vulnerability was found in PHPGURUKUL Vehicle Parking Management System v1.13 in ...5.4 Medium
- simplesamlphp saml2SimpleSAMLphp SAML2 has an XXE in parsing SAML messages8.3 High
- warehouse management system zeqp management system zeqpIncorrect access control in wms-Warehouse management system-zeqp v2.20.9.1 due to the token value...9.1 Critical
- zzcmsZZCMS 2023 was discovered to contain a SQL injection vulnerability in /q/show.php.9.8 Critical
- simplesamlphp xml-commonSimpleSAMLphp xml-common XXE vulnerability8.8 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +17 more +19 moreAn issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820,...8.1 High
- rizinrizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via...7.5 High
- radare radare2Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary...7.8 High
- code-projects farmaciacode-projects Farmacia visualizar-produto.php sql injection5.3 Medium
- prism i.t. systems multilevel referral affiliate plugin for woocommerceWordPress Multilevel Referral Affiliate plugin for WooCommerce plugin <= 2.27 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- aezaz shaikh countdown timer for elementorWordPress Countdown Timer for Elementor plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- skybootstrap elementor image gallery pluginWordPress Elementor Image Gallery plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- 코스모스팜 – cosmosfarm 소셜 공유 버튼 by 코스모스팜WordPress Social Sharing Buttons By Cosmos Farm plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- flickdevs elementor button plusWordPress Elementor Button Plus plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nutttaro video player for wpbakeryWordPress Video Player for WPBakery plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- terry l. wp mermaidWordPress WP Mermaid plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- plugin devs post carousel slider for elementorWordPress Post Carousel Slider for Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…