CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- rails rails-html-sanitizer, rubyonrails rails html sanitizers +1 morePossible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.02.3 Low
- rails rails-html-sanitizer, rubyonrails rails html sanitizers +1 morePossible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.02.3 Low
- rails rails-html-sanitizer, rubyonrails rails html sanitizers +1 morePossible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.02.3 Low
- rails rails-html-sanitizer, rubyonrails rails html sanitizers +1 morePossible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.02.3 Low
- google android, pixel +1 moreIn gattServerSendResponseNative of com_android_bluetooth_gatt.cpp, there is a possible out of...7.8 High
- rails rails-html-sanitizer, rubyonrails rails html sanitizers +1 morePossible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.02.3 Low
- google android, pixel +1 moreIn handle_notification_response of btif_rc.cc, there is a possible out of bounds write due to a...8.8 High
- google android, pixel +1 moreIn rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a...6.7 Medium
- palantir com.palantir.gotham:external-artifactsAccess control issue impacting RV backed objects6.5 Medium
hull.jsnpmhull.js Code Injection VulnerabilityNo score- google androidIn gatts_process_read_by_type_req of gatt_sr.c, there is a possible information disclosure due to...7.5 High
- google androidIn l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to improper input...8.8 High
ibexa/post-installPackagistibexa/post-install affected by Breach with Varnish VCLNo scoreibexa/http-cachePackagistibexa/http-cache affected by Breach with Varnish VCLNo scoreezsystems/ezplatform-http-cachePackagistezsystems/ezplatform-http-cache affected by Breach with Varnish VCLNo score- servicenow now platformHTML Injection in the Assessment plugin5.1 Medium
- asynchttpclient async-http-clientAsyncHttpClient (AHC) library's `CookieStore` replaces explicitly defined `Cookie`s9.2 Critical
- edm115 unzip-bot, emd115 unzip bot +1 moreunzip-bot Allows Remote Code Execution (RCE) via archive extraction, password prompt, or video upload8.8 High
- plexripperPlexRipper allows API leak due to open CORS policy8.7 High
- snap one ovrc cloud, snapone ovrc-300-pro +1 moreMissing Authentication for Critical Function in Snap One OVRC cloud8.8 High
- snap one ovrc cloud, snapone orvc +1 moreAuthentication Bypass by Spoofing in Snap One OVRC cloud8.7 High
- quic-goquic-go affected by an ICMP Packet Too Large Injection Attack on Linux6.5 Medium
- argoproj argo workflows, argo-workflows +1 moreArgo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode6.3 Medium
- kludex python-multipartpython-multipart has a Denial of service (DoS) via deformation `multipart/form-data` boundary7.5 High
- nanopbNanopb does not release memory on error return when using PB_DECODE_DELIMITED4.3 Medium
- sailpoint identityiqIdentityIQ Improper Access Control VulnerabilityIdentityIQ Improper Access Control Vulnerability10.0 Critical
- progress whatsup goldWhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability9.8 Critical
- progress whatsup goldWhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability9.8 Critical
- progress whatsup goldWhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation Vulnerability8.8 High
- progress whatsup goldWhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation Vulnerability8.8 High
- progress whatsup goldWhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability8.8 High
- progress whatsup goldWhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability8.8 High
- spring securitySpring Security Authorization Bypass for Case Sensitive Comparisons4.8 Medium
- edunext open edx lmsWordPress Open edX LMS plugin <= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- james hunt what would seth godin doWordPress What Would Seth Godin Do plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- photonicgnostic library bookshelvesWordPress Library Bookshelves plugin <= 5.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- goqsystem goqsmileWordPress GoQSmile plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- goqsystem goqmierucaWordPress GoQMieruca plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- youneeq recommendationsWordPress Youneeq Recommendations plugin <= 3.0.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wpoets awesome studioWordPress Awesome Studio plugin <= 2.4.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- chameleoni jobs, chameleoni.com chameleoni jobs +1 moreWordPress Chameleoni Jobs plugin <= 2.5.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- templines tm islamic helperWordPress TM Islamic Helper plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- atarapay woocommerce payment gatewayWordPress AtaraPay WooCommerce Payment Gateway plugin <= 2.0.13 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jacob schwartz wp e-commerce style emailWordPress WP e-Commerce Style Email plugin <= 0.6.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kinsta infinite sliderWordPress Infinite Slider plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- anmari amr shortcodesWordPress amr shortcodes plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- peter westwood post by emailWordPress Post By Email plugin <= 1.0.4b - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- explara eventsWordPress Explara Events plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- data443 lgpd frameworkWordPress LGPD Framework plugin <= 2.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- leadboxerWordPress LeadBoxer plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…