CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- emiloimagtolis online discussion forum, online discussion forum project discussion forum +1 moreItsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross Site Scripting (XSS)...5.4 Medium
- firepadFirepad allows insecure document access5.3 Medium
- davidepianca98 kmqttAn issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service (DoS) via a crafted request.7.5 High
- No product listedAn issue in INOVANCE AM401_CPU1608TPTN allows a remote attacker to execute arbitrary code via the...9.8 Critical
- No product listedAn issue in Aginode GigaSwitch V5 before version 7.06G allows authenticated attackers with...8.8 High
pyspiderPyPIpyspider Cross-Site Request Forgery (CSRF) via the Flask endpoints8.8 High- No product listedThe Mister org.mistergroup.shouldianswer application 1.4.264 for Android enables any installed...7.5 High
- No product listedThe GriceMobile com.grice.call application 4.5.2 for Android enables any installed application ...8.2 High
@solana/web3.jsnpmDuplicate Advisory: Malware in @solana/web3.jsNo score- kolide launcherKolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3)7.3 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) hpe aruba networking clearpass policy manager +1 moreAuthenticated Remote Command Injection in HPE Aruba Networking ClearPass Policy Manager Web-Based Management Interface4.7 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) hpe aruba networking clearpass policy manager +1 moreAuthenticated Stored Cross-Site Scripting (XSS) in HPE Aruba Networking ClearPass Policy Manager Web-based Management Interface4.8 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) hpe aruba networking clearpass policy manager +1 moreAuthenticated Deserialization Vulnerability in ClearPass Policy Manager Web-Based Management Interface Leading to a Remote Command Execution (RCE)6.4 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) hpe aruba networking clearpass policy manager +1 moreAuthenticated Remote Code Execution (RCE) via OGNL Injection in HPE Aruba Networking ClearPass Web-Based Management Interface7.2 High
- google chromeType Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to...8.8 High
- lorex 2k indoor wi-fi security camera, lorextechnology w461asc-e firmware +1 moreLorex 2K Indoor Wi-Fi Security Camera - Code signing bypass6.7 Medium
- lorex 2k indoor wi-fi security camera, lorextechnology w461asc-e firmware +1 moreLorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow7.2 High
- lorex 2k indoor wi-fi security camera, lorextechnology w461asc-e firmware +1 moreLorex 2K Indoor Wi-Fi Security Camera - Null pointer dereference5.3 Medium
- lorex 2k indoor wi-fi security camera, lorextechnology w461asc-e firmware +1 moreLorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap read6.5 Medium
- lorex 2k indoor wi-fi security camera, lorextechnology w461asc-e firmware +1 moreLorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow9.8 Critical
- ibm cognos controllerIBM Cognos Controller information disclosure5.9 Medium
- ibm cognos controllerIBM Cognos Controller file upload5.5 Medium
- ibm cognos controllerIBM Cognos Controller cross-site request forgery6.5 Medium
- ibm cognos controllerIBM Cognos Controller hard coded credentials7.5 High
- ibm cognos controllerIBM Cognos Controller file upload4.3 Medium
- element-hq synapseSynapse unauthenticated writes to the media repository allow planting of problematic content5.3 Medium
- element-hq synapseSynapse denial of service through media disk space consumption7.5 High
- element-hq synapseSynapse allows unsupported content types to lead to memory exhaustion8.2 High
- element-hq synapseSynapse allows a a malformed invite to break the invitee's `/sync`8.7 High
- element-hq synapseSynapse Matrix has a partial room state leak via Sliding Sync4.3 Medium
- element-hq synapseSynapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders8.2 High
- ibm cognos controllerIBM Cognos Controller authentication bypass4.3 Medium
- ibm cognos controllerIBM Cognos Controller information disclosure5.3 Medium
- ibm cognos controllerIBM Cognos Controller file upload8.0 High
- ibm cognos controllerIBM Cognos Controller file upload5.5 Medium
- ibm cognos controllerIBM Cognos Controller information disclosure5.9 Medium
- vitessio vitessVitess allows HTML injection in /debug/querylogz & /debug/env4.9 Medium
- mobsf mobile security framework, mobile-security-framework-mobsf +1 moreMobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality8.1 High
- mobsf mobile security framework, mobile-security-framework-mobsf +1 moreMobile Security Framework (MobSF) bypass of SSRF fix7.5 High
- advancedfilemanager advanced file manager, saadiqbal advanced file manager – ultimate file manager for wordpress and document library solution +1 moreAdvanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload7.5 High
- goodlayers coreGoodlayers Core <= 2.0.7 - Reflected Cross-Site Scripting via 'font-family'6.1 Medium
- openatom openharmonyLiteos_a has an out-of-bounds read vulnerability5.5 Medium
- dell networkerDell NetWorker, version(s) 19.10, contain(s) an Authorization Bypass Through User-Controlled Key...8.3 High
- openatom openharmonyAbility Runtime has an out-of-bounds read permission bypass vulnerability5.5 Medium
- openatom openharmonyLiteos_a has an use after free vulnerability8.8 High
- fatcatapps campaign monitor forms by optin catCampaign Monitor Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting6.1 Medium
- dell networker management consoleDell NetWorker Management Console, version(s) 19.11, contain(s) an Improper Verification of...7.8 High
- nicheaddons charity addon for elementorCharity Addon for Elementor <= 1.3.3 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- brandtoss wp mailsterWP Mailster <= 1.8.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- fatcatapps aweber forms by optin catAWeber Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting5.2 Medium
- Show moreLoading…