CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- wegiaMultiple stored cross-site scripting (XSS) vulnerabilities in the component /configuracao...6.1 Medium
- librenmsLibreNMS stored cross-site scripting (XSS) vulnerability in the Device Settings section5.4 Medium
- No product listedwhapa v1.59 is vulnerable to Command Injection via a crafted filename to the HTML reports component.9.8 Critical
- No product listedDTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console...9.8 Critical
- open robotics nav2 humble, ros2 +1 moreOpen Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to...9.1 Critical
- open robotics nav2 humble, ros2 +1 moreOpen Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain...7.5 High
- open robotics nav2 humble, robotics operating system +1 moreOpen Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to...9.8 Critical
- open robotic ros2 navigation2, navigation2 humble, ros2 humble +2 moreBuffer Overflow vulnerability in Open Robotic Robotic Operating System 2 ROS2 navigation2- ROS2...7.3 High
- open robotics nav2 humble, ros2 +1 moreOpen Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to...9.8 Critical
- open robotics ros2 navigation2, nav2 humble, ros2 humble +2 moreBuffer Overflow vulnerability in Open Robotic Operating System 2 ROS2 navigation2- ROS2-humble&&...7.3 High
- open robotics nav2 humble, ros2 humble, ros2 navigation2 +2 moreInsecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2...7.8 High
- open robotics nav2 humble, ros2 humble, ros2 navigation2 +2 moreBuffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2-...7.8 High
- open robotics nav2 humble, ros2 humble, ros2 navigation2 +1 more +3 moreBuffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2-...7.8 High
- openrobotics robot operating systemInsecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2...7.8 High
- No product listedOxide control plane software before 5 allows SSRF.9.1 Critical
- No product listedSTMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware...9.8 Critical
- google android, pixel +1 moreIn sw49408_irq_runtime_engine_debug of touch_sw49408.c, there is a possible out of bounds...6.7 Medium
- google android, pixel +1 moreIn store_cmd of ftm4_pdc.c, there is a possible out of bounds write due to an incorrect...6.7 Medium
- google android, pixel +1 moreIn __unregister_prot_hook and packet_release of af_packet.c, there is a possible use-after...6.7 Medium
- google android, pixel +1 moreIn sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to an unusual root...10.0 Critical
- google androidIn m3326_gps_write and m3326_gps_read of gps.s, there is a possible Out Of Bounds Read due to...4.4 Medium
- google androidIn emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds...5.5 Medium
- google android, pixel +1 moreIn oemCallback of ril.cpp, there is a possible out of bounds write due to an integer overflow...6.7 Medium
- code-projects hotel management systemcode-projects Hotel Management System Available Room hotelnew.c stack-based overflow4.8 Medium
- code-projects hotel management systemcode-projects Hotel Management System Administrator Login Password stack-based overflow4.8 Medium
- google android, pixel +1 moreIn the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_- interface.c, there is a...6.7 Medium
- google android, pixel +1 moreIn multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check....7.8 High
- roninwp fat services bookingWordPress FAT Services Booking plugin <= 5.6 - Unauthenticated SQL Injection vulnerability9.3 Critical
- google android, pixel +1 moreIn gt1x_debug_write_proc and gt1x_tool_write of drivers/input/touchscreen/mediatek/GT1151...6.7 Medium
- google android, pixel +1 moreIn /proc/driver/wmt_dbg driver, there are several possible out of bounds writes. These could...6.7 Medium
- google android, pixel +1 moreIn fm_set_stat of mediatek FM radio driver, there is a possible OOB write due to improper...6.7 Medium
- google android, pixel +1 moreIn WMT_unlocked_ioctl of MTK WMT device driver, there is a possible OOB write due to a...6.7 Medium
- dedecmsDedeCMS HTTP POST Request carbuyaction.php RemoveXSS cross site scripting5.3 Medium
- dedecmsDedeCMS soft_add.php cross site scripting5.3 Medium
- zoo-project, zoo project zoo +1 moreArbitrary file download in Zoo-Project Echo Example8.7 High
- dedecmsDedeCMS SWF File uploads_add.php cross site scripting5.3 Medium
- dedecmsDedeCMS article_add.php cross site scripting5.3 Medium
- google android, pixel +1 moreIn rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a...6.7 Medium
- spring ldapSpring LDAP sensitive data exposure for case-sensitive comparisons3.7 Low
- netgear r6900, r6900 firmware +1 moreNetgear R6900 HTTP Header upgrade_check.cgi buffer overflow7.1 High
- google android, pixel +1 moreIn mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config of drivers/misc...6.7 Medium
- google android, pixel +1 moreIn mtk_p2p_wext_set_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c, there...6.7 Medium
- devolutions serverIncorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and...4.3 Medium
- devolutions remote desktop managerIncorrect permission assignment in temporary access requests component in Devolutions Remote...8.1 High
- devolutions serverIncorrect permission assignment in the user migration feature in Devolutions Server 2024.3.8.0...5.0 Medium
- google android, pixel +1 moreIn procfile_write of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c, there is a...6.7 Medium
- devolutions serverIncorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier...6.5 Medium
- google android, pixel +1 moreIn get_binary of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c,...6.7 Medium
- drupal entity form stepsEntity Form Steps - Moderately critical - Cross site scripting - SA-CONTRIB-2024-0714.8 Medium
- cisco nx-os software, nx-os system software in aci mode, unified computing system (managed) +2 moreCisco NX-OS Software Image Verification Bypass Vulnerability5.2 Medium
- Show moreLoading…