CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreDangerous File Upload8.7 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreCredentails Disclosure8.7 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreUsername Enumeration9.3 Critical
- abb matrix series, nexus series, aspect-ent-12 firmware +19 more +21 moreService Control8.8 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreInformation Disclosure8.8 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreConfiguration Download8.8 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreLocal File Inclusion8.8 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreMD5 bypass operation8.8 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreCross Side Request Forgery, CSRF7.1 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreWeak Password Rules/Strength9.3 Critical
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreDenial of Service, DoS7.2 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreDenial of Service, DoS7.6 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreUnauthorized Access9.3 Critical
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreRemote Code Execution, RCE9.3 Critical
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 morePHP Session Fixation9.3 Critical
- mogify infotech tinxy, tinxy mobile app, tinxy android app +1 more +3 moreInformation Disclosure Vulnerability in Tinxy5.4 Medium
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreFilesize Check8.7 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreSSRF Server Side Request Forgery8.7 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreCross Site Scripting XSS9.3 Critical
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreunauthorized file access8.7 High
- tp-link archer c50 wireless routerExposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C504.3 Medium
- tp-link archer c50 wireless router, archer c50 firmware +1 moreInsufficient Integrity Verification Vulnerability in TP-Link Archer C508.5 High
kvm-ioctlscrates.ioUndefined behaviour in `kvm_ioctls::ioctls::vm::VmFd::create_device`No score- rpgprPGP Panics on Malformed Untrusted Input7.5 High
- dropbox(hellosign) dropbox signPDF Document Spoofing in DropBox Sign(HelloSign)8.2 High
- apache hiveApache Hive: Deserialization of untrusted data when fetching partitions from the Metastore8.3 High
- i-o data device, inc. ud-lt1, ud-lt1/ex, iodata ud-lt1 firmware +1 more +3 moreInclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and...7.5 High
- i-o data device, inc. ud-lt1, ud-lt1/ex, iodata ud-lt1 firmware +1 more +3 moreUD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier allow a remote...7.2 High
- i-o data device, inc. ud-lt1, ud-lt1/ex +1 moreIncorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.8...6.5 Medium
- bastho accounting for woocommerceAccounting for WooCommerce <= 1.6.6 - Reflected Cross-Site Scripting6.1 Medium
- wpvibes dynific addons for elementor (formerly anywhere elementor)AnyWhere Elementor <= 1.2.11 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- alexvtn wip woocarousel liteWIP WooCarousel Lite <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- desertthemes newsmunchNewsMunch <= 1.0.35 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- eyale-vc contact form builder by vcitaContact Form Builder <= 4.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via livesite-pay Shortcode6.4 Medium
- creativethemes blocksyBlocksy <= 2.0.77 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- agencenous simple redirectionSimple Redirection <= 1.5 - Cross-Site Request Forgery to Arbitrary Site Redirect4.3 Medium
- pickplugins post grid combo, related posts by pickplugins +1 moreRelated Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.58 - Sensitive Information Exposure5.3 Medium
- premio testimonials, stars testimonials — responsive reviews & star ratings +1 moreFree Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials <= 3.3.3 - Authenticated (Contributor+) Local File Inclusion8.8 High
- hcltechsw hcl devops deploy, hcl launch, hcl software devops deploy / launch +2 moreHCL DevOps Deploy / HCL Launch is vulnerable to HTML injection3.1 Low
- gutentor, gutentor – gutenberg blocks – page builder for gutenberg editor +1 moreGutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget6.4 Medium
- sodah luna radio playerLUNA RADIO PLAYER <= 6.24.11.07 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- skylark holdings co., ltd. 'skylark' app for android, 'skylark' app for ios +1 moreImproper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13...3.6 Low
- 1000 projects library management system1000 Projects Library Management System stu.php sql injection6.9 Medium
- 1000 projects library management system1000 Projects Library Management System showbook.php sql injection6.9 Medium
- cyberpanelCyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for...4.3 Medium
binutilsAlpaquita,rootio-binutilsRoot +1 moreGNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD (Binary File Descriptor) library's...8.4 High- No product listedJSFinder commit d70ab9bc5221e016c08cffaf0d9ac79646c90645 is vulnerable to Directory Traversal in...7.5 High
- No product listedFavorites-web 1.3.0 favorites-web has a directory traversal vulnerability in SecurityFilter.java.7.5 High
- wegiaWeGIA v3.2.0 was discovered to contain a Cross-Site Request Forgery (CSRF).8.8 High
- wegiaMultiple stored cross-site scripting (XSS) vulnerabilities in the component /configuracao...6.1 Medium
- Show moreLoading…