CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- openrobotics robot operating systemOpen Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to...9.8 Critical
- openrobotics robot operating systemOpen Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to...9.8 Critical
- openrobotics robot operating systemOpen Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to...9.8 Critical
- openrobotics robot operating systemOpen Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain...9.8 Critical
- openrobotics robot operating systemOpen Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to...9.8 Critical
- canonical lxdlxd has a restricted TLS certificate privilege escalation when in PKI mode3.8 Low
- canonical lxdlxd CA certificate sign check bypass3.8 Low
- path-to-regexppath-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x7.7 High
- google androidIn update_gps_sv and output_vzw_debug of vendor/mediatek/proprietary/hardware/connectivity...6.7 Medium
- google androidIn procfile_write of gl_proc.c, there is a possible out of bounds read of a function pointer...6.7 Medium
- google androidIn store_upgrade and store_cmd of drivers/input/touchscreen/stm/ftm4_pdc.c, there are out of...9.8 Critical
- google androidIn reboot_block_command of htc reboot_block driver, there is a possible stack buffer overflow...6.7 Medium
- sigstore sigstore-javasigstore-java has a vulnerability with bundle verification2.1 Low
- google androidIn tscpu_write_GPIO_out and mtkts_Abts_write of mtk_ts_Abts.c, there is a possible buffer...6.7 Medium
- openbsdOpenBSD readdir directory traversal4.1 Medium
- openbsdOpenBSD httpd(8) null dereference8.7 High
expatTuxCare,expat-develTuxCare,expat-staticTuxCare +2 moreUpdate of expatNo score- rockwell automation arena®, rockwellautomation arena +1 moreRockwell Automation Arena® Out of Bounds Read Vulnerability8.5 High
- rockwell automation arena®, rockwellautomation arena +1 moreRockwell Automation Arena® Uninitialized Vulnerability8.5 High
- rockwell automation arena®, rockwellautomation arena +1 moreRockwell Automation Arena® Out of Bounds Write Vulnerability8.5 High
- rockwell automation arena®, rockwellautomation arena +1 moreRockwell Automation Arena® Use After Free Vulnerability8.5 High
- shenzhen dashi tongzhou information technology agilebpmShenzhen Dashi Tongzhou Information Technology AgileBPM AuthorizationTokenCheckFilter.java doFilter access control5.3 Medium
- erlang otpssl fails to validate incorrect extened key usage5.5 Medium
- 1000 projects beauty parlour management system1000 Projects Beauty Parlour Management System edit-customer-detailed.php sql injection6.9 Medium
- directusDirectus has an HTML Injection in Comment5.7 Medium
needrestartUbuntuneedrestart regressionNo score- 1000projects online notice board, kashipara online notice board system +1 morecode-projects Online Notice Board Profile Picture registration.php unrestricted upload6.9 Medium
- code-projects simple crud functionalitycode-projects Simple CRUD Functionality index.php cross site scripting5.3 Medium
- codezips project management systemCodeZips Project Management System index.php sql injection6.9 Medium
- pega infinity, pegasystems pega infinity +1 morePega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search.5.9 Medium
- rpgprPGP Potential Resource Exhaustion when handling Untrusted Messages7.5 High
- mattermost, mattermost server +1 moreImproper propagation of permission scheme updates across cluster nodes4.6 Medium
- kanboardKanboard allows a persistent HTML injection site scripting in settings page date format5.5 Medium
- nasa-jpl ion-dtnImproper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv79.2 Critical
- nasa-jpl ion-dtn, nasajpl iondtn +1 moreSegmentation Fault in `forwardBundle` Function of ION-DTN BPv7 When Destination EID is `dtn:none` (public)9.2 Critical
- phpgurukul complaint management systemPHPGurukul Complaint Management System subcategory.php sql injection6.9 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management System complaint-search.php sql injection6.9 Medium
- sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 moreA vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions...8.1 High
- documenso, documenso saas (hosted) +1 morePDF Document Spoofing in Documenso8.2 High
- sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 moreUse of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the...5.3 Medium
- sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreA vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions...6.3 Medium
- sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 moreA vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers...8.1 High
- sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 moreHeap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy....7.5 High
- phpgurukul complaint management systemPHPGurukul Complaint Management System user-search.php sql injection6.9 Medium
- msi dragon centerMSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereference6.8 Medium
- abb matrix series, nexus series, aspect-enterprise +2 moreForce Change of Default Credentials9.3 Critical
- abb matrix series, nexus series, aspect-ent-12 firmware +19 more +21 moreoff-by-one-error8.8 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreDefault Credentials9.3 Critical
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreData Validation / Sanitization9.3 Critical
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreAbsolute Path Traversal9.3 Critical
- Show moreLoading…