CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- ruijie reyee osRuijie Reyee OS Premature Release of Resource During Expected Lifetime7.1 High
- ruijie reyee osRuijie Reyee OS Exposure of Private Personal Information to an Unauthorized Actor7.1 High
- ruijie reyee osRuijie Reyee OS Weak Password Recovery Mechanism for Forgotten Password9.3 Critical
- open automation software automation software, openautomationsoftware open automation software, oas platform +2 moreOpen Automation Software Incorrect Execution-Assigned Permissions8.5 High
- planet technology wgs-804hpt, planet technology corp wgs-804hpt firmware +1 morePlanet Technology Planet WGS-804HPT Integer Underflow6.9 Medium
- planet technology wgs-804hpt, planet technology corp wgs-804hpt firmware +1 morePlanet Technology Planet WGS-804HPT Command Injection9.3 Critical
- planet technology wgs-804hpt, planet technology corp wgs-804hpt firmware +1 morePlanet Technology Planet WGS-804HPT Stack-based Buffer Overflow9.3 Critical
- No product listedSecurity update for webkit2gtk3No score
- qnap license centerLicense Center7.7 High
- qnap qts, quts hero +1 moreQTS, QuTS hero2.1 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero2.1 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero8.7 High
- qnap qts, quts hero +1 moreQTS, QuTS hero8.7 High
- qnap qts, quts hero +1 moreQTS, QuTS hero5.3 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero2.3 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero7.3 High
- qnap qts, quts hero +1 moreQTS, QuTS hero5.3 Medium
- qnap qsync centralQsync Central6.8 Medium
- qnap qurouterQuRouter9.5 Critical
- qnap smb serviceSMB Service10.0 Critical
- qnap hbs 3, hybrid backup sync, qnap systems inc. hbs 3 hybrid backup sync +2 moreHBS 3 Hybrid Backup Sync9.5 Critical
- qnap qts, quts hero +1 moreQTS, QuTS hero8.7 High
- openwrt asuopenwrt/asu allows build artifact poisoning via truncated SHA-256 hash and command injection9.3 Critical
- open-quantum-safe liboqsliboqs has a correctness error in HQC decapsulation7.4 High
- hcl software nomad server on domino, hcltech hcl nomad +1 moreHCL Nomad server on Domino is affected by a host header injection vulnerability5.3 Medium
MozillaFirefoxSUSESecurity update for MozillaFirefoxNo score- python software foundation cpythonUnbounded memory buffering in SelectorSocketTransport.writelines()8.7 High
- macwarrior clipbucket-v5, oxygenz clipbucket, clipbucket clickbucket +2 moreUntrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 1999.8 Critical
- macwarrior clipbucket-v5, oxygenz clipbucket, clipbucket clickbucket +2 moreUntrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Below9.8 Critical
- phpmyfaqphpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available8.6 High
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability6.2 Medium
- averta depicter — popup & slider builderSlider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.2.1- Authenticated (Author+) Stored Cross-Site Scripting6.4 Medium
- swte swift performance lite, swteplugins swift performance +1 moreSwift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'8.1 High
- hi e-learning learning management system (lms)Reflected XSS in Hi e-learning's Learning Management System (LMS)5.4 Medium
- snyk code agentSnyk has identified a remote code execution (RCE) vulnerability in all versions of Code Agent....8.1 High
- wpcasa project wpcasaWordPress WPCasa plugin <= 1.2.13 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- siemens syngo.plaza vb30e, syngo plaza vb30e +1 moreA vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF05). The...9.3 Critical
- andy moyle church adminWordPress Church Admin plugin <= 5.0.8 - Broken Access Control vulnerability5.3 Medium
- brandtoss wp mailsterWordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability6.5 Medium
- bakkbone australia floristpressWordPress FloristPress plugin <= 7.3.0 - Broken Access Control vulnerability4.3 Medium
- wensolutions wp travel, wp travel travel +1 moreWordPress WP Travel plugin <= 9.6.0 - Broken Access Control vulnerability6.5 Medium
- n-media simple user registrationWordPress Simple User Registration plugin <= 5.5 - Broken Access Control on User Deletion vulnerability9.1 Critical
- ninja team filebirdWordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability4.7 Medium
- themesflat themesflat-addons-for-elementor, addons for elementor +1 moreWordPress Themesflat Addons For Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ryo arkhe blocksWordPress Arkhe Blocks plugin <= 2.27.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- beaver builder builder, fastlinemedia beaver builder +1 moreWordPress Beaver Builder plugin <= 2.8.4.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- futuriowp futurio extraWordPress Futurio Extra plugin <= 2.0.14 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bold-themes bold page builderWordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- captivateaudio captivate syncWordPress Captivate Sync plugin <= 2.0.22 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jacques malgrange wp geonamesWordPress WP GeoNames plugin <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…