CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- tp-link vn020 f3v(t), vn020 f3v firmware +1 moreTP-Link VN020 F3v(T) SOAP Request WANIPConnection buffer overflow7.1 High
- tp-link vn020 f3v(t)TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service7.1 High
- wphealth wp umbrella: update backup restore & monitoring, wp umbrella update backup restore and monitoring +1 moreWP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion9.8 Critical
- mailcleanerMailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and...9.8 Critical
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM cross-site scripting6.4 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- ibm aix, vios +1 moreIBM AIX command execution7.8 High
- spartac feedpress generator – external rss frontend customizerFeedpress Generator – External RSS Frontend Customizer <= 1.2.1 - Reflected Cross-Site Scripting6.1 Medium
- notfound galleryGallery <= 1.3 - Authenticated (Contributor+) PHP Object Injection8.8 High
- imahui mini program apiMini Program API <= 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- alphabpo easy code snippetsEasy Code Snippets <= 1.0.2 - Reflected Cross-Site Scripting6.1 Medium
- nshowketgmailcom simple ecommerce shopping cart plugin- sell products through paypalSimple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Reflected Cross-Site Scripting via monthly_sales_current_year Parameter6.1 Medium
- matansmoove smoove connector for elementor formsSmoove connector for Elementor forms <= 4.1.0 - Reflected Cross-Site Scripting6.1 Medium
- softaculous fileorganizer – wordpress file manager, fileorganizer manage wordpress and website files +1 moreFileOrganizer <= 1.1.4 - Authenticated (Administrator+) Local JavaScript File Inclusion7.2 High
- jonatahndejong beautiful taxonomy filtersBeautiful Taxonomy Filters <= 2.4.3 - Unauthenticated SQL Injection7.5 High
- rezaplus twchat – send or receive messages from usersTWChat – Send or receive messages from users <= 4.0.4 - Reflected Cross-Site Scripting6.1 Medium
- nshowketgmailcom simple ecommerce shopping cart plugin- sell products through paypalSimple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update / Data Access5.4 Medium
- linux, linux kernel +1 morefsnotify: Fix ordering of iput() and watched_objects decrement7.8 High
- rumspeed simple side tab, simple side tab side tab +1 moreSimple Side Tab < 2.2.0 - Admin+ Stored XSS4.8 Medium
- owthub library management systemLibrary Management System <= 3.1 - Authenticated (Admin+) SQL Injection6.8 Medium
- andreiigna if menu, if menu – visibility control for menus +1 moreIf Menu <= 0.19.1 - Missing Authorization to License Key Update5.3 Medium
- cmorillas1 shortcodes blocks creator ultimateShortcodes Blocks Creator Ultimate <= 2.2.0 - Reflected Cross-Site Scripting via _wpnonce6.1 Medium
- ays-pro poll maker – versus polls, anonymous polls, image polls, poll maker +1 morePoll Maker <= 5.5.4 - Cross-Site Request Forgery to Poll Duplication4.3 Medium
- cardgate payments for woocommerceCardGate Payments for WooCommerce <= 3.2.1 - Reflected Cross-Site Scripting6.1 Medium
- ewald harmsen mollie for contact form 7Mollie for Contact Form 7 <= 5.0.0 - Reflected Cross-Site Scripting6.1 Medium
- clicksend sms for lead capture formsSMS for Lead Capture Forms <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion4.3 Medium
- cmorillas1 shortcodes blocks creator ultimateShortcodes Blocks Creator Ultimate <= 2.2.0 - Reflected Cross-Site Scripting via 'page'6.1 Medium
- kofimokome message filter for contact form 7Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) New Filter Creation4.3 Medium
- codemstory 코드엠샵 소셜톡코드엠샵 소셜톡 <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- codemstory 워드프레스 결제 심플페이 – 우커머스 결제 플러그인워드프레스 결제 심플페이 – 우커머스 결제 플러그인 <= 5.2.2 - Reflected Cross-Site Scripting via add_query_arg Function6.1 Medium
- harshitpeer zooomZooom <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- genetechproducts pie forms — drag & drop form builderDrag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! <= 1.4.19 - Reflected Cross-Site Scripting6.1 Medium
- persianscript افزونه پیامک ووکامرس persian woocommerce smsافزونه پیامک ووکامرس Persian WooCommerce SMS <= 7.0.5 - Reflected Cross-Site Scripting6.1 Medium
- comfino payment gatewayComfino Payment Gateway <= 4.1.1 - Reflected Cross-Site Scripting6.1 Medium
- wegiaWeGIA 3.2.0 before 3998672 does not verify permission to change a password.7.5 High
- microsoft nugetgalleryXSS Vulnerability in NuGetGallery's Markdown Autolinks Processing6.9 Medium
shared_preferences_androidPubshared_preferences_android vulnerability3.0 Low- tungsten automation totalagilityXSS in Tungsten Automation TotalAgility5.3 Medium
- tungsten automation totalagilityXSS in Tungsten Automation TotalAgility5.3 Medium
- jirafeauImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Jirafeau6.1 Medium
- nvidia ufm cyberai ga, ufm cyberai lts23, ufm enterprise appliance ga +5 more +7 moreNVIDIA UFM Enterprise, UFM Appliance, and UFM CyberAI contain a vulnerability where an attacker...8.8 High
- nvidia base command manager, bright cluster manager +1 moreNVIDIA Base Command Manager and Bright Cluster Manager for Linux contain an insecure temporary...4.4 Medium
- ruijie reyee osRuijie Reyee OS Resource Leak7.1 High
- ruijie reyee osRuijie Reyee OS Use of Inherently Dangerous Function9.2 Critical
- ruijie reyee osRuijie Reyee OS Server-Side Request Forgery9.3 Critical
- ruijie reyee osRuijie Reyee OS Improper Handling of Insufficient Permissions or Privileges9.2 Critical
- ruijie reyee osRuijie Reyee OS Improper Neutralization of Wildcards or Matching Symbols8.7 High
- ruijie reyee osRuijie Reyee OS Use of Weak Credentials8.7 High
- ruijie reyee osRuijie Reyee OS Insecure Storage of Sensitive Information8.7 High
- Show moreLoading…