CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2,...7.5 High
- apple ipados, macos, safari +5 more +7 moreA cookie management issue was addressed with improved state management. This issue is fixed in...5.3 Medium
- apple macosThe issue was resolved by sanitizing logging This issue is fixed in macOS Sequoia 15.2. A...3.3 Low
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS...9.8 Critical
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2,...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2,...5.5 Medium
- apple macosA configuration issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- apple macosThis issue was addressed by enabling hardened runtime. This issue is fixed in macOS Sequoia 15.2....5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2,...6.5 Medium
- apple macosA logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia...9.8 Critical
- pwndocPwnDoc Server-Side Template Injection vulnerability - Sandbox Escape to RCE using custom filters6.5 Medium
- espressif esp-idfAES/CBC Constant IV Vulnerability in ESPTouch v26.6 Medium
- code-projects online class and exam scheduling systemcode-projects Online Class and Exam Scheduling System teacher_save.php sql injection5.3 Medium
- habitica, habitrpg habatica +1 moreGHSL-2024-111: Reflected XSS in /home in habitica2.0 Low
- habitica, habitrpg habatica +1 moreGHSL-2024-110: Reflected XSS in /register in habitica5.0 Medium
- habitica, habitrpg habatica +1 moreGHSL-2024-109: Reflected XSS in /login in habitica5.0 Medium
- citeum openctiOpenCTI's lack of Rate Limit lead to OTP brute forcing8.1 High
- code-projects online class and exam scheduling systemcode-projects Online Class and Exam Scheduling System term.php sql injection5.3 Medium
- epic games launcherEpic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability7.8 High
- gfi archiverGFI Archiver Store Service Deserialization of Untrusted Data Remote Code Execution Vulnerability8.8 High
- gfi archiverGFI Archiver Telerik Web UI Remote Code Execution Vulnerability9.8 Critical
- gfi archiverGFI Archiver Core Service Deserialization of Untrusted Data Remote Code Execution Vulnerability8.8 High
- xnsoft xnview classic, xnview +1 moreXnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability7.8 High
pqcrypto-hqccrates.ioPQClean has a correctness error in HQC decapsulationNo score- code-projects online class and exam scheduling systemcode-projects Online Class and Exam Scheduling System subject_update.php sql injection5.3 Medium
- code-projects online class and exam scheduling systemcode-projects Online Class and Exam Scheduling System room_update.php sql injection5.3 Medium
- code-projects online class and exam scheduling systemcode-projects Online Class and Exam Scheduling System rank_update.php sql injection5.3 Medium
- code-projects online class and exam scheduling systemcode-projects Online Class and Exam Scheduling System department.php sql injection5.3 Medium
- codezips technical discussion forumCodezips Technical Discussion Forum signuppost.php sql injection6.9 Medium
- dromara ujcmsDromara UJCMS User ID id authorization6.3 Medium
- cjbi wetech-cmscjbi wetech-cms Database Backup BackupFileUtil.java backup path traversal5.3 Medium
- cjbi wetech-cmscjbi wetech-cms UserDao.java findUser sql injection5.3 Medium
- gstreamerGHSL-2024-280: Gstreamer Use-After-Free read in Matroska CodecPrivate5.1 Medium
- gstreamerGHSL-2024-258: GStreamer has an OOB-read in gst_wavparse_adtl_chunk5.1 Medium
- gstreamerGHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunk5.1 Medium
- gstreamerGHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunk5.1 Medium
- gstreamerGHSL-2024-261: GStreamer has an OOB-read in parse_ds645.1 Medium
- gstreamerGHSL-2024-262: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk5.1 Medium
- gstreamerGHSL-2024-118: GStreamer has a null pointer dereference in gst_gdk_pixbuf_dec_flush8.6 High
- gstreamer, debian linux +1 moreGHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes8.6 High
- gstreamerGHSL-2024-251: GStreamer NULL-pointer dereference in Matroska/WebM demuxer6.8 Medium
- gstreamerGHSL-2024-250: Streamer NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer6.8 Medium
- gstreamerGHSL-2024-249: GStreamer has a NULL-pointer dereference in Matroska/WebM demuxer6.8 Medium
- gstreamerGHSL-2024-247: GStreamer Insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences6.8 Medium
- gstreamerGHSL-2024-246: GStreamer has an OOB-read in qtdemux_merge_sample_table5.1 Medium
- gstreamerGHSL-2024-245: GStreamer has an OOB-read in qtdemux_parse_samples5.1 Medium
- gstreamerGHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsing5.1 Medium
- gstreamerGHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-read6.9 Medium
- cjbi wetech-cmscjbi wetech-cms TopicDao.java searchTopic sql injection5.3 Medium
- gstreamerGHSL-2024-242: GStreamer has an integer underflow in FOURCC_strf parsing leading to OOB-read6.9 Medium
- Show moreLoading…