CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- horner automation cscapeHorner Automation Cscape Out-of-bounds Read8.5 High
- cleo harmony, lexicom, vltrader +1 more +3 moreIn Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an...9.8 Critical
libgraphics-colornames-perlDebianAn issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an...5.3 Medium- hashicorp boundary, boundary enterprise +1 moreBoundary Controller Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service5.9 Medium
grub2TuxCare,grub2-commonTuxCare,grub2-efi-ia32TuxCare +11 more +13 moreUpdate of grub2No score- scidsg hushlineContent Security Policy appears to be missing in software and production setup7.1 High
- amazon opensearch data prepper, opensearch-project data-prepper +1 moreOpenTelemetry Logs source may lack authentication with some custom plugins6.9 Medium
- beegoBeego Vulnerable to Collision Hazards of MD5 in Cache Key Filenames6.9 Medium
github.com/ryanbekhen/nanoproxyGoPotential Vulnerabilities Due to Outdated golang.org/x/crypto Dependency in NanoProxyNo score- shuchkin simplexlsxCross-site Scripting vulnerability in SimpleXLSXEx::readXfs and SimpeXLSX::toHTMLEx6.8 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki allows RCE from script right in configurable sections9.1 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki allows remote code execution from account through macro descriptions and XWiki.XWikiSyntaxMacrosList10.0 Critical
- microsoft defender for endpoint, defender for endpoint for windows +1 moreWindows Defender Information Disclosure Vulnerability6.5 Medium
- microsoft update catalogMicrosoft Update Catalog Elevation of Privilege Vulnerability9.3 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki's scheduler in subwiki allows scheduling operations for any main wiki user5.4 Medium
- http4khttp4k has a potential XXE (XML External Entity Injection) vulnerability9.8 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform has an SQL injection in getdocuments.vm with sort parameter8.6 High
pythonTuxCare,python-debugTuxCare,python-develTuxCare +4 more +6 moreUpdate of pythonNo score- dell client platform bios, edge gateway 3000 firmware, edge gateway 3001 firmware +6 more +8 moreDell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally...7.5 High
- xwiki, xwiki xwiki-platform +1 moreXWiki allows remote code execution through the extension sheet10.0 Critical
- ibm infosphere information serverIBM InfoSphere Information Server denial of service6.5 Medium
- apache supersetApache Superset: SQLLab Improper readonly query validation allows unauthorized write access7.1 High
- ltdrdata comfyui-impact-packComfyUI-Impact-Pack is vulnerable to Path Traversal. The issue stems from missing validation of...9.2 Critical
- image access gmbh scan2netInsecure Password Change Function8.4 High
- image access gmbh scan2netHardcoded credentials8.4 High
- image access gmbh scan2netSQL Injection4.4 Medium
- image access gmbh scan2netUnauthenticated SQL Injection5.9 Medium
- image access gmbh scan2netBroken Access Control5.5 Medium
- image access gmbh scan2netReflected Cross Site Scripting4.7 Medium
- image access gmbh scan2netStored cross site scripting4.7 Medium
- jtermaat 360 javascript viewer360 Javascript Viewer <= 1.7.29 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- image access gmbh scan2netStored cross site scripting4.7 Medium
- image access gmbh scan2netStored cross site scripting4.7 Medium
- huawei harmonyosConcurrent variable access vulnerability in the ability module Impact: Successful exploitation of...6.2 Medium
- huawei harmonyosCross-process screen stack vulnerability in the UIExtension module Impact: Successful...6.2 Medium
- huawei harmonyosCross-process screen stack vulnerability in the UIExtension module Impact: Successful...6.2 Medium
- huawei harmonyosOut-of-bounds read vulnerability in the M3U8 module Impact: Successful exploitation of this...4.3 Medium
- huawei harmonyosOut-of-bounds read vulnerability in the DASH module Impact: Successful exploitation of this...4.3 Medium
- huawei harmonyosOut-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation...4.4 Medium
- huawei harmonyosProcess residence vulnerability in abnormal scenarios in the print module Impact: Successful...6.5 Medium
- huawei harmonyosCross-process screen stack vulnerability in the UIExtension module Impact: Successful...5.5 Medium
- huawei harmonyosRead/Write vulnerability in the image decoding module Impact: Successful exploitation of this...5.7 Medium
- huawei harmonyosCross-process screen stack vulnerability in the UIExtension module Impact: Successful...6.2 Medium
- huawei harmonyosRead/Write vulnerability in the image decoding module Impact: Successful exploitation of this...6.5 Medium
- huawei harmonyosRead/Write vulnerability in the image decoding module Impact: Successful exploitation of this...6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab5.4 Medium
- gitlabInefficient Algorithmic Complexity in GitLab7.5 High
- gitlabImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab5.4 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab4.3 Medium
- gitlabURL Redirection to Untrusted Site ('Open Redirect') in GitLab6.4 Medium
- Show moreLoading…