CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- iobit advanced systemcare utimate, advanced systemcare ultimate +1 moreIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E040 null pointer dereference6.8 Medium
- iobit advanced systemcare utimate, advanced systemcare ultimate +1 moreIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E024 null pointer dereference6.8 Medium
- iobit advanced systemcare utimate, advanced systemcare ultimate +1 moreIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E018 null pointer dereference6.8 Medium
- surrealdbSurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITE2.3 Low
- iobit advanced systemcare utimate, advanced systemcare ultimate +1 moreIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E004 null pointer dereference6.8 Medium
- iobit advanced systemcare utimate, advanced systemcare ultimate +1 moreIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E01C null pointer dereference6.8 Medium
- minioPrivilege escalation in IAM import API in MinIO9.3 Critical
- lenovo filez clientAn improper parsing vulnerability was reported in the FileZ client that could allow a crafted...7.6 High
- lenovo accessories and display managerAn improper certificate validation vulnerability was reported in LADM that could allow a network...8.1 High
- lenovo accessories and display manager, display control center +1 moreAn improper validation vulnerability was reported in the firmware update mechanism of LADM and...7.8 High
- lightftpRace Condition with LightFTP9.2 Critical
- iobit advanced systemcare utimate, advanced systemcare ultimate +1 moreIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E000 null pointer dereference6.8 Medium
- fabulatech usb over networkFabulaTech USB over Network IOCT ftusbbus2.sys 0x220448 null pointer dereference6.8 Medium
libxml2TuxCare,libxml2-develTuxCare,libxml2-pythonTuxCare +1 more +3 moreUpdate of libxml2No score- progress software telerik ui for wpf, telerik ui for wpf +1 moreProgress UI for WPF format provider unsafe deserialization vulnerability8.4 High
- fabulatech usb over networkFabulaTech USB over Network IOCT ftusbbus2.sys 0x220420 null pointer dereference6.8 Medium
- mattermost, mattermost mobile +1 moreInsecure Android File Provider Paths5.7 Medium
- fabulatech usb over networkFabulaTech USB over Network IOCT ftusbbus2.sys 0x220408 null pointer dereference6.8 Medium
- theme-fusion avadaWordPress Avada theme <= 7.11.10 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- spider themes eazydocsWordPress EazyDocs plugin <= 2.8.0 - Local File Inclusion vulnerability7.5 High
- david cramer caldera smtp mailerWordPress Caldera SMTP Mailer plugin <= 1.0.1 - Broken Access Control vulnerability4.3 Medium
- marco giannini xml multilanguage sitemap generatorWordPress XML Multilanguage Sitemap Generator plugin <= 2.0.6 - Broken Access Control vulnerability5.3 Medium
- yaycommerce brandWordPress Brandy theme <= 1.1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- seedprod llc proWordPress SeedProd Pro plugin <= 6.18.10 - Remote Code Execution (RCE) vulnerability9.1 Critical
- seedprod llc proWordPress SeedProd Pro plugin <= 6.18.10 - SQL Injection vulnerability7.6 High
- seedprod llc proWordPress SeedProd Pro plugin <= 6.18.10 - SQL Injection vulnerability7.6 High
- iqonic wpbookitWordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability9.3 Critical
- tobias keller wp-nerd toolkitWordPress WP-NERD Toolkit plugin <= 1.1 - Sensitive Data Exposure vulnerability7.5 High
- molefed tydskrifWordPress tydskrif theme <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jules colle advanced options editorWordPress Advanced Options Editor plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wofficeio wofficeWordPress Woffice theme <= 5.4.14 - Unauthenticated Account Takeover vulnerability9.8 Critical
- fabulatech usb over networkFabulaTech USB over Network IOCT ftusbbus2.sys 0x22040C null pointer dereference6.8 Medium
- straightvisions gmbh sv100 companionWordPress SV100 Companion plugin <= 2.0.02 - Privilege Escalation vulnerability9.8 Critical
- dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x8.7 High
- dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x8.7 High
- dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x8.7 High
- dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x8.7 High
- siemens opcenter execution foundation, opcenter intelligence, opcenter quality +9 more +11 moreA vulnerability has been identified in Opcenter Execution Foundation (All versions), Opcenter...9.3 Critical
- unknown advanced custom fields proWordPress Advanced Custom Fields Pro plugin < 6.3.2 - Cross-Site Request Forgery (CSRF) vulnerability4.3 Medium
- velocidex winpmemVelocidex WinPmem Out of Bounds Write Vulnerability8.2 High
- velocidex winpmemWinPmem Improper Input Validation vulnerability7.3 High
- john godley tidy upWordPress Tidy Up Plugin <= 1.3 - CSRF to Reflected Cross-Site Scripting vulnerability7.1 High
- avatar 3d creator 3d avatar user profileWordPress 3D Avatar User Profile plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- beat kueffer termin-kalenderWordPress Termin-Kalender plugin <= 0.99.47 - Broken Access Control vulnerability6.5 Medium
- outstrip instant appointmentWordPress Instant Appointment plugin <= 1.2 - SQL Injection vulnerability9.3 Critical
- saul morales pacheco banner systemWordPress Banner System plugin <= 1.0.0 - Broken Access Control vulnerability8.2 High
- spartac feedpress generatorWordPress Feedpress Generator plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- nsstheme wp nssuser registerWordPress Wp NssUser Register plugin <= 1.0.0 - Privilege Escalation vulnerability9.8 Critical
- halim kh easy user settingsWordPress KH Easy User Settings plugin <= 1.0.0 - Privilege Escalation vulnerability8.8 High
- ruben garza, jr. gitsyncWordPress GitSync plugin <= 1.1.0 - CSRF to Remote Code Execution vulnerability9.6 Critical
- Show moreLoading…