CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- elastic elasticsearchElasticsearch Incorrect Authorization6.0 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP vulnerable to Cross-site Scripting4.6 Medium
- leonhad pdftoolsA stack overflow Segmentation Fault (SEGV) and Memory Leak in pdftools6.9 Medium
linuxUbuntu,linux-lowlatencyUbuntu,linux-oracleUbuntu +2 morelinux, linux-lowlatency, linux-oracle vulnerabilitiesNo score- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager information disclosure4.9 Medium
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager information disclosure3.7 Low
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager information disclosure4.1 Medium
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager information disclosure4.3 Medium
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager information disclosure4.4 Medium
- hcl software bigfix inventoryHCL BigFix Inventory is affected by an access control vulnerability3.1 Low
- linux, linux kernel +1 moreBluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE8.8 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- becton dickinson & co bd bactec™ blood culture system, bd cor™ system, bd epicenter™ microbiology data management system +3 more +5 moreDefault credentials are used in the above listed BD Diagnostic Solutions products. If exploited,...8.0 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
- autodesk navisworks, navisworks freedom, navisworks manage +1 more +3 moreDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software7.8 High
github.com/traefik/traefikGo,github.com/traefik/traefik/v2Go,github.com/traefik/traefik/v3Go +2 moreTraefik affected by CVE-2024-53259No score- vercel next.jsAuthorization bypass in Next.js7.5 High
- mobil365 informatics saha365 appSQLi in Mobil365 Informatics' Saha365 App9.8 Critical
- nextgeography ng analyserIDOR in NextGEO's NG Analyser6.5 Medium
- quomodosoft elementsready, elementsready addons for elementor +1 moreElementsReady Addons for Elementor <= 6.4.8 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates4.3 Medium
- apache tomcat, netapp bootstrap os +1 moreApache Tomcat: DoS in examples web application5.3 Medium
- apache tomcat, netapp bootstrap os +1 moreApache Tomcat: RCE due to TOCTOU issue in JSP compilation9.8 Critical
- digital operation services wifiburadaProtection Mechanism Failure in Digital Operation Services' WiFiBurada6.5 Medium
- digital operation services wifiburadaImproper Authentication in Digital Operation Services' WiFiBurada4.3 Medium
- dell appsyncDell AppSync, version 4.6.0.x, contain a Symbolic Link (Symlink) Following vulnerability. A low...4.4 Medium
- buildwps ppwp – password protect pagesPPWP – Password Protect Pages <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure5.3 Medium
- awesomemotive easy digital downloads, smub easy digital downloads – ecommerce payments and subscriptions made easy +1 moreEasy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall Bypass3.7 Low
- amitwpdeveloper additional fees for woocommerce checkoutWooCommerce Additional Fees On Checkout (Free) <= 1.4.7 - Reflected Cross-Site Scripting via 'number'6.1 Medium
- codepeople calculated fields formCalculated Fields Form <= 5.2.63 - Denial of Service5.3 Medium
installation-images-SMOSUSESecurity update for installation-imagesNo score- puckrobin wp base booking of appointments, services and eventsWP BASE Booking of Appointments, Services and Events <= 4.9.1 - Reflected Cross-Site Scripting via status Parameter6.1 Medium
- mantrabrain learning management system, elearning, course builder, wordpress lms plugin – sikshya lmsLearning Management System, eLearning, Course Builder, WordPress LMS Plugin – Sikshya LMS <= 0.0.21 - Reflected Cross-Site Scripting via page Parameter6.1 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Unauthenticated Stored Cross-Site Scripting via Ticket Category and Ticket Type Name7.2 High
- clavaque s2member – excellent for all kinds of memberships, content restriction paywalls & member access subscriptionss2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241114 - Authenticated (Contributor+) Sensitive Information Exposure8.8 High
installation-images-SMOSUSESecurity update for installation-imagesNo scoreinstallation-images-SMOSUSESecurity update for installation-imagesNo score- shinephp user role editorUser Role Editor <= 4.64.3 - Cross-Site Request Forgery to Privilege Escalation8.8 High
- memberful – membership pluginMemberful <= 1.73.9 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure5.3 Medium
- theafricanboss sms for woocommerceSMS for WooCommerce <= 2.8.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting6.1 Medium
- Show moreLoading…