CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
libaflcrates.iolibafl has unsound usages of `core::slice::from_raw_parts_mut`6.9 Medium- agency dominion inc. fusionWordPress Fusion Page Builder plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- rubengc automatorwp – automator plugin for no-code automations, webhooks & custom integrations in wordpressAutomatorWP <= 5.0.9 - Reflected Cross-Site Scripting via a-0-o-search_field_value9.6 Critical
- ninjateam file manager pro – filester, filester +1 moreFile Manager Pro – Filester <= 1.8.6 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installation4.3 Medium
- fortinet fortiwanAn OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line...7.6 High
- fortinet forticlient, forticlientlinux +1 moreAn execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux...8.6 High
- fortinet fortiosUnder non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and...5.4 Medium
- netskope inc. endpoint dlpDouble-fetch heap overflow5.6 Medium
- govee homeGaining remote control over Govee devices10.0 Critical
- milestone systems xprotect vmsSensitive Information in Driver’s Log File5.2 Medium
- fortinet fortiwlcAn access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and...6.6 Medium
- fortinet fortiosA heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in...5.4 Medium
- edgecross consortium basic software for developers, basic software for windows +1 moreExternal Control of File Name or Path vulnerability in Edgecross Basic Software for Windows...7.8 High
- edgecross consortium basic software for developers, basic software for windows +1 moreIncorrect Default Permissions vulnerability in Edgecross Basic Software for Windows versions 1.00...7.8 High
- bplugins button block, button block – design stylish, interactive, and multi-functional buttons +1 moreButton Block – Get fully customizable & multi-functional buttons <= 1.1.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication4.3 Medium
- linux, linux kernel +1 morex86/xen: don't do PV iret hypercall through hypercall page5.5 Medium
- linux, linux kernel +1 morexen/netfront: fix crash when removing device5.7 Medium
- codename065 download managerDownload manager <= 3.3.03 - Improper Authorization to Unauthenticated Download of Password-Protected Files5.3 Medium
- codename065 download managerDownload Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Execution7.3 High
postgresqlRocky Linux,pgauditRocky Linux,pg_repackRocky Linux +1 more +3 moreImportant: postgresql:13 security updateNo scorethunderbirdRocky LinuxImportant: thunderbird security updateNo score- sunnet technology co., ltd. corporate training management systemSUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type9.4 Critical
- cyberlord92 broken link checker | finderBroken Link Checker | Finder <= 2.5.0 - Authenticated (Author+) Blind Server-Side Request Forgery5.4 Medium
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API6.5 Medium
- dell powerstore, powerstoreos +1 moreDell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command (...7.1 High
- qnap qvpn, qnap systems inc. qvpn windows +1 moreQVPN Device Client7.8 High
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud6.8 Medium
- qnap qulog centerQuLog Center7.3 High
- qnap qufirewallQuFirewall5.5 Medium
- qnap qulog centerQuLog Center4.8 Medium
- ibm security verify access dockerIBM Security Verify Access privilege escalation7.8 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- ibm robotic process automationIBM Robotic Process Automation information disclosure4.6 Medium
- ibm cognos analytics mobile for android, cognos analytics mobile +1 moreIBM Cognos Analytics Mobile information disclosure5.9 Medium
github.com/gophish/gophishGo,govulncheck-vulndbopenSUSE +1 moreGoPhish sends cleartext passwords7.5 High- No product listedA Server-Side Request Forgery (SSRF) in the endpoint http://{your-server}/url-to-pdf of Stirling...7.5 High
- No product listedAn XML External Entity (XXE) injection vulnerability in the component /datagrip/upload of Chat2DB...9.8 Critical
- No product listedAn issue in Quectel BG96 BG96MAR02A08M1G allows attackers to bypass authentication via a crafted...9.8 Critical
- No product listedAn issue in Quectel BC95-CNV V100R001C00SPC051 allows attackers to bypass authentication via a...9.8 Critical
- No product listedAn issue in Quectel BC25 with firmware version BC25PAR01A06 allows attackers to bypass...9.8 Critical
- phpgurukul pre-school enrollment systemA SQL Injection vulnerability was found in /index.php in PHPGurukul Pre-School Enrollment System...7.5 High
- synacor zimbra collaboration suiteAn issue was discovered in the Webmail Classic UI in Zimbra Collaboration (ZCS) 9.0 and 10.0 and...7.5 High
- kanboardInsufficient session invalidation in Kanboard6.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server clickjacking5.2 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition cross-site scripting5.4 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader | Out-of-bounds Write (CWE-787)7.8 High
- Show moreLoading…