CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- sophos firewall, firewall firmware +1 moreA weak credentials vulnerability potentially allows privileged system access via SSH to Sophos...9.8 Critical
- rockwell automation arena®, rockwellautomation arena +1 moreRockwell Automation Third Party Vulnerability in Arena8.5 High
- sophos firewall, firewall firmware +1 moreA pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall...9.8 Critical
- opentext privileged access managerPotential LDAP injection vulnerability in OpenText Privileged Access Manager8.0 High
- silabs.com rs9116 bluetooth sdkDenial of Service in Silicon Labs RS9116 Bluetooth SDK6.5 Medium
- silabs.com rs9116 bluetooth sdkDenial of Service in Silicon Labs RS9116 Bluetooth SDK6.5 Medium
- silabs.com rs9116 bluetooth sdkDenial of Service in Silicon Labs RS9116 Bluetooth SDK6.5 Medium
- discourseBypass of Discourse Connect using other login paths if enabled in Discourse5.3 Medium
- discourseModerators can view Screened emails even when the “moderators view emails” option is disabled in Discourse2.2 Low
- discourseMagnific lightbox susceptible to Cross-site Scripting in Discourse6.8 Medium
- discoursePotential Backup file leaked via Nginx in Discourse7.5 High
- nexryai altairUncontrolled Recursion and Asymmetric Resource Consumption in Altair media/file proxy8.6 High
- xmidt-org cjwtAlgorithm Confusion Vulnerability in cjwt8.7 High
- hp linux imaging and printing softwareHP Linux Imaging and Printing Software - Potential Memory Buffer Overflow5.7 Medium
- codezips e-commerce siteCodezips E-Commerce Site editorder.php sql injection5.3 Medium
- pbootcmsPbootCMS IndexController.php path traversal5.3 Medium
- sciener ttlock appCVE-2023-70057.5 High
- codezips e-commerce siteCodezips E-Commerce Site newadmin.php sql injection6.9 Medium
- codezips e-commerce siteCodezips E-Commerce Site signin.php sql injection6.9 Medium
- ibm security guardiumIBM Security Guardium server-side request forgery6.5 Medium
- ibm mqIBM MQ information disclosure6.2 Medium
- vmware spring frameworkSpring Framework Path Traversal vulnerability7.5 High
- ibm mq applianceIBM MQ Appliance denial of service5.3 Medium
- ibm mqIBM MQ information disclosure6.2 Medium
- code-projects hostel management site, fabian hostel management system +1 morecode-projects Hostel Management Site room-details.php cross site scripting5.3 Medium
- opentext™ operations bridge managerImproper Restriction of XML External Entity Reference vulnerability in OpenText™ Operations...5.3 Medium
- pbootcmsPbootCMS IndexController.php code injection5.3 Medium
- codezips technical discussion forumCodezips Technical Discussion Forum signinpost.php sql injection6.9 Medium
- qos.ch sarl logbackSaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks2.4 Low
- checkmkUser-Readable Private Key in Windows Agent4.8 Medium
- hms networks ewon flexy 205Authenticated Remote Code Execution8.6 High
- 1000 projects attendance tracking management system1000 Projects Attendance Tracking Management System check_student_login.php sql injection6.9 Medium
github.com/clidey/whodb/coreGoWhoDB Allows Unbounded Memory Consumption in Authentication Middleware Can Lead to Denial of Service7.5 High- qos.ch sarl logback-coreJaninoEventEvaluator vulnerability5.9 Medium
- woodruffw pyrageMalicious plugin names, recipients, or identities can cause arbitrary binary execution in pyrage7.7 High
- astroServer source code is exposed to the public if sourcemaps are enabled7.8 High
- x1a0he adobe downloaderX1a0He Adobe Downloader XPC Service com.x1a0he.macOS.Adobe-Downloader.helper shouldAcceptNewConnection privileges management8.5 High
- angeljudesuarez vehicle management systemitsourcecode Vehicle Management System sendmail.php sql injection5.3 Medium
github.com/openshift/must-gatherGo,govulncheck-vulndbopenSUSE +1 moreOpenshift-dedicated: must-gather-operator: yaml template injection leads to privilege escalation8.8 High- nagvisFix various XSS issues and potential RCE8.8 High
- isdo software web softwareSQLi in ISDO Software's Web Software9.8 Critical
- admerc vehicle management systemitsourcecode Vehicle Management System editbill.php sql injection5.3 Medium
- fortinet fortiwanA relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all...9.8 Critical
- phpldapadminphpLDAPadmin: Improper Neutralization of Formula Elements5.0 Medium
- phpldapadminphpLDAPadmin: Reflected Cross-Site Scripting in entry_chooser.php2.1 Low
- angeljudesuarez vehicle management systemitsourcecode Vehicle Management System billaction.php cross site scripting5.3 Medium
- fujifilm business innovation apeos c3070, apeos c5570, apeos c6580 +2 moreFujifilm Business Innovation Apeos C3070/Apeos C5570/Apeos C6580 Web Interface index.html#hashHome improper authorization6.9 Medium
- fortinet fortianalyzer, fortimanager, fortiportal +2 moreA use after free in Fortinet FortiManager, FortiAnalyzer allows attacker to execute unauthorized...7.7 High
fyrox-corecrates.ioFyrox has unsound usages of `Vec::from_raw_parts`No scorespl-token-swapcrates.ioUnsound usages of `u8` type casting in spl-token-swapNo score- Show moreLoading…