CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- holithemes wp shapesWP SHAPES <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- miniorange page restriction, cyberlord92 page and post restriction +1 morePage Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure5.3 Medium
- moaluko store locator for wordpress with google maps – lotsoflocalesStore Locator <= 3.98.10 - Unauthenticated Local File Inclusion9.8 Critical
- rluks embed twineEmbed Twine <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- seopilot wtyczka seopilot dla wpWtyczka SeoPilot dla WP <= 3.3.091 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- aasthasolutions particle backgroundParticle Background <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- socratous139 spotlightrSpotlightr <= 0.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- ilyasine maintenance & coming soon redirect animationMaintenance & Coming Soon Redirect Animation <= 2.1.3 - Missing Authorization to Settings Update4.3 Medium
- maxfoundry maxbuttons, wordpress button plugin maxbuttons +1 moreMaxButtons < 9.8.1 - Admin+ Stored XSS via Text Color4.7 Medium
- cryout creations serious sliderSerious Slider < 1.2.7 - Contributor+ Stored XSS via Shortcode5.4 Medium
- codename065 download managerDownload Manager < 3.3.03 - Admin+ Stored XSS4.8 Medium
- maxfoundry maxbuttons, wordpress button plugin maxbuttons +1 moreMaxButtons < 9.8.1 - Admin+ Stored XSS via Button Width4.8 Medium
- trellix epo onprem sp1 update4Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack...5.4 Medium
spatie/browsershotPackagistBrowsershot Improper Input Validation vulnerability7.7 High- apple macosA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- apple macosA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- apple macosThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS...5.5 Medium
- apple macosThis issue was addressed through improved state management. This issue is fixed in macOS Sequoia...4.6 Medium
- apple macosA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- apple macosA logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.1....7.5 High
- apple macosThis issue was addressed through improved state management. This issue is fixed in macOS Sequoia...4.6 Medium
- apple garagebandThis issue was addressed with improved validation of the process entitlement and Team ID. This...7.8 High
- arothman pcrecruiter extensionsPCRecruiter Extensions <= 1.4.22 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- huawei cv81-wdm fw, cv81-wdm firmware +1 moreHuawei printers have an input verification vulnerability. Successful exploitation of this...7.5 High
- huawei cv81-wdm fw, cv81-wdm firmware +1 moreThere is an improper input verification vulnerability in Huawei printer product. Successful...7.5 High
- huawei cv81-wdm fw, cv81-wdm firmware +1 moreThere is a command injection vulnerability in Huawei terminal printer product. Successful...9.8 Critical
- huawei cv81-wdm fw, cv81-wdm firmware +1 moreThere is an insufficient input verification vulnerability in Huawei product. Successful...8.6 High
- huawei mate 20 pro, mate 20 pro firmware +1 moreThere is an insufficient authentication vulnerability in some Huawei smart phone. An...3.3 Low
- hashicorp nomad, nomad enterprise +1 moreNomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Tokens6.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA denial-of-service issue was addressed with improved input validation. This issue is fixed in...7.5 High
- arista ng firewallArista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability6.6 Medium
- arista ng firewallArista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability8.3 High
- arista ng firewallArista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability8.1 High
- arista ng firewallArista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability7.2 High
ghostscriptOSS-FuzzHeap-buffer-overflow in gsicc_create_getv2bufferNo score- codeastro complaint management systemSQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote...9.8 Critical
Oqtane.FrameworkNuGet,Oqtane.ServerNuGet +1 moreOqtane Framework Insecure Direct Object Reference vulnerability6.5 MediumOqtane.FrameworkNuGet,Oqtane.ServerNuGet +1 moreOqtane Framework Incorrect Access Control vulnerability7.5 High- dotnetfoundation piranha cmsPiranha CMS Cross-site Scripting vulnerability4.7 Medium
- dotnetfoundation piranha cmsPiranha CMS Cross-site Scripting vulnerability4.7 Medium
Oqtane.ClientNuGet,Oqtane.FrameworkNuGet,Oqtane.ServerNuGet +1 more +3 moreOqtane Framework Insecure Direct Object Reference vulnerability4.3 Medium- No product listedImproper access control in the endpoint /RoleMenuMapping/AddRoleMenu of Digiteam v4.21.0.0 allows...8.8 High
- No product listedA reflected cross-site scripting vulnerability in MONITORAPP Application Insight Web Application...6.1 Medium
- tibbo aggregate network managerTibbo AggreGate Network Manager Unrestricted Upload of File with Dangerous Type8.7 High
- hewlett packard enterprise (hpe) hpe alletra storage mp b10000Remote authentication bypass vulnerability in HPE Alletra Storage MP B10000 in versions prior to...4.0 Medium
- rockwell automation arena®, rockwellautomation arena +1 moreRockwell Automation Third Party Vulnerability in Arena®8.5 High
- sophos firewall, firewall firmware +1 moreA post-auth SQLi vulnerability in the User Portal allows authenticated users to execute code...8.8 High
- rockwell automation arena®, rockwellautomation arena +1 moreRockwell Automation Third Party Vulnerability in Arena®8.5 High
- rockwell automation arena®, rockwellautomation arena +1 moreRockwell Automation Code Execution Vulnerability in Arena8.5 High
python3TuxCare,python3-debugTuxCare,python3-develTuxCare +4 more +6 moreUpdate of python3No score- Show moreLoading…