CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- qianfox foxcmsFoxCMS API Endpoint Site.php improper authorization6.9 Medium
- qianfox foxcmsFoxCMS Configuration File installdb.php code injection5.3 Medium
- 1000 projects attendance tracking management system1000 Projects Attendance Tracking Management System course_action.php sql injection6.9 Medium
- sharp corporation home 5g hr02, wi-fi station sh-54c +1 morehome 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the...7.2 High
- sharp corporation home 5g hr02, pocketwifi 809sh, speed wi-fi next w07 +3 more +5 moreMultiple SHARP routers contain an improper authentication vulnerability in the configuration...5.9 Medium
- sharp corporation home 5g hr02, wi-fi station sh-52b, wi-fi station sh-54c +2 morehome 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow...5.3 Medium
- sharp corporation home 5g hr02, pocketwifi 809sh, speed wi-fi next w07 +3 more +5 moreMultiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be...9.8 Critical
- sharp corporation home 5g hr02, wi-fi station sh-52b, wi-fi station sh-54c +2 morehome 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain an OS command injection...7.2 High
- 1000 projects attendance tracking management system1000 Projects Attendance Tracking Management System faculty_action.php sql injection5.3 Medium
- intelbras vip s3020 g2, vip s4020 g2, vip s4020 g3 +1 more +3 moreIntelbras VIP S4320 G2 Web Interface Sha1Account1 path traversal5.3 Medium
- intelbras vip s3020 g2, vip s4020 g2, vip s4020 g3 +1 more +3 moreIntelbras VIP S4320 G2 Web Interface webCapsConfig information disclosure6.9 Medium
- treasurehuntgame treasurehuntTreasureHuntGame TreasureHunt checkflag.php console_log sql injection5.3 Medium
- treasurehuntgame treasurehuntTreasureHuntGame TreasureHunt acesso.php sql injection5.3 Medium
- portabilis i-educarPortabilis i-Educar Tipo de Usuário Page 2 cross site scripting5.1 Medium
- code-projects online exam mastering systemcode-projects Online Exam Mastering System sign.php cross site scripting5.3 Medium
- code-projects online exam mastering systemcode-projects Online Exam Mastering System account.php sql injection5.3 Medium
- code-projects online exam mastering systemcode-projects Online Exam Mastering System update.php sql injection5.3 Medium
- bdthemes element pack, element pack – widgets, templates & addons for elementor +1 moreElement Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization4.3 Medium
- freedesktop popplerlibpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the...4.3 Medium
- nicmx fort-validator, fort validator +1 moreAn integer underflow was discovered in Fort 1.6.3 and 1.6.4 before 1.6.5. A malicious RPKI...7.5 High
- vanderbilt redcapA stored cross-site scripting (XSS) vulnerability in the Project name of REDCap through 15.0.0...5.4 Medium
- vanderbilt redcapA stored cross-site scripting (XSS) vulnerability in the Calendar feature of REDCap through 15.0...5.4 Medium
- vanderbilt redcapA stored cross-site scripting (XSS) vulnerability in the Project Dashboard name of REDCap through...5.4 Medium
- vanderbilt redcapREDCap through 15.0.0 has a security flaw in the Notes section of calendar events, exposing users...8.8 High
- vanderbilt redcapREDCap through 15.0.0 has a security flaw in the Project Dashboards name, exposing users to a...8.8 High
- akilli commerce software technologies ltd. co. e-commerce website, codezips e-commerce site +1 moreCodezips E-Commerce Website login.php sql injection6.9 Medium
- ibm iIBM i server-side request forgery5.4 Medium
- ibm iIBM i authentication bypass4.3 Medium
- anisha job recruitmentcode-projects Job Recruitment _email.php cross site scripting6.9 Medium
- awesomemotive easy digital downloads, smub easy digital downloads – ecommerce payments and subscriptions made easy +1 moreEasy Digital Downloads <= 3.3.2 - Authenticated (Admin+) Arbitrary File Download4.9 Medium
- wbolt magicpost – wordpress文章管理功能增强插件MagicPost <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wb_share_social Shortcode6.4 Medium
- elementor website builder, elemntor elementor website builder – more than just a page builder +1 moreElementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography Settings6.4 Medium
- dynamiapps frontend admin, shabti frontend admin by dynamiapps +1 moreFrontend Admin by DynamiApps <= 3.25.1 - Unauthenticated SQL Injection5.9 Medium
- van abel latex2htmlLaTeX2HTML <= 2.5.5 - Reflected Cross-Site Scripting6.1 Medium
- puckrobin wp base booking of appointments, services and eventsWP BASE Booking of Appointments, Services and Events <= 4.9.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via app_export_db6.5 Medium
- wpseahorse wp on awsWP on AWS <= 5.2.1 - Reflected Cross-Site Scripting6.1 Medium
- solitweb full screen menu for elementorFull Screen Menu for Elementor <= 1.0.7 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- averta shortcodes and extra features for phlox themeShortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget6.4 Medium
- pingmeter uptime monitoringPingmeter Uptime Monitoring <= 1.0.3 - Reflected Cross-Site Scripting6.1 Medium
- averta shortcodes and extra features for phlox themeShortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes6.4 Medium
- reactflow visitor recording and heatmapsReactflow Visitor Recording and Heatmaps <= 1.0.10 - Reflected Cross-Site Scripting6.1 Medium
- moonheart g web pro store locatorG Web Pro Store Locator <= 2.1 - Reflected Cross-Site Scripting6.1 Medium
- tugbucket multi-column tag mapMulti-column Tag Map <= 17.0.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via mctagmap Shortcode6.4 Medium
- realmaster-1 real.kitreal.Kit <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- motovnet ebook storeEbook Store <= 5.8001 - Reflected Cross-Site Scripting via 'step'6.1 Medium
- androidbubble wp docsWP Docs <= 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection via 'dir_id'6.5 Medium
- wpswings one click upsell funnel for woocommerceOne Click Upsell Funnel for WooCommerce <= 3.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via wps_wocuf_pro_yes Shortcode6.4 Medium
- implecode ecommerce product catalog plugin for wordpresseCommerce Product Catalog Plugin for WordPress <= 3.3.43 - Cross-Site Request Forgery to Password Reset8.8 High
- webbuilder143 custom product tabs for woocommerceCustom Product Tabs For WooCommerce <= 1.2.4 - Authenticated (Shop Manager+) PHP Object Injection7.2 High
- smsaexpress smsa shipping (official)SMSA Shipping(official) <= 2.3 - Authenticated (Subscriber+) Arbitrary File Deletion8.8 High
- Show moreLoading…