CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- melmass comfy mtbmelMass comfy_mtb Dependency endpoint.py run_command code injection5.3 Medium
- 1000 projects portfolio management system mca1000 Projects Portfolio Management System MCA add_personal_details.php unrestricted upload5.3 Medium
- honor magic os, magicos +1 moreSome Honor products are affected by information leak vulnerability, successful exploitation could...3.3 Low
- honor magic os, magicos +1 moreSome Honor products are affected by incorrect privilege assignment vulnerability, successful...3.3 Low
- honor magic os, magicos +1 moreSome Honor products are affected by incorrect privilege assignment vulnerability, successful...4.0 Medium
- code-projects travel management systemcode-projects/projectworlds Travel Management System subcat.php sql injection5.3 Medium
- honor magic os, magicos +1 moreSome Honor products are affected by incorrect privilege assignment vulnerability, successful...2.9 Low
- honor magic os, magicos +1 moreSome Honor products are affected by information leak vulnerability, successful exploitation could...5.5 Medium
- honor magic os, magicos +1 moreSome Honor products are affected by information leak vulnerability, successful exploitation could...5.5 Medium
- honor magic os, magicos +1 moreSome Honor products are affected by information leak vulnerability, successful exploitation could...6.2 Medium
- code-projects travel management systemcode-projects Travel Management System package.php sql injection5.3 Medium
- honor magic os, magicos +1 moreSome Honor products are affected by information leak vulnerability, successful exploitation could...4.0 Medium
- honor magic os, magicos +1 moreSome Honor products are affected by information leak vulnerability, successful exploitation could...6.2 Medium
- honor magic os, magicos +1 moreSome Honor products are affected by information leak vulnerability, successful exploitation could...6.2 Medium
- honor magic os, magicos +1 moreSome Honor products are affected by file writing vulnerability, successful exploitation could...6.3 Medium
- honor magicosInformation Leak Vulnerability in Honor Product3.3 Low
- code-projects travel management systemcode-projects Travel Management System detail.php sql injection5.3 Medium
- codezips hospital management systemCodezips Hospital Management System invo.php sql injection5.3 Medium
- 1000 projects attendance tracking management system1000 Projects Attendance Tracking Management System admin_action.php sql injection6.9 Medium
- code-projects simple car rental systemcode-projects Simple Car Rental System account.php sql injection6.9 Medium
- huawei harmonyos ailife solution 8.0Huawei Home Music System has a path traversal vulnerability. Successful exploitation of this...8.0 High
- codeastro house rental management systemCodeAstro House Rental Management System signin.php sql injection6.9 Medium
- codeastro house rental management systemCodeAstro House Rental Management System ownersignup.php sql injection6.9 Medium
- 1000 projects portfolio management system mca1000 Projects Portfolio Management System MCA admin_login.php sql injection6.9 Medium
- codeastro blood donor management systemCodeAstro Blood Donor Management System deletedannounce.php sql injection5.3 Medium
- 1000 projects attendance tracking management system1000 Projects Attendance Tracking Management System student_action.php sql injection6.9 Medium
- anisha job recruitmentcode-projects Job Recruitment _all_edits.php add_edu sql injection5.3 Medium
- code-projects simple admin panelcode-projects Simple Admin Panel updateOrderStatus.php sql injection5.3 Medium
- syed balkhi wpformsWPForms < 1.9.2.3 - Admin+ Stored XSS4.7 Medium
- managewp broken link checkerBroken Link Checker < 2.4.2 - Admin+ SSRF4.7 Medium
- code-projects simple admin panelcode-projects Simple Admin Panel addVariationController.php sql injection5.3 Medium
- code-projects simple admin panelcode-projects Simple Admin Panel catDeleteController.php sql injection5.3 Medium
- code-projects simple admin panelcode-projects Simple Admin Panel editItemForm.php sql injection5.3 Medium
- intumit smartrobot, smartrobot′s conversational ai platform +1 moreIntumit SmartRobot′s Conversational AI Platform - Improper Control of Generation of Code ('Code Injection')9.3 Critical
- code-projects simple admin panelcode-projects Simple Admin Panel updateItemController.php sql injection5.3 Medium
- code-projects simple admin panelcode-projects Simple Admin Panel updateItemController.php cross site scripting5.3 Medium
- code-projects simple admin panelcode-projects Simple Admin Panel addSizeController.php cross site scripting5.3 Medium
- code-projects simple admin panelcode-projects Simple Admin Panel addCatController.php sql injection5.3 Medium
- code-projects simple admin panelcode-projects Simple Admin Panel addCatController.php cross site scripting5.3 Medium
- code-projects student management systemcode-projects Student Management System addCatController.php sql injection5.3 Medium
- shadow-maint shadow-utils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreshadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g.,...3.6 Low
- totolink a3002r firmwareTOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via...8.8 High
- code-projects simple admin panelcode-projects Simple Admin Panel sql injection5.3 Medium
- 1000 projects attendance tracking management system1000 Projects Attendance Tracking Management System check_faculty_login.php sql injection6.9 Medium
- codezips project management systemCodezips Project Management System advanced.php sql injection5.3 Medium
- dell ecs, elastic cloud storage +1 moreDell ECS, version(s) prior to ECS 3.8.1.3, contain(s) an Authentication Bypass by Capture-replay...5.4 Medium
- dell nativeedge, nativeedge orchestrator +1 moreDell NativeEdge, version(s) 2.1.0.0, contain(s) a Creation of Temporary File With Insecure...6.5 Medium
- dell nativeedge, nativeedge orchestrator +1 moreDell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through...7.5 High
- dell nativeedge, nativeedge orchestrator +1 moreDell NativeEdge, version(s) 2.1.0.0, contain(s) an Execution with Unnecessary Privileges...7.8 High
- ibm aix, vios +1 moreIBM AIX denial of service5.5 Medium
- Show moreLoading…