CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- anisha job recruitmentcode-projects Job Recruitment _all_edits.php cn_update cross site scripting6.9 Medium
- anisha job recruitmentcode-projects Job Recruitment _all_edits.php add_req sql injection6.9 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management System state.php sql injection5.3 Medium
- code-projects hospital management systemCodeZips Hospital Management System staff.php sql injection6.9 Medium
libvipsOSS-FuzzUNKNOWN READ in _TIFFVSetFieldNo score- tcpdf project tcpdfTCPDF missing character escape on error messages7.5 High
- tcpdf project tcpdfTCPDF has incorrect comparison7.5 High
- tcpdf project tcpdfTCPDF missing certificate validation9.8 Critical
- tecnick tcpdftecnickcom/tc-lib-pdf-font mishandles fonts7.3 High
- tcpdf project tcpdfTCPDF lacks SVG sanitization7.5 High
- dcatadmin dcat adminDcat-Admin Cross-Site Scripting (XSS) vulnerability4.8 Medium
- dcatadmin dcat adminDcat Admin Cross-site Scripting (XSS) vulnerability4.8 Medium
- No product listedAn issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18,...5.3 Medium
- No product listedAn issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18,...7.5 High
- No product listedAn issue was discovered in Kurmi Provisioning Suite before 7.9.0.35 and 7.10.x through 7.10.0.18....4.9 Medium
- No product listedA cross-site scripting (XSS) vulnerability in the graphicCustomization.do page in Kurmi...4.8 Medium
- No product listedAn issue was discovered in Kurmi Provisioning Suite 7.9.0.33. If an X-Forwarded-For header is...9.4 Critical
- No product listedA race condition vulnerability in SimplCommerce at commit...5.9 Medium
- No product listedAn improper access control vulnerability exists in SimplCommerce at commit...7.5 High
- No product listedInteger overflow vulnerability exists in SimplCommerce at commit...9.8 Critical
- smarts-srl smart agentSQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary...9.8 Critical
- smarts-srl smart agentSQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary...9.8 Critical
- smarts-srl smart agentAn issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive...7.5 High
- No product listedA Server-Side Request Forgery (SSRF) in smarts-srl.com Smart Agent v.1.1.0 allows a remote...7.5 High
- smarts-srl smart agentSmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at...9.8 Critical
lettaPyPILetta (previously MemGPT) incorrect access control vulnerability7.5 High- code-projects hospital management systemcode-projects Hospital Management System Login index.php sql injection6.9 Medium
- code-projects job recruitmentcode-projects Job Recruitment _all_edits.php edit_jobpost sql injection6.9 Medium
- eugeny tabbyTabby has a TCC Bypass via Unnecessary Permissive Entitlements in Tabby8.6 High
- pluginsglpi addressingThe Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation8.2 High
- citeum openctiOpenCTI leaks support information due to inadequate access control4.3 Medium
- code-projects job recruitmentcode-projects Job Recruitment _all_edits.php fln_update sql injection6.9 Medium
- pluginsglpi fieldsFields GLPI plugin has an Authenticated SQL Injection7.7 High
- code-projects job recruitmentcode-projects Job Recruitment _all_edits.php cn_update sql injection6.9 Medium
- 1000 projects portfolio management system mca1000 Projects Portfolio Management System MCA update_ex_detail.php sql injection6.9 Medium
- tltneon lgslStored Cross-Site Scripting (XSS) in lgsl v7.05.3 Medium
- 1000 projects daily college class work report book1000 Projects Daily College Class Work Report Book login.php sql injection6.9 Medium
- code-projects job recruitmentcode-projects Job Recruitment _all_edits.php add_xp sql injection6.9 Medium
- anisha job recruitmentcode-projects Job Recruitment _all_edits.php sql injection6.9 Medium
- marp-team marp-coreMarp Core allows XSS by improper neutralization of HTML sanitization5.3 Medium
- 1000 projects portfolio management system mca1000 Projects Portfolio Management System MCA update_ach_details.php sql injection6.9 Medium
- 1000 projects portfolio management system mca1000 Projects Portfolio Management System MCA update_edu_details.php sql injection6.9 Medium
- 1000 projects portfolio management system mca1000 Projects Portfolio Management System MCA update_personal_details.php sql injection6.9 Medium
- dell ecs, elastic cloud storage +1 moreDell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in...8.1 High
- delinea secret serverDelinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26)...6.9 Medium
- 1000 projects portfolio management system mca1000 Projects Portfolio Management System MCA update_pro_details.php sql injection6.9 Medium
- 1000 projects portfolio management system mca1000 Projects Portfolio Management System MCA add_achievement_details.php unrestricted upload5.3 Medium
- phpgurukul blood bank & donor management system, blood bank \& donor management system +1 morePHPGurukul Blood Bank & Donor Management System logout.php cross-site request forgery6.9 Medium
- 1000 projects portfolio management system mca1000 Projects Portfolio Management System MCA update_ach.php unrestricted upload5.3 Medium
- 1000 projects portfolio management system mca1000 Projects Portfolio Management System MCA update_pd_process.php unrestricted upload5.3 Medium
- Show moreLoading…