CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- smadar spsSmadar SPS – CWE-327: Use of a Broken or Risky Cryptographic Algorithm8.4 High
- statamic cmsTiki Wiki CMS – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7.5 High
- statamic cmsTiki Wiki CMS – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')9.8 Critical
- statamic cmsTiki Wiki CMS – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.1 Medium
- mobotix cctv fwMobotix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7.5 High
- zte zenic one r58ZTE ZENIC ONE R58 product has a CSV injection vulnerability7.6 High
govulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo score- code-projects simple chat systemcode-projects Simple Chat System add_user.php sql injection5.3 Medium
- codeastro simple loan management systemCodeAstro Simple Loan Management System Login index.php sql injection6.9 Medium
- 1000 projects attendance tracking management system1000 Projects Attendance Tracking Management System report.php attendance_report sql injection5.3 Medium
- code-projects chat systemcode-projects Chat System update_room.php sql injection5.3 Medium
- code-projects chat systemcode-projects Chat System update_user.php sql injection5.3 Medium
- code-projects chat systemcode-projects Chat System update_user.php cross site scripting5.3 Medium
- code-projects chat systemcode-projects Chat System chatroom.php cross site scripting5.3 Medium
- antabot white-jotterAntabot White-Jotter Article Editor editor server-side request forgery5.1 Medium
- antabot white-jotterAntabot White-Jotter Article Content Editor editor cross site scripting5.1 Medium
- d-link dir-823g, dlink dir-823g firmware +1 moreD-Link DIR-823G Web Management Interface HNAP1 SetVirtualServerSettings access control6.9 Medium
- teampassTeamPass privileges issue5.4 Medium
- teampassTeamPass mail_me operation authorization issue5.4 Medium
- teampassTeamPass does not properly check whether a folder is in a user's allowed folders list4.3 Medium
- veritas data insightVeritas / Arctera Data Insight before 7.1.1 allows Application Administrators to conduct SQL...6.5 Medium
- antabot white-jotterAntabot White-Jotter Edit Book book server-side request forgery5.3 Medium
- antabot white-jotterAntabot White-Jotter login observable response discrepancy6.3 Medium
- codezips college management systemCodezips College Management System faculty.php sql injection5.3 Medium
- code-projects blood bank management systemCodezips Blood Bank Management System campaign.php sql injection5.3 Medium
- phpgurukul maid hiring management systemPHPGurukul Maid Hiring Management System Search Maid Page search-maid.php cross site scripting5.1 Medium
- taisan tarzan-cmstaisan tarzan-cms Article Management UploadController.java UploadResponse unrestricted upload5.3 Medium
- rems road accident map markerSourceCodester Road Accident Map Marker add-mark.php cross site scripting5.3 Medium
- code-projects chat systemcode-projects Chat System chatroom.php sql injection5.3 Medium
- code-projects chat systemcode-projects Chat System Chat Room Page update_room.php cross site scripting5.3 Medium
- phpgurukul maid hiring management systemPHPGurukul Maid Hiring Management System profile.php cross site scripting5.1 Medium
- phpgurukul maid hiring management systemPHPGurukul Maid Hiring Management System About Us Page aboutus.php cross site scripting5.1 Medium
- phpgurukul maid hiring management systemPHPGurukul Maid Hiring Management System edit-category.php sql injection5.3 Medium
- phpgurukul maid hiring management systemPHPGurukul Maid Hiring Management System search-booking-request.php cross site scripting5.1 Medium
- phpgurukul maid hiring management systemPHPGurukul Maid Hiring Management System search-maid.php sql injection5.3 Medium
- phpgurukul maid hiring management systemPHPGurukul Maid Hiring Management System Contact Us Page contactus.php cross site scripting5.1 Medium
- code-projects hostel management systemcode-projects Hostel Management System registration.php cross site scripting5.3 Medium
- linux, linux kernel +1 morenvme-pci: fix freeing of the HMB descriptor table5.5 Medium
- linux, linux kernel +1 morenetfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING5.5 Medium
- linux, linux kernel +1 morecrypto: caam - Fix the pointer passed to caam_qi_shutdown()5.5 Medium
- linux, linux kernel +1 moredrm/amdgpu/gfx9: Add Cleaner Shader Deinitialization in gfx_v9_0 Module5.5 Medium
- linux, linux kernel +1 moredrm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()5.5 Medium
- linux, linux kernel +1 moreipv6: release nexthop on device removal5.5 Medium
- linux, linux kernel +1 moreerofs: fix blksize < PAGE_SIZE for file-backed mounts5.5 Medium
- linux, linux kernel +1 moredlm: fix dlm_recover_members refcount on error7.5 High
- linux, linux kernel +1 morescsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()5.5 Medium
- linux, linux kernel +1 morescsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()5.5 Medium
- linux, linux kernel +1 morefbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()5.5 Medium
- linux, linux kernel +1 morePCI: Fix reset_method_store() memory leak5.5 Medium
- linux, linux kernel +1 moref2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()5.5 Medium
- Show moreLoading…