CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- themehunk hunk companionHunk Companion < 1.9.0 - Unauthenticated Plugin Installation9.8 Critical
- red hat fuse 7, openshift container platform 4.12, openshift container platform 4.13 +6 more +8 moreOpenshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentials7.6 High
- quanta computer qoca aimQuanta Computer QOCA aim - Authorization Bypass8.8 High
- changing information technology cgfidoChanging Information Technology CGFIDO - Authentication Bypass8.8 High
- changing information technology cgfidoChanging Information Technology CGFIDO - Authentication Bypass8.8 High
debootstrapDebiandebootstrap - security updateNo score@swiggy-private/aatm-nirbhar-buildnpmWithdrawn Advisory: Malware in @swiggy-private/aatm-nirbhar-buildNo score@swiggy-private/analyticsnpmWithdrawn Advisory: Malware in @swiggy-private/analyticsNo score@swiggy-private/aatm-nirbhar-uinpmWithdrawn Advisory: Malware in @swiggy-private/aatm-nirbhar-uiNo score@swiggy-private/aatm-nirbhar-bharat-uinpmWithdrawn Advisory: Malware in @swiggy-private/aatm-nirbhar-bharat-uiNo score@swiggy-private/dls-web-corenpmWithdrawn Advisory: Malware in @swiggy-private/dls-web-coreNo score@swiggy-private/js-utilsnpmWithdrawn Advisory: Malware in @swiggy-private/js-utilsNo score- softiron hypercloudAuthenticated, non-admin users can create storage pools via the sifi API4.8 Medium
- tsinghua unigroup electronic archives management systemTsinghua Unigroup Electronic Archives Management System download.html download information disclosure5.3 Medium
- ashlar graphiteAshlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- ashlar graphiteAshlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt AR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Link Following Local Privilege Escalation Vulnerability6.7 Medium
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader AcroForm Memory Corruption Remote Code Execution Vulnerability7.8 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- panda security dome, watchguard panda dome +1 morePanda Security Dome Link Following Local Privilege Escalation Vulnerability7.8 High
- ixsystems truenas core, truenas firmware +1 moreiXsystems TrueNAS CORE fetch_plugin_packagesites tar Cleartext Transmission of Sensitive Information Vulnerability3.1 Low
- ixsystems truenas core, truenas firmware +1 moreiXsystems TrueNAS CORE tarfile.extractall Directory Traversal Remote Code Execution Vulnerability7.5 High
- firecrawlFirecrawl Playwright Service SSRF Protection Bypass via Missing Post-Redirect Validation7.8 High
- firecrawlFirecrawl has SSRF Vulnerability via malicious scrape target7.4 High
- truewinter simofaSimofa Allows Unauthenticated Access to API Routes10.0 Critical
- infotel tasklistsTasklists has Blind SQL Injection in /ajax/reorder.php6.9 Medium
- anydeskAnyDesk Link Following Information Disclosure Vulnerability5.5 Medium
- delta electronics drasimucadDelta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- delta electronics drasimucadDelta Electronics DRASimuCAD ICS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- delta electronics drasimucadDelta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- better-auth better auth, better-auth +1 moreBetter Auth has an Open Redirect Vulnerability in Verify Email Endpoint7.9 High
- webminWebmin CGI Command Injection Remote Code Execution Vulnerability9.9 Critical
- pglombardo passwordpusherPassword Pusher Allows Session Token Interception Leading to Potential Hijacking5.7 Medium
- tltneon lgslLGSL has a reflected XSS at /lgsl_files/lgsl_list.php5.3 Medium
- rockchinq free-one-apifree-one-api uses md5 for password storage6.9 Medium
- khoj-ai khojkhoj has an IDOR in subscription management that allows unauthorized subscription modifications4.3 Medium
- ibm websphere automationIBM WebSphere Automation command injection7.2 High
- lm-sys fastchat, lm-sys/fastchat +1 moreSSRF in POST /worker_generate_stream API endpoint in lm-sys/fastchat9.3 Critical
- infinix mobile com.rlk.weathersLocation information exposure in Infinix Weather app4.8 Medium
- tecnick tcexamTecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')9.8 Critical
- tecnick tcexamTecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7.5 High
- boa web webBoa web server – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7.5 High
- mashovMashov – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium
- priority pri webPriority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor7.5 High
- Show moreLoading…