CVEs published December 22, 2024
16 CVEs were published on December 22, 2024: 0 critical, 3 high.
- Published
- 16
- Critical
- 0
- High
- 3
- Medium
- 13
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- code-projects Online Exam Mastering System
- 3
- Intelbras VIP S3020 G2 · Intelbras VIP S4020 G2 +2
- 2
- TreasureHuntGame TreasureHunt
- 2
- bdthemes Element Pack – Widgets, Templates & Addons for Ele…
- 1
- nicmx fort-validator
- 1
- Portabilis i-Educar
- 1
High 3
- CVE-2024-56310REDCap through 14.9.6 has a security flaw in the Project Dashboards name, exposing users to a Cross-Site Request Forgery (CSRF) attack.
- CVE-2024-56311REDCap through 14.9.6 has a security flaw in the Notes section of calendar events, exposing users to a Cross-Site Request Forgery (CSRF) att
- CVE-2024-56375An integer underflow was discovered in Fort 1.6.3 and 1.6.4 before 1.6.5.nicmx fort-validator
Medium, low and unrated 13
- CVE-2024-12897Intelbras VIP S4320 G2 Web Interface Sha1Account1 path traversalIntelbras VIP S3020 G2 · Intelbras VIP S4020 G2 +2
- CVE-2024-12896Intelbras VIP S4320 G2 Web Interface webCapsConfig information disclosureIntelbras VIP S3020 G2 · Intelbras VIP S4020 G2 +2
- CVE-2024-12895TreasureHuntGame TreasureHunt checkflag.php console_log sql injectionTreasureHuntGame TreasureHunt
- CVE-2024-12894TreasureHuntGame TreasureHunt acesso.php sql injectionTreasureHuntGame TreasureHunt
- CVE-2024-12893Portabilis i-Educar Tipo de Usuário Page 2 cross site scriptingPortabilis i-Educar
- CVE-2024-12892code-projects Online Exam Mastering System sign.php cross site scriptingcode-projects Online Exam Mastering System
- CVE-2024-12891code-projects Online Exam Mastering System account.php sql injectioncode-projects Online Exam Mastering System
- CVE-2024-12890code-projects Online Exam Mastering System update.php sql injectioncode-projects Online Exam Mastering System
- CVE-2024-11852Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorizationbdthemes Element Pack – Widgets, Templates & Addons for Ele…
- CVE-2024-56312A stored cross-site scripting (XSS) vulnerability in the Project Dashboard name of REDCap through 14.9.6 allows authenticated users to injec
- CVE-2024-56313A stored cross-site scripting (XSS) vulnerability in the Calendar feature of REDCap through 14.9.6 allows authenticated users to inject mali
- CVE-2024-56314A stored cross-site scripting (XSS) vulnerability in the Project name of REDCap through 14.9.6 allows authenticated users to inject maliciou
- CVE-2024-56378libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc.