CVEs published December 26, 2024
66 CVEs were published on December 26, 2024: 1 critical, 6 high.
- Published
- 66
- Critical
- 1
- High
- 6
- Medium
- 54
- Low
- 5
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 22
Most affected products
- Honor Magic OS
- 11
- 1000 Projects Portfolio Management System MCA
- 10
- code-projects Simple Admin Panel
- 9
- code-projects Job Recruitment
- 6
- 1000 Projects Attendance Tracking Management System
- 2
- code-projects Travel Management System
- 2
- CodeAstro House Rental Management System
- 2
- 1000 Projects Daily College Class Work Report Book
- 1
- Broken Link Checker
- 1
- code-projects Hospital Management System
- 1
Critical 1
High 6
- CVE-2024-55950Tabby has a TCC Bypass via Unnecessary Permissive Entitlements in TabbyEugeny tabby
- CVE-2024-53850The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiationpluginsGLPI addressing
- CVE-2024-45600Fields GLPI plugin has an Authenticated SQL InjectionpluginsGLPI fields
- CVE-2024-51540Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS.Dell ECS
- CVE-2023-7300Huawei Home Music System has a path traversal vulnerability.Huawei HarmonyOS AILife Solution
- CVE-2024-54907TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc.
Medium, low and unrated 59
- CVE-2024-12969code-projects Hospital Management System Login index.php sql injectioncode-projects Hospital Management System
- CVE-2024-12968code-projects Job Recruitment _all_edits.php edit_jobpost sql injectioncode-projects Job Recruitment
- CVE-2024-56361Stored Cross-Site Scripting (XSS) in lgsl v7.0tltneon lgsl · tltneon/lgsl
- CVE-2024-45805OpenCTI leaks support information due to inadequate access controlOpenCTI-Platform opencti · pycti
- CVE-2024-12967code-projects Job Recruitment _all_edits.php fln_update sql injectioncode-projects Job Recruitment
- CVE-2024-12966code-projects Job Recruitment _all_edits.php cn_update sql injectioncode-projects Job Recruitment
- CVE-2024-56510Marp Core allows XSS by improper neutralization of HTML sanitizationmarp-team marp-core · @marp-team/marp-core
- CVE-2024-129651000 Projects Portfolio Management System MCA update_ex_detail.php sql injection1000 Projects Portfolio Management System MCA
- CVE-2024-129641000 Projects Daily College Class Work Report Book login.php sql injection1000 Projects Daily College Class Work Report Book
- CVE-2024-12963code-projects Job Recruitment _all_edits.php add_xp sql injectioncode-projects Job Recruitment
- CVE-2024-12962code-projects Job Recruitment _all_edits.php sql injectioncode-projects Job Recruitment
- CVE-2024-129611000 Projects Portfolio Management System MCA update_ach_details.php sql injection1000 Projects Portfolio Management System MCA
- CVE-2024-129601000 Projects Portfolio Management System MCA update_edu_details.php sql injection1000 Projects Portfolio Management System MCA
- CVE-2024-129591000 Projects Portfolio Management System MCA update_personal_details.php sql injection1000 Projects Portfolio Management System MCA
- CVE-2024-12908Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function,Delinea Secret Server
- CVE-2024-129581000 Projects Portfolio Management System MCA update_pro_details.php sql injection1000 Projects Portfolio Management System MCA
- CVE-2024-129561000 Projects Portfolio Management System MCA add_achievement_details.php unrestricted upload1000 Projects Portfolio Management System MCA
- CVE-2024-12955PHPGurukul Blood Bank & Donor Management System logout.php cross-site request forgeryPHPGurukul Blood Bank & Donor Management System
- CVE-2024-129541000 Projects Portfolio Management System MCA update_ach.php unrestricted upload1000 Projects Portfolio Management System MCA
- CVE-2024-129531000 Projects Portfolio Management System MCA update_pd_process.php unrestricted upload1000 Projects Portfolio Management System MCA
- CVE-2024-12952melMass comfy_mtb Dependency endpoint.py run_command code injectionmelMass comfy_mtb
- CVE-2024-129511000 Projects Portfolio Management System MCA add_personal_details.php unrestricted upload1000 Projects Portfolio Management System MCA
- CVE-2024-47150Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.Honor Magic OS
- CVE-2024-47149Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptiHonor Magic OS
- CVE-2024-47148Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptiHonor Magic OS
- CVE-2024-12950code-projects/projectworlds Travel Management System subcat.php sql injectioncode-projects Travel Management System · projectworlds Trav…
- CVE-2024-47157Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptiHonor Magic OS
- CVE-2024-47155Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.Honor Magic OS
- CVE-2024-47154Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.Honor Magic OS
- CVE-2024-47153Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.Honor Magic OS
- CVE-2024-12949code-projects Travel Management System package.php sql injectioncode-projects Travel Management System
- CVE-2024-8992Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.Honor Magic OS
- CVE-2024-8993Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.Honor Magic OS
- CVE-2024-8994Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.Honor Magic OS
- CVE-2024-47151Some Honor products are affected by file writing vulnerability, successful exploitation could cause code executionHonor Magic OS
- CVE-2024-47156Information Leak Vulnerability in Honor ProductHonor MagicOS
- CVE-2024-12948code-projects Travel Management System detail.php sql injectioncode-projects Travel Management System
- CVE-2024-12947Codezips Hospital Management System invo.php sql injectionCodezips Hospital Management System
- CVE-2024-129461000 Projects Attendance Tracking Management System admin_action.php sql injection1000 Projects Attendance Tracking Management System
- CVE-2024-12945code-projects Simple Car Rental System account.php sql injectioncode-projects Simple Car Rental System
- CVE-2024-12944CodeAstro House Rental Management System signin.php sql injectionCodeAstro House Rental Management System
- CVE-2024-12943CodeAstro House Rental Management System ownersignup.php sql injectionCodeAstro House Rental Management System
- CVE-2024-129421000 Projects Portfolio Management System MCA admin_login.php sql injection1000 Projects Portfolio Management System MCA
- CVE-2024-12941CodeAstro Blood Donor Management System deletedannounce.php sql injectionCodeAstro Blood Donor Management System
- CVE-2024-129401000 Projects Attendance Tracking Management System student_action.php sql injection1000 Projects Attendance Tracking Management System
- CVE-2024-12939code-projects Job Recruitment _all_edits.php add_edu sql injectioncode-projects Job Recruitment
- CVE-2024-12938code-projects Simple Admin Panel updateOrderStatus.php sql injectioncode-projects Simple Admin Panel
- CVE-2024-11223WPForms < 1.9.2.3 - Admin+ Stored XSSWPForms
- CVE-2024-10903Broken Link Checker < 2.4.2 - Admin+ SSRFBroken Link Checker
- CVE-2024-12937code-projects Simple Admin Panel addVariationController.php sql injectioncode-projects Simple Admin Panel
- CVE-2024-12936code-projects Simple Admin Panel catDeleteController.php sql injectioncode-projects Simple Admin Panel
- CVE-2024-12935code-projects Simple Admin Panel editItemForm.php sql injectioncode-projects Simple Admin Panel
- CVE-2024-12934code-projects Simple Admin Panel updateItemController.php sql injectioncode-projects Simple Admin Panel
- CVE-2024-12933code-projects Simple Admin Panel updateItemController.php cross site scriptingcode-projects Simple Admin Panel
- CVE-2024-12932code-projects Simple Admin Panel addSizeController.php cross site scriptingcode-projects Simple Admin Panel
- CVE-2024-12931code-projects Simple Admin Panel addCatController.php sql injectioncode-projects Simple Admin Panel
- CVE-2024-12930code-projects Simple Admin Panel addCatController.php cross site scriptingcode-projects Simple Admin Panel
- CVE-2024-12929code-projects Student Management System addCatController.php sql injectioncode-projects Student Management System
- CVE-2024-56433shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user shadow-maint shadow-utils