Skip to content
OpenAdvisories

Archive

22 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /22 January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Medium 4.3
    CVE-2024-12897

    Intelbras VIP S4320 G2 Web Interface Sha1Account1 path traversal

    A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222. It has been classified as critical. This affects an unknown part of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipu…

    Intelbras VIP S4320 G2 VIP S3020 G2 VIP S4020 G3
  • Medium 5.3
    CVE-2024-12896

    Intelbras VIP S4320 G2 Web Interface webCapsConfig information disclosure

    A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222 and classified as problematic. Affected by this issue is some unknown functionality of the file /web_caps/webCapsConfig of the component Web Interf…

    Intelbras VIP S4320 G2 VIP S3020 G2 VIP S4020 G3
  • Medium 6.3
    CVE-2024-12895

    TreasureHuntGame TreasureHunt checkflag.php console_log sql injection

    A vulnerability has been found in TreasureHuntGame TreasureHunt up to 963e0e0 and classified as critical. Affected by this vulnerability is the function console_log of the file TreasureHunt/checkflag.php. The manipulation of the argument problema leads to sql…

    TreasureHuntGame TreasureHunt
  • Medium 6.3
    CVE-2024-12894

    TreasureHuntGame TreasureHunt acesso.php sql injection

    A vulnerability, which was classified as critical, was found in TreasureHuntGame TreasureHunt up to 963e0e0. Affected is an unknown function of the file TreasureHunt/acesso.php. The manipulation of the argument usuario leads to sql injection. It is possible t…

    TreasureHuntGame TreasureHunt
  • Low 2.4
    CVE-2024-12893

    Portabilis i-Educar Tipo de Usuário Page 2 cross site scripting

    A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2.9. Affected by this issue is some unknown functionality of the file /usuarios/tipos/2 of the component Tipo de Usuário Page. The manipulation of the argument n…

    Portabilis i-Educar
  • Low 3.5
    CVE-2024-12892

    code-projects Online Exam Mastering System sign.php cross site scripting

    A vulnerability classified as problematic was found in code-projects Online Exam Mastering System 1.0. Affected by this vulnerability is an unknown functionality of the file /sign.php?q=account.php. The manipulation of the argument name/gender/college leads t…

    code-projects Online Exam Mastering System
  • Medium 6.3
    CVE-2024-12891

    code-projects Online Exam Mastering System account.php sql injection

    A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Affected is an unknown function of the file /account.php?q=quiz&step=2. The manipulation of the argument eid leads to sql injection. It is possible to lau…

    code-projects Online Exam Mastering System
  • Medium 6.3
    CVE-2024-12890

    code-projects Online Exam Mastering System update.php sql injection

    A vulnerability was found in code-projects Online Exam Mastering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /update.php?q=quiz&step=2. The manipulation of the argument eid leads to sql injection. The atta…

    code-projects Online Exam Mastering System
  • Medium 4.3
    CVE-2024-11852

    Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization

    The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_layouts() function in all versions up …

    bdthemes Element Pack – Widgets, Templates & Addons for Elementor Web / CMS
  • High 7.5
    CVE-2024-56375

    An integer underflow was discovered in Fort 1.6.3 and 1.6.4 before 1.6.5. A malicious RPKI repository that descends fro…

    NICMx FORT-validator fort-validator Debian
  • Medium 5.4
    CVE-2024-56314

    A stored cross-site scripting (XSS) vulnerability in the Project name of REDCap through 14.9.6 allows authenticated use…

  • Medium 5.4
    CVE-2024-56313

    A stored cross-site scripting (XSS) vulnerability in the Calendar feature of REDCap through 14.9.6 allows authenticated…

  • Medium 4.3
    CVE-2024-56378

    libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine functi…

    poppler poppler Debian Ubuntu
  • Medium 5.4
    CVE-2024-56312

    A stored cross-site scripting (XSS) vulnerability in the Project Dashboard name of REDCap through 14.9.6 allows authent…

  • High 8.8
    CVE-2024-56311

    REDCap through 14.9.6 has a security flaw in the Notes section of calendar events, exposing users to a Cross-Site Reque…

  • High 8.8
    CVE-2024-56310

    REDCap through 14.9.6 has a security flaw in the Project Dashboards name, exposing users to a Cross-Site Request Forger…