Skip to content

CyberSecBulletin

CVEs published on December 22, 2024

7 vulnerabilities, ordered with the most urgent first.

9.8 Critical severity
TreasureHunt: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-12894Dec 22, 2024TreasureHuntGame
9.8 Critical severity
TreasureHunt: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-12895Dec 22, 2024TreasureHuntGame
8.8 High severity
Online Exam Mastering System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
CVE-2024-12890Dec 22, 2024code-projects
8.8 High severity
Online Exam Mastering System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
CVE-2024-12891Dec 22, 2024code-projects
8.8 High severity
Redcap: Cross-Site Request Forgery
CVE-2024-56310Dec 22, 2024Vanderbilt
8.8 High severity
Redcap: Cross-Site Request Forgery
CVE-2024-56311Dec 22, 2024Vanderbilt
7.5 High severity
fort-validator: Integer Underflow (Wrap or Wraparound)
CVE-2024-56375Dec 22, 2024Nicmx