Skip to content
OpenAdvisories

Archive

2 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /2 January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.3
    CVE-2024-52806 Public exploit

    SimpleSAMLphp SAML2 has an XXE in parsing SAML messages

    SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. When loading an (untrusted) XML document, for example the SAMLResponse, it's possible to induce an XXE. This vulnerability is fixed in 4.6.14 and 5.0.0-alpha.18.

    simplesamlphp saml2 simplesamlphp simplesamlphp Debian Ubuntu Packagist
  • Medium 6.5
    CVE-2024-53259 Public exploit

    quic-go affected by an ICMP Packet Too Large Injection Attack on Linux

    quic-go is an implementation of the QUIC protocol in Go. An off-path attacker can inject an ICMP Packet Too Large packet. Since affected quic-go versions used IP_PMTUDISC_DO, the kernel would then return a "message too large" error on sendmsg, i.e. when quic-…

    quic-go quic-go k3s k3s-static Debian Ubuntu Azure Linux Wolfi Go
  • High 7.8
    CVE-2024-53104 Exploited Public exploit

    media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

    In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
    KEV Feb 5, 2025
  • High 7.5
    CVE-2024-20137 Public exploit

    In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions. This could…

    MediaTek MT6890, MT7622, MT7915, MT7916, MT7981, MT7986
  • High 8.0
    CVE-2024-53375 Public exploit EPSS 42%

    An Authenticated Remote Code Execution (RCE) vulnerability affects the TP-Link Archer router series. A vulnerability ex…

  • Critical 9.1
    CVE-2024-53900 Public exploit Scanner template

    Mongoose search injection vulnerability

    Mongoose before 8.8.3 can improperly use $where in match, leading to search injection.

    mongoose npm
  • Medium 4.8
    CVE-2024-53617 Public exploit

    A Cross Site Scripting vulnerability in LibrePhotos before commit 32237 allows attackers to takeover any account via up…