Skip to content
OpenAdvisories

Archive

7 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /7 January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.8
    CVE-2024-47115

    IBM AIX command execution

    IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local user to execute arbitrary commands on the system due to improper neutralization of input.

    IBM AIX
  • High 8.8
    CVE-2024-11501

    Gallery <= 1.3 - Authenticated (Contributor+) PHP Object Injection

    The Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3 via deserialization of untrusted input from wd_gallery_$id parameter. This makes it possible for authenticated attackers, with Contributor-level a…

    webdzier Gallery Web / CMS
  • High 7.2
    CVE-2024-11010

    FileOrganizer <= 1.1.4 - Authenticated (Administrator+) Local JavaScript File Inclusion

    The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 1.1.4 via the 'default_lang' parameter. This makes it possible for authenticated attackers, with…

    Softaculous FileOrganizer – WordPress File Manager Web / CMS
  • High 7.5
    CVE-2024-12270 Public exploit

    Beautiful Taxonomy Filters <= 2.4.3 - Unauthenticated SQL Injection

    The Beautiful taxonomy filters plugin for WordPress is vulnerable to SQL Injection via the 'selects[0][term]' parameter in all versions up to, and including, 2.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation …

    Jonathan de Jong Beautiful taxonomy filters Web / CMS
  • High 7.8
    CVE-2024-53143

    fsnotify: Fix ordering of iput() and watched_objects decrement

    In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix ordering of iput() and watched_objects decrement Ensure the superblock is kept alive until we're done with iput(). Holding a reference to an inode is not allowed unless we ensur…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2024-53473

    WeGIA 3.2.0 before 3998672 does not verify permission to change a password.