Skip to content
OpenAdvisories

Archive

8 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /8 January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Medium 5.3
    CVE-2024-12347

    Guangzhou Huayi Intelligent Technology Jeewms Druid Monitoring Interface index.html improper authorization

    A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms up to 1.0.0 and classified as critical. This issue affects some unknown processing of the file /jeewms_war/webpage/system/druid/index.html of the component Druid Monitoring Interface. …

    Guangzhou Huayi Intelligent Technology Jeewms
  • Low 3.5
    CVE-2024-12346

    Talentera byt_cv_manager cross site scripting

    A vulnerability has been found in Talentera up to 20241128 and classified as problematic. This vulnerability affects unknown code of the file /app/control/byt_cv_manager. The manipulation of the argument redirect_url leads to cross site scripting. The attack …

  • Medium 6.3
    CVE-2024-12344 Public exploit

    TP-Link VN020 F3v(T) FTP USER Command memory corruption

    A vulnerability, which was classified as critical, was found in TP-Link VN020 F3v(T) TT_V6.2.1021. This affects an unknown part of the component FTP USER Command Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remot…

    TP-Link Systems VN020 F3v(T) Network devices
  • Medium 6.5
    CVE-2024-12343

    TP-Link VN020 F3v(T) SOAP Request WANIPConnection buffer overflow

    A vulnerability classified as critical has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected is an unknown function of the file /control/WANIPConnection of the component SOAP Request Handler. The manipulation of the argument NewConnectionType leads to…

    TP-Link Systems VN020 F3v(T) Network devices
  • Medium 6.5
    CVE-2024-12342 Public exploit

    TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service

    A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as critical. This issue affects some unknown processing of the file /control/WANIPConnection of the component Incomplete SOAP Request Handler. The manipulation leads to denial o…

    TP-Link Systems VN020 F3v(T) Network devices
  • Critical 9.8
    CVE-2024-12209 Public exploit Scanner template EPSS 23%

    WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion

    The WP Umbrella: Update Backup Restore & Monitoring plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.17.0 via the 'filename' parameter of the 'umbrella-restore' action. This makes it possible for unauthenticat…

    wphealth WP Umbrella: Update Backup Restore & Monitoring Web / CMS
  • Critical 9.8
    CVE-2024-55560

    MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that pers…