Skip to content
OpenAdvisories

Archive

11 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /11 January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.8
    CVE-2024-54498 Public exploit

    A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 1…

    Apple macOS macOS
  • High 7.3
    CVE-2024-12484 Public exploit

    Codezips Technical Discussion Forum signuppost.php sql injection

    A vulnerability classified as critical was found in Codezips Technical Discussion Forum 1.0. This vulnerability affects unknown code of the file /signuppost.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated rem…

    CodeZips Technical Discussion Forum
  • Low 3.7
    CVE-2024-12483 Public exploit

    Dromara UJCMS User ID id authorization

    A vulnerability classified as problematic has been found in Dromara UJCMS up to 9.6.3. This affects an unknown part of the file /users/id of the component User ID Handler. The manipulation leads to authorization bypass. It is possible to initiate the attack r…

    dromara UJCMS
  • Critical 9.1
    CVE-2024-45337 Public exploit

    Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

    Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function do…

    golang.org/x/crypto golang.org/x/crypto/ssh katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Critical 9.9
    CVE-2024-42448 Public exploit EPSS 20%

    From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is po…

    Veeam Service Provider Console
  • High 8.8
    CVE-2024-12381 Public exploit

    Type Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap cor…

    Google Chrome chromium chromium Browsers Debian Wolfi
  • Critical 9.5
    CVE-2024-53677 Public exploit EPSS 72%

    Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks

    File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. This issue affec…

    Apache Software Foundation Apache Struts org.apache.struts:struts2-core Maven
  • Medium 5.3
    CVE-2024-10511 Public exploit

    CWE-287: Improper Authentication vulnerability exists that could cause Denial of access to the web interface when someo…

    Schneider Electric PowerChute™ Serial Shutdown ICS / OT
  • High 8.8
    CVE-2024-55587 Public exploit

    python-libarchive directory traversal

    python-libarchive through 4.2.1 allows directory traversal (to create files) in extract in zip.py for ZipFile.extractall and ZipFile.extract.

    python-libarchive PyPI