Skip to content
OpenAdvisories

Archive

15 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /15 January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • High 7.5
    CVE-2024-8798

    Bluetooth: classic: avdtp: missing buffer length check

    No proper validation of the length of user input in olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.c.

    zephyrproject-rtos Zephyr
  • High 8.6
    CVE-2024-11858

    Radare2: command injection via pebble application files in radare2

    A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during command parsing, leading to unintended be…

    radare2 Ubuntu
  • Medium 5.1
    CVE-2024-7701

    Misuse of SHA256 to create an encryption key

    Use of Password Hash With Insufficient Computational Effort vulnerability in percona percona-toolkit allows Encryption Brute Forcing.This issue affects percona-toolkit: 3.6.0.

    Percona percona-toolkit percona-toolkit Debian
  • High 7.5
    CVE-2024-55970

    File Manager in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 has a traversal issue that is related to the…

  • Critical 9.1
    CVE-2024-55969

    DocIO in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 throws XMLException during the resaving of a DOCX d…

  • High 7.5
    CVE-2024-56072

    An issue was discovered in FastNetMon Community Edition through 1.2.7. The sFlow v5 plugin allows remote attackers to c…

    fastnetmon fastnetmon Debian Ubuntu
  • Medium 5.5
    CVE-2024-56074

    gitingest before 9996a06 mishandles symbolic links that point outside of the base directory.

  • High 7.5
    CVE-2024-56073

    An issue was discovered in FastNetMon Community Edition through 1.2.7. Zero-length templates for Netflow v9 allow remot…

    fastnetmon fastnetmon Debian Ubuntu
  • Low 3.5
    CVE-2024-56082

    ChatBar.tsx in Lumos before 1.0.17 parses raw HTML in Markdown because the markdown-to-jsx package is used without disa…