Skip to content
OpenAdvisories

Archive

17 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /17 January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-50379 Public exploit EPSS 32%

    Apache Tomcat: RCE due to TOCTOU issue in JSP compilation

    Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configuration). This issue affects Apache Tomcat…

    Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  • Critical 9.8
    CVE-2024-12356 Exploited Public exploit EPSS 87%

    Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)

    A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.

    BeyondTrust Remote Support Privileged Remote Access
    KEV Dec 19, 2024