Skip to content
OpenAdvisories

Archive

27 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /27 January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.2
    CVE-2024-12856 Public exploit EPSS 84%

    Four-Faith Industrial Router adjust_sys_time OS Command Injection

    The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to execute arbitrary OS commands over HTTP when modifying the system…

    Four-Faith F3x36 F3x24
  • High 7.3
    CVE-2024-12986 Public exploit EPSS 36%

    DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injection

    A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi/apmcfgupptim of the component Web Management Interface. The …

    DrayTek Vigor2960 Vigor300B Network devices
  • Medium 4.8
    CVE-2024-11605 Public exploit

    WP Publications <= 1.2 - Admin+ Stored XSS

    The wp-publications WordPress plugin through 1.2 does not escape filenames before outputting them back in the page, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is…

    Web / CMS
  • Critical 9.8
    CVE-2024-50944 Public exploit

    Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shoppi…

  • High 7.5
    CVE-2024-50945 Public exploit

    An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, al…

  • Medium 5.9
    CVE-2024-53476 Public exploit

    A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to …