Skip to content
OpenAdvisories

Archive

December 2024

Vulnerabilities first published in this month (UTC), newest first.

← November 2024 2024 / December January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

120 results · Clear filters · Feed

  • High 8.8
    CVE-2024-55587 Public exploit

    python-libarchive directory traversal

    python-libarchive through 4.2.1 allows directory traversal (to create files) in extract in zip.py for ZipFile.extractall and ZipFile.extract.

    python-libarchive PyPI
  • High 7.8
    CVE-2024-49138 Exploited Public exploit EPSS 26%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Dec 10, 2024
  • High 7.5
    CVE-2024-49113 Public exploit EPSS 84%

    Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

    Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Critical 9.8
    CVE-2024-49112 Public exploit EPSS 72%

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • High 8.8
    CVE-2024-49117 Public exploit

    Windows Hyper-V Remote Code Execution Vulnerability

    Windows Hyper-V Remote Code Execution Vulnerability

    Microsoft Windows Server 2022 Windows Server 2025 Windows Server 2025 (Server Core installation) Windows
  • Critical 9.3
    CVE-2024-54152 Public exploit

    Angular Expressions - Remote Code Execution when using locals

    Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex (undis…

    peerigon angular-expressions angular-expressions npm
  • High 8.6
    CVE-2024-21542 Public exploit

    luigi Arbitrary File Write via Archive Extraction (Zip Slip)

    Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive function.

    luigi PyPI
  • Medium 4.3
    CVE-2023-30486 Public exploit

    WordPress Square theme <= 2.0.0 - Broken Access Control

    Missing Authorization vulnerability in HashThemes Square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through 2.0.0.

    HashThemes Square
  • Critical 9.8
    CVE-2023-32117 Public exploit Scanner template

    WordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability

    Missing Authorization vulnerability in SoftLab Integrate Google Drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through 1.1.99.

    SoftLab Integrate Google Drive
  • Medium 6.3
    CVE-2024-12344 Public exploit

    TP-Link VN020 F3v(T) FTP USER Command memory corruption

    A vulnerability, which was classified as critical, was found in TP-Link VN020 F3v(T) TT_V6.2.1021. This affects an unknown part of the component FTP USER Command Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remot…

    TP-Link Systems VN020 F3v(T) Network devices
  • Medium 6.5
    CVE-2024-12342 Public exploit

    TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service

    A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as critical. This issue affects some unknown processing of the file /control/WANIPConnection of the component Incomplete SOAP Request Handler. The manipulation leads to denial o…

    TP-Link Systems VN020 F3v(T) Network devices
  • Critical 9.8
    CVE-2024-12209 Public exploit Scanner template EPSS 23%

    WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion

    The WP Umbrella: Update Backup Restore & Monitoring plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.17.0 via the 'filename' parameter of the 'umbrella-restore' action. This makes it possible for unauthenticat…

    wphealth WP Umbrella: Update Backup Restore & Monitoring Web / CMS
  • High 7.5
    CVE-2024-12270 Public exploit

    Beautiful Taxonomy Filters <= 2.4.3 - Unauthenticated SQL Injection

    The Beautiful taxonomy filters plugin for WordPress is vulnerable to SQL Injection via the 'selects[0][term]' parameter in all versions up to, and including, 2.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation …

    Jonathan de Jong Beautiful taxonomy filters Web / CMS
  • Medium 6.8
    CVE-2024-50404 Public exploit

    Qsync Central

    A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fixed the vulnerability in …

    QNAP Systems Qsync Central
  • High 8.7
    CVE-2024-53691 Public exploit EPSS 23%

    QTS, QuTS hero

    A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fi…

    QNAP Systems QTS QuTS hero
  • High 8.1
    CVE-2024-10516 Public exploit Scanner template

    Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'

    The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on …

    swte Swift Performance Lite Web / CMS
  • High 7.5
    CVE-2024-11728 Public exploit Scanner template EPSS 14%

    KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection

    The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection via the 'visit_type[service_id]' parameter of the tax_calculated_data AJAX action in all versions up to, and including, 3.6.4 due to insufficient escap…

    Iqonic Design KiviCare – Clinic & Patient Management System (EHR) Web / CMS
  • High 8.8
    CVE-2024-10578 Public exploit

    Pubnews <= 1.0.7 - Authenticated (Subscriber+) Arbitrary Plugin Installation

    The Pubnews theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pubnews_importer_plugin_action_for_notice() function in all versions up to, and including, 1.0.7. This makes it possible for a…

    blazethemes Pubnews Web / CMS
  • Medium 6.4
    CVE-2024-11201 Public exploit

    myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode

    The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin…

    Saad Iqbal Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred Web / CMS
  • Medium 6.1
    CVE-2024-50677 Public exploit

    A cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or…

  • High 8.1
    CVE-2024-53703 Public exploit EPSS 13%

    A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded b…

    SonicWall SMA100 Network devices
  • Medium 5.5
    CVE-2024-12227 Public exploit

    MSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereference

    A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLib_X64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. I…

    MSI Dragon Center
  • Critical 10.0
    CVE-2024-51550 Public exploit

    Data Validation / Sanitization

    Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • High 7.5
    CVE-2024-51546 Public exploit

    Credentails Disclosure

    Credentials Disclosure vulnerabilities allow access to on board project back-up bundles.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • High 7.1
    CVE-2024-48846 Public exploit

    Cross Side Request Forgery, CSRF

    Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • Critical 9.4
    CVE-2024-48845 Public exploit

    Weak Password Rules/Strength

    Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access.  Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Ser…

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • High 7.7
    CVE-2024-48844 Public exploit

    Denial of Service, DoS

    Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • Critical 10.0
    CVE-2024-48840 Public exploit

    Unauthorized Access

    Unauthorized Access vulnerabilities allow Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • Critical 10.0
    CVE-2024-48839 Public exploit

    Remote Code Execution, RCE

    Improper Input Validation vulnerability allows Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • Critical 9.0
    CVE-2024-6516 Public exploit

    Cross Site Scripting XSS

    Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • Medium 4.3
    CVE-2024-54679 Public exploit

    CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions.

  • High 8.8
    CVE-2024-11643 Public exploit

    Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update

    The Accessibility by AllAccessible plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'AllAccessible_save_settings' function in all versions up to, and includi…

    AllAccessible Accessibility by AllAccessible Web / CMS
  • High 7.8
    CVE-2024-29404 Public exploit

    An issue in Razer Synapse 3 v.3.9.131.20813 and Synapse 3 App v.20240213 allows a local attacker to execute arbitrary c…

  • High 8.3
    CVE-2024-52806 Public exploit

    SimpleSAMLphp SAML2 has an XXE in parsing SAML messages

    SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. When loading an (untrusted) XML document, for example the SAMLResponse, it's possible to induce an XXE. This vulnerability is fixed in 4.6.14 and 5.0.0-alpha.18.

    simplesamlphp saml2 simplesamlphp simplesamlphp Debian Ubuntu Packagist
  • Medium 6.5
    CVE-2024-53259 Public exploit

    quic-go affected by an ICMP Packet Too Large Injection Attack on Linux

    quic-go is an implementation of the QUIC protocol in Go. An off-path attacker can inject an ICMP Packet Too Large packet. Since affected quic-go versions used IP_PMTUDISC_DO, the kernel would then return a "message too large" error on sendmsg, i.e. when quic-…

    quic-go quic-go k3s k3s-static Debian Ubuntu Azure Linux Wolfi Go
  • High 7.8
    CVE-2024-53104 Exploited Public exploit

    media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

    In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
    KEV Feb 5, 2025
  • High 7.5
    CVE-2024-20137 Public exploit

    In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions. This could…

    MediaTek MT6890, MT7622, MT7915, MT7916, MT7981, MT7986
  • High 8.0
    CVE-2024-53375 Public exploit EPSS 42%

    An Authenticated Remote Code Execution (RCE) vulnerability affects the TP-Link Archer router series. A vulnerability ex…

  • Critical 9.1
    CVE-2024-53900 Public exploit Scanner template

    Mongoose search injection vulnerability

    Mongoose before 8.8.3 can improperly use $where in match, leading to search injection.

    mongoose npm
  • Medium 4.8
    CVE-2024-53617 Public exploit

    A Cross Site Scripting vulnerability in LibrePhotos before commit 32237 allows attackers to takeover any account via up…