Skip to content
OpenAdvisories

Archive

December 2024

Vulnerabilities first published in this month (UTC), newest first.

← November 2024 2024 / December January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 7.3
    CVE-2024-12987 Exploited Scanner template EPSS 98%

    DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection

    A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argu…

    DrayTek Vigor2960 Vigor300B Network devices
    KEV May 15, 2025
  • High 7.8
    CVE-2024-53197 Exploited

    ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the initial value used in usb_get_configura…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
    KEV Apr 9, 2025
  • High 7.1
    CVE-2024-3393 Exploited EPSS 30%

    PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet

    A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger th…

    Palo Alto Networks PAN-OS Cloud NGFW Network devices
    KEV Dec 30, 2024
  • High 7.1
    CVE-2024-53150 Exploited

    ALSA: usb-audio: Fix out of bounds reads when finding clock sources

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver code doesn't check bLength of each descriptor at traversing for clock descriptors. That is, wh…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Apr 9, 2025
  • Critical 9.3
    CVE-2024-56145 Exploited Public exploit Scanner template EPSS 97%

    RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms

    Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Users of affected versions are affected by this vulnerability if their php.ini configuration has `register_argc_argv` enabled. For these users an unspecified…

    craftcms cms craftcms/cms Packagist
    KEV Jun 2, 2025
  • Medium 6.6
    CVE-2024-12686 Exploited EPSS 33%

    Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)

    A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.

    BeyondTrust Remote Support(RS) & Privileged Remote Access(PRA)
    KEV Jan 13, 2025
  • Critical 9.8
    CVE-2024-12356 Exploited Public exploit EPSS 87%

    Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)

    A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.

    BeyondTrust Remote Support Privileged Remote Access
    KEV Dec 19, 2024
  • Critical 9.8
    CVE-2024-55956 Exploited · Ransomware Public exploit Scanner template EPSS 94%

    In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can imp…

    KEV Dec 17, 2024
  • High 7.8
    CVE-2024-49138 Exploited Public exploit EPSS 26%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Dec 10, 2024
  • Medium 4.4
    CVE-2024-55550 Exploited · Ransomware Scanner template EPSS 38%

    Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local f…

    KEV Jan 7, 2025
  • High 7.8
    CVE-2024-53104 Exploited Public exploit

    media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

    In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
    KEV Feb 5, 2025