Skip to content
OpenAdvisories

Archive

December 2024

Vulnerabilities first published in this month (UTC), newest first.

← November 2024 2024 / December January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.3
    CVE-2024-12987 Exploited Scanner template EPSS 98%

    DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection

    A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argu…

    DrayTek Vigor2960 Vigor300B Network devices
    KEV May 15, 2025
  • High 7.8
    CVE-2024-53197 Exploited

    ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the initial value used in usb_get_configura…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
    KEV Apr 9, 2025
  • High 7.1
    CVE-2024-3393 Exploited EPSS 30%

    PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet

    A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger th…

    Palo Alto Networks PAN-OS Cloud NGFW Network devices
    KEV Dec 30, 2024
  • High 7.1
    CVE-2024-53150 Exploited

    ALSA: usb-audio: Fix out of bounds reads when finding clock sources

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver code doesn't check bLength of each descriptor at traversing for clock descriptors. That is, wh…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Apr 9, 2025
  • High 7.8
    CVE-2024-49138 Exploited Public exploit EPSS 26%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Dec 10, 2024
  • High 7.8
    CVE-2024-53104 Exploited Public exploit

    media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

    In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
    KEV Feb 5, 2025