CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Mobile Broadband Driver Information Disclosure Vulnerability4.6 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +16 more +18 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +16 more +18 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +5 more +7 moreWindows Kernel-Mode Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Mobile Broadband Driver Elevation of Privilege Vulnerability6.8 Medium
- microsoft sharepoint enterprise server 2016, sharepoint server 2019, sharepoint server subscription edition +1 more +3 moreMicrosoft SharePoint Remote Code Execution Vulnerability7.4 High
- microsoft excel, 365 apps, 365 apps for enterprise +8 more +10 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft sharepoint enterprise server 2016, sharepoint server 2019, sharepoint server subscription edition +1 more +3 moreMicrosoft SharePoint Elevation of Privilege Vulnerability8.2 High
- microsoft sharepoint enterprise server 2016, sharepoint server 2019, sharepoint server subscription edition +1 more +3 moreMicrosoft SharePoint Information Disclosure Vulnerability6.5 Medium
- microsoft office, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft Office Elevation of Privilege Vulnerability7.0 High
- microsoft defender for endpoint, defender for endpoint for android +1 moreMicrosoft Defender for Endpoint on Android Spoofing Vulnerability8.1 High
- microsoft system center 2019, system center 2022, system center 2025 +2 moreMicrosoft System Center Elevation of Privilege Vulnerability7.3 High
- mobatime network master clock - dts 4801MOBATIME Network Master Clock has a use of default credentials vulnerability9.3 Critical
- pnpmpnpm vulnerable to no-script global cache poisoning via overrides / `ignore-scripts` evasion5.8 Medium
- pwndocPenDoc vulnerable to Arbitrary File Read on updating and downloading templates using Path Traversal7.6 High
cosmwasm-vmcrates.io,github.com/CosmWasm/wasmvmGo,github.com/CosmWasm/wasmvm/v2Go +2 moreCosmWasm VM Incorrect meteringNo scorecosmwasm-vmcrates.io,github.com/CosmWasm/wasmvmGo,github.com/CosmWasm/wasmvm/v2Go +2 morePanic in wasmvm can slow down block productionNo scoregithub.com/CosmWasm/wasmdGoSimulation of Wasmd message can cause crashingNo score- oring iap-420, oringnet iap-420 firmware +1 moreDenial of Service6.9 Medium
- oring iap-420, oringnet iap-420 firmware +1 moreRemote Command Execution via SNMP9.3 Critical
- oring iap-420, oringnet iap-420 firmware +1 moreStored Cross-Site Scripting7.1 High
- oring iap-420, oringnet iap-420 firmware +1 moreReflected Cross-Site Scripting7.1 High
- oring iap-420, oringnet iap-420 firmware +1 moreAuthenticated Command Injection8.7 High
- ni labviewOut of bounds read in BuildFontMap in fontmgr.cpp in NI LabVIEW8.4 High
- ni labviewOut of bounds read when loading the font table in fontmgr.cpp in NI LabVIEW8.4 High
- ni labviewOut of bounds read in HeapObjMapImpl.cpp in NI LabVIEW8.4 High
- peerigon angular-expressionsAngular Expressions - Remote Code Execution when using locals9.3 Critical
- google vertex gemini apiUse of Custom URI for media inputs with VPC-SC enabled potentially leads to data exfiltration6.8 Medium
- dueclic turbosmtpturboSMTP <= 4.6 - Reflected Cross-Site Scripting via 'page'6.1 Medium
- arm cortex-a710, cortex-a77, cortex-a78 +29 more +31 moreUse of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on A77, A78, A78C,...9.8 Critical
- siemens solid edge se2024A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 10). The...7.3 High
- siemens solid edge se2024A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The...7.3 High
- siemens solid edge se2024A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The...7.3 High
- siemens parasolid, parasolid v36.1, solid edge se2024 +2 more +4 moreA vulnerability has been identified in Parasolid V36.1 (All versions < V36.1.225), Parasolid V37...7.3 High
- siemens comos v10.3, comos v10.4.0, comos v10.4.1 +4 more +6 moreA vulnerability has been identified in COMOS V10.3 (All versions < V10.3.3.5.8), COMOS V10.4.0 ...5.9 Medium
- siemens cpci85 central processing/communicationA vulnerability has been identified in CPCI85 Central Processing/Communication (All versions <...5.1 Medium
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +4 more +6 moreA vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14)...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +4 more +6 moreA vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14)...7.3 High
- siemens simatic s7-plcsim v17, simatic s7-plcsim v18, simatic step 7 safety v17 +31 more +33 moreA vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC S7-PLCSIM...7.0 High
- siemens simatic s7-plcsim v16, simatic s7-plcsim v17, simatic step 7 safety v16 +36 more +38 moreA vulnerability has been identified in SIMATIC S7-PLCSIM V16 (All versions), SIMATIC S7-PLCSIM...8.4 High
- siemens comos v10.3, comos v10.4.0, comos v10.4.1 +4 more +6 moreA vulnerability has been identified in COMOS V10.3 (All versions < V10.3.3.5.8), COMOS V10.4.0 ...5.7 Medium
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +8 more +10 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM...8.6 High
- ibm carbon chartsIBM Carbon Design System cross-site scripting5.4 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API5.3 Medium
- realmag777 active products tables for woocommerce. use constructor to create tables, active products tables for woocommerce +1 moreActive Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.5 - Unauthenticated Arbitrary Shortcode Execution via woot_get_smth7.3 High
- quantumcloud ichart – easy charts and graphsiChart – Easy Charts and Graphs <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter6.4 Medium
- wpchill simple restrictSimple Restrict <= 1.2.7 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure5.3 Medium
- dell avamar, avamar server +1 moreDell Avamar, version(s) 19.9, contain(s) an Improper Neutralization of Special Elements used in...7.1 High
- dell avamar, avamar server +1 moreDell Avamar, version(s) 19.9, contain(s) an Improper Neutralization of Special Elements used in...8.2 High
- Show moreLoading…