CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- adobe animateAnimate | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe animateAnimate | Access of Uninitialized Pointer (CWE-824)7.8 High
- adobe animateAnimate | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe animateAnimate | NULL Pointer Dereference (CWE-476)7.8 High
- adobe animateAnimate | Improper Input Validation (CWE-20)7.8 High
- adobe animateAnimate | Use After Free (CWE-416)7.8 High
- adobe animateAnimate | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe animateAnimate | Buffer Underwrite ('Buffer Underflow') (CWE-124)7.8 High
- adobe animateAnimate | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe animateAnimate | Integer Overflow or Wraparound (CWE-190)7.8 High
- adobe animateAnimate | Out-of-bounds Write (CWE-787)7.8 High
- adobe animateAnimate | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe animateAnimate | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe illustratorIllustrator | Out-of-bounds Write (CWE-787)7.8 High
- adobe illustratorIllustrator | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe after effectsAfter Effects | Stack-based Buffer Overflow (CWE-121)7.8 High
- adobe media encoderMedia Encoder | Out-of-bounds Write (CWE-787)7.8 High
- adobe media encoderMedia Encoder | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe media encoderMedia Encoder | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe media encoderMedia Encoder | Out-of-bounds Write (CWE-787)7.8 High
- microsoft remote desktop client, remote desktop client for windows desktop, windows 10 version 1507 +34 more +36 moreRemote Desktop Client Remote Code Execution Vulnerability8.4 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)6.3 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
ultralyticsPyPIA number of releases of ultralytics contained malicious crypto miner software.8.7 High- ivanti cloud services application, cloud services appliance +1 moreSQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote...9.1 Critical
- ivanti cloud services application, cloud services appliance +1 moreCommand injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote...9.1 Critical
- ivanti cloud services application, cloud services appliance +1 moreAn authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote...10.0 Critical
- ivanti desktop and server management, desktop \& server management +1 moreInsufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated...7.1 High
- ivanti sentry, standalone sentry +1 moreInsecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local...8.8 High
- ivanti connect secure, policy secure +1 moreCommand injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure...9.1 Critical
- ivanti connect secureArgument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated...9.1 Critical
- ivanti connect secureInsufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before...7.1 High
- ivanti patch sdk, endpoint manager, neurons agent platform +4 more +6 moreInsufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated...7.1 High
- hewlett packard enterprise (hpe) hpe aruba networking airwave management platformAuthenticated Remote Code Execution (RCE) in HPE Aruba Networking AirWave Management Platform7.2 High
- splunk, splunk cloud platform, enterprise +2 moreRisky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter5.7 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure through SPL commands5.3 Medium
- splunk enterprise, secure gateway +1 moreInformation Disclosure in Mobile Alert Responses in Splunk Secure Gateway4.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreInformation Disclosure due to Username Collision with a Role that has the same Name as the User3.1 Low
- splunk enterprise, secure gateway +1 moreRemote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows Remote Desktop Services Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability8.1 High
- microsoft windows server 2016, windows server 2016 (server core installation), windows server 2019 +6 more +8 moreWindows Remote Desktop Services Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability7.5 High
- Show moreLoading…