CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader | Out-of-bounds Write (CWE-787)7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- microsoft excelA library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted...7.1 High
- microsoft outlookA library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially...7.1 High
- microsoft teams, teams (work or school) +1 moreA library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094...7.1 High
- microsoft wordA library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted...7.1 High
- microsoft onenoteA library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially...7.1 High
- microsoft teams, teams (work or school) +1 moreA library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work...7.1 High
- microsoft teams, teams (work or school) +1 moreA library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of...7.1 High
- microsoft powerpointA library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially...7.1 High
- microsoft windows, windows server 2022, windows 11 21h2 +2 moreAn access violation vulnerability exists in the DirectComposition functionality win32kbase.sys...5.0 Medium
- microsoft windows, windows server 2022, windows 11 21h2 +2 moreAn access violation vulnerability exists in the DirectComposition functionality win32kbase.sys...5.0 Medium
- google chromeOut of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to...8.8 High
- google chromeUse after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker...8.8 High
- google chromeOut of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to...8.8 High
- beyondtrust privileged remote access (pra) and remote support (rs), privileged remote access, remote support +1 more +3 moreCommand Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)6.6 Medium
- golang.org/x/net golang.org/x/net/htmlNon-linear parsing of case-insensitive content in golang.org/x/net/html5.3 Medium
- ibm mq, mq appliance, mq for hpe nonstop +2 moreIBM MQ denial of service6.5 Medium
- craft cms cms, craftcms craft cms +1 moreRCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms9.3 Critical
- misskey-dev misskeyUncontrolled Recursion and Asymmetric Resource Consumption (Amplification) in media/file proxy in Misskey7.4 High
- misskeyServer-Side Request Forgery vulnerability in various APIs in Misskey6.4 Medium
- misskeyMissing validation allows spoofed profiles in Misskey8.8 High
- ni daqexpressDeserialization Of Untrusted Data Vulnerability In NI DAQExpress Project File8.4 High
- misskeyMissing validation allows spoofed profiles and notes in Misskey8.8 High
- misskeyMissing validation allows spoofed poll updates in Misskey6.9 Medium
- misskeyMissing validation allows spoofed "origin" links in Misskey5.1 Medium
- envoyproxy envoyHTTP/1.1 multiple issues with envoy.reloadable_features.http1_balsa_delay_reset in envoy7.1 High
- envoyproxy envoyHTTP/1: sending overload crashes when the request is reset beforehand in envoy7.5 High
- envoyproxy envoyHappy Eyeballs: Validate that additional_address are IP addresses instead of crashing when sorting in envoy4.5 Medium
- vibethemes wplms, wordpress learning management system +1 moreWordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability8.5 High
- vibethemes wplms, wordpress learning management system +1 moreWordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerability7.6 High
- vibethemes wplms, wordpress learning management system +1 moreWordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerability8.8 High
- vibethemes wplms, wordpress learning management system +1 moreWordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability9.9 Critical
- vibethemes wplms, wordpress learning management system +1 moreWordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability9.9 Critical
- vibethemes wplms, wordpress learning management system +1 moreWordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability9.1 Critical
- vibethemes wplms, wordpress learning management system +1 moreWordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability9.9 Critical
- dotstore advance menu managerWordPress Advance Menu Manager plugin <= 3.1.1 - Settings Change vulnerability7.1 High
- dataeaseDataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability8.6 High
- dataeaseDataease Mysql JDBC Connection Parameters Not Verified Leads to Deserialization and Arbitrary File Read Vulnerability8.6 High
- wpweb woocommerce pdf vouchersWordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerability9.8 Critical
- vibethemes wplms, wordpress learning management system +1 moreWordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerability8.5 High
- vibethemes wplms, wordpress learning management system +1 moreWordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directory Deletion vulnerability8.5 High
- vibethemes wplms, wordpress learning management system +1 moreWordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerability8.5 High
linux-gcpUbuntulinux-gcp vulnerabilitiesNo scorefilippo.io/ageGoage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary executionNo scoreTShockNuGetTShock Security Escalation Exploit8.9 High- Show moreLoading…