CVEs published December 8, 2024
7 CVEs were published on December 8, 2024: 2 critical, 2 high.
- Published
- 7
- Critical
- 2
- High
- 2
- Medium
- 3
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- TP-Link VN020 F3v
- 3
- Guangzhou Huayi Intelligent Technology Jeewms
- 1
- Talentera
- 1
- wphealth WP Umbrella: Update Backup Restore & Monitoring
- 1
Critical 2
- CVE-2024-12209WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusionwphealth WP Umbrella: Update Backup Restore & Monitoring
- CVE-2024-55560MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that persist after installatio
High 2
Medium, low and unrated 3
- CVE-2024-12347Guangzhou Huayi Intelligent Technology Jeewms Druid Monitoring Interface index.html improper authorizationGuangzhou Huayi Intelligent Technology Jeewms
- CVE-2024-12346Talentera byt_cv_manager cross site scriptingTalentera
- CVE-2024-12344TP-Link VN020 F3v(T) FTP USER Command memory corruptionTP-Link VN020 F3v