CVEs published December 10, 2024
335 CVEs were published on December 10, 2024: 23 critical, 130 high. 2 are now in CISA KEV.
- Published
- 335
- Critical
- 23
- High
- 130
- Medium
- 175
- Low
- 7
- Unrated
- 0
- Now in CISA KEV
- 2
- Fix available
- 100
Most affected products
- Adobe Experience Manager
- 90
- Microsoft Windows
- 46
- Adobe Connect
- 19
- Adobe Animate
- 13
- Adobe InDesign Desktop
- 9
- Adobe Substance3D - Modeler
- 9
- Microsoft Windows Server
- 9
- Adobe Acrobat Reader
- 6
- ORing IAP-420
- 5
- Adobe Media Encoder
- 4
Critical 23
- CVE-2024-54036Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect
- CVE-2024-54034Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Connect
- CVE-2024-54032Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect
- CVE-2024-11773SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to ruIvanti Cloud Services Application
- CVE-2024-11772Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges tIvanti Cloud Services Application
- CVE-2024-11639An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrativeIvanti Cloud Services Application
- CVE-2024-11634Command injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authentiIvanti Connect Secure · Ivanti Policy Secure
- CVE-2024-11633Argument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker with admin privileges to achieve Ivanti Connect Secure
- CVE-2024-49112Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-12286MOBATIME Network Master Clock has a use of default credentials vulnerabilityMOBATIME Network Master Clock - DTS
- CVE-2024-55547Remote Command Execution via SNMPORing IAP-420
- CVE-2024-54152Angular Expressions - Remote Code Execution when using localspeerigon angular-expressions · angular-expressions
- CVE-2024-5660Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-AArm Cortex-A77 · Arm Neoverse +10
- CVE-2024-37143Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 (for RCM 3.8.x tDell PowerFlex appliance · Dell PowerFlex rack +3
- CVE-2024-47578Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)SAP_SE SAP NetWeaver AS for JAVA
- CVE-2024-45493An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 (Fixed in 7.0.0).
- CVE-2024-45494An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 (Fixed in 7.0.0).
- CVE-2024-46340TL-WR845N(UN)_V4_201214, TP-Link TL-WR845N(UN)_V4_200909, and TL-WR845N(UN)_V4_190219 was discovered to transmit user credentials in plainte
- CVE-2024-46442An issue in the BYD Dilink Headunit System v3.0 to v4.0 allows attackers to bypass authentication via a bruteforce attack.
- CVE-2024-53480Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in `login.php` via the `emailcont` parameter.
- CVE-2024-53552CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover.
- CVE-2024-54751COMFAST CF-WR630AX v2.7.0.2 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as
- CVE-2024-55586Nette Database through 3.2.4 allows SQL injection in certain situations involving an untrusted filter that is directly passed to the where m
High 130
- CVE-2024-53959Adobe Framemaker | Stack-based Buffer Overflow (CWE-121)Adobe Framemaker
- CVE-2024-53958Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2024-53957Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Painter
- CVE-2024-53956Premiere Pro | Heap-based Buffer Overflow (CWE-122)Adobe Premiere Pro
- CVE-2024-53955Bridge | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Bridge
- CVE-2024-53002Substance3D - Modeler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Modeler
- CVE-2024-53000Substance3D - Modeler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Modeler
- CVE-2024-53001Substance3D - Modeler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Modeler
- CVE-2024-53003Substance3D - Modeler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Modeler
- CVE-2024-52999Substance3D - Modeler | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Modeler
- CVE-2024-52997Photoshop Desktop | Use After Free (CWE-416)Adobe Photoshop Desktop
- CVE-2024-52996Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Sampler
- CVE-2024-52994Substance3D - Sampler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Sampler
- CVE-2024-52995Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Sampler
- CVE-2024-49513Not a product | Out-of-bounds Write (CWE-787)Adobe Not a product
- CVE-2024-49544InDesign Desktop | Out-of-bounds Write (CWE-787)Adobe InDesign Desktop
- CVE-2024-49545InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2024-49543InDesign Desktop | Stack-based Buffer Overflow (CWE-121)Adobe InDesign Desktop
- CVE-2024-54037Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Connect
- CVE-2024-52985Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Animate
- CVE-2024-45155Animate | Access of Uninitialized Pointer (CWE-824)Adobe Animate
- CVE-2024-52987Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Animate
- CVE-2024-45156Animate | NULL Pointer Dereference (CWE-476)Adobe Animate
- CVE-2024-52982Animate | Improper Input Validation (CWE-20)Adobe Animate
- CVE-2024-53953Animate | Use After Free (CWE-416)Adobe Animate
- CVE-2024-52989Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Animate
- CVE-2024-52990Animate | Buffer Underwrite ('Buffer Underflow') (CWE-124)Adobe Animate
- CVE-2024-53954Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Animate
- CVE-2024-52983Animate | Integer Overflow or Wraparound (CWE-190)Adobe Animate
- CVE-2024-52988Animate | Out-of-bounds Write (CWE-787)Adobe Animate
- CVE-2024-52984Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Animate
- CVE-2024-52986Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Animate
- CVE-2024-49538Illustrator | Out-of-bounds Write (CWE-787)Adobe Illustrator
- CVE-2024-49537After Effects | Stack-based Buffer Overflow (CWE-121)Adobe After Effects
- CVE-2024-49553Media Encoder | Out-of-bounds Write (CWE-787)Adobe Media Encoder
- CVE-2024-49552Media Encoder | Heap-based Buffer Overflow (CWE-122)Adobe Media Encoder
- CVE-2024-49551Media Encoder | Out-of-bounds Write (CWE-787)Adobe Media Encoder
- CVE-2024-49105Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Remote Desktop client for Windows Desktop · Micro…
- CVE-2024-49530Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat Reader
- CVE-2024-7572Insufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated attacker to delete arbitrary files.Ivanti Desktop and Server Management
- CVE-2024-8540Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive aIvanti Sentry
- CVE-2024-9844Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticatIvanti Connect Secure
- CVE-2024-10256Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.Ivanti Patch SDK · Ivanti Endpoint Manager +4
- CVE-2024-54008Authenticated Remote Code Execution (RCE) in HPE Aruba Networking AirWave Management PlatformHewlett Packard Enterprise (HPE) HPE Aruba Networking AirWa…
- CVE-2024-53247Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway appSplunk Enterprise · Splunk Secure Gateway
- CVE-2024-49138Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49128Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2024-49127Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-49118Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-49116Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2024-49114Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49113Windows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-49095Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49090Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49088Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49080Windows IP Routing Management Snapin Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-49079Input Method Editor (IME) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-49076Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49075Windows Remote Desktop Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-49072Windows Task Scheduler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49063Microsoft/Muzic Remote Code Execution VulnerabilityMicrosoft Muzic
- CVE-2024-43600Microsoft Office Elevation of Privilege VulnerabilityMicrosoft Office
- CVE-2024-49142Microsoft Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Access +1
- CVE-2024-49132Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-49129Windows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2024-49126Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-49125Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-49124Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-49123Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-49122Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-49121Windows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-49120Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2024-49119Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2024-49117Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-49115Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2024-49108Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2024-49107WmsRepair Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49106Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2024-49104Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-49102Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-49097Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49096Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-49093Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49091Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2024-49089Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-49086Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-49085Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-49084Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49074Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49070Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2024-49069Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2024-49068Microsoft SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2024-49059Microsoft Office Elevation of Privilege VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2024-49057Microsoft Defender for Endpoint on Android Spoofing VulnerabilityMicrosoft Defender for Endpoint for Android
- CVE-2024-43594Microsoft System Center Elevation of Privilege VulnerabilityMicrosoft System Center
- CVE-2024-55602PenDoc vulnerable to Arbitrary File Read on updating and downloading templates using Path Traversalpwndoc
- CVE-2024-55546Stored Cross-Site ScriptingORing IAP-420
- CVE-2024-55545Reflected Cross-Site ScriptingORing IAP-420
- CVE-2024-55544Authenticated Command InjectionORing IAP-420
- CVE-2024-10496Out of bounds read in BuildFontMap in fontmgr.cpp in NI LabVIEWNI LabVIEW
- CVE-2024-10495Out of bounds read when loading the font table in fontmgr.cpp in NI LabVIEWNI LabVIEW
- CVE-2024-10494Out of bounds read in HeapObjMapImpl.cpp in NI LabVIEWNI LabVIEW
- CVE-2024-54095A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 10).Siemens Solid Edge SE2024
- CVE-2024-54094A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5).Siemens Solid Edge SE2024
- CVE-2024-54093A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5).Siemens Solid Edge SE2024
- CVE-2024-54091A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 12), Solid Edge SE2025 (All versions < V225.0 Update Siemens Solid Edge SE2024 · Siemens Solid Edge SE2025
- CVE-2024-53242A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-53041A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-52051A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC S7-PLCSIM V18 (All versions), SIMATIC STEP 7 Safety V17Siemens SIMATIC S7-PLCSIM · Siemens SIMATIC STEP 7 Safe… +10
- CVE-2024-49849A vulnerability has been identified in SIMATIC S7-PLCSIM V16 (All versions), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 Safety V16Siemens SIMATIC S7-PLCSIM · Siemens SIMATIC STEP 7 Safety +9
- CVE-2020-28398A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2024-10959Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.5 - Unauthenticated Arbitrary Shortcode Execution via woot_get_smthrealmag777 Active Products Tables for WooCommerce. Use cons…
- CVE-2024-47977Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization Dell Avamar
- CVE-2024-47484Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization Dell Avamar
- CVE-2024-52538Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization Dell Avamar
- CVE-2024-47946OS Command Execution through Arbitrary File UploadImage Access Scan2Net
- CVE-2024-28138OS Command InjectionImage Access Scan2Net
- CVE-2023-6947Best WordPress Gallery Plugin – FooGallery <= 2.4.16 - Authenticated (Contributor+) Directory Traversalhttps://fooplugins.com FooGallery Premium
- CVE-2024-21542Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destinatluigi
- CVE-2024-11205WPForms 1.8.4 - 1.9.2.1 - Missing Authorization to Authenticated (Subscriber+) Payment Refund and Subscription Cancellationsmub WPForms – Easy Form Builder for WordPress – Contact Fo…
- CVE-2024-37144Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 (for RCM 3.8.x tDell PowerFlex appliance · Dell PowerFlex rack +3
- CVE-2024-54198Information Disclosure vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAPSAP_SE SAP NetWeaver Application Server ABAP
- CVE-2024-54197Server-Side Request Forgery in SAP NetWeaver Administrator (System Overview)SAP_SE SAP NetWeaver Administrator
- CVE-2024-46341TP-Link TL-WR845N(UN)_V4_190219 was discovered to transmit credentials in base64 encoded form, which can be easily decoded by an attacker ex
- CVE-2024-50699TP-Link TL-WR845N(UN)_V4_201214, TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 were discovered to contain weak default credentials for
- CVE-2024-50920Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted
- CVE-2024-50930An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code.
- CVE-2024-51165SQL injection vulnerability in JEPAAS7.2.8, via /je/rbac/rbac/loadLoginCount in the dateVal parameter, which could allow a remote user to su
- CVE-2024-53919An injection vulnerability in Barco ClickShare CX-30/20, C-5/10, and ClickShare Bar Pro and Core models, running firmware before 2.21.1, all
- CVE-2024-55500Cross-Site Request Forgery (CSRF) in Avenwu Whistle v.2.9.90 and before allows attackers to perform malicious API calls, resulting in the exwhistle
Medium, low and unrated 182
- CVE-2024-55655sigstore-python has insufficient validation of integration timestamp during verificationsigstore-python · sigstore
- CVE-2024-55653pwndoc's UnhandledPromiseRejection on audits causes Denial of Service (DoS)pwndoc
- CVE-2024-54133Possible Content Security Policy bypass in Action Dispatchrails · actionpack
- CVE-2024-52865Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52848Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43713Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43715Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43717Adobe Experience Manager | Improper Access Control (CWE-284)Adobe Experience Manager
- CVE-2024-52836Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52860Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43727Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52838Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52862Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43738Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43748Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43719Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52817Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43732Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52861Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52816Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52826Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43726Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43742Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43718Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52846Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43720Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52839Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43752Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52850Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52822Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43730Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52855Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43745Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43743Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43737Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43712Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43724Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52828Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43723Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43740Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52831Adobe Experience Manager | Improper Input Validation (CWE-20)Adobe Experience Manager
- CVE-2024-52830Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43750Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52864Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52818Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52832Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52825Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52835Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43725Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52849Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52859Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52852Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52827Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52823Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52858Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52824Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52840Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52992Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52834Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43746Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43721Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43754Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52837Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52853Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43734Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52829Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43755Adobe Experience Manager | Improper Input Validation (CWE-20)Adobe Experience Manager
- CVE-2024-52847Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52991Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43751Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52845Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43729Adobe Experience Manager | Improper Authorization (CWE-285)Adobe Experience Manager
- CVE-2024-43722Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52993Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52854Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52843Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52842Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43733Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52844Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-53960Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43735Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43728Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52857Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43714Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52851Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43739Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43744Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43716Adobe Experience Manager | Improper Access Control (CWE-284)Adobe Experience Manager
- CVE-2024-43731Adobe Experience Manager | Improper Authorization (CWE-285)Adobe Experience Manager
- CVE-2024-43736Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52841Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43747Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-43749Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-52833Substance3D - Modeler | NULL Pointer Dereference (CWE-476)Adobe Substance3D - Modeler
- CVE-2024-53004Substance3D - Modeler | Out-of-bounds Read (CWE-125)Adobe Substance3D - Modeler
- CVE-2024-53006Substance3D - Modeler | NULL Pointer Dereference (CWE-476)Adobe Substance3D - Modeler
- CVE-2024-53005Substance3D - Modeler | Out-of-bounds Read (CWE-125)Adobe Substance3D - Modeler
- CVE-2024-53951InDesign Desktop | Out-of-bounds Read (CWE-125)Adobe InDesign Desktop
- CVE-2024-49547InDesign Desktop | Out-of-bounds Read (CWE-125)Adobe InDesign Desktop
- CVE-2024-53952InDesign Desktop | NULL Pointer Dereference (CWE-476)Adobe InDesign Desktop
- CVE-2024-49548InDesign Desktop | Out-of-bounds Read (CWE-125)Adobe InDesign Desktop
- CVE-2024-49549InDesign Desktop | Out-of-bounds Read (CWE-125)Adobe InDesign Desktop
- CVE-2024-49546InDesign Desktop | Out-of-bounds Read (CWE-125)Adobe InDesign Desktop
- CVE-2024-54048Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Connect
- CVE-2024-54050Adobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)Adobe Connect
- CVE-2024-54045Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Connect
- CVE-2024-54043Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Connect
- CVE-2024-54040Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect
- CVE-2024-54049Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Connect
- CVE-2024-54041Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect
- CVE-2024-54051Adobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)Adobe Connect
- CVE-2024-54039Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect
- CVE-2024-54042Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Connect
- CVE-2024-54044Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Connect
- CVE-2024-49550Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Connect
- CVE-2024-54047Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Connect
- CVE-2024-54038Adobe Connect | Improper Access Control (CWE-284)Adobe Connect
- CVE-2024-54046Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Connect
- CVE-2024-49541Illustrator | Out-of-bounds Read (CWE-125)Adobe Illustrator
- CVE-2024-49554Media Encoder | NULL Pointer Dereference (CWE-476)Adobe Media Encoder
- CVE-2024-49532Acrobat Reader | Out-of-bounds Read (CWE-125)Adobe Acrobat Reader
- CVE-2024-49534Acrobat Reader | Out-of-bounds Read (CWE-125)Adobe Acrobat Reader
- CVE-2024-49531Acrobat Reader | NULL Pointer Dereference (CWE-476)Adobe Acrobat Reader
- CVE-2024-49533Acrobat Reader | Out-of-bounds Read (CWE-125)Adobe Acrobat Reader
- CVE-2024-49535Acrobat Reader | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)Adobe Acrobat Reader
- CVE-2024-53244Risky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameterSplunk Enterprise · Splunk Cloud Platform
- CVE-2024-53246Sensitive Information Disclosure through SPL commandsSplunk Enterprise · Splunk Cloud Platform
- CVE-2024-53243Information Disclosure in Mobile Alert Responses in Splunk Secure GatewaySplunk Enterprise · Splunk Secure Gateway
- CVE-2024-53245Information Disclosure due to Username Collision with a Role that has the same Name as the UserSplunk Enterprise · Splunk Cloud Platform
- CVE-2024-49110Windows Mobile Broadband Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49109Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49083Windows Mobile Broadband Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49082Windows File Explorer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2024-49081Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49078Windows Mobile Broadband Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49077Windows Mobile Broadband Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49065Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2024-49062Microsoft SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2024-49111Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49103Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2024-49101Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49099Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2024-49098Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2024-49094Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49092Windows Mobile Broadband Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49087Windows Mobile Broadband Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2024-49073Windows Mobile Broadband Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49064Microsoft SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2024-53866pnpm vulnerable to no-script global cache poisoning via overrides / `ignore-scripts` evasionpnpm
- CVE-2024-55548Denial of ServiceORing IAP-420
- CVE-2024-12236Use of Custom URI for media inputs with VPC-SC enabled potentially leads to data exfiltrationGoogle Cloud Platform Vertex Gemini API
- CVE-2024-12323turboSMTP <= 4.6 - Reflected Cross-Site Scripting via 'page'turboSMTP
- CVE-2024-54005A vulnerability has been identified in COMOS V10.3 (All versions < V10.3.3.5.8), COMOS V10.4.0 (All versions), COMOS V10.4.1 (All versions),Siemens COMOS
- CVE-2024-53832A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V05.30).Siemens CPCI85 Central Processing/Communication
- CVE-2024-49704A vulnerability has been identified in COMOS V10.3 (All versions < V10.3.3.5.8), COMOS V10.4.0 (All versions), COMOS V10.4.1 (All versions),Siemens COMOS
- CVE-2024-47117IBM Carbon Design System cross-site scriptingIBM Carbon Charts
- CVE-2024-11868LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST APIthimpress LearnPress – WordPress LMS Plugin for Create and…
- CVE-2024-11106Simple Restrict <= 1.2.7 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposurewpchill Simple Restrict
- CVE-2024-11928iChart – Easy Charts and Graphs <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameterquantumcloud iChart – Easy Charts and Graphs
- CVE-2024-11945Email Reminders <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameterwpdevelop Email Reminders
- CVE-2024-11973Quran multilanguage Text & Audio <= 2.3.21 - Reflected Cross-Site Scripting via sourate and lang Parameterskarim42 Quran multilanguage Text & Audio
- CVE-2024-8256Incorrect Permission Assignment in RutOS based routers and TSWOS based managed switchesTeltonika Networks RUTOS · Teltonika Networks TSWOS
- CVE-2024-11940Property Hive Mortgage Calculator <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via price Parameterpropertyhive Property Hive Mortgage Calculator
- CVE-2024-45709SolarWinds Web Help Desk Local File Read VulnerabilitySolarWinds Web Help Desk
- CVE-2024-11107System Dashboard < 2.8.15 - Unauthenticated Stored XSSSystem Dashboard
- CVE-2024-10708System Dashboard < 2.8.15 - Admin+ Path TraversalSystem Dashboard
- CVE-2024-47585Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP PlatformSAP_SE SAP NetWeaver Application Server for ABAP and ABAP P…
- CVE-2024-47582XML Entity Expansion Vulnerability in SAP NetWeaver AS JAVASAP_SE SAP NetWeaver AS JAVA
- CVE-2024-47581Missing Authorization check in SAP HCM (Approve Timesheets version 4)SAP_SE SAP HCM
- CVE-2024-47580Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)SAP_SE SAP NetWeaver AS for JAVA
- CVE-2024-47579Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)SAP_SE SAP NetWeaver AS for JAVA
- CVE-2024-47577Information Disclosure vulnerability in SAP Commerce CloudSAP_SE SAP Commerce Cloud
- CVE-2024-47576DLL Hijacking vulnerability in SAP Product Lifecycle CostingSAP_SE SAP Product Lifecycle Costing
- CVE-2024-32732Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platformSAP_SE SAP BusinessObjects Business Intelligence platform
- CVE-2024-46657Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c.
- CVE-2024-50921Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause a Denial of Service (DoS) via repea
- CVE-2024-50924Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the
- CVE-2024-50928Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup interval of end devices
- CVE-2024-50929Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily change the device type in the
- CVE-2024-50931Silicon Labs Z-Wave Series 500 v6.84.0 was discovered to contain insecure permissions.
- CVE-2024-53481A Cross Site Scripting (XSS) vulnerability in the profile.php of PHPGurukul Beauty Parlour Management System v1.1 allows remote attackers to
- CVE-2024-55550Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insu