CVEs published December 15, 2024
9 CVEs were published on December 15, 2024: 1 critical, 5 high.
- Published
- 9
- Critical
- 1
- High
- 5
- Medium
- 2
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- percona-toolkit
- 1
- radare2
- 1
- zephyrproject-rtos Zephyr
- 1
Critical 1
High 5
- CVE-2024-8798Bluetooth: classic: avdtp: missing buffer length checkzephyrproject-rtos Zephyr
- CVE-2024-11858Radare2: command injection via pebble application files in radare2radare2
- CVE-2024-55970File Manager in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 has a traversal issue that is related to the request parameter, a
- CVE-2024-56072An issue was discovered in FastNetMon Community Edition through 1.2.7.
- CVE-2024-56073An issue was discovered in FastNetMon Community Edition through 1.2.7.
Medium, low and unrated 3
- CVE-2024-7701Misuse of SHA256 to create an encryption keypercona-toolkit
- CVE-2024-56074gitingest before 9996a06 mishandles symbolic links that point outside of the base directory.
- CVE-2024-56082ChatBar.tsx in Lumos before 1.0.17 parses raw HTML in Markdown because the markdown-to-jsx package is used without disableParsingRawHTML set