CVEs published December 16 to December 22, 2024
668 CVEs were published Dec 16 to Dec 22, 2024, 75 of them critical. CISA added 8 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 668
- Critical
- 75
- Added to CISA KEV
- 8
- Busiest day
- Mon, Dec 16 (207)
- Quietest day
- Sun, Dec 22 (16)
- December 16, 2024207 CVEs · 26 critical
- December 17, 202484 CVEs · 11 critical
- December 18, 2024151 CVEs · 20 critical
- December 19, 202493 CVEs · 10 critical
- December 20, 202487 CVEs · 7 critical
- December 21, 202430 CVEs · 1 critical
- December 22, 202416 CVEs
Added to CISA KEV 8
- CVE-2024-20767ColdFusion | Improper Access Control (CWE-284)Adobe ColdFusion
- CVE-2024-35250Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-55956In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbit
- CVE-2018-14933upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeup
- CVE-2019-11001On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" function
- CVE-2021-40407An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102.
- CVE-2022-23227NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users
- CVE-2024-12356Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)BeyondTrust Remote Support · BeyondTrust Privileged Remote…