December 2024
Published in December 2024
- criticalexploitedCVE-2024-3393: Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2018-14933
- criticalexploitedCVE-2021-44207: Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability cisa-kev
- known exploitedCVE-2019-11001
- criticalexploitedCVE-2024-12356: BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerabi…cisa-kev
- known exploitedCVE-2021-40407
- criticalexploitedCVE-2018-14933: NUUO NVRmini Devices OS Command Injection Vulnerability cisa-kev
- known exploitedCVE-2021-44207
- criticalexploitedCVE-2019-11001: Reolink Multiple IP Cameras OS Command Injection Vulnerabilitycisa-kev
- known exploitedCVE-2022-23227
- criticalexploitedCVE-2024-55956: Cleo Multiple Products Unauthenticated File Upload Vulnerabilitycisa-kev
- known exploitedCVE-2023-45727
- criticalexploitedCVE-2024-50623: Cleo Multiple Products Unrestricted File Upload Vulnerabilitycisa-kev
- known exploitedCVE-2024-11667
- criticalGitLab Patch Release: 17.6.2, 17.5.4, 17.4.6gitlab
- known exploitedpublic exploitCVE-2024-11680
- criticalGitLab Patch Release: 17.6.2, 17.5.4, 17.4.6gitlab
- known exploitedpublic exploitCVE-2024-12356
- criticalexploitedCVE-2023-45727: North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-20767
- criticalexploitedCVE-2024-11680: ProjectSend Improper Authentication Vulnerabilitycisa-kev
- known exploitedCVE-2024-3393
- known exploitedpublic exploitCVE-2024-35250
- known exploitedpublic exploitCVE-2024-49138
- known exploitedpublic exploitCVE-2024-50623
- known exploitedpublic exploitCVE-2024-51378
- known exploitedpublic exploitCVE-2024-55956