CVEs published in December 2024

46 tracked CVEs from 8 vendors had their first vendor advisory published in December 2024: 14 critical, 19 high. Newest first.

3 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.

CVE-2024-26882High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory
Added Oct 9, 2026
CVE-2024-12729High
Sophos Firewall: post-auth code injection vulnerability in the User Portal
Sophos · 1 advisory
Added Dec 19, 2024
CVE-2024-12728Critical
Sophos Firewall: weak credentials vulnerability potentially allows privileged system access
Sophos · 1 advisory
Added Dec 19, 2024
CVE-2024-12727Critical
pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 (21.0.1)
Sophos · 1 advisory
Added Dec 19, 2024
CVE-2023-23357Medium
cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory
Added Dec 19, 2024
CVE-2023-23356Medium
QuFirewall: command injection vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory
Added Dec 19, 2024
CVE-2023-23354High
cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory
Added Dec 19, 2024
CVE-2022-27600Medium
QTS: uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory
Added Dec 19, 2024
CVE-2022-27595High
insecure library loading vulnerability has been reported to affect QVPN Device Client.
QNAP · 1 advisory
Added Dec 19, 2024
CVE-2024-50379Critical
Apache Tomcat Vulnerability in NetApp Products
Apache, NetApp · 2 advisories
Added Sep 29, 2026
CVE-2023-43804High
urllib3 Vulnerability in NetApp Products
NetApp · 1 advisory
Added Jul 13, 2026
CVE-2023-29402Critical
Golang Vulnerability in NetApp Products
NetApp · 1 advisory
Added Oct 28, 2026
CVE-2024-53677Critical
Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks
Apache · 1 advisory
Added Nov 3, 2026
CVE-2024-53247High
In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7, and versions below 3.4.261 and 3.7.13 of the Splunk Secure Gateway…
Splunk · 1 advisory
Added Dec 10, 2024
CVE-2024-53246Medium
In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106…
Splunk · 1 advisory
Added Dec 10, 2024
CVE-2024-53245Low
In Splunk Enterprise versions below 9.3.0, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.1.2312.206, a…
Splunk · 1 advisory
Added Dec 10, 2024
CVE-2024-53244Medium
In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.2.2406.107, 9.2.2403.109…
Splunk · 1 advisory
Added Dec 10, 2024
CVE-2024-53243Medium
In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and versions below 3.2.462, 3.7.18, and 3.8.5 of the Splunk Secure…
Splunk · 1 advisory
Added Dec 10, 2024
CVE-2024-49114High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory
Added Nov 3, 2026
CVE-2024-49113High
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
MS Server · 1 advisory
Added Nov 3, 2026
CVE-2024-49112Critical
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
MS Server · 1 advisory
Added Nov 3, 2026
CVE-2024-49065Medium
Microsoft Office Remote Code Execution Vulnerability
MS Server · 1 advisory
Added Nov 3, 2026
CVE-2024-49068High
Microsoft SharePoint Elevation of Privilege Vulnerability
MS Server · 1 advisory
Added Nov 3, 2026
CVE-2024-54749High
Ubiquiti U7-Pro 7.0.35 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which
Ubiquiti · 1 advisory
Added Dec 6, 2024
CVE-2024-53691High
QTS: link following vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory
Added Dec 6, 2024
CVE-2024-50404High
Qsync: link following vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory
Added Dec 6, 2024
CVE-2024-50403High
QTS: use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory
Added Dec 6, 2024
CVE-2024-50402High
QTS: use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory
Added Dec 6, 2024
CVE-2024-50393Critical
QTS: command injection vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory
Added Dec 6, 2024
CVE-2024-50389Critical
SQL injection vulnerability has been reported to affect QuRouter.
QNAP · 1 advisory
Added Dec 6, 2024
CVE-2024-50388Critical
HBS: OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync.
QNAP · 1 advisory
Added Dec 6, 2024
CVE-2024-50387Critical
SQL injection vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory
Added Dec 6, 2024
CVE-2024-48868High
QTS: improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating…
QNAP · 1 advisory
Added Dec 6, 2024
CVE-2024-48867High
QTS: improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating…
QNAP · 1 advisory
Added Dec 6, 2024
CVE-2024-48866Medium
QTS: improper handling of URL encoding (Hex Encoding) vulnerability has been reported to affect several QNAP operating system…
QNAP · 1 advisory
Added Dec 6, 2024
CVE-2024-48865High
QTS: improper certificate validation vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory
Added Dec 6, 2024
CVE-2024-48863Critical
License Center: command injection vulnerability has been reported to affect License Center.
QNAP · 1 advisory
Added Dec 6, 2024
CVE-2024-48859Critical
QTS: improper authentication vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory
Added Dec 6, 2024
CVE-2024-54750Critical
Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which
Ubiquiti · 1 advisory
Added Dec 6, 2024
CVE-2024-52533High
Gnome Glib Vulnerability in NetApp Products
NetApp · 1 advisory
Added Sep 29, 2026
CVE-2024-38796Medium
Tianocore EDK2 Vulnerability in NetApp Products
NetApp · 1 advisory
Added Oct 28, 2026
CVE-2023-29405Critical
Golang Vulnerability in NetApp Products
NetApp · 1 advisory
Added Oct 28, 2026
CVE-2024-53672Medium
vulnerability in the ClearPass Policy Manager web-based management interface
Aruba · 1 advisory
Added Dec 3, 2024
CVE-2024-51773Medium
vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could
Aruba · 1 advisory
Added Dec 3, 2024
CVE-2024-51772Medium
authenticated RCE vulnerability in the ClearPass Policy Manager web-based management interface
Aruba · 1 advisory
Added Dec 3, 2024
CVE-2024-51771High
vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could
Aruba · 1 advisory
Added Dec 3, 2024