Security Vulnerabilities - CVEs Published In December 2024
A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file /control/client_data.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
5.3
EPSS Score
0.003
Published
2024-12-12
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /pages/teacher_save.php. The manipulation of the argument salut leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS Score
5.3
EPSS Score
0.002
Published
2024-12-12
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.17, an unauthenticated user can retrieve all the sessions IDs and use them to steal any valid session. Version 10.0.17 contains a patch for this issue.
CVSS Score
9.3
EPSS Score
0.176
Published
2024-12-12
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
CVSS Score
7.5
EPSS Score
0.003
Published
2024-12-12
Windows Remote Desktop Services Remote Code Execution Vulnerability
CVSS Score
8.1
EPSS Score
0.003
Published
2024-12-12
CVE-2024-49138
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Known exploited
CVSS Score
7.8
EPSS Score
0.848
Published
2024-12-12
Microsoft Access Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.006
Published
2024-12-12
Windows Remote Desktop Services Remote Code Execution Vulnerability
CVSS Score
8.1
EPSS Score
0.004
Published
2024-12-12
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
CVSS Score
8.1
EPSS Score
0.004
Published
2024-12-12
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score
8.8
EPSS Score
0.019
Published
2024-12-12