Security Vulnerabilities - CVEs Published In December 2024
A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functionality of the file /index.php/admin of the component Model Management Page. The manipulation of the argument URL leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
5.1
EPSS Score
0.005
Published
2024-12-12
A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file /control/client_data.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
5.3
EPSS Score
0.004
Published
2024-12-12
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /pages/teacher_save.php. The manipulation of the argument salut leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS Score
5.3
EPSS Score
0.007
Published
2024-12-12
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.17, an unauthenticated user can retrieve all the sessions IDs and use them to steal any valid session. Version 10.0.17 contains a patch for this issue.
CVSS Score
9.3
EPSS Score
0.196
Published
2024-12-12
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
CVSS Score
7.5
EPSS Score
0.008
Published
2024-12-12
Windows Remote Desktop Services Remote Code Execution Vulnerability
CVSS Score
8.1
EPSS Score
0.011
Published
2024-12-12
CVE-2024-49138
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Known exploited
CVSS Score
7.8
EPSS Score
0.254
Published
2024-12-12
Microsoft Access Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.011
Published
2024-12-12
Windows Remote Desktop Services Remote Code Execution Vulnerability
CVSS Score
8.1
EPSS Score
0.011
Published
2024-12-12
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
CVSS Score
8.1
EPSS Score
0.014
Published
2024-12-12