December 2024 Security Advisory Ivanti Connect Secure (ICS) and Ivanti Policy Secure (IPS) (Multiple CVEs)

Last Modified Date Aug 23, 2026 11:22:02 PM...

CVE-2024-49083

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 19:07:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113630094928067178 2025-01-08 19:16:35+00:00| seen|...

CVE-2024-49126

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 21:37:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113630685503323940 2024-12-11 12:26:56+00:00| seen|...

CVE-2024-49132

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 21:52:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113630744569872163 2024-12-12 08:16:06+00:00| seen|...

CVE-2024-49082

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 19:07:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113630094912090814 2024-12-11 05:00:00+00:00| seen|...

CVE-2024-49092

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 19:37:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113630213076506529...

CVE-2024-49119

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 21:22:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113630626391568532 2024-12-13 11:17:43+00:00| seen|...

CVE-2024-49090

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 19:37:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113630213026287769 2025-01-08 19:16:28+00:00| seen|...

CVE-2024-49128

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 21:52:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113630744521303025 2024-12-13 11:17:44+00:00| seen|...

CVE-2024-49125

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 18:59:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113630061682240441 2024-12-10 21:37:41+00:00| seen|...

CVE-2024-49123

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 21:37:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113630685457940583 2024-12-12 03:47:57+00:00| seen|...

CVE-2024-49114

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 20:52:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113630508328834714 2025-01-07 05:40:37+00:00| seen|...

December 10, 2024—Hotpatch KB5048794 (OS Build 26100.2528)

None None...

Adobe Releases Security Updates for Multiple Products

Adobe released security updates to address vulnerabilities in multiple Adobe software products including Adobe Acrobat, Adobe Illustrator, and Adobe InDesign. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and...

December 10, 2024—KB5048699 (Monthly Rollup)

None None...

Drupal core contains a potential PHP Object Injection vulnerability

Drupal core contains a potential PHP Object Injection vulnerability that if combined with another exploit could lead to Remote Code Execution. It is not directly exploitable. This issue is mitigated by the fact that in order for it to be exploitable, a separate vulnerability must be present to...

Security Updates for Microsoft SharePoint Server 2016 (December 2024)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Elevation of Privilege Vulnerability. CVE-2024-49068 - A remote code execution vulnerability. CVE-2024-49065, CVE-2024-49070 - A Information...

Security Updates for Microsoft SharePoint Server Subscription Edition (December 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Defense-in-Depth Security Updates for Microsoft Project (December 2024)

The Microsoft Project products are missing defense-in-depth security updates to help improve security-related features. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

Security Updates for Microsoft Office Products (December 2024)

The Microsoft Office Products are missing security updates. They are, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2024-43600, CVE-2024-49059 - A remote code execution vulnerability. An...