CVEs published December 4, 2024
133 CVEs were published on December 4, 2024: 7 critical, 62 high.
- Published
- 133
- Critical
- 7
- High
- 62
- Medium
- 55
- Low
- 5
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 25
Most affected products
- Google Android
- 18
- Linux
- 16
- Veeam Backup & Replication
- 8
- JetBrains YouTrack
- 6
- DedeCMS
- 4
- Shenzhen Tenda Technology Tenda AC6V2
- 4
- Devolutions Server
- 3
- code-projects Hotel Management System
- 2
- DocuSign
- 2
- Issuetrak
- 2
Critical 7
- CVE-2018-9416In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to an unusual root cause.Google Android
- CVE-2024-54221WordPress FAT Services Booking plugin <= 5.6 - Unauthenticated SQL Injection vulnerabilityroninwp FAT Services Booking
- CVE-2024-40744Extension - tassos.gr - Unrestricted file upload in Convert Forms component for Joomla < 4.4.8tassos.gr Convert Forms component for Joomla
- CVE-2024-53138net/mlx5e: kTLS, Fix incorrect page refcountingLinux
- CVE-2024-10576Unauthorized factory reset of Infinix devicesInfinix Mobile com.transsion.agingfunction
- CVE-2024-48453An issue in INOVANCE AM401_CPU1608TPTN allows a remote attacker to execute arbitrary code via the ExecuteUserProgramUpgrade function
- CVE-2024-54661readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.dest-unreach socat
High 62
- CVE-2018-9463In sw49408_irq_runtime_engine_debug of touch_sw49408.c, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2018-9462In store_cmd of ftm4_pdc.c, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2018-9439In __unregister_prot_hook and packet_release of af_packet.c, there is a possible use-after-free due to improper locking.Google Android
- CVE-2018-9404In oemCallback of ril.cpp, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2018-9403In the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_- interface.c, there is a possible stack buffer overflow due to a missingGoogle Android
- CVE-2018-9402In multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check.Google Android
- CVE-2018-9400In gt1x_debug_write_proc and gt1x_tool_write of drivers/input/touchscreen/mediatek/GT1151/gt1x_generic.c and gt1x_tools.c, there is Google Android
- CVE-2018-9399In /proc/driver/wmt_dbg driver, there are several possible out of bounds writes.Google Android
- CVE-2018-9398In fm_set_stat of mediatek FM radio driver, there is a possible OOB write due to improper input validation.Google Android
- CVE-2018-9397In WMT_unlocked_ioctl of MTK WMT device driver, there is a possible OOB write due to a missing bounds check.Google Android
- CVE-2024-53982Arbitrary file download in Zoo-Project Echo ExampleZOO-Project
- CVE-2018-9396In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorreGoogle Android
- CVE-2024-12147Netgear R6900 HTTP Header upgrade_check.cgi buffer overflowNetgear R6900
- CVE-2018-9395In mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gGoogle Android
- CVE-2018-9394In mtk_p2p_wext_set_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c, there is a possible OOB write due to improper inpGoogle Android
- CVE-2024-12149Incorrect permission assignment in temporary access requests component in Devolutions Remote Desktop Manager 2024.3.19.0 and earlier on WindDevolutions Remote Desktop Manager
- CVE-2018-9393In procfile_write of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c, there is a possible OOB write due to a missing bounds Google Android
- CVE-2018-9392In get_binary of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c, there is a possible out of bounds write dueGoogle Android
- CVE-2024-11643Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option UpdateAccessibility by AllAccessible
- CVE-2024-54134@solana/web3.js modified package published to npm, containing malware that exfiltrates private key materialsolana-labs solana-web3.js · @solana/web3.js
- CVE-2024-53140netlink: terminate outstanding dump on socket closeLinux
- CVE-2024-53139sctp: fix possible UAF in sctp_v6_available()Linux
- CVE-2024-53136mm: revert "mm: shmem: fix data-race in shmem_getattr()"Linux
- CVE-2024-53135KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKENLinux
- CVE-2024-53133drm/amd/display: Handle dml allocation failure to avoid crashLinux
- CVE-2024-53127Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"Linux
- CVE-2024-53126vdpa: solidrun: Fix UB bug with devresLinux
- CVE-2024-53125bpf: sync_linked_regs() must preserve subreg_defLinux
- CVE-2024-51465IBM App Connect Enterprise Certified Container command executionIBM App Connect Enterprise Certified Container
- CVE-2024-8894Out-of-bounds Write vulnerability in ODA SDK versions < 2025.10Open Design Alliance ODA Drawings SDK - All Versions <
- CVE-2024-52269AI Assistant PDF Document Spoofing in DocuSignDocuSign
- CVE-2024-54154In JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in plugin sandboxJetBrains YouTrack
- CVE-2024-12107Double Free in µD3TNµD3TN · pyd3tn
- CVE-2024-52275Denial of Service on Tenda AC6V2 Due To Stack OverflowShenzhen Tenda Technology Tenda AC6V2
- CVE-2024-52274Denial of Service on Tenda AC6V2 Due To Stack OverflowShenzhen Tenda Technology Tenda AC6V2
- CVE-2024-52273Denial of Service on Tenda AC6V2 Due To Stack OverflowShenzhen Tenda Technology Tenda AC6V2
- CVE-2024-52272Denial of Service on Tenda AC6V2 Due To Stack OverflowShenzhen Tenda Technology Tenda AC6V2
- CVE-2024-52277PDF Document Spoofing in DocuSealDocuSeal
- CVE-2024-52276PDF Document Spoofing in DocuSignDocuSign
- CVE-2024-11952Classic Addons – WPBakery Page Builder <= 3.0 - Authenticated (Contributor+) Limited Local PHP File Inclusionwebcodingplace Classic Addons – WPBakery Page Builder
- CVE-2024-10567TI WooCommerce Wishlist <= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Accesstemplateinvaders TI WooCommerce Wishlist
- CVE-2024-11293Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Social Sites Login <= 1.7.9 - Authentication Bypass via WordPress.com OAuth providerGenetech Solutions Pie Register - Social Sites Login
- CVE-2024-45717SolarWinds Platform Cross- Site Scripting VulnerabilitySolarWinds Platform
- CVE-2024-11398Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in OTP reset functionality in Synology Router MSynology Router Manager
- CVE-2024-10952Authors List <= 2.0.4 - Unauthenticated Arbitrary Shortcode Execution via update_authors_list_ajaxwpkube Authors List
- CVE-2024-10587Funnelforms Free <= 3.7.5.1 - Authenticated (Contributor+) PHP Object InjectionInteractive Contact Form and Multi Step Form Builder with D…
- CVE-2024-45204A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved Veeam Backup & Replication
- CVE-2024-42451A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext.Veeam Backup & Replication
- CVE-2024-42453A vulnerability Veeam Backup & Replication allows low-privileged users to control and modify configurations on connected virtual infrastructVeeam Backup & Replication
- CVE-2024-45207DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations.Veeam Agent for Windows
- CVE-2024-42457A vulnerability in Veeam Backup & Replication allows users with certain operator roles to expose saved credentials by leveraging a combinatiVeeam Backup & Replication
- CVE-2024-42452A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials,Veeam Backup & Replication
- CVE-2024-45205An Improper Certificate Validation on the UniFi iOS App managing a standalone UniFi Access Point (not using UniFi Network Application) couldUbiquiti UniFi iOS App
- CVE-2024-40717A vulnerability in Veeam Backup & Replication allows a low-privileged user with certain roles to perform remote code execution (RCE) by updaVeeam Backup & Replication
- CVE-2024-42456A vulnerability in Veeam Backup & Replication platform allows a low-privileged user with a specific role to exploit a method that updates crVeeam Backup & Replication
- CVE-2024-42455A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting services and exploit insecure deserializatVeeam Backup & Replication
- CVE-2024-42449From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to remove arbiVeeam Service Provider Console
- CVE-2024-37574The GriceMobile com.grice.call application 4.5.2 for Android enables any installed application (with no permissions) to place phone calls wi
- CVE-2024-37575The Mister org.mistergroup.shouldianswer application 1.4.264 for Android enables any installed application (with no permissions) to place ph
- CVE-2024-39163binux pyspider up to v0.3.10 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Flask endpoints.pyspider
- CVE-2024-39219An issue in Aginode GigaSwitch V5 before version 7.06G allows authenticated attackers with Administrator privileges to upload an earlier fir
- CVE-2024-50947An issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service (DoS) via a crafted request.
Medium, low and unrated 64
- CVE-2018-9408In m3326_gps_write and m3326_gps_read of gps.s, there is a possible Out Of Bounds Read due to a missing bounds check.Google Android
- CVE-2018-9407In emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check.Google Android
- CVE-2024-12186code-projects Hotel Management System Available Room hotelnew.c stack-based overflowcode-projects Hotel Management System
- CVE-2024-12185code-projects Hotel Management System Administrator Login Password stack-based overflowcode-projects Hotel Management System
- CVE-2024-12183DedeCMS HTTP POST Request carbuyaction.php RemoveXSS cross site scriptingDedeCMS
- CVE-2024-12182DedeCMS soft_add.php cross site scriptingDedeCMS
- CVE-2024-12181DedeCMS SWF File uploads_add.php cross site scriptingDedeCMS
- CVE-2024-12180DedeCMS article_add.php cross site scriptingDedeCMS
- CVE-2024-38829Spring LDAP sensitive data exposure for case-sensitive comparisonsSpring LDAP · org.springframework.ldap:spring-ldap-core
- CVE-2024-12148Incorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and earlier allows an authenticated user to acceDevolutions Server
- CVE-2024-12151Incorrect permission assignment in the user migration feature in Devolutions Server 2024.3.8.0 and earlier allows users to retain their old Devolutions Server
- CVE-2024-12196Incorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier allows an authenticated user to view the paDevolutions Server
- CVE-2024-20397Cisco NX-OS Software Image Verification Bypass VulnerabilityCisco NX-OS Software · Cisco NX-OS System Software in AC… +1
- CVE-2024-54002Dependency-Track allows enumeration of managed users via /api/v1/user/login endpointDependencyTrack dependency-track
- CVE-2024-54132GitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerabilitycli · github.com/cli/cli +1
- CVE-2024-40745Extension - tassos.gr - Reflected Cross site scripting vulnerability in Convert Forms component for Joomla < 4.4.8tassos.gr Convert Forms component for Joomla
- CVE-2024-12056Client Secret not checked with OAuth Password grant typearcinfo PcVue
- CVE-2024-53137ARM: fix cacheflush with PANLinux
- CVE-2024-53134pmdomain: imx93-blk-ctrl: correct remove pathLinux
- CVE-2024-53132drm/xe/oa: Fix "Missing outer runtime PM protection" warningLinux
- CVE-2024-53131nilfs2: fix null-ptr-deref in block_touch_buffer tracepointLinux
- CVE-2024-53130nilfs2: fix null-ptr-deref in block_dirty_buffer tracepointLinux
- CVE-2024-53129drm/rockchip: vop: Fix a dereferenced before check warningLinux
- CVE-2024-53128sched/task_stack: fix object_is_on_stack() for KASAN tagged pointersLinux
- CVE-2024-7488Business Logic Error in RestApp Inc.'s Online Ordering SystemRestApp Online Ordering System
- CVE-2024-12138horilla create_skills deserializationhorilla
- CVE-2024-11935Email Address Obfuscation <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameterneotrendy Email Address Obfuscation
- CVE-2024-54158In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encodingJetBrains YouTrack
- CVE-2024-54157In JetBrains YouTrack before 2024.3.52635 potential ReDoS was possible due to vulnerable RegExp in Ruby syntax detectorJetBrains YouTrack
- CVE-2024-54156In JetBrains YouTrack before 2024.3.52635 multiple merge functions were vulnerable to prototype pollution attackJetBrains YouTrack
- CVE-2024-54155In JetBrains YouTrack before 2024.3.51866 improper access control allowed listing of project names during app import without authenticationJetBrains YouTrack
- CVE-2024-54153In JetBrains YouTrack before 2024.3.51866 unauthenticated database backup download was possible via vulnerable query parameterJetBrains YouTrack
- CVE-2024-8962WPBITS Addons For Elementor Page Builder <= 1.5.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadWPBITS Addons For Elementor Page Builder
- CVE-2024-11854Listdom – Business Directory and Classified Ads Listings WordPress Plugin <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode Parameterwebilia Listdom: AI-powered Business Directory with Classif…
- CVE-2024-11814Additional Custom Order Status for WooCommerce <= 1.6.0 - Reflected Cross-Site Scriptingwpcodefactory Additional Custom Order Status for WooCommerce
- CVE-2024-11880B Testimonial – testimonial plugin for WP <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingbplugins B Testimonial – Customer Testimonials in Custom La…
- CVE-2024-5020Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Libraryextendthemes Colibri Page Builder · smub Envira Gallery… +13
- CVE-2024-10787LA-Studio Element Kit for Elementor <= 1.4.4 - Authenticated (Contributor+) Post Disclosurechoijun LA-Studio Element Kit for Elementor
- CVE-2024-11903WP eCards <= 1.3.904 - Authenticated (Contributor+) Stored Cross-Site Scriptingtimsayshey WP eCards – Branded Digital Greeting Cards
- CVE-2023-6978WP Job Manager – Company Profiles <= 1.7 - Reflected Cross-Site Scriptingastoundify WP Job Manager – Company Profiles
- CVE-2024-11769Flower Delivery by Florist One <= 3.9 - Authenticated (Contributor+) Stored Cross-Site Scriptingfloristone Flower Delivery by Florist One
- CVE-2024-10664Knowledge Base documentation & wiki plugin – BasePress Docs <= 2.16.3.3 - Missing Authorization to Authenticated (Subscriber+) Database Updatecodesavory Knowledge Base documentation & wiki plugin – Bas…
- CVE-2024-11466Intro Tour Tutorial DeepPresentation <= 6.5.2 - Reflected Cross-Site Scriptingtomasgroulik Intro Tour Tutorial DeepPresentation
- CVE-2023-52944Incorrect authorization vulnerability in ActionRule webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 alloSynology Surveillance Station
- CVE-2023-52943Incorrect authorization vulnerability in Alert.Setting webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 aSynology Surveillance Station
- CVE-2024-9404Denial-of-Service VulnerabilityMoxa VPort 07-3 Series · Moxa EDS-608 Series +46
- CVE-2024-12099Dollie Hub – Build Your Own WordPress Cloud Platform <= 6.2.0 - Authenticated (Contributor+) Post Disclosuregetdollie Dollie AI – Connect
- CVE-2024-10885SearchIQ – The Search Solution <= 4.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingSearchIQ – The Search Solution
- CVE-2024-12123Unauthorized Modification of Ticket RequesterIssuetrak
- CVE-2024-11807NPS computy <= 2.8.0 - Reflected Cross-Site Scriptingcalliko NPS computy
- CVE-2024-11747Responsive Videos <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpenhanced Responsive Videos
- CVE-2024-10663Eleblog – Elementor Blog And Magazine Addons <= 1.8 - Missing Authorization to Authenticated (Subscriber+) Deactivation Submissionsmarettheme Eleblog – Elementor Blog And Magazine Addons
- CVE-2024-11813Pulsating Chat Button <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scriptingaminshah74 Pulsating Chat Button
- CVE-2024-11897Contact Form, Survey & Form Builder – MightyForms <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingContact Form, Survey & Form Builder – MightyForms
- CVE-2024-11093SG Helper <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Uploadburgthaleratsirconic SG Helper
- CVE-2024-10832Posti Shipping <= 3.10.3 - Reflected Cross-Site Scriptingpostioy Posti Shipping
- CVE-2024-11985An improper input validation vulnerability leads to device crashes in certain ASUS router models.ASUS RT-AX55 · ASUS RT-AX56U +3
- CVE-2024-45206A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests to arbitrary hosts ofVeeam Service Provider Console
- CVE-2024-11479Authenticated HTML Injection in Issuetrak Ticket Comment FunctionIssuetrak
- CVE-2024-51210Firepad through 1.5.11 allows remote attackers, who have knowledge of a pad ID, to retrieve both the current text of a document and all contfirepad
- CVE-2024-52676Itsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross Site Scripting (XSS) via /bcc_forum/members/home.php.
- CVE-2024-53614A hardcoded decryption key in Thinkware Cloud APK v4.3.46 allows attackers to access sensitive data and execute arbitrary commands with elev
- CVE-2024-54674app/View/GalaxyClusters/cluster_export_misp_galaxy.ctp in MISP through 2.5.2 has stored XSS when exporting custom clusters into the misp-gal
- CVE-2024-54675app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow.