CVEs published December 18, 2024
151 CVEs were published on December 18, 2024: 20 critical, 72 high. 2 are now in CISA KEV.
- Published
- 151
- Critical
- 20
- High
- 72
- Medium
- 59
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 2
- Fix available
- 47
Most affected products
- Adobe Acrobat Reader
- 10
- VibeThemes WPLMS
- 10
- misskey-dev misskey
- 6
- Google Chrome
- 4
- envoyproxy envoy
- 3
- FXC AE1021 · FXC AE1021PE
- 3
- Google Android
- 3
- IBM Cognos Analytics
- 3
- IBM Storage Defender - Resiliency Service
- 3
- Matter
- 3
Critical 20
- CVE-2024-56145RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cmscraftcms cms · craftcms/cms
- CVE-2024-47040Use After Free in the android.hardware.radio.sap.ISap/slot2 serviceGoogle Android
- CVE-2024-47039OOB Read in the android.hardware.boot.IBootControl/default serviceGoogle Android
- CVE-2024-47038In dhd_prot_flowrings_pool_release of dhd_msgbuf.c, there is a possible outcof bounds write due to a missing bounds check.Google Android
- CVE-2024-56050WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerabilityVibeThemes WPLMS
- CVE-2024-56052WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerabilityVibeThemes WPLMS
- CVE-2024-56054WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerabilityVibeThemes WPLMS
- CVE-2024-56057WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerabilityVibeThemes WPLMS
- CVE-2024-54383WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerabilitywpweb WooCommerce PDF Vouchers
- CVE-2024-12373Rockwell Automation PowerMonitor™ 1000 Denial of ServiceRockwell Automation PM1k 1408-BC3A-485 · Rockwell Autom… +12
- CVE-2024-12372Rockwell Automation PowerMonitor™ 1000 Denial of ServiceRockwell Automation PM1k 1408-BC3A-485 · Rockwell Autom… +12
- CVE-2024-12371Rockwell Automation PowerMonitor™ 1000 Remote Code ExecutionRockwell Automation PM1k 1408-BC3A-485 · Rockwell Autom… +12
- CVE-2023-34990A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized cFortinet FortiWLM
- CVE-2024-56058WordPress VRPConnector plugin <= 2.0.1 - PHP Object Injection vulnerabilitydenniskravetstns VRPConnector
- CVE-2024-56059WordPress Partners plugin <= 0.2.0 - PHP Object Injection vulnerabilityfarinspace Partners
- CVE-2024-4996Hardcoded Password in Wapro ERP DesktopAsseco Business Solutions S.A. Wapro ERP Desktop
- CVE-2024-4995Protocol Downgrade in Wapro ERP DesktopAsseco Business Solutions S.A. Wapro ERP Desktop
- CVE-2024-12287Biagiotti Membership <= 1.0.2 - Authentication Bypass via biagiotti_membership_check_facebook_userMikado-Themes Biagiotti Membership
- CVE-2024-21546Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution (RCE) through using a valid mimetyunisharp/laravel-filemanager
- CVE-2024-55461SeaCMS <=13.0 is vulnerable to command execution in phome.php via the function Ebak_RepPathFiletext().
High 72
- CVE-2022-44518Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat Reader
- CVE-2022-44512Acrobat Reader | Out-of-bounds Write (CWE-787)Adobe Acrobat Reader
- CVE-2022-44520Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat Reader
- CVE-2022-44513Acrobat Reader | Out-of-bounds Write (CWE-787)Adobe Acrobat Reader
- CVE-2022-44514Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat Reader
- CVE-2024-43106A library injection vulnerability exists in Microsoft Excel 16.83 for macOS.Microsoft Excel
- CVE-2024-42220A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS.Microsoft Outlook
- CVE-2024-42004A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS.Microsoft Teams
- CVE-2024-41165A library injection vulnerability exists in Microsoft Word 16.83 for macOS.Microsoft Word
- CVE-2024-41159A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS.Microsoft OneNote
- CVE-2024-41145A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS.Microsoft Teams
- CVE-2024-41138A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.281Microsoft Teams
- CVE-2024-39804A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS.Microsoft PowerPoint
- CVE-2024-12695Out of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via Google Chrome
- CVE-2024-12694Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via Google Chrome
- CVE-2024-12693Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandGoogle Chrome
- CVE-2024-12692Type Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a craftedGoogle Chrome
- CVE-2024-49363Uncontrolled Recursion and Asymmetric Resource Consumption (Amplification) in media/file proxy in Misskeymisskey-dev misskey
- CVE-2024-52590Missing validation allows spoofed profiles in Misskeymisskey-dev misskey
- CVE-2024-12741Deserialization Of Untrusted Data Vulnerability In NI DAQExpress Project FileNI DAQExpress
- CVE-2024-52591Missing validation allows spoofed profiles and notes in Misskeymisskey-dev misskey
- CVE-2024-53271HTTP/1.1 multiple issues with envoy.reloadable_features.http1_balsa_delay_reset in envoyenvoyproxy envoy
- CVE-2024-53270HTTP/1: sending overload crashes when the request is reset beforehand in envoyenvoyproxy envoy
- CVE-2024-56047WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerabilityVibeThemes WPLMS
- CVE-2024-56053WordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerabilityVibeThemes WPLMS
- CVE-2024-56048WordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerabilityVibeThemes WPLMS
- CVE-2024-54381WordPress Advance Menu Manager plugin <= 3.1.1 - Settings Change vulnerabilityDotstore Advance Menu Manager
- CVE-2024-55952Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerabilitydataease
- CVE-2024-55953Dataease Mysql JDBC Connection Parameters Not Verified Leads to Deserialization and Arbitrary File Read Vulnerabilitydataease
- CVE-2024-56049WordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerabilityVibeThemes WPLMS
- CVE-2024-56055WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directory Deletion vulnerabilityVibeThemes WPLMS
- CVE-2024-56051WordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerabilityVibeThemes WPLMS
- CVE-2024-49576A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object.Foxit Reader
- CVE-2024-47810A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object.Foxit Reader
- CVE-2024-48889An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiManager versionFortinet FortiManager
- CVE-2024-49677WordPress Bootstrap Buttons plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityDavid Cramer Bootstrap Buttons
- CVE-2024-51646WordPress Saoshyant Element plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerabilitysaoshyant1994 Saoshyant Element
- CVE-2024-54350WordPress hmd theme <= 2.0 - Cross Site Scripting (XSS) vulnerabilityhjyl hmd
- CVE-2024-56010WordPress Device Detector Plugin <= 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityPierre Lannoy Device Detector
- CVE-2024-56016WordPress Image Mapper plugin <= 0.2.5.3 - Reflected Cross Site Scripting (XSS) vulnerabilitymaartenhemmes Image Mapper
- CVE-2024-55975WordPress Dr Affiliate plugin <= 1.2.3 - SQL Injection vulnerabilityRohit Urane Dr Affiliate
- CVE-2024-55983WordPress PowerFormBuilder plugin <= 1.0.6 - SQL Injection vulnerabilityPowerFormBuilder
- CVE-2024-55984WordPress Saksh Escrow System plugin <= 2.4 - SQL Injection vulnerabilitysusheelhbti Saksh Escrow System
- CVE-2024-55985WordPress YDS Support Ticket System plugin <= 1.0 - SQL Injection vulnerabilityYdesignservices YDS Support Ticket System
- CVE-2024-54270WordPress Axeptio plugin <= 2.5.4 - Local File Inclusion vulnerabilityAxeptio
- CVE-2024-56008WordPress Spreadr Woocommerce plugin <= 1.0.4 - Arbitrary Content Deletion vulnerabilitySpreadr Woocommerce
- CVE-2024-11912Traveler <= 3.1.6 - Unauthenticated SQL Injection via order_idShineTheme Travel Booking WordPress Theme
- CVE-2024-11614Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost librarydpdk · Fast Datapath for Red Hat Enterprise Linux +3
- CVE-2024-54457Inclusion of undocumented features or chicken bits issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versionFXC AE1021 · FXC AE1021PE
- CVE-2024-53688Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in AE1021 firmware versions 2.0.10 aFXC AE1021 · FXC AE1021PE
- CVE-2024-47397Weak authentication issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier.FXC AE1021 · FXC AE1021PE
- CVE-2024-1610OPPO Store app include remote account token hijacking and sensitive information leakageOPPO Store APP
- CVE-2024-21547Versions of the package spatie/browsershot before 5.0.2 are vulnerable to Directory Traversal due to URI normalisation in the browser where spatie/browsershot
- CVE-2024-21548Versions of the package bun after 0.0.12 and before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization.bun
- CVE-2024-4464Authorization bypass through user-controlled key vulnerability in streaming service in Synology Media Server before 1.4-2680, 2.0.5-3152 andSynology Media Server
- CVE-2024-12259CRM WordPress Plugin – RepairBuddy <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalationsweetdaisy86 RepairBuddy – Repair Shop CRM & Booking Plugin…
- CVE-2024-12025Collapsing Categories <= 3.0.8 - Unauthenticated SQL Injectionrobfelty Collapsing Categories
- CVE-2024-12432WPC Shop as a Customer for WooCommerce <= 1.2.8 - Authentication Bypass Due to Insufficiently Unique Keywpclever WPC Shop as a Customer for WooCommerce
- CVE-2024-47480Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability.Dell Inventory Collector Client
- CVE-2024-36694OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function.opencart/opencart
- CVE-2024-39703In ThreatQuotient ThreatQ before 5.29.3, authenticated users are able to execute arbitrary commands by sending a crafted request to an API eThreatQuotient ThreatQ
- CVE-2024-49202Keyfactor Command before 12.5.0 has Incorrect Access Control: access tokens are over permissioned, aka 64099.
- CVE-2024-53580iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.
- CVE-2024-55086In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery (SSRF) can be achieved in the plug-in download address in the ba
- CVE-2024-55088GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery (SSRF) in the backend plugin module.
- CVE-2024-55505An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component.
- CVE-2024-55506An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 (version with 0 updates) enables an attacker to execute arbitrary code
- CVE-2024-56116A Cross-Site Request Forgery vulnerability in Amiro.CMS before 7.8.4 allows remote attackers to create an administrator account.
- CVE-2024-56174In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under speci
- CVE-2024-56317In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0, the WriteAcl function deletes all existing ACL entries first, and then atteMatter
- CVE-2024-56318In raw\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBasMatter
- CVE-2024-56319In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before e3277eb, unlimited user label appends in a userlabel cluster can leadMatter
Medium, low and unrated 59
- CVE-2024-55603Insufficient session invalidation in Kanboardkanboard
- CVE-2021-29827IBM InfoSphere Information Server clickjackingIBM InfoSphere Information Server
- CVE-2021-20553IBM Sterling B2B Integrator Standard Edition cross-site scriptingIBM Sterling B2B Integrator
- CVE-2023-21586Acrobat Reader | NULL Pointer Dereference (CWE-476)Adobe Acrobat Reader
- CVE-2022-44517Acrobat Reader | Out-of-bounds Read (CWE-125)Adobe Acrobat Reader
- CVE-2022-44519Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat Reader
- CVE-2022-44516Acrobat Reader | Out-of-bounds Read (CWE-125)Adobe Acrobat Reader
- CVE-2022-44515Acrobat Reader | Out-of-bounds Read (CWE-125)Adobe Acrobat Reader
- CVE-2022-40733An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of WindMicrosoft Windows
- CVE-2022-40732An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of WindMicrosoft Windows
- CVE-2024-56140Bypass of CSRF Middleware in Astrowithastro astro · astro
- CVE-2024-45338Non-linear parsing of case-insensitive content in golang.org/x/net/htmlgolang.org/x/net/html · golang.org/x/net
- CVE-2024-12686Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)BeyondTrust Remote Support(RS) & Privileged Remote Access
- CVE-2024-51470IBM MQ denial of serviceIBM MQ
- CVE-2024-52579Server-Side Request Forgery vulnerability in various APIs in Misskeymisskey-dev misskey
- CVE-2024-52592Missing validation allows spoofed poll updates in Misskeymisskey-dev misskey
- CVE-2024-52593Missing validation allows spoofed "origin" links in Misskeymisskey-dev misskey
- CVE-2024-53269Happy Eyeballs: Validate that additional_address are IP addresses instead of crashing when sorting in envoyenvoyproxy envoy
- CVE-2024-25042IBM Cognos Analytics cross-site scriptingIBM Cognos Analytics
- CVE-2024-45082IBM Cognos Analytics HTTP open redirectionIBM Cognos Analytics
- CVE-2024-41752IBM Cognos Analytics HTML injectionIBM Cognos Analytics
- CVE-2024-52361IBM Storage Defender - Resiliency Service information disclosureIBM Storage Defender - Resiliency Service
- CVE-2023-50956IBM Storage Defender - Resiliency Service information disclosureIBM Storage Defender - Resiliency Service
- CVE-2024-47119IBM Storage Defender - Resiliency Service improper certificate validationIBM Storage Defender - Resiliency Service
- CVE-2024-56128Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryptionApache Software Foundation Apache Kafka · org.apache.kaf… +3
- CVE-2024-50570A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0 tFortinet FortiClientMac · Fortinet FortiClientLinux +1
- CVE-2024-52485WordPress WP Menu Image plugin <= 2.2 - Broken Access Control vulnerabilityYudiz Solutions WP Menu Image
- CVE-2024-55997WordPress Order Delivery & Pickup Location Date Time plugin <= 1.1.0 - Settings Change vulnerabilitywebchunky Order Delivery & Pickup Location Date Time
- CVE-2024-11291Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposurecozmoslabs Paid Membership Subscriptions – Effortless Membe…
- CVE-2024-11926Traveler <= 3.1.6 - Missing Authorization in Several AJAX ActionsShineTheme Travel Booking WordPress Theme
- CVE-2024-47104IBM i incorrect privilege assignmentIBM i
- CVE-2024-12454Affiliate Program Suite — SliceWP Affiliates <= 1.1.23 - Cross-Site Request Forgery to Reflected Cross-Site Scriptingiovamihai Affiliate Program Suite — SliceWP Affiliates
- CVE-2024-12554Peter’s Custom Anti-Spam <= 3.2.3 - Cross-Site Request Forgery via cas_register_post Functionpkthree Peter’s Custom Anti-Spam
- CVE-2024-12340Animation Addons for Elementor <= 1.1.6 - Authenticated (Contributor+) Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Templatewealcoder Animation Addons for Elementor – GSAP Motion Elem…
- CVE-2024-11295Simple Page Access Restriction <= 1.0.29 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposurepluginsandsnippets Simple Page Access Restriction
- CVE-2024-10892Cost Calculator Builder < 3.2.43 - Settings update via CSRFCost Calculator Builder
- CVE-2024-12698Ose-olm-catalogd-container: incomplete fix for rapid reset (cve-2023-39325/cve-2023-44487)catalogd · Red Hat OpenShift Container Platform
- CVE-2024-12061Events Addon for Elementor <= 2.2.3 - Authenticated (Contributor+) Post Disclosurenicheaddons Events Addon for Elementor
- CVE-2024-12250Accept Authorize.NET Payments Using Contact Form 7 <= 2.2 - Unauthenticated Information Exposurezealopensource Accept Authorize.NET Payments Using Contact…
- CVE-2024-12449Video Share VOD – Turnkey Video Site Builder Script <= 2.6.30 - Authenticated (Contributor+) Stored Cross-Site Scriptingvideowhisper Video Share VOD – Turnkey Video Site Builder S…
- CVE-2024-12596LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes <= 7.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletionchrisbadgett LifterLMS – WP LMS for eLearning, Online Cours…
- CVE-2024-11254AMP for WP – Accelerated Mobile Pages <= 1.1.1 - Reflected Cross-Site Scriptingmohammed_kaludi AMP for WP – Accelerated Mobile Pages
- CVE-2024-12513Contests by Rewards Fuel <= 2.0.65 - Authenticated (Contributor+) Stored Cross-Site Scriptingrewardsfuel Contests by Rewards Fuel
- CVE-2024-11881Easy Waveform Player <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingtymotey Easy Waveform Player
- CVE-2024-12500Philantro – Donations and Donor Management <= 5.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingPhilantro – Donations and Donor Management
- CVE-2024-11748Taeggie Feed <= 0.1.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingTaeggie Feed
- CVE-2024-11439ScanCircle <= 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingaklaren ScanCircle
- CVE-2024-37649Insecure Permissions vulnerability in SecureSTATION v.2.5.5.3116-S50-SMA-B20160811A and before allows a physically proximate attacker to obt
- CVE-2024-49201Keyfactor Remote File Orchestrator (aka remote-file-orchestrator) 2.8 before 2.8.1 allows Information Disclosure: sensitive information coul
- CVE-2024-55089Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery (SSRF) in the background import data function because XML documents may coRhymix
- CVE-2024-55231An IDOR vulnerability in the edit-notes.php module of PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to mo
- CVE-2024-55232An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to
- CVE-2024-55239A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker
- CVE-2024-55492Winmail Server 4.4 is vulnerable to f_user=%22%3E%3Csvg%20onload Cross Site Scripting (XSS).
- CVE-2024-56115A vulnerability in Amiro.CMS before 7.8.4 exists due to the failure to take measures to neutralize special elements.
- CVE-2024-56169A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0.
- CVE-2024-56170A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0.
- CVE-2024-56173In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under speci
- CVE-2024-56175In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under speci