# CVEs published 2024-12-18

151 CVEs were published on December 18, 2024: 20 critical, 72 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2024-55603](https://cve.now/CVE-2024-55603.md): Insufficient session invalidation in Kanboard (CVSS 6.5, kanboard)
- [CVE-2021-29827](https://cve.now/CVE-2021-29827.md): IBM InfoSphere Information Server clickjacking (CVSS 5.2, IBM InfoSphere Information Server)
- [CVE-2021-20553](https://cve.now/CVE-2021-20553.md): IBM Sterling B2B Integrator Standard Edition cross-site scripting (CVSS 5.4, IBM Sterling B2B Integrator)
- [CVE-2023-21586](https://cve.now/CVE-2023-21586.md): Acrobat Reader | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2022-44518](https://cve.now/CVE-2022-44518.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2022-44517](https://cve.now/CVE-2022-44517.md): Acrobat Reader | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2022-44519](https://cve.now/CVE-2022-44519.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2022-44512](https://cve.now/CVE-2022-44512.md): Acrobat Reader | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2022-44516](https://cve.now/CVE-2022-44516.md): Acrobat Reader | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2022-44520](https://cve.now/CVE-2022-44520.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2022-44513](https://cve.now/CVE-2022-44513.md): Acrobat Reader | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2022-44515](https://cve.now/CVE-2022-44515.md): Acrobat Reader | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2022-44514](https://cve.now/CVE-2022-44514.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2024-43106](https://cve.now/CVE-2024-43106.md): A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. (CVSS 7.1, Microsoft Excel)
- [CVE-2024-42220](https://cve.now/CVE-2024-42220.md): A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. (CVSS 7.1, Microsoft Outlook)
- [CVE-2024-42004](https://cve.now/CVE-2024-42004.md): A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. (CVSS 7.1, Microsoft Teams)
- [CVE-2024-41165](https://cve.now/CVE-2024-41165.md): A library injection vulnerability exists in Microsoft Word 16.83 for macOS. (CVSS 7.1, Microsoft Word)
- [CVE-2024-41159](https://cve.now/CVE-2024-41159.md): A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. (CVSS 7.1, Microsoft OneNote)
- [CVE-2024-41145](https://cve.now/CVE-2024-41145.md): A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. (CVSS 7.1, Microsoft Teams)
- [CVE-2024-41138](https://cve.now/CVE-2024-41138.md): A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.281 (CVSS 7.1, Microsoft Teams)
- [CVE-2024-39804](https://cve.now/CVE-2024-39804.md): A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. (CVSS 7.1, Microsoft PowerPoint)
- [CVE-2022-40733](https://cve.now/CVE-2022-40733.md): An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Wind (CVSS 5.0, Microsoft Windows)
- [CVE-2022-40732](https://cve.now/CVE-2022-40732.md): An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Wind (CVSS 5.0, Microsoft Windows)
- [CVE-2024-12695](https://cve.now/CVE-2024-12695.md): Out of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2024-12694](https://cve.now/CVE-2024-12694.md): Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via (CVSS 8.8, Google Chrome)
- [CVE-2024-12693](https://cve.now/CVE-2024-12693.md): Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sand (CVSS 8.0, Google Chrome)
- [CVE-2024-12692](https://cve.now/CVE-2024-12692.md): Type Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted (CVSS 8.8, Google Chrome)
- [CVE-2024-56140](https://cve.now/CVE-2024-56140.md): Bypass of CSRF Middleware in Astro (CVSS 5.9, withastro astro · astro)
- [CVE-2024-45338](https://cve.now/CVE-2024-45338.md): Non-linear parsing of case-insensitive content in golang.org/x/net/html (CVSS 5.3, golang.org/x/net/html · golang.org/x/net)
- [CVE-2024-56145](https://cve.now/CVE-2024-56145.md): RCE when PHP \`register\_argc\_argv\` config setting is enabled in craftcms/cms (CVSS 9.3, KEV, craftcms cms · craftcms/cms)
- [CVE-2024-12686](https://cve.now/CVE-2024-12686.md): Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA) (CVSS 6.6, KEV, BeyondTrust Remote Support(RS) & Privileged Remote Access)
- [CVE-2024-51470](https://cve.now/CVE-2024-51470.md): IBM MQ denial of service (CVSS 6.5, IBM MQ)
- [CVE-2024-49363](https://cve.now/CVE-2024-49363.md): Uncontrolled Recursion and Asymmetric Resource Consumption (Amplification) in media/file proxy in Misskey (CVSS 7.4, misskey-dev misskey)
- [CVE-2024-52579](https://cve.now/CVE-2024-52579.md): Server-Side Request Forgery vulnerability in various APIs in Misskey (CVSS 6.4, misskey-dev misskey)
- [CVE-2024-52590](https://cve.now/CVE-2024-52590.md): Missing validation allows spoofed profiles in Misskey (CVSS 8.8, misskey-dev misskey)
- [CVE-2024-12741](https://cve.now/CVE-2024-12741.md): Deserialization Of Untrusted Data Vulnerability In NI DAQExpress Project File (CVSS 7.8, NI DAQExpress)
- [CVE-2024-52591](https://cve.now/CVE-2024-52591.md): Missing validation allows spoofed profiles and notes in Misskey (CVSS 8.8, misskey-dev misskey)
- [CVE-2024-52592](https://cve.now/CVE-2024-52592.md): Missing validation allows spoofed poll updates in Misskey (CVSS 6.9, misskey-dev misskey)
- [CVE-2024-52593](https://cve.now/CVE-2024-52593.md): Missing validation allows spoofed "origin" links in Misskey (CVSS 5.1, misskey-dev misskey)
- [CVE-2024-53271](https://cve.now/CVE-2024-53271.md): HTTP/1.1 multiple issues with envoy.reloadable\_features.http1\_balsa\_delay\_reset in envoy (CVSS 7.1, envoyproxy envoy)
- [CVE-2024-53270](https://cve.now/CVE-2024-53270.md): HTTP/1: sending overload crashes when the request is reset beforehand in envoy (CVSS 7.5, envoyproxy envoy)
- [CVE-2024-53269](https://cve.now/CVE-2024-53269.md): Happy Eyeballs: Validate that additional\_address are IP addresses instead of crashing when sorting in envoy (CVSS 4.5, envoyproxy envoy)
- [CVE-2024-47040](https://cve.now/CVE-2024-47040.md): Use After Free in the android.hardware.radio.sap.ISap/slot2 service (CVSS 10.0, Google Android)
- [CVE-2024-47039](https://cve.now/CVE-2024-47039.md): OOB Read in the android.hardware.boot.IBootControl/default service (CVSS 10.0, Google Android)
- [CVE-2024-47038](https://cve.now/CVE-2024-47038.md): In dhd\_prot\_flowrings\_pool\_release of dhd\_msgbuf.c, there is a possible outcof bounds write due to a missing bounds check. (CVSS 10.0, Google Android)
- [CVE-2024-56047](https://cve.now/CVE-2024-56047.md): WordPress WPLMS plugin \< 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability (CVSS 8.5, VibeThemes WPLMS)
- [CVE-2024-56053](https://cve.now/CVE-2024-56053.md): WordPress WPLMS plugin \< 1.9.9.5.3 - Instructor+ SQL Injection vulnerability (CVSS 7.6, VibeThemes WPLMS)
- [CVE-2024-56048](https://cve.now/CVE-2024-56048.md): WordPress WPLMS plugin \<= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerability (CVSS 8.8, VibeThemes WPLMS)
- [CVE-2024-56050](https://cve.now/CVE-2024-56050.md): WordPress WPLMS plugin \< 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability (CVSS 9.9, VibeThemes WPLMS)
- [CVE-2024-56052](https://cve.now/CVE-2024-56052.md): WordPress WPLMS plugin \< 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability (CVSS 9.9, VibeThemes WPLMS)
- [CVE-2024-56054](https://cve.now/CVE-2024-56054.md): WordPress WPLMS plugin \< 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability (CVSS 9.1, VibeThemes WPLMS)
- [CVE-2024-56057](https://cve.now/CVE-2024-56057.md): WordPress WPLMS plugin \< 1.9.9.5.2 - Arbitrary File Upload vulnerability (CVSS 9.9, VibeThemes WPLMS)
- [CVE-2024-54381](https://cve.now/CVE-2024-54381.md): WordPress Advance Menu Manager plugin \<= 3.1.1 - Settings Change vulnerability (CVSS 7.1, Dotstore Advance Menu Manager)
- [CVE-2024-55952](https://cve.now/CVE-2024-55952.md): Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability (CVSS 8.6, dataease)
- [CVE-2024-55953](https://cve.now/CVE-2024-55953.md): Dataease Mysql JDBC Connection Parameters Not Verified Leads to Deserialization and Arbitrary File Read Vulnerability (CVSS 8.6, dataease)
- [CVE-2024-54383](https://cve.now/CVE-2024-54383.md): WordPress WooCommerce - PDF Vouchers plugin \< 4.9.9 - Broken Authentication vulnerability (CVSS 9.8, wpweb WooCommerce PDF Vouchers)
- [CVE-2024-56049](https://cve.now/CVE-2024-56049.md): WordPress WPLMS plugin \< 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerability (CVSS 8.5, VibeThemes WPLMS)
- [CVE-2024-56055](https://cve.now/CVE-2024-56055.md): WordPress WPLMS plugin \< 1.9.9.5.2 - Arbitrary Directory Deletion vulnerability (CVSS 8.5, VibeThemes WPLMS)
- [CVE-2024-56051](https://cve.now/CVE-2024-56051.md): WordPress WPLMS plugin \< 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerability (CVSS 8.5, VibeThemes WPLMS)
- [CVE-2024-25042](https://cve.now/CVE-2024-25042.md): IBM Cognos Analytics cross-site scripting (CVSS 5.4, IBM Cognos Analytics)
- [CVE-2024-45082](https://cve.now/CVE-2024-45082.md): IBM Cognos Analytics HTTP open redirection (CVSS 6.8, IBM Cognos Analytics)
- [CVE-2024-41752](https://cve.now/CVE-2024-41752.md): IBM Cognos Analytics HTML injection (CVSS 5.4, IBM Cognos Analytics)
- [CVE-2024-49576](https://cve.now/CVE-2024-49576.md): A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF\_Widget object. (CVSS 8.8, Foxit Reader)
- [CVE-2024-47810](https://cve.now/CVE-2024-47810.md): A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. (CVSS 8.8, Foxit Reader)
- [CVE-2024-12373](https://cve.now/CVE-2024-12373.md): Rockwell Automation PowerMonitor™ 1000 Denial of Service (CVSS 9.3, Rockwell Automation PM1k 1408-BC3A-485 · Rockwell Autom… +12)
- [CVE-2024-12372](https://cve.now/CVE-2024-12372.md): Rockwell Automation PowerMonitor™ 1000 Denial of Service (CVSS 9.3, Rockwell Automation PM1k 1408-BC3A-485 · Rockwell Autom… +12)
- [CVE-2024-52361](https://cve.now/CVE-2024-52361.md): IBM Storage Defender - Resiliency Service information disclosure (CVSS 5.7, IBM Storage Defender - Resiliency Service)
- [CVE-2023-50956](https://cve.now/CVE-2023-50956.md): IBM Storage Defender - Resiliency Service information disclosure (CVSS 4.4, IBM Storage Defender - Resiliency Service)
- [CVE-2024-47119](https://cve.now/CVE-2024-47119.md): IBM Storage Defender - Resiliency Service improper certificate validation (CVSS 5.9, IBM Storage Defender - Resiliency Service)
- [CVE-2024-12371](https://cve.now/CVE-2024-12371.md): Rockwell Automation PowerMonitor™ 1000 Remote Code Execution (CVSS 9.3, Rockwell Automation PM1k 1408-BC3A-485 · Rockwell Autom… +12)
- [CVE-2024-56128](https://cve.now/CVE-2024-56128.md): Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption (CVSS 5.3, Apache Software Foundation Apache Kafka · org.apache.kaf… +3)
- [CVE-2024-48889](https://cve.now/CVE-2024-48889.md): An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability \[CWE-78\] in FortiManager version (CVSS 7.2, Fortinet FortiManager)
- [CVE-2023-34990](https://cve.now/CVE-2023-34990.md): A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized c (CVSS 9.6, Fortinet FortiWLM)
- [CVE-2024-50570](https://cve.now/CVE-2024-50570.md): A Cleartext Storage of Sensitive Information vulnerability \[CWE-312\] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0 t (CVSS 4.9, Fortinet FortiClientMac · Fortinet FortiClientLinux +1)
- [CVE-2024-52485](https://cve.now/CVE-2024-52485.md): WordPress WP Menu Image plugin \<= 2.2 - Broken Access Control vulnerability (CVSS 6.5, Yudiz Solutions WP Menu Image)
- [CVE-2024-55997](https://cve.now/CVE-2024-55997.md): WordPress Order Delivery & Pickup Location Date Time plugin \<= 1.1.0 - Settings Change vulnerability (CVSS 6.5, webchunky Order Delivery & Pickup Location Date Time)
- [CVE-2024-49677](https://cve.now/CVE-2024-49677.md): WordPress Bootstrap Buttons plugin \<= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, David Cramer Bootstrap Buttons)
- [CVE-2024-51646](https://cve.now/CVE-2024-51646.md): WordPress Saoshyant Element plugin \<= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, saoshyant1994 Saoshyant Element)
- [CVE-2024-54350](https://cve.now/CVE-2024-54350.md): WordPress hmd theme \<= 2.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, hjyl hmd)
- [CVE-2024-56010](https://cve.now/CVE-2024-56010.md): WordPress Device Detector Plugin \<= 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Pierre Lannoy Device Detector)
- [CVE-2024-56016](https://cve.now/CVE-2024-56016.md): WordPress Image Mapper plugin \<= 0.2.5.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, maartenhemmes Image Mapper)
- [CVE-2024-55975](https://cve.now/CVE-2024-55975.md): WordPress Dr Affiliate plugin \<= 1.2.3 - SQL Injection vulnerability (CVSS 8.5, Rohit Urane Dr Affiliate)
- [CVE-2024-55983](https://cve.now/CVE-2024-55983.md): WordPress PowerFormBuilder plugin \<= 1.0.6 - SQL Injection vulnerability (CVSS 8.5, PowerFormBuilder)
- [CVE-2024-55984](https://cve.now/CVE-2024-55984.md): WordPress Saksh Escrow System plugin \<= 2.4 - SQL Injection vulnerability (CVSS 8.5, susheelhbti Saksh Escrow System)
- [CVE-2024-55985](https://cve.now/CVE-2024-55985.md): WordPress YDS Support Ticket System plugin \<= 1.0 - SQL Injection vulnerability (CVSS 8.5, Ydesignservices YDS Support Ticket System)
- [CVE-2024-54270](https://cve.now/CVE-2024-54270.md): WordPress Axeptio plugin \<= 2.5.4 - Local File Inclusion vulnerability (CVSS 8.1, Axeptio)
- [CVE-2024-56058](https://cve.now/CVE-2024-56058.md): WordPress VRPConnector plugin \<= 2.0.1 - PHP Object Injection vulnerability (CVSS 9.8, denniskravetstns VRPConnector)
- [CVE-2024-56059](https://cve.now/CVE-2024-56059.md): WordPress Partners plugin \<= 0.2.0 - PHP Object Injection vulnerability (CVSS 9.8, farinspace Partners)
- [CVE-2024-56008](https://cve.now/CVE-2024-56008.md): WordPress Spreadr Woocommerce plugin \<= 1.0.4 - Arbitrary Content Deletion vulnerability (CVSS 7.5, Spreadr Woocommerce)
- [CVE-2024-4996](https://cve.now/CVE-2024-4996.md): Hardcoded Password in Wapro ERP Desktop (CVSS 9.3, Asseco Business Solutions S.A. Wapro ERP Desktop)
- [CVE-2024-4995](https://cve.now/CVE-2024-4995.md): Protocol Downgrade in Wapro ERP Desktop (CVSS 9.1, Asseco Business Solutions S.A. Wapro ERP Desktop)
- [CVE-2024-11912](https://cve.now/CVE-2024-11912.md): Traveler \<= 3.1.6 - Unauthenticated SQL Injection via order\_id (CVSS 7.5, ShineTheme Travel Booking WordPress Theme)
- [CVE-2024-11291](https://cve.now/CVE-2024-11291.md): Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction \<= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure (CVSS 5.3, cozmoslabs Paid Membership Subscriptions – Effortless Membe…)
- [CVE-2024-11926](https://cve.now/CVE-2024-11926.md): Traveler \<= 3.1.6 - Missing Authorization in Several AJAX Actions (CVSS 6.5, ShineTheme Travel Booking WordPress Theme)
- [CVE-2024-47104](https://cve.now/CVE-2024-47104.md): IBM i incorrect privilege assignment (CVSS 6.8, IBM i)
- [CVE-2024-12454](https://cve.now/CVE-2024-12454.md): Affiliate Program Suite — SliceWP Affiliates \<= 1.1.23 - Cross-Site Request Forgery to Reflected Cross-Site Scripting (CVSS 6.1, iovamihai Affiliate Program Suite — SliceWP Affiliates)
- [CVE-2024-12554](https://cve.now/CVE-2024-12554.md): Peter’s Custom Anti-Spam \<= 3.2.3 - Cross-Site Request Forgery via cas\_register\_post Function (CVSS 5.4, pkthree Peter’s Custom Anti-Spam)
- [CVE-2024-12340](https://cve.now/CVE-2024-12340.md): Animation Addons for Elementor \<= 1.1.6 - Authenticated (Contributor+) Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template (CVSS 4.3, wealcoder Animation Addons for Elementor – GSAP Motion Elem…)
- [CVE-2024-11614](https://cve.now/CVE-2024-11614.md): Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library (CVSS 7.4, dpdk · Fast Datapath for Red Hat Enterprise Linux +3)
- [CVE-2024-11295](https://cve.now/CVE-2024-11295.md): Simple Page Access Restriction \<= 1.0.29 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure (CVSS 5.3, pluginsandsnippets Simple Page Access Restriction)
- [CVE-2024-12287](https://cve.now/CVE-2024-12287.md): Biagiotti Membership \<= 1.0.2 - Authentication Bypass via biagiotti\_membership\_check\_facebook\_user (CVSS 9.8, Mikado-Themes Biagiotti Membership)
- [CVE-2024-54457](https://cve.now/CVE-2024-54457.md): Inclusion of undocumented features or chicken bits issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware version (CVSS 7.2, FXC AE1021 · FXC AE1021PE)
- [CVE-2024-53688](https://cve.now/CVE-2024-53688.md): Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in AE1021 firmware versions 2.0.10 a (CVSS 7.2, FXC AE1021 · FXC AE1021PE)
- [CVE-2024-47397](https://cve.now/CVE-2024-47397.md): Weak authentication issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier. (CVSS 7.5, FXC AE1021 · FXC AE1021PE)
- [CVE-2024-1610](https://cve.now/CVE-2024-1610.md): OPPO Store app include remote account token hijacking and sensitive information leakage (CVSS 8.7, OPPO Store APP)
- [CVE-2024-21547](https://cve.now/CVE-2024-21547.md): Versions of the package spatie/browsershot before 5.0.2 are vulnerable to Directory Traversal due to URI normalisation in the browser where (CVSS 8.7, spatie/browsershot)
- [CVE-2024-21548](https://cve.now/CVE-2024-21548.md): Versions of the package bun after 0.0.12 and before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. (CVSS 7.7, bun)
- [CVE-2024-21546](https://cve.now/CVE-2024-21546.md): Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution (RCE) through using a valid mimety (CVSS 9.3, unisharp/laravel-filemanager)
- [CVE-2024-4464](https://cve.now/CVE-2024-4464.md): Authorization bypass through user-controlled key vulnerability in streaming service in Synology Media Server before 1.4-2680, 2.0.5-3152 and (CVSS 7.5, Synology Media Server)
- [CVE-2024-10892](https://cve.now/CVE-2024-10892.md): Cost Calculator Builder \< 3.2.43 - Settings update via CSRF (CVSS 5.4, Cost Calculator Builder)
- [CVE-2024-12698](https://cve.now/CVE-2024-12698.md): Ose-olm-catalogd-container: incomplete fix for rapid reset (cve-2023-39325/cve-2023-44487) (CVSS 6.5, catalogd · Red Hat OpenShift Container Platform)
- [CVE-2024-12061](https://cve.now/CVE-2024-12061.md): Events Addon for Elementor \<= 2.2.3 - Authenticated (Contributor+) Post Disclosure (CVSS 4.3, nicheaddons Events Addon for Elementor)
- [CVE-2024-12250](https://cve.now/CVE-2024-12250.md): Accept Authorize.NET Payments Using Contact Form 7 \<= 2.2 - Unauthenticated Information Exposure (CVSS 5.3, zealopensource Accept Authorize.NET Payments Using Contact…)
- [CVE-2024-12449](https://cve.now/CVE-2024-12449.md): Video Share VOD – Turnkey Video Site Builder Script \<= 2.6.30 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, videowhisper Video Share VOD – Turnkey Video Site Builder S…)
- [CVE-2024-12596](https://cve.now/CVE-2024-12596.md): LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes \<= 7.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion (CVSS 4.3, chrisbadgett LifterLMS – WP LMS for eLearning, Online Cours…)
- [CVE-2024-12259](https://cve.now/CVE-2024-12259.md): CRM WordPress Plugin – RepairBuddy \<= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation (CVSS 8.8, sweetdaisy86 RepairBuddy – Repair Shop CRM & Booking Plugin…)
- [CVE-2024-11254](https://cve.now/CVE-2024-11254.md): AMP for WP – Accelerated Mobile Pages \<= 1.1.1 - Reflected Cross-Site Scripting (CVSS 6.1, mohammed\_kaludi AMP for WP – Accelerated Mobile Pages)
- [CVE-2024-12025](https://cve.now/CVE-2024-12025.md): Collapsing Categories \<= 3.0.8 - Unauthenticated SQL Injection (CVSS 7.5, robfelty Collapsing Categories)
- [CVE-2024-12432](https://cve.now/CVE-2024-12432.md): WPC Shop as a Customer for WooCommerce \<= 1.2.8 - Authentication Bypass Due to Insufficiently Unique Key (CVSS 8.1, wpclever WPC Shop as a Customer for WooCommerce)
- [CVE-2024-12513](https://cve.now/CVE-2024-12513.md): Contests by Rewards Fuel \<= 2.0.65 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, rewardsfuel Contests by Rewards Fuel)
- [CVE-2024-11881](https://cve.now/CVE-2024-11881.md): Easy Waveform Player \<= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, tymotey Easy Waveform Player)
- [CVE-2024-12500](https://cve.now/CVE-2024-12500.md): Philantro – Donations and Donor Management \<= 5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, Philantro – Donations and Donor Management)
- [CVE-2024-11748](https://cve.now/CVE-2024-11748.md): Taeggie Feed \<= 0.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, Taeggie Feed)
- [CVE-2024-11439](https://cve.now/CVE-2024-11439.md): ScanCircle \<= 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, aklaren ScanCircle)
- [CVE-2024-47480](https://cve.now/CVE-2024-47480.md): Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability. (CVSS 7.8, Dell Inventory Collector Client)
- [CVE-2024-36694](https://cve.now/CVE-2024-36694.md): OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function. (CVSS 7.2, opencart/opencart)
- [CVE-2024-37649](https://cve.now/CVE-2024-37649.md): Insecure Permissions vulnerability in SecureSTATION v.2.5.5.3116-S50-SMA-B20160811A and before allows a physically proximate attacker to obt (CVSS 4.6)
- [CVE-2024-39703](https://cve.now/CVE-2024-39703.md): In ThreatQuotient ThreatQ before 5.29.3, authenticated users are able to execute arbitrary commands by sending a crafted request to an API e (CVSS 8.7, ThreatQuotient ThreatQ)
- [CVE-2024-49201](https://cve.now/CVE-2024-49201.md): Keyfactor Remote File Orchestrator (aka remote-file-orchestrator) 2.8 before 2.8.1 allows Information Disclosure: sensitive information coul (CVSS 4.3)
- [CVE-2024-49202](https://cve.now/CVE-2024-49202.md): Keyfactor Command before 12.5.0 has Incorrect Access Control: access tokens are over permissioned, aka 64099. (CVSS 7.6)
- [CVE-2024-53580](https://cve.now/CVE-2024-53580.md): iperf v3.17.1 was discovered to contain a segmentation violation via the iperf\_exchange\_parameters() function. (CVSS 7.5)
- [CVE-2024-55086](https://cve.now/CVE-2024-55086.md): In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery (SSRF) can be achieved in the plug-in download address in the ba (CVSS 7.2)
- [CVE-2024-55088](https://cve.now/CVE-2024-55088.md): GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery (SSRF) in the backend plugin module. (CVSS 8.8)
- [CVE-2024-55089](https://cve.now/CVE-2024-55089.md): Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery (SSRF) in the background import data function because XML documents may co (CVSS 4.1, Rhymix)
- [CVE-2024-55231](https://cve.now/CVE-2024-55231.md): An IDOR vulnerability in the edit-notes.php module of PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to mo (CVSS 4.3)
- [CVE-2024-55232](https://cve.now/CVE-2024-55232.md): An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to (CVSS 5.4)
- [CVE-2024-55239](https://cve.now/CVE-2024-55239.md): A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker (CVSS 5.4)
- [CVE-2024-55461](https://cve.now/CVE-2024-55461.md): SeaCMS \<=13.0 is vulnerable to command execution in phome.php via the function Ebak\_RepPathFiletext(). (CVSS 9.8)
- [CVE-2024-55492](https://cve.now/CVE-2024-55492.md): Winmail Server 4.4 is vulnerable to f\_user=%22%3E%3Csvg%20onload Cross Site Scripting (XSS). (CVSS 6.1)
- [CVE-2024-55505](https://cve.now/CVE-2024-55505.md): An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component. (CVSS 8.8)
- [CVE-2024-55506](https://cve.now/CVE-2024-55506.md): An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 (version with 0 updates) enables an attacker to execute arbitrary code (CVSS 8.8)
- [CVE-2024-56115](https://cve.now/CVE-2024-56115.md): A vulnerability in Amiro.CMS before 7.8.4 exists due to the failure to take measures to neutralize special elements. (CVSS 6.1)
- [CVE-2024-56116](https://cve.now/CVE-2024-56116.md): A Cross-Site Request Forgery vulnerability in Amiro.CMS before 7.8.4 allows remote attackers to create an administrator account. (CVSS 8.8)
- [CVE-2024-56169](https://cve.now/CVE-2024-56169.md): A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. (CVSS 5.3)
- [CVE-2024-56170](https://cve.now/CVE-2024-56170.md): A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. (CVSS 5.3)
- [CVE-2024-56173](https://cve.now/CVE-2024-56173.md): In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under speci (CVSS 4.7)
- [CVE-2024-56174](https://cve.now/CVE-2024-56174.md): In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under speci (CVSS 8.1)
- [CVE-2024-56175](https://cve.now/CVE-2024-56175.md): In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under speci (CVSS 6.1)
- [CVE-2024-56317](https://cve.now/CVE-2024-56317.md): In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0, the WriteAcl function deletes all existing ACL entries first, and then atte (CVSS 7.5, Matter)
- [CVE-2024-56318](https://cve.now/CVE-2024-56318.md): In raw\\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBas (CVSS 7.5, Matter)
- [CVE-2024-56319](https://cve.now/CVE-2024-56319.md): In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before e3277eb, unlimited user label appends in a userlabel cluster can lead (CVSS 7.5, Matter)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-12-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.