# CVEs published 2024-12-03

83 CVEs were published on December 3, 2024: 2 critical, 30 high. Days are UTC.

- [CVE-2024-54131](https://cve.now/CVE-2024-54131.md): Kolide Agent Privilege Escalation (Windows, Versions \>= 1.5.3, \< 1.12.3) (CVSS 7.3, kolide launcher · github.com/kolide/launcher)
- [CVE-2024-53672](https://cve.now/CVE-2024-53672.md): Authenticated Remote Command Injection in HPE Aruba Networking ClearPass Policy Manager Web-Based Management Interface (CVSS 4.7, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Clear…)
- [CVE-2024-51773](https://cve.now/CVE-2024-51773.md): Authenticated Stored Cross-Site Scripting (XSS) in HPE Aruba Networking ClearPass Policy Manager Web-based Management Interface (CVSS 4.8, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Clear…)
- [CVE-2024-51772](https://cve.now/CVE-2024-51772.md): Authenticated Deserialization Vulnerability in ClearPass Policy Manager Web-Based Management Interface Leading to a Remote Command… (CVSS 6.4, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Clear…)
- [CVE-2024-51771](https://cve.now/CVE-2024-51771.md): Authenticated Remote Code Execution (RCE) via OGNL Injection in HPE Aruba Networking ClearPass Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Clear…)
- [CVE-2024-12053](https://cve.now/CVE-2024-12053.md): Type Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to potentially exploit object corruption via a… (CVSS 8.8, Google Chrome)
- [CVE-2024-52548](https://cve.now/CVE-2024-52548.md): Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass (CVSS 6.7, Lorex 2K Indoor Wi-Fi Security Camera)
- [CVE-2024-52547](https://cve.now/CVE-2024-52547.md): Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow (CVSS 7.2, Lorex 2K Indoor Wi-Fi Security Camera)
- [CVE-2024-52546](https://cve.now/CVE-2024-52546.md): Lorex 2K Indoor Wi-Fi Security Camera - Null pointer dereference (CVSS 5.3, Lorex 2K Indoor Wi-Fi Security Camera)
- [CVE-2024-52545](https://cve.now/CVE-2024-52545.md): Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap read (CVSS 6.5, Lorex 2K Indoor Wi-Fi Security Camera)
- [CVE-2024-52544](https://cve.now/CVE-2024-52544.md): Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow (CVSS 9.8, Lorex 2K Indoor Wi-Fi Security Camera)
- [CVE-2024-41775](https://cve.now/CVE-2024-41775.md): IBM Cognos Controller information disclosure (CVSS 5.9, IBM Cognos Controller)
- [CVE-2024-25020](https://cve.now/CVE-2024-25020.md): IBM Cognos Controller file upload (CVSS 5.5, IBM Cognos Controller)
- [CVE-2024-41776](https://cve.now/CVE-2024-41776.md): IBM Cognos Controller cross-site request forgery (CVSS 6.5, IBM Cognos Controller)
- [CVE-2024-41777](https://cve.now/CVE-2024-41777.md): IBM Cognos Controller hard coded credentials (CVSS 7.5, IBM Cognos Controller)
- [CVE-2024-45676](https://cve.now/CVE-2024-45676.md): IBM Cognos Controller file upload (CVSS 4.3, IBM Cognos Controller)
- [CVE-2024-37303](https://cve.now/CVE-2024-37303.md): Synapse unauthenticated writes to the media repository allow planting of problematic content (CVSS 5.3, element-hq synapse · matrix-synapse)
- [CVE-2024-37302](https://cve.now/CVE-2024-37302.md): Synapse denial of service through media disk space consumption (CVSS 7.5, element-hq synapse · matrix-synapse)
- [CVE-2024-52805](https://cve.now/CVE-2024-52805.md): Synapse allows unsupported content types to lead to memory exhaustion (CVSS 8.2, element-hq synapse · matrix-synapse)
- [CVE-2024-52815](https://cve.now/CVE-2024-52815.md): Synapse allows a a malformed invite to break the invitee's \`/sync\` (CVSS 8.7, element-hq synapse · matrix-synapse)
- [CVE-2024-53867](https://cve.now/CVE-2024-53867.md): Synapse Matrix has a partial room state leak via Sliding Sync (CVSS 4.3, element-hq synapse · matrix-synapse)
- [CVE-2024-53863](https://cve.now/CVE-2024-53863.md): Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders (CVSS 8.2, element-hq synapse · matrix-synapse)
- [CVE-2024-25036](https://cve.now/CVE-2024-25036.md): IBM Cognos Controller authentication bypass (CVSS 4.3, IBM Cognos Controller)
- [CVE-2024-25035](https://cve.now/CVE-2024-25035.md): IBM Cognos Controller information disclosure (CVSS 5.3, IBM Cognos Controller)
- [CVE-2024-40691](https://cve.now/CVE-2024-40691.md): IBM Cognos Controller file upload (CVSS 8.0, IBM Cognos Controller)
- [CVE-2024-25019](https://cve.now/CVE-2024-25019.md): IBM Cognos Controller file upload (CVSS 5.5, IBM Cognos Controller)
- [CVE-2021-29892](https://cve.now/CVE-2021-29892.md): IBM Cognos Controller information disclosure (CVSS 5.9, IBM Cognos Controller)
- [CVE-2024-53257](https://cve.now/CVE-2024-53257.md): Vitess allows HTML injection in /debug/querylogz & /debug/env (CVSS 4.9, vitessio vitess · vitess.io/vitess)
- [CVE-2024-53999](https://cve.now/CVE-2024-53999.md): Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality (CVSS 8.1, Mobile-Security-Framework-MobSF · mobsf)
- [CVE-2024-54000](https://cve.now/CVE-2024-54000.md): Mobile Security Framework (MobSF) bypass of SSRF fix (CVSS 7.5, Mobile-Security-Framework-MobSF · mobsf)
- [CVE-2024-11391](https://cve.now/CVE-2024-11391.md): Advanced File Manager \<= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 7.5, saadiqbal Advanced File Manager – Ultimate File Manager for…)
- [CVE-2024-11200](https://cve.now/CVE-2024-11200.md): Goodlayers Core \<= 2.0.7 - Reflected Cross-Site Scripting via 'font-family' (CVSS 6.1, Goodlayers Core)
- [CVE-2024-9978](https://cve.now/CVE-2024-9978.md): Liteos\_a has an out-of-bounds read vulnerability (CVSS 5.5, OpenHarmony)
- [CVE-2024-42422](https://cve.now/CVE-2024-42422.md): Dell NetWorker, version(s) 19.10, contain(s) an Authorization Bypass Through User-Controlled Key vulnerability. (CVSS 8.3, Dell NetWorker)
- [CVE-2024-12082](https://cve.now/CVE-2024-12082.md): Ability Runtime has an out-of-bounds read permission bypass vulnerability (CVSS 5.5, OpenHarmony)
- [CVE-2024-10074](https://cve.now/CVE-2024-10074.md): Liteos\_a has an use after free vulnerability (CVSS 8.8, OpenHarmony)
- [CVE-2024-11326](https://cve.now/CVE-2024-11326.md): Campaign Monitor Forms by Optin Cat \<= 2.5.7 - Reflected Cross-Site Scripting (CVSS 6.1, fatcatapps Campaign Monitor Forms by Optin Cat)
- [CVE-2024-47476](https://cve.now/CVE-2024-47476.md): Dell NetWorker Management Console, version(s) 19.11, contain(s) an Improper Verification of Cryptographic Signature vulnerability. (CVSS 7.8, Dell NetWorker Management Console)
- [CVE-2024-11782](https://cve.now/CVE-2024-11782.md): WP Mailster \<= 1.8.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, brandtoss WP Mailster)
- [CVE-2024-12062](https://cve.now/CVE-2024-12062.md): Charity Addon for Elementor \<= 1.3.3 - Authenticated (Contributor+) Post Disclosure (CVSS 4.3, nicheaddons Charity Addon for Elementor)
- [CVE-2024-11325](https://cve.now/CVE-2024-11325.md): AWeber Forms by Optin Cat \<= 2.5.7 - Reflected Cross-Site Scripting (CVSS 5.2, fatcatapps AWeber Forms by Optin Cat)
- [CVE-2024-45106](https://cve.now/CVE-2024-45106.md): Apache Ozone: Improper authentication when generating S3 secrets (CVSS 8.1, Apache Software Foundation org.apache.ozone:ozone-s3gateway…)
- [CVE-2024-11866](https://cve.now/CVE-2024-11866.md): BMLT Tabbed Map \<= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, paulnagle BMLT Tabbed Map)
- [CVE-2024-11844](https://cve.now/CVE-2024-11844.md): IdeaPush \<= 8.71 - Missing Authorization to Board Term Deletion (CVSS 4.3, northernbeacheswebsites IdeaPush)
- [CVE-2024-11732](https://cve.now/CVE-2024-11732.md): BP Profile Shortcodes Extra \<= 2.6.0 - Authenticated (Contributor+) SQL Injection via tab Parameter (CVSS 6.5, venutius BP Profile Shortcodes Extra)
- [CVE-2024-11805](https://cve.now/CVE-2024-11805.md): Quick License Manager – WooCommerce Plugin \<= 2.4.17 - Reflected Cross-Site Scripting (CVSS 6.1, soraco Quick License Manager – WooCommerce Plugin)
- [CVE-2024-11853](https://cve.now/CVE-2024-11853.md): jAlbum Bridge \<= 2.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via ar Parameter (CVSS 6.4, mlaza jAlbum Bridge)
- [CVE-2024-11461](https://cve.now/CVE-2024-11461.md): Form Data Collector \<= 2.2.3 - Reflected Cross-Site Scripting (CVSS 6.1, taunoh Form Data Collector)
- [CVE-2024-11898](https://cve.now/CVE-2024-11898.md): Scratch & Win – Giveaways and Contests \<= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, akashmalik Scratch & Win – Giveaways and Contests. Boost su…)
- [CVE-2024-11707](https://cve.now/CVE-2024-11707.md): My auctions allegro \<= 3.6.17 - Reflected Cross-Site Scripting (CVSS 6.1, wphocus My auctions allegro)
- [CVE-2024-11453](https://cve.now/CVE-2024-11453.md): WordPress Pinterest Plugin – Make a Popup, User Profile, Masonry and Gallery Layout \<= 1.8.8 - Authenticated (Contributor+) Stored… (CVSS 6.4, samdani GS Pinterest Portfolio – Pins Grid, Masonry, User P…)
- [CVE-2024-9058](https://cve.now/CVE-2024-9058.md): Element Pack Elementor Addons \<= 5.10.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Lightbox Widget (CVSS 6.4, bdthemes Element Pack – Widgets, Templates & Addons for Ele…)
- [CVE-2024-10893](https://cve.now/CVE-2024-10893.md): WP Booking Calendar \< 10.6.5 - Admin+ Stored XSS (CVSS 4.8, WP Booking Calendar)
- [CVE-2024-49421](https://cve.now/CVE-2024-49421.md): Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14 allows… (CVSS 4.3, Samsung Mobile Quick Share Agent)
- [CVE-2024-49420](https://cve.now/CVE-2024-49420.md): Improper handling of responses in GamingHub prior to version 6.1.04.6 in Korea, 7.1.03.7 in Global allows remote attackers to launch… (CVSS 7.5, Samsung Mobile GamingHub)
- [CVE-2024-49419](https://cve.now/CVE-2024-49419.md): Insufficient verification of url authenticity in GamingHub prior to version 6.1.03.4 in Korea, 7.1.02.4 in Global allows remote attackers… (CVSS 4.3, Samsung Mobile GamingHub)
- [CVE-2024-49418](https://cve.now/CVE-2024-49418.md): Insufficient verification of url authenticity in GamingHub prior to version 6.1.03.4 in Korea, 7.1.02.4 in Global allows remote attackers… (CVSS 6.5, Samsung Mobile GamingHub)
- [CVE-2024-49417](https://cve.now/CVE-2024-49417.md): Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged… (CVSS 2.0, Samsung Mobile Smart Touch Call)
- [CVE-2024-49416](https://cve.now/CVE-2024-49416.md): Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive… (CVSS 4.0, Samsung Mobile SmartThings)
- [CVE-2024-49415](https://cve.now/CVE-2024-49415.md): Out-of-bound write in libsaped.so prior to SMR Dec-2024 Release 1 allows remote attackers to execute arbitrary code. (CVSS 8.1, Samsung Mobile Devices)
- [CVE-2024-49414](https://cve.now/CVE-2024-49414.md): Authentication Bypass Using an Alternate Path in Dex Mode prior to SMR Dec-2024 Release 1 allows physical attackers to temporarily access… (CVSS 2.4, Samsung Mobile Devices)
- [CVE-2024-49413](https://cve.now/CVE-2024-49413.md): Improper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1 allows local attackers to install… (CVSS 7.1, Samsung Mobile Devices)
- [CVE-2024-49412](https://cve.now/CVE-2024-49412.md): Improper input validation in Settings prior to SMR Dec-2024 Release 1 allows local attackers to broadcast signal for discovering Bluetooth… (CVSS 5.5, Samsung Mobile Devices)
- [CVE-2024-49411](https://cve.now/CVE-2024-49411.md): Path Traversal in ThemeCenter prior to SMR Dec-2024 Release 1 allows physical attackers to copy apk files to arbitrary path with… (CVSS 4.3, Samsung Mobile Devices)
- [CVE-2024-49410](https://cve.now/CVE-2024-49410.md): Out-of-bounds write in libswmfextractor.so prior to SMR Dec-2024 Release 1 allows local attackers to execute arbitrary code. (CVSS 5.9, Samsung Mobile Devices)
- [CVE-2024-10484](https://cve.now/CVE-2024-10484.md): Spectra – WordPress Gutenberg Blocks \<= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget (CVSS 6.4, brainstormforce Spectra Gutenberg Blocks – Website Builder…)
- [CVE-2024-45068](https://cve.now/CVE-2024-45068.md): Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center OVA (CVSS 7.1, Hitachi Ops Center Common Services · Hitachi Ops Center OVA)
- [CVE-2024-9694](https://cve.now/CVE-2024-9694.md): CMSMasters Elementor Addon \<= 1.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 6.4, CMSMasters Elementor Addon)
- [CVE-2024-9200](https://cve.now/CVE-2024-9200.md): A post-authentication command injection vulnerability in the "host" parameter of the diagnostic function in Zyxel VMG4005-B50A firmware… (CVSS 7.2, Zyxel VMG4005-B50A firmware)
- [CVE-2024-9197](https://cve.now/CVE-2024-9197.md): A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions… (CVSS 4.9, Zyxel VMG3625-T50B firmware)
- [CVE-2024-8748](https://cve.now/CVE-2024-8748.md): A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions… (CVSS 7.5, Zyxel VMG8825-T50K firmware)
- [CVE-2018-9449](https://cve.now/CVE-2018-9449.md): In process\_service\_search\_attr\_rsp of sdp\_discovery.cc, there is a possible out of bound read due to a missing bounds check. (CVSS 5.5, Google Android)
- [CVE-2018-9441](https://cve.now/CVE-2018-9441.md): In sdp\_copy\_raw\_data of sdp\_discovery.cc, there is a possible out of bounds read due to an incorrect bounds check. (CVSS 5.5, Google Android)
- [CVE-2024-29404](https://cve.now/CVE-2024-29404.md): An issue in Razer Synapse 3 v.3.9.131.20813 and Synapse 3 App v.20240213 allows a local attacker to execute arbitrary code via the export… (CVSS 7.8)
- [CVE-2024-45757](https://cve.now/CVE-2024-45757.md): An issue was discovered in Centreon centreon-bam 24.04, 23.10, 23.04, and 22.10. (CVSS 7.2)
- [CVE-2024-46624](https://cve.now/CVE-2024-46624.md): An issue in InfoDom Performa 365 v4.0.1 allows authenticated attackers to elevate their privileges to Administrator via a crafted payload… (CVSS 8.8)
- [CVE-2024-46625](https://cve.now/CVE-2024-46625.md): An authenticated arbitrary file upload vulnerability in the /documentCache/upload endpoint of InfoDom Performa 365 v4.0.1 allows attackers… (CVSS 8.8)
- [CVE-2024-48080](https://cve.now/CVE-2024-48080.md): An issue in aedes v0.51.2 allows attackers to cause a Denial of Service(DoS) via a crafted request. (CVSS 7.5)
- [CVE-2024-50948](https://cve.now/CVE-2024-50948.md): mochiMQTT v2.6.3 is vulnerable to Denial of Service (DoS) due to improper resource management. (CVSS 7.5, github.com/mochi-mqtt/server)
- [CVE-2024-51114](https://cve.now/CVE-2024-51114.md): An issue in Beijing Digital China Yunke Information Technology Co.Ltd v.7.2.6.120 allows a remote attacker to execute arbitrary code via… (CVSS 8.8)
- [CVE-2024-51363](https://cve.now/CVE-2024-51363.md): Insecure deserialization in Hodoku v2.3.0 to v2.3.2 allows attackers to execute arbitrary code. (CVSS 9.8)
- [CVE-2024-53502](https://cve.now/CVE-2024-53502.md): Seecms v4.8 was discovered to contain a SQL injection vulnerability in the SEMCMS\_SeoAndTag.php page. (CVSS 3.8)
- [CVE-2024-53921](https://cve.now/CVE-2024-53921.md): An issue was discovered in the installer in Samsung Magician 8.1.0 on Windows. (CVSS 2.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2024-12-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.