CVEs published November 24, 2024
16 CVEs were published on November 24, 2024: 9 critical, 3 high.
- Published
- 16
- Critical
- 9
- High
- 3
- Medium
- 4
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- PHP Group PHP
- 3
- hardy-barth cph2_echarge_firmware
- 2
- 1000 Projects Beauty Parlour Management System
- 1
- neutron
- 1
- virtualenv
- 1
Critical 9
- CVE-2024-11666Unauthenticated Remote Command Injection in eCharge Salia PLCChardy-barth cph2_echarge_firmware
- CVE-2024-11236Integer overflow in the firebird and dblib quoters causing OOB writesPHP Group PHP
- CVE-2024-53909An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24334.
- CVE-2024-53910An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336.
- CVE-2024-53911An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24339.
- CVE-2024-53912An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24341.
- CVE-2024-53913An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24343.
- CVE-2024-53914An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24344.
- CVE-2024-53915An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24405.
High 3
- CVE-2024-11665Unauthenticated Remote Command Injectionhardy-barth cph2_echarge_firmware
- CVE-2024-53899virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment.virtualenv
- CVE-2024-53916In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement.neutron
Medium, low and unrated 4
- CVE-2024-116461000 Projects Beauty Parlour Management System edit-services.php sql injection1000 Projects Beauty Parlour Management System
- CVE-2024-11233Single byte overread with convert.quoted-printable-decode filterPHP Group PHP
- CVE-2024-11234Configuring a proxy in a stream context might allow for CRLF injection in URIsPHP Group PHP
- CVE-2024-53901The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unspecified other impact