# CVEs published 2024-11-24

16 CVEs were published on November 24, 2024: 9 critical, 3 high. Days are UTC.

- [CVE-2024-11646](https://cve.now/CVE-2024-11646.md): 1000 Projects Beauty Parlour Management System edit-services.php sql injection (CVSS 6.9, 1000 Projects Beauty Parlour Management System)
- [CVE-2024-11666](https://cve.now/CVE-2024-11666.md): Unauthenticated Remote Command Injection in eCharge Salia PLCC (CVSS 9.0, hardy-barth cph2\_echarge\_firmware)
- [CVE-2024-11665](https://cve.now/CVE-2024-11665.md): Unauthenticated Remote Command Injection (CVSS 8.8, hardy-barth cph2\_echarge\_firmware)
- [CVE-2024-11233](https://cve.now/CVE-2024-11233.md): Single byte overread with convert.quoted-printable-decode filter (CVSS 4.8, PHP Group PHP)
- [CVE-2024-11234](https://cve.now/CVE-2024-11234.md): Configuring a proxy in a stream context might allow for CRLF injection in URIs (CVSS 4.8, PHP Group PHP)
- [CVE-2024-11236](https://cve.now/CVE-2024-11236.md): Integer overflow in the firebird and dblib quoters causing OOB writes (CVSS 9.8, PHP Group PHP)
- [CVE-2024-53899](https://cve.now/CVE-2024-53899.md): virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. (CVSS 8.4, virtualenv)
- [CVE-2024-53901](https://cve.now/CVE-2024-53901.md): The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unspecified other impact (CVSS 5.5)
- [CVE-2024-53909](https://cve.now/CVE-2024-53909.md): An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24334. (CVSS 9.8)
- [CVE-2024-53910](https://cve.now/CVE-2024-53910.md): An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336. (CVSS 9.8)
- [CVE-2024-53911](https://cve.now/CVE-2024-53911.md): An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24339. (CVSS 9.8)
- [CVE-2024-53912](https://cve.now/CVE-2024-53912.md): An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24341. (CVSS 9.8)
- [CVE-2024-53913](https://cve.now/CVE-2024-53913.md): An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24343. (CVSS 9.8)
- [CVE-2024-53914](https://cve.now/CVE-2024-53914.md): An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24344. (CVSS 9.8)
- [CVE-2024-53915](https://cve.now/CVE-2024-53915.md): An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24405. (CVSS 9.8)
- [CVE-2024-53916](https://cve.now/CVE-2024-53916.md): In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. (CVSS 7.5, neutron)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-11-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.