# CVEs published 2024-11-25

71 CVEs were published on November 25, 2024: 2 critical, 16 high. Days are UTC.

- [CVE-2024-11674](https://cve.now/CVE-2024-11674.md): CodeAstro Hospital Management System his\_doc\_update-account.php unrestricted upload (CVSS 5.3, CodeAstro Hospital Management System)
- [CVE-2024-53843](https://cve.now/CVE-2024-53843.md): Reflected XSS Vulnerability in Authentication Flow URL Handling in @dapperduckling/keycloak-connector-server (CVSS 8.1, DapperDuckling keycloak-connector · @dapperduckling/keycloa…)
- [CVE-2024-11673](https://cve.now/CVE-2024-11673.md): 1000 Projects Bookstore Management System cross-site request forgery (CVSS 6.9, 1000 Projects Bookstore Management System)
- [CVE-2024-53101](https://cve.now/CVE-2024-53101.md): fs: Fix uninitialized value issue in from\_kuid and from\_kgid (CVSS 5.5, Linux)
- [CVE-2024-53100](https://cve.now/CVE-2024-53100.md): nvme: tcp: avoid race between queue\_lock lock and destroy (CVSS 7.8, Linux)
- [CVE-2024-53099](https://cve.now/CVE-2024-53099.md): bpf: Check validity of link-\>type in bpf\_link\_show\_fdinfo() (CVSS 7.1, Linux)
- [CVE-2024-53098](https://cve.now/CVE-2024-53098.md): drm/xe/ufence: Prefetch ufence addr to catch bogus address (CVSS 7.8, Linux)
- [CVE-2024-53097](https://cve.now/CVE-2024-53097.md): mm: krealloc: Fix MTE false alarm in \_\_do\_krealloc (CVSS 5.5, Linux)
- [CVE-2024-53096](https://cve.now/CVE-2024-53096.md): mm: resolve faulty mmap\_region() error path behaviour (CVSS 7.8, Linux)
- [CVE-2024-53268](https://cve.now/CVE-2024-53268.md): Lack of validation on openExternal allows 1 click remote code execution in joplin (CVSS 7.3, laurent22 joplin)
- [CVE-2024-53258](https://cve.now/CVE-2024-53258.md): download\_all\_submissions allows student to download another student's submissions in Autolab (CVSS 7.1, Autolab)
- [CVE-2024-53261](https://cve.now/CVE-2024-53261.md): Cross-Site Scripting attack (XSS) on dev mode 404 page in SvelteKit (CVSS 2.0, sveltejs kit · @sveltejs/kit)
- [CVE-2024-53262](https://cve.now/CVE-2024-53262.md): Unescaped error message included on error page in SvelteKit (CVSS 2.0, sveltejs kit · @sveltejs/kit)
- [CVE-2024-53255](https://cve.now/CVE-2024-53255.md): Reflected Cross-site Scripting in /admin?page=media via file Parameter in BoidCMS (CVSS 5.3, BoidCMS)
- [CVE-2024-52811](https://cve.now/CVE-2024-52811.md): Acks not validated before logged to qlog leads to buffer overflow in ngtcp2 (CVSS 8.2, ngtcp2)
- [CVE-2024-52529](https://cve.now/CVE-2024-52529.md): Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in Cilium (CVSS 5.8, cilium · github.com/cilium/cilium)
- [CVE-2024-32468](https://cve.now/CVE-2024-32468.md): Improper neutralization of input during web page generation ("Cross-site Scripting") in deno\_doc HTML generator (CVSS 5.4, denoland deno · deno\_doc)
- [CVE-2024-51723](https://cve.now/CVE-2024-51723.md): Vulnerability in Management Console Impacts BlackBerry AtHoc (CVSS 4.6, BlackBerry AtHoc)
- [CVE-2024-8272](https://cve.now/CVE-2024-8272.md): macOS Universal Audio (UAConnect) \<= 2.7.0 - Local Privilege Escalation (CVSS 7.8, Universal Audio UAConnect)
- [CVE-2024-7915](https://cve.now/CVE-2024-7915.md): macOS Sensei Mac Cleaner Local Privilege Escalation via PID Reuse - Race Condition Attack (CVSS 7.8, Sensei Mac Cleaner)
- [CVE-2023-26280](https://cve.now/CVE-2023-26280.md): IBM Jazz Foundation improper access control (CVSS 5.3, IBM Jazz Foundation)
- [CVE-2023-45181](https://cve.now/CVE-2023-45181.md): IBM Jazz Foundation cross-site scripting (CVSS 6.1, IBM Jazz Foundation)
- [CVE-2024-11670](https://cve.now/CVE-2024-11670.md): Incorrect authorization in the permission validation component of Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows (CVSS 5.4, Devolutions Remote Desktop Manager)
- [CVE-2024-11671](https://cve.now/CVE-2024-11671.md): Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an a (CVSS 5.4, Devolutions Remote Desktop Manager)
- [CVE-2024-11672](https://cve.now/CVE-2024-11672.md): Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows an aut (CVSS 4.3, Devolutions Remote Desktop Manager)
- [CVE-2024-27134](https://cve.now/CVE-2024-27134.md): Excessive directory permissions in MLflow leads to local privilege escalation when using spark\_udf (CVSS 7.0, mlflow)
- [CVE-2024-11403](https://cve.now/CVE-2024-11403.md): Out of Bounds Memory Read/Write in libjxl (CVSS 6.9, libjxl)
- [CVE-2024-11498](https://cve.now/CVE-2024-11498.md): Resource exhaustion via Stack overflow in libjxl (CVSS 6.9, libjxl)
- [CVE-2020-12492](https://cve.now/CVE-2020-12492.md): Wifi information acquisition vulnerability in Framework Services (CVSS 1.0, vivo Framework)
- [CVE-2020-12491](https://cve.now/CVE-2020-12491.md): Framework Information Disclosure Vulnerability (CVSS 4.8, vivo Framework)
- [CVE-2024-11664](https://cve.now/CVE-2024-11664.md): eNMS TGZ File controller.py multiselect\_filtering path traversal (CVSS 8.7, eNMS)
- [CVE-2022-33862](https://cve.now/CVE-2022-33862.md): Improper access control mechanism in IPP (CVSS 6.7, Eaton Intelligent Power Protector)
- [CVE-2022-33861](https://cve.now/CVE-2022-33861.md): Insufficient verification of authenticity in IPP (CVSS 5.1, Eaton Intelligent Power Protector)
- [CVE-2021-23282](https://cve.now/CVE-2021-23282.md): Stored Cross-site Scripting reported in Intelligent Power Manager v1 (CVSS 5.2, Eaton Intelligent Power Manager)
- [CVE-2024-11663](https://cve.now/CVE-2024-11663.md): Codezips E-Commerce Site search.php sql injection (CVSS 6.9, Codezips E-Commerce Site)
- [CVE-2024-11662](https://cve.now/CVE-2024-11662.md): welliamcao OpsManage API Endpoint deploy\_api.py deploy\_host\_vars deserialization (CVSS 5.3, welliamcao OpsManage)
- [CVE-2024-10492](https://cve.now/CVE-2024-10492.md): Keycloak-quarkus-server: keycloak path trasversal (CVSS 2.7, keycloak · Red Hat build of Keycloak +3)
- [CVE-2024-10451](https://cve.now/CVE-2024-10451.md): Org.keycloak:keycloak-quarkus-server: sensitive data exposure in keycloak build process (CVSS 5.9, Red Hat build of Keycloak · Red Hat JBoss Enterprise App… +2)
- [CVE-2024-10270](https://cve.now/CVE-2024-10270.md): Org.keycloak:keycloak-services: keycloak denial of service (CVSS 6.5, keycloak · Red Hat build of Keycloak +3)
- [CVE-2024-11661](https://cve.now/CVE-2024-11661.md): Codezips Free Exam Hall Seating Management System Profile Image profile.php unrestricted upload (CVSS 5.3, Codezips Free Exam Hall Seating Management System)
- [CVE-2024-9666](https://cve.now/CVE-2024-9666.md): Org.keycloak/keycloak-quarkus-server: keycloak proxy header handling denial-of-service (dos) vulnerability (CVSS 4.7, keycloak · Red Hat build of Keycloak +2)
- [CVE-2024-11660](https://cve.now/CVE-2024-11660.md): code-projects Farmacia usuario.php cross site scripting (CVSS 5.3, code-projects Farmacia)
- [CVE-2024-11659](https://cve.now/CVE-2024-11659.md): EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag\_iperf command injection (CVSS 5.1, EnGenius ENH1350EXT · EnGenius ENS500-AC +1)
- [CVE-2024-6538](https://cve.now/CVE-2024-6538.md): Openshift-console: openshift console: server-side request forgery (CVSS 5.3, openshift-console · Red Hat OpenShift Container Platform +1)
- [CVE-2024-11658](https://cve.now/CVE-2024-11658.md): EnGenius ENH1350EXT/ENS500-AC/ENS620EXT ajax\_getChannelList command injection (CVSS 5.1, EnGenius ENH1350EXT · EnGenius ENS500-AC +1)
- [CVE-2024-7056](https://cve.now/CVE-2024-7056.md): WPForms \< 1.9.1.6 - Admin+ Stored XSS (CVSS 3.5, WPForms)
- [CVE-2024-6393](https://cve.now/CVE-2024-6393.md): NextGEN Gallery \< 3.59.5 - Admin+ Stored XSS (CVSS 4.8, Photo Gallery, Sliders, Proofing and Themes)
- [CVE-2024-10710](https://cve.now/CVE-2024-10710.md): YaDisk Files \<= 1.2.5 - Admin+ Stored XSS (CVSS 3.5, YaDisk Files)
- [CVE-2024-10709](https://cve.now/CVE-2024-10709.md): YaDisk Files \<= 1.2.5 - Contributor+ Stored XSS via Shortcode (CVSS 6.8, YaDisk Files)
- [CVE-2024-11657](https://cve.now/CVE-2024-11657.md): EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag\_nslookup command injection (CVSS 5.1, EnGenius ENH1350EXT · EnGenius ENS500-AC +1)
- [CVE-2024-11656](https://cve.now/CVE-2024-11656.md): EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag\_ping6 command injection (CVSS 5.1, EnGenius ENH1350EXT · EnGenius ENS500-AC +1)
- [CVE-2024-11655](https://cve.now/CVE-2024-11655.md): EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag\_pinginterface command injection (CVSS 5.1, EnGenius ENH1350EXT · EnGenius ENS500-AC +1)
- [CVE-2024-11654](https://cve.now/CVE-2024-11654.md): EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag\_traceroute6 command injection (CVSS 5.1, EnGenius ENH1350EXT · EnGenius ENS500-AC +1)
- [CVE-2024-11483](https://cve.now/CVE-2024-11483.md): Automation-gateway: aap-gateway: improper scope handling in oauth2 tokens for aap 2.5 (CVSS 5.0, django-ansible-base · Red Hat Ansible Automation Platform 2…)
- [CVE-2024-11653](https://cve.now/CVE-2024-11653.md): EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag\_traceroute command injection (CVSS 5.1, EnGenius ENH1350EXT · EnGenius ENS500-AC +1)
- [CVE-2024-11652](https://cve.now/CVE-2024-11652.md): EnGenius ENH1350EXT/ENS500-AC/ENS620EXT sn\_https command injection (CVSS 5.1, EnGenius ENH1350EXT · EnGenius ENS500-AC +1)
- [CVE-2024-11651](https://cve.now/CVE-2024-11651.md): EnGenius ENH1350EXT/ENS500-AC/ENS620EXT wifi\_schedule command injection (CVSS 5.1, EnGenius ENH1350EXT · EnGenius ENS500-AC +1)
- [CVE-2024-11650](https://cve.now/CVE-2024-11650.md): Tenda i9 GetIPTV websReadEvent null pointer dereference (CVSS 7.1, Tenda i9)
- [CVE-2024-11649](https://cve.now/CVE-2024-11649.md): 1000 Projects Beauty Parlour Management System search-appointment.php sql injection (CVSS 6.9, 1000 Projects Beauty Parlour Management System)
- [CVE-2024-11648](https://cve.now/CVE-2024-11648.md): 1000 Projects Beauty Parlour Management System add-customer.php sql injection (CVSS 6.9, 1000 Projects Beauty Parlour Management System)
- [CVE-2024-11647](https://cve.now/CVE-2024-11647.md): 1000 Projects Beauty Parlour Management System view-appointment.php sql injection (CVSS 6.9, 1000 Projects Beauty Parlour Management System)
- [CVE-2024-45755](https://cve.now/CVE-2024-45755.md): An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x befo (CVSS 7.2)
- [CVE-2024-45756](https://cve.now/CVE-2024-45756.md): An issue was discovered in Centreon centreon-open-tickets 24.10.x before 24.10.0, 24.04.x before 24.04.2, 23.10.x before 23.10.1, 23.04.x be (CVSS 7.2)
- [CVE-2024-50671](https://cve.now/CVE-2024-50671.md): Incorrect access control in Adapt Learning Adapt Authoring Tool \<= 0.11.3 allows attackers with Authenticated User roles to obtain email add (CVSS 4.3)
- [CVE-2024-50672](https://cve.now/CVE-2024-50672.md): A NoSQL injection vulnerability in Adapt Learning Adapt Authoring Tool \<= 0.11.3 allows unauthenticated attackers to reset user and administ (CVSS 9.8)
- [CVE-2024-52787](https://cve.now/CVE-2024-52787.md): An issue in the upload\_documents method of libre-chat v0.0.6 allows attackers to execute a path traversal via supplying a crafted filename i (CVSS 9.1, libre-chat)
- [CVE-2024-53554](https://cve.now/CVE-2024-53554.md): A Client-Side Template Injection (CSTI) vulnerability in the component /project/new/scrum of Taiga v 8.6.1 allows remote attackers to execut (CVSS 8.0)
- [CVE-2024-53556](https://cve.now/CVE-2024-53556.md): An Open Redirect vulnerability in Taiga v6.8.1 allows attackers to redirect users to arbitrary websites via appending a crafted link to /log (CVSS 6.1)
- [CVE-2024-53597](https://cve.now/CVE-2024-53597.md): masterstack\_imgcap v0.0.1 was discovered to contain a SQL injection vulnerability via the endpoint /submit. (CVSS 6.3)
- [CVE-2024-53599](https://cve.now/CVE-2024-53599.md): A cross-site scripting (XSS) vulnerability in the /scroll.php endpoint of LafeLabs Chaos v0.0.1 allows attackers to execute arbitrary web sc (CVSS 6.1)
- [CVE-2024-53930](https://cve.now/CVE-2024-53930.md): WikiDocs before 1.0.65 allows stored XSS by authenticated users via data that comes after $$\\\\, which is mishandled by a KaTeX parser. (CVSS 6.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-11-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.