CVEs published November 29, 2024
76 CVEs were published on November 29, 2024: 24 critical, 18 high.
- Published
- 76
- Critical
- 24
- High
- 18
- Medium
- 31
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 24
Most affected products
- Billion Electric M100 · Billion Electric M150 +2
- 4
- IBM Security Verify Access
- 4
- github.com/moby/moby
- 3
- Interinfo DreamMaker
- 2
- Trellix Enterprise Security Manager
- 2
- backstage · @backstage/plugin-scaffolder-node
- 1
- Century Systems Co. FutureNet NXR-G110 series · Century… +1
- 1
- Checkmk
- 1
- code-projects Farmacia
- 1
- drakkan sftpgo · github.com/drakkan/sftpgo/v2 +1
- 1
Critical 24
- CVE-2024-49360Path traversal in Sandboxiesandboxie-plus Sandboxie
- CVE-2024-49806IBM Security Verify Access Appliance hard coded credentialsIBM Security Verify Access
- CVE-2024-49805IBM Security Verify Access Appliance hard coded credentialsIBM Security Verify Access
- CVE-2024-49803IBM Security Verify Access Appliance command executionIBM Security Verify Access
- CVE-2024-11992Path traversal vulnerability in Quick.CMSQuick.CMS
- CVE-2024-50357FutureNet NXR series routers provided by Century Systems Co., Ltd.Century Systems Co. FutureNet NXR-G110 series · Century… +1
- CVE-2024-11482A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through commaTrellix Enterprise Security Manager
- CVE-2024-11979Interinfo DreamMaker - Unrestricted File Upload through Path TraversalInterinfo DreamMaker
- CVE-2024-35366FFmpeg n6.1.1 is Integer Overflow.
- CVE-2024-35367FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer
- CVE-2024-35368FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c.
- CVE-2024-36622In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script.
- CVE-2024-36671nodemcu before v3.0.0-release_20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c.
- CVE-2024-48406Buffer Overflow vulnerability in SunBK201 umicat through v.0.3.2 and fixed in v.0.3.3 allows an attacker to execute arbitrary code via the p
- CVE-2024-52777DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L, <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /fun
- CVE-2024-52778DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /func
- CVE-2024-52779DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /func
- CVE-2024-52780DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /func
- CVE-2024-52781DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /func
- CVE-2024-52782DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /func
- CVE-2024-53504A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory.
- CVE-2024-53505A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent.
- CVE-2024-53506A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs.
- CVE-2024-53507A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems.
High 18
- CVE-2024-53979Ansible collection "ibm.ibm_zhmc" has passwords in clear text in log file and in output of some modules when specified as inputzhmcclient zhmc-ansible-modules
- CVE-2024-53865Python package "zhmcclient" has passwords in clear text in its HMC and API logspython-zhmcclient · zhmcclient
- CVE-2024-53848check-jsonschema default caching for remote schemas allows for cache confusionpython-jsonschema check-jsonschema · check-jsonschema
- CVE-2024-49804IBM Security Verify Access Appliance privilege escalationIBM Security Verify Access
- CVE-2024-11013Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27, for Ver10.9 up to VNEC UNIVERGE IX · NEC UNIVERGE IX-R/IX-V
- CVE-2024-11481A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API.Trellix Enterprise Security Manager
- CVE-2024-11983Billion Electric router - OS Command InjectionBillion Electric M100 · Billion Electric M150 +2
- CVE-2024-11982Billion Electric router - Plaintext Storage of a PasswordBillion Electric M100 · Billion Electric M150 +2
- CVE-2024-11981Billion Electric router - Authentication BypassBillion Electric M100 · Billion Electric M150 +2
- CVE-2024-11980Billion Electric router - Missing AuthenticationBillion Electric M100 · Billion Electric M150 +2
- CVE-2024-11978Interinfo DreamMaker - Arbitrary File Reading through Path TraversalInterinfo DreamMaker
- CVE-2024-35371Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs.io.antmedia:ant-media-server
- CVE-2024-36611In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle case
- CVE-2024-36612Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers.
- CVE-2024-36623moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent writgithub.com/moby/moby
- CVE-2024-48651In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplement
- CVE-2024-53623Incorrect access control in the component l_0_0.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive information.
- CVE-2024-54124In Click Studios Passwordstate before build 9920, there is a potential permission escalation on the edit folder screen.
Medium, low and unrated 34
- CVE-2024-11995code-projects Farmacia pagamento.php cross site scriptingcode-projects Farmacia
- CVE-2024-53980Spoofed length byte traps CC2538 in endless loopRIOT-OS RIOT
- CVE-2024-53983Server-side request forgery in Backstage Scaffolder pluginbackstage · @backstage/plugin-scaffolder-node
- CVE-2024-53864Cross-site Scripting in a field that is used in the Content name pattern in ibexa/admin-uiibexa admin-ui · ibexa/admin-ui
- CVE-2024-53861Issuer field partial matches allowed in pyjwtjpadilla pyjwt · pyjwt
- CVE-2024-52810Prototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4intlify vue-i18n · @intlify/shared +3
- CVE-2024-52809Cross-site Scripting vulnerability with prototype pollution in vue-i18nintlify vue-i18n · @intlify/core-base +4
- CVE-2024-52801Brute force takeover of OpenID Connect session cookies in sftpgodrakkan sftpgo · github.com/drakkan/sftpgo/v2 +1
- CVE-2024-52800Potential XXE (XML External Entity Injection) vulnerability in veraPDF CLIveraPDF-library · org.verapdf:core +8
- CVE-2024-52003X-Forwarded-Prefix Header still allows for Open Redirect in traefiktraefik · github.com/traefik/traefik +2
- CVE-2024-11990Cross-Site Scripting (XSS) en SurgeMail de NetWinNetWin SurgeMail
- CVE-2024-47094Logging of sitesecret to automations logCheckmk
- CVE-2024-11014Cross-site request forgery (CSRF) vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27 and NEC UNIVERGE IX
- CVE-2024-9044XML External Entity (XXE) Vulnerability in EasyTaxmsg Suisse AG EasyTax
- CVE-2024-10980Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSSElement Pack Elementor Addons
- CVE-2024-10704Photo Gallery by 10Web < 1.8.31 - Admin+ Stored XSSPhoto Gallery by 10Web
- CVE-2024-53701Multiple FCNT Android devices provide the original security features such as "privacy mode" where arbitrary applications can be set not to bFCNT arrows N F-51C · FCNT arrows We F-51B +2
- CVE-2024-35369In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient v
- CVE-2024-35451LinkStack 2.7.9 through 4.7.7 allows resources\views\components\favicon.blade.php link SSRF.
- CVE-2024-36615FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder.
- CVE-2024-36616An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the appli
- CVE-2024-36617FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder.
- CVE-2024-36618FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting
- CVE-2024-36619FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain
- CVE-2024-36620moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.github.com/moby/moby
- CVE-2024-36621moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go.github.com/moby/moby
- CVE-2024-36624Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the construct_copy_div function in copy_and_paste.js.
- CVE-2024-36625Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the replace_emoji_with_text function in ui_util.ts.
- CVE-2024-36626In prestashop 8.1.4, a NULL pointer dereference was identified in the math_round function within Tools.php.
- CVE-2024-39162pyspider through 0.3.10 allows /update XSS.pyspider
- CVE-2024-45495MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking.
- CVE-2024-47193WithSecure Elements Agent for Mac before 24.3, MDR before 24.3, and Elements Client Security for Mac before 16.10 allow a remote Denial of S
- CVE-2024-54123Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text format.
- CVE-2024-54159stalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp/rtthrottle symlink attack.