# CVEs published 2024-11-29

76 CVEs were published on November 29, 2024: 24 critical, 18 high. Days are UTC.

- [CVE-2024-11995](https://cve.now/CVE-2024-11995.md): code-projects Farmacia pagamento.php cross site scripting (CVSS 5.3, code-projects Farmacia)
- [CVE-2024-53980](https://cve.now/CVE-2024-53980.md): Spoofed length byte traps CC2538 in endless loop (CVSS 6.9, RIOT-OS RIOT)
- [CVE-2024-53983](https://cve.now/CVE-2024-53983.md): Server-side request forgery in Backstage Scaffolder plugin (CVSS 5.4, backstage · @backstage/plugin-scaffolder-node)
- [CVE-2024-53979](https://cve.now/CVE-2024-53979.md): Ansible collection "ibm.ibm\_zhmc" has passwords in clear text in log file and in output of some modules when specified as input (CVSS 8.3, zhmcclient zhmc-ansible-modules)
- [CVE-2024-53865](https://cve.now/CVE-2024-53865.md): Python package "zhmcclient" has passwords in clear text in its HMC and API logs (CVSS 8.3, python-zhmcclient · zhmcclient)
- [CVE-2024-53864](https://cve.now/CVE-2024-53864.md): Cross-site Scripting in a field that is used in the Content name pattern in ibexa/admin-ui (CVSS 5.3, ibexa admin-ui · ibexa/admin-ui)
- [CVE-2024-53861](https://cve.now/CVE-2024-53861.md): Issuer field partial matches allowed in pyjwt (CVSS 2.2, jpadilla pyjwt · pyjwt)
- [CVE-2024-53848](https://cve.now/CVE-2024-53848.md): check-jsonschema default caching for remote schemas allows for cache confusion (CVSS 7.1, python-jsonschema check-jsonschema · check-jsonschema)
- [CVE-2024-52810](https://cve.now/CVE-2024-52810.md): Prototype Pollution in @intlify/shared \>=9.7.0 \<= 10.0.4 (CVSS 6.9, intlify vue-i18n · @intlify/shared +3)
- [CVE-2024-52809](https://cve.now/CVE-2024-52809.md): Cross-site Scripting vulnerability with prototype pollution in vue-i18n (CVSS 5.3, intlify vue-i18n · @intlify/core-base +4)
- [CVE-2024-52801](https://cve.now/CVE-2024-52801.md): Brute force takeover of OpenID Connect session cookies in sftpgo (CVSS 5.3, drakkan sftpgo · github.com/drakkan/sftpgo/v2 +1)
- [CVE-2024-52800](https://cve.now/CVE-2024-52800.md): Potential XXE (XML External Entity Injection) vulnerability in veraPDF CLI (CVSS 2.3, veraPDF-library · org.verapdf:core +8)
- [CVE-2024-52003](https://cve.now/CVE-2024-52003.md): X-Forwarded-Prefix Header still allows for Open Redirect in traefik (CVSS 6.3, traefik · github.com/traefik/traefik +2)
- [CVE-2024-49360](https://cve.now/CVE-2024-49360.md): Path traversal in Sandboxie (CVSS 9.2, sandboxie-plus Sandboxie)
- [CVE-2024-49804](https://cve.now/CVE-2024-49804.md): IBM Security Verify Access Appliance privilege escalation (CVSS 7.8, IBM Security Verify Access)
- [CVE-2024-49806](https://cve.now/CVE-2024-49806.md): IBM Security Verify Access Appliance hard coded credentials (CVSS 9.4, IBM Security Verify Access)
- [CVE-2024-49805](https://cve.now/CVE-2024-49805.md): IBM Security Verify Access Appliance hard coded credentials (CVSS 9.4, IBM Security Verify Access)
- [CVE-2024-49803](https://cve.now/CVE-2024-49803.md): IBM Security Verify Access Appliance command execution (CVSS 9.8, IBM Security Verify Access)
- [CVE-2024-11992](https://cve.now/CVE-2024-11992.md): Path traversal vulnerability in Quick.CMS (CVSS 9.1, Quick.CMS)
- [CVE-2024-11990](https://cve.now/CVE-2024-11990.md): Cross-Site Scripting (XSS) en SurgeMail de NetWin (CVSS 4.6, NetWin SurgeMail)
- [CVE-2024-47094](https://cve.now/CVE-2024-47094.md): Logging of sitesecret to automations log (CVSS 5.7, Checkmk)
- [CVE-2024-50357](https://cve.now/CVE-2024-50357.md): FutureNet NXR series routers provided by Century Systems Co., Ltd. (CVSS 9.8, Century Systems Co. FutureNet NXR-G110 series · Century… +1)
- [CVE-2024-11014](https://cve.now/CVE-2024-11014.md): Cross-site request forgery (CSRF) vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27 and (CVSS 4.3, NEC UNIVERGE IX)
- [CVE-2024-11013](https://cve.now/CVE-2024-11013.md): Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27, for Ver10.9 up to V (CVSS 7.2, NEC UNIVERGE IX · NEC UNIVERGE IX-R/IX-V)
- [CVE-2024-9044](https://cve.now/CVE-2024-9044.md): XML External Entity (XXE) Vulnerability in EasyTax (CVSS 4.6, msg Suisse AG EasyTax)
- [CVE-2024-11482](https://cve.now/CVE-2024-11482.md): A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through comma (CVSS 9.8, Trellix Enterprise Security Manager)
- [CVE-2024-11481](https://cve.now/CVE-2024-11481.md): A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. (CVSS 8.2, Trellix Enterprise Security Manager)
- [CVE-2024-11983](https://cve.now/CVE-2024-11983.md): Billion Electric router - OS Command Injection (CVSS 7.2, Billion Electric M100 · Billion Electric M150 +2)
- [CVE-2024-11982](https://cve.now/CVE-2024-11982.md): Billion Electric router - Plaintext Storage of a Password (CVSS 7.2, Billion Electric M100 · Billion Electric M150 +2)
- [CVE-2024-11981](https://cve.now/CVE-2024-11981.md): Billion Electric router - Authentication Bypass (CVSS 7.5, Billion Electric M100 · Billion Electric M150 +2)
- [CVE-2024-11980](https://cve.now/CVE-2024-11980.md): Billion Electric router - Missing Authentication (CVSS 8.6, Billion Electric M100 · Billion Electric M150 +2)
- [CVE-2024-10980](https://cve.now/CVE-2024-10980.md): Element Pack Elementor Addons \< 5.10.3 - Contributor+ Stored XSS (CVSS 5.4, Element Pack Elementor Addons)
- [CVE-2024-10704](https://cve.now/CVE-2024-10704.md): Photo Gallery by 10Web \< 1.8.31 - Admin+ Stored XSS (CVSS 4.8, Photo Gallery by 10Web)
- [CVE-2024-53701](https://cve.now/CVE-2024-53701.md): Multiple FCNT Android devices provide the original security features such as "privacy mode" where arbitrary applications can be set not to b (CVSS 3.1, FCNT arrows N F-51C · FCNT arrows We F-51B +2)
- [CVE-2024-11979](https://cve.now/CVE-2024-11979.md): Interinfo DreamMaker - Unrestricted File Upload through Path Traversal (CVSS 9.8, Interinfo DreamMaker)
- [CVE-2024-11978](https://cve.now/CVE-2024-11978.md): Interinfo DreamMaker - Arbitrary File Reading through Path Traversal (CVSS 7.5, Interinfo DreamMaker)
- [CVE-2024-35366](https://cve.now/CVE-2024-35366.md): FFmpeg n6.1.1 is Integer Overflow. (CVSS 9.1)
- [CVE-2024-35367](https://cve.now/CVE-2024-35367.md): FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp\_altivec.c, static const vec\_s8 h\_subpel\_filters\_outer (CVSS 9.1)
- [CVE-2024-35368](https://cve.now/CVE-2024-35368.md): FFmpeg n7.0 is affected by a Double Free via the rkmpp\_retrieve\_frame function within libavcodec/rkmppdec.c. (CVSS 9.8)
- [CVE-2024-35369](https://cve.now/CVE-2024-35369.md): In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient v (CVSS 5.5)
- [CVE-2024-35371](https://cve.now/CVE-2024-35371.md): Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. (CVSS 7.5, io.antmedia:ant-media-server)
- [CVE-2024-35451](https://cve.now/CVE-2024-35451.md): LinkStack 2.7.9 through 4.7.7 allows resources\\views\\components\\favicon.blade.php link SSRF. (CVSS 4.8)
- [CVE-2024-36611](https://cve.now/CVE-2024-36611.md): In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle case (CVSS 7.5)
- [CVE-2024-36612](https://cve.now/CVE-2024-36612.md): Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers. (CVSS 7.5)
- [CVE-2024-36615](https://cve.now/CVE-2024-36615.md): FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. (CVSS 5.9)
- [CVE-2024-36616](https://cve.now/CVE-2024-36616.md): An integer overflow in the component /libavformat/westwood\_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the appli (CVSS 6.5)
- [CVE-2024-36617](https://cve.now/CVE-2024-36617.md): FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder. (CVSS 6.2)
- [CVE-2024-36618](https://cve.now/CVE-2024-36618.md): FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting (CVSS 6.2)
- [CVE-2024-36619](https://cve.now/CVE-2024-36619.md): FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain (CVSS 5.3)
- [CVE-2024-36620](https://cve.now/CVE-2024-36620.md): moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image\_history.go. (CVSS 6.5, github.com/moby/moby)
- [CVE-2024-36621](https://cve.now/CVE-2024-36621.md): moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. (CVSS 6.5, github.com/moby/moby)
- [CVE-2024-36622](https://cve.now/CVE-2024-36622.md): In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. (CVSS 9.8)
- [CVE-2024-36623](https://cve.now/CVE-2024-36623.md): moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent writ (CVSS 8.1, github.com/moby/moby)
- [CVE-2024-36624](https://cve.now/CVE-2024-36624.md): Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the construct\_copy\_div function in copy\_and\_paste.js. (CVSS 6.1)
- [CVE-2024-36625](https://cve.now/CVE-2024-36625.md): Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the replace\_emoji\_with\_text function in ui\_util.ts. (CVSS 6.1)
- [CVE-2024-36626](https://cve.now/CVE-2024-36626.md): In prestashop 8.1.4, a NULL pointer dereference was identified in the math\_round function within Tools.php. (CVSS 5.3)
- [CVE-2024-36671](https://cve.now/CVE-2024-36671.md): nodemcu before v3.0.0-release\_20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c. (CVSS 9.8)
- [CVE-2024-39162](https://cve.now/CVE-2024-39162.md): pyspider through 0.3.10 allows /update XSS. (CVSS 6.1, pyspider)
- [CVE-2024-45495](https://cve.now/CVE-2024-45495.md): MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking. (CVSS 4.3)
- [CVE-2024-47193](https://cve.now/CVE-2024-47193.md): WithSecure Elements Agent for Mac before 24.3, MDR before 24.3, and Elements Client Security for Mac before 16.10 allow a remote Denial of S (CVSS 5.5)
- [CVE-2024-48406](https://cve.now/CVE-2024-48406.md): Buffer Overflow vulnerability in SunBK201 umicat through v.0.3.2 and fixed in v.0.3.3 allows an attacker to execute arbitrary code via the p (CVSS 9.8)
- [CVE-2024-48651](https://cve.now/CVE-2024-48651.md): In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplement (CVSS 7.5)
- [CVE-2024-52777](https://cve.now/CVE-2024-52777.md): DCME-320 \<=7.4.12.90, DCME-520 \<=9.25.5.11, DCME-320-L, \<=9.3.5.26, and DCME-720 \<=9.1.5.11 are vulnerable to Remote Code Execution via /fun (CVSS 9.8)
- [CVE-2024-52778](https://cve.now/CVE-2024-52778.md): DCME-320 \<=7.4.12.90, DCME-520 \<=9.25.5.11, DCME-320-L \<=9.3.5.26, and DCME-720 \<=9.1.5.11 are vulnerable to Remote Code Execution via /func (CVSS 9.8)
- [CVE-2024-52779](https://cve.now/CVE-2024-52779.md): DCME-320 \<=7.4.12.90, DCME-520 \<=9.25.5.11, DCME-320-L \<=9.3.5.26, and DCME-720 \<=9.1.5.11 are vulnerable to Remote Code Execution via /func (CVSS 9.8)
- [CVE-2024-52780](https://cve.now/CVE-2024-52780.md): DCME-320 \<=7.4.12.90, DCME-520 \<=9.25.5.11, DCME-320-L \<=9.3.5.26, and DCME-720 \<=9.1.5.11 are vulnerable to Remote Code Execution via /func (CVSS 9.8)
- [CVE-2024-52781](https://cve.now/CVE-2024-52781.md): DCME-320 \<=7.4.12.90, DCME-520 \<=9.25.5.11, DCME-320-L \<=9.3.5.26, and DCME-720 \<=9.1.5.11 are vulnerable to Remote Code Execution via /func (CVSS 9.8)
- [CVE-2024-52782](https://cve.now/CVE-2024-52782.md): DCME-320 \<=7.4.12.90, DCME-520 \<=9.25.5.11, DCME-320-L \<=9.3.5.26, and DCME-720 \<=9.1.5.11 are vulnerable to Remote Code Execution via /func (CVSS 9.8)
- [CVE-2024-53504](https://cve.now/CVE-2024-53504.md): A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory. (CVSS 9.8)
- [CVE-2024-53505](https://cve.now/CVE-2024-53505.md): A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent. (CVSS 9.8)
- [CVE-2024-53506](https://cve.now/CVE-2024-53506.md): A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs. (CVSS 9.8)
- [CVE-2024-53507](https://cve.now/CVE-2024-53507.md): A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems. (CVSS 9.8)
- [CVE-2024-53623](https://cve.now/CVE-2024-53623.md): Incorrect access control in the component l\_0\_0.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive information. (CVSS 7.5)
- [CVE-2024-54123](https://cve.now/CVE-2024-54123.md): Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text format. (CVSS 6.1)
- [CVE-2024-54124](https://cve.now/CVE-2024-54124.md): In Click Studios Passwordstate before build 9920, there is a potential permission escalation on the edit folder screen. (CVSS 8.8)
- [CVE-2024-54159](https://cve.now/CVE-2024-54159.md): stalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp/rtthrottle symlink attack. (CVSS 4.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-11-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.