# CVEs published 2024-12-03

83 CVEs were published on December 3, 2024: 2 critical, 30 high. Days are UTC.

- [CVE-2024-54131](https://cve.now/CVE-2024-54131.md): Kolide Agent Privilege Escalation (Windows, Versions \>= 1.5.3, \< 1.12.3) (CVSS 7.3, kolide launcher · github.com/kolide/launcher)
- [CVE-2024-53672](https://cve.now/CVE-2024-53672.md): Authenticated Remote Command Injection in HPE Aruba Networking ClearPass Policy Manager Web-Based Management Interface (CVSS 4.7, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Clear…)
- [CVE-2024-51773](https://cve.now/CVE-2024-51773.md): Authenticated Stored Cross-Site Scripting (XSS) in HPE Aruba Networking ClearPass Policy Manager Web-based Management Interface (CVSS 4.8, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Clear…)
- [CVE-2024-51772](https://cve.now/CVE-2024-51772.md): Authenticated Deserialization Vulnerability in ClearPass Policy Manager Web-Based Management Interface Leading to a Remote Command Execution (RCE) (CVSS 6.4, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Clear…)
- [CVE-2024-51771](https://cve.now/CVE-2024-51771.md): Authenticated Remote Code Execution (RCE) via OGNL Injection in HPE Aruba Networking ClearPass Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Clear…)
- [CVE-2024-12053](https://cve.now/CVE-2024-12053.md): Type Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to potentially exploit object corruption via a craft (CVSS 8.8, Google Chrome)
- [CVE-2024-52548](https://cve.now/CVE-2024-52548.md): Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass (CVSS 6.7, Lorex 2K Indoor Wi-Fi Security Camera)
- [CVE-2024-52547](https://cve.now/CVE-2024-52547.md): Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow (CVSS 7.2, Lorex 2K Indoor Wi-Fi Security Camera)
- [CVE-2024-52546](https://cve.now/CVE-2024-52546.md): Lorex 2K Indoor Wi-Fi Security Camera - Null pointer dereference (CVSS 5.3, Lorex 2K Indoor Wi-Fi Security Camera)
- [CVE-2024-52545](https://cve.now/CVE-2024-52545.md): Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap read (CVSS 6.5, Lorex 2K Indoor Wi-Fi Security Camera)
- [CVE-2024-52544](https://cve.now/CVE-2024-52544.md): Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow (CVSS 9.8, Lorex 2K Indoor Wi-Fi Security Camera)
- [CVE-2024-41775](https://cve.now/CVE-2024-41775.md): IBM Cognos Controller information disclosure (CVSS 5.9, IBM Cognos Controller)
- [CVE-2024-25020](https://cve.now/CVE-2024-25020.md): IBM Cognos Controller file upload (CVSS 5.5, IBM Cognos Controller)
- [CVE-2024-41776](https://cve.now/CVE-2024-41776.md): IBM Cognos Controller cross-site request forgery (CVSS 6.5, IBM Cognos Controller)
- [CVE-2024-41777](https://cve.now/CVE-2024-41777.md): IBM Cognos Controller hard coded credentials (CVSS 7.5, IBM Cognos Controller)
- [CVE-2024-45676](https://cve.now/CVE-2024-45676.md): IBM Cognos Controller file upload (CVSS 4.3, IBM Cognos Controller)
- [CVE-2024-37303](https://cve.now/CVE-2024-37303.md): Synapse unauthenticated writes to the media repository allow planting of problematic content (CVSS 5.3, element-hq synapse · matrix-synapse)
- [CVE-2024-37302](https://cve.now/CVE-2024-37302.md): Synapse denial of service through media disk space consumption (CVSS 7.5, element-hq synapse · matrix-synapse)
- [CVE-2024-52805](https://cve.now/CVE-2024-52805.md): Synapse allows unsupported content types to lead to memory exhaustion (CVSS 8.2, element-hq synapse · matrix-synapse)
- [CVE-2024-52815](https://cve.now/CVE-2024-52815.md): Synapse allows a a malformed invite to break the invitee's \`/sync\` (CVSS 8.7, element-hq synapse · matrix-synapse)
- [CVE-2024-53867](https://cve.now/CVE-2024-53867.md): Synapse Matrix has a partial room state leak via Sliding Sync (CVSS 4.3, element-hq synapse · matrix-synapse)
- [CVE-2024-53863](https://cve.now/CVE-2024-53863.md): Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders (CVSS 8.2, element-hq synapse · matrix-synapse)
- [CVE-2024-25036](https://cve.now/CVE-2024-25036.md): IBM Cognos Controller authentication bypass (CVSS 4.3, IBM Cognos Controller)
- [CVE-2024-25035](https://cve.now/CVE-2024-25035.md): IBM Cognos Controller information disclosure (CVSS 5.3, IBM Cognos Controller)
- [CVE-2024-40691](https://cve.now/CVE-2024-40691.md): IBM Cognos Controller file upload (CVSS 8.0, IBM Cognos Controller)
- [CVE-2024-25019](https://cve.now/CVE-2024-25019.md): IBM Cognos Controller file upload (CVSS 5.5, IBM Cognos Controller)
- [CVE-2021-29892](https://cve.now/CVE-2021-29892.md): IBM Cognos Controller information disclosure (CVSS 5.9, IBM Cognos Controller)
- [CVE-2024-53257](https://cve.now/CVE-2024-53257.md): Vitess allows HTML injection in /debug/querylogz & /debug/env (CVSS 4.9, vitessio vitess · vitess.io/vitess)
- [CVE-2024-53999](https://cve.now/CVE-2024-53999.md): Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality (CVSS 8.1, Mobile-Security-Framework-MobSF · mobsf)
- [CVE-2024-54000](https://cve.now/CVE-2024-54000.md): Mobile Security Framework (MobSF) bypass of SSRF fix (CVSS 7.5, Mobile-Security-Framework-MobSF · mobsf)
- [CVE-2024-11391](https://cve.now/CVE-2024-11391.md): Advanced File Manager \<= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 7.5, saadiqbal Advanced File Manager – Ultimate File Manager for…)
- [CVE-2024-11200](https://cve.now/CVE-2024-11200.md): Goodlayers Core \<= 2.0.7 - Reflected Cross-Site Scripting via 'font-family' (CVSS 6.1, Goodlayers Core)
- [CVE-2024-9978](https://cve.now/CVE-2024-9978.md): Liteos\_a has an out-of-bounds read vulnerability (CVSS 5.5, OpenHarmony)
- [CVE-2024-42422](https://cve.now/CVE-2024-42422.md): Dell NetWorker, version(s) 19.10, contain(s) an Authorization Bypass Through User-Controlled Key vulnerability. (CVSS 8.3, Dell NetWorker)
- [CVE-2024-12082](https://cve.now/CVE-2024-12082.md): Ability Runtime has an out-of-bounds read permission bypass vulnerability (CVSS 5.5, OpenHarmony)
- [CVE-2024-10074](https://cve.now/CVE-2024-10074.md): Liteos\_a has an use after free vulnerability (CVSS 8.8, OpenHarmony)
- [CVE-2024-11326](https://cve.now/CVE-2024-11326.md): Campaign Monitor Forms by Optin Cat \<= 2.5.7 - Reflected Cross-Site Scripting (CVSS 6.1, fatcatapps Campaign Monitor Forms by Optin Cat)
- [CVE-2024-47476](https://cve.now/CVE-2024-47476.md): Dell NetWorker Management Console, version(s) 19.11, contain(s) an Improper Verification of Cryptographic Signature vulnerability. (CVSS 7.8, Dell NetWorker Management Console)
- [CVE-2024-11782](https://cve.now/CVE-2024-11782.md): WP Mailster \<= 1.8.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, brandtoss WP Mailster)
- [CVE-2024-12062](https://cve.now/CVE-2024-12062.md): Charity Addon for Elementor \<= 1.3.3 - Authenticated (Contributor+) Post Disclosure (CVSS 4.3, nicheaddons Charity Addon for Elementor)
- [CVE-2024-11325](https://cve.now/CVE-2024-11325.md): AWeber Forms by Optin Cat \<= 2.5.7 - Reflected Cross-Site Scripting (CVSS 5.2, fatcatapps AWeber Forms by Optin Cat)
- [CVE-2024-45106](https://cve.now/CVE-2024-45106.md): Apache Ozone: Improper authentication when generating S3 secrets (CVSS 8.1, Apache Software Foundation Apache Ozone · org.apache.ozone:…)
- [CVE-2024-11866](https://cve.now/CVE-2024-11866.md): BMLT Tabbed Map \<= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, paulnagle BMLT Tabbed Map)
- [CVE-2024-11844](https://cve.now/CVE-2024-11844.md): IdeaPush \<= 8.71 - Missing Authorization to Board Term Deletion (CVSS 4.3, northernbeacheswebsites IdeaPush)
- [CVE-2024-11732](https://cve.now/CVE-2024-11732.md): BP Profile Shortcodes Extra \<= 2.6.0 - Authenticated (Contributor+) SQL Injection via tab Parameter (CVSS 6.5, venutius BP Profile Shortcodes Extra)
- [CVE-2024-11805](https://cve.now/CVE-2024-11805.md): Quick License Manager – WooCommerce Plugin \<= 2.4.17 - Reflected Cross-Site Scripting (CVSS 6.1, soraco Quick License Manager – WooCommerce Plugin)
- [CVE-2024-11853](https://cve.now/CVE-2024-11853.md): jAlbum Bridge \<= 2.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via ar Parameter (CVSS 6.4, mlaza jAlbum Bridge)
- [CVE-2024-11461](https://cve.now/CVE-2024-11461.md): Form Data Collector \<= 2.2.3 - Reflected Cross-Site Scripting (CVSS 6.1, taunoh Form Data Collector)
- [CVE-2024-11898](https://cve.now/CVE-2024-11898.md): Scratch & Win – Giveaways and Contests \<= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, akashmalik Scratch & Win – Giveaways and Contests. Boost su…)
- [CVE-2024-11707](https://cve.now/CVE-2024-11707.md): My auctions allegro \<= 3.6.17 - Reflected Cross-Site Scripting (CVSS 6.1, wphocus My auctions allegro)
- [CVE-2024-11453](https://cve.now/CVE-2024-11453.md): WordPress Pinterest Plugin – Make a Popup, User Profile, Masonry and Gallery Layout \<= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, samdani GS Pinterest Portfolio – Pins Grid, Masonry, User P…)
- [CVE-2024-9058](https://cve.now/CVE-2024-9058.md): Element Pack Elementor Addons \<= 5.10.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Lightbox Widget (CVSS 6.4, bdthemes Element Pack – Widgets, Templates & Addons for Ele…)
- [CVE-2024-10893](https://cve.now/CVE-2024-10893.md): WP Booking Calendar \< 10.6.5 - Admin+ Stored XSS (CVSS 4.8, WP Booking Calendar)
- [CVE-2024-49421](https://cve.now/CVE-2024-49421.md): Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14 allows ad (CVSS 4.3, Samsung Mobile Quick Share Agent)
- [CVE-2024-49420](https://cve.now/CVE-2024-49420.md): Improper handling of responses in GamingHub prior to version 6.1.04.6 in Korea, 7.1.03.7 in Global allows remote attackers to launch arbitra (CVSS 7.5, Samsung Mobile GamingHub)
- [CVE-2024-49419](https://cve.now/CVE-2024-49419.md): Insufficient verification of url authenticity in GamingHub prior to version 6.1.03.4 in Korea, 7.1.02.4 in Global allows remote attackers to (CVSS 4.3, Samsung Mobile GamingHub)
- [CVE-2024-49418](https://cve.now/CVE-2024-49418.md): Insufficient verification of url authenticity in GamingHub prior to version 6.1.03.4 in Korea, 7.1.02.4 in Global allows remote attackers to (CVSS 6.5, Samsung Mobile GamingHub)
- [CVE-2024-49417](https://cve.now/CVE-2024-49417.md): Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activiti (CVSS 2.0, Samsung Mobile Smart Touch Call)
- [CVE-2024-49416](https://cve.now/CVE-2024-49416.md): Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive informatio (CVSS 4.0, Samsung Mobile SmartThings)
- [CVE-2024-49415](https://cve.now/CVE-2024-49415.md): Out-of-bound write in libsaped.so prior to SMR Dec-2024 Release 1 allows remote attackers to execute arbitrary code. (CVSS 8.1, Samsung Mobile Devices)
- [CVE-2024-49414](https://cve.now/CVE-2024-49414.md): Authentication Bypass Using an Alternate Path in Dex Mode prior to SMR Dec-2024 Release 1 allows physical attackers to temporarily access to (CVSS 2.4, Samsung Mobile Devices)
- [CVE-2024-49413](https://cve.now/CVE-2024-49413.md): Improper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1 allows local attackers to install malicious (CVSS 7.1, Samsung Mobile Devices)
- [CVE-2024-49412](https://cve.now/CVE-2024-49412.md): Improper input validation in Settings prior to SMR Dec-2024 Release 1 allows local attackers to broadcast signal for discovering Bluetooth o (CVSS 5.5, Samsung Mobile Devices)
- [CVE-2024-49411](https://cve.now/CVE-2024-49411.md): Path Traversal in ThemeCenter prior to SMR Dec-2024 Release 1 allows physical attackers to copy apk files to arbitrary path with ThemeCenter (CVSS 4.3, Samsung Mobile Devices)
- [CVE-2024-49410](https://cve.now/CVE-2024-49410.md): Out-of-bounds write in libswmfextractor.so prior to SMR Dec-2024 Release 1 allows local attackers to execute arbitrary code. (CVSS 5.9, Samsung Mobile Devices)
- [CVE-2024-10484](https://cve.now/CVE-2024-10484.md): Spectra – WordPress Gutenberg Blocks \<= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget (CVSS 6.4, brainstormforce Spectra Gutenberg Blocks – Website Builder…)
- [CVE-2024-45068](https://cve.now/CVE-2024-45068.md): Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center OVA (CVSS 7.1, Hitachi Ops Center Common Services · Hitachi Ops Center OVA)
- [CVE-2024-9694](https://cve.now/CVE-2024-9694.md): CMSMasters Elementor Addon \<= 1.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 6.4, CMSMasters Elementor Addon)
- [CVE-2024-9200](https://cve.now/CVE-2024-9200.md): A post-authentication command injection vulnerability in the "host" parameter of the diagnostic function in Zyxel VMG4005-B50A firmware vers (CVSS 7.2, Zyxel VMG4005-B50A firmware)
- [CVE-2024-9197](https://cve.now/CVE-2024-9197.md): A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions thr (CVSS 4.9, Zyxel VMG3625-T50B firmware)
- [CVE-2024-8748](https://cve.now/CVE-2024-8748.md): A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through (CVSS 7.5, Zyxel VMG8825-T50K firmware)
- [CVE-2018-9449](https://cve.now/CVE-2018-9449.md): In process\_service\_search\_attr\_rsp of sdp\_discovery.cc, there is a possible out of bound read due to a missing bounds check. (CVSS 5.5, Google Android)
- [CVE-2018-9441](https://cve.now/CVE-2018-9441.md): In sdp\_copy\_raw\_data of sdp\_discovery.cc, there is a possible out of bounds read due to an incorrect bounds check. (CVSS 5.5, Google Android)
- [CVE-2024-29404](https://cve.now/CVE-2024-29404.md): An issue in Razer Synapse 3 v.3.9.131.20813 and Synapse 3 App v.20240213 allows a local attacker to execute arbitrary code via the export pa (CVSS 7.8)
- [CVE-2024-45757](https://cve.now/CVE-2024-45757.md): An issue was discovered in Centreon centreon-bam 24.04, 23.10, 23.04, and 22.10. (CVSS 7.2)
- [CVE-2024-46624](https://cve.now/CVE-2024-46624.md): An issue in InfoDom Performa 365 v4.0.1 allows authenticated attackers to elevate their privileges to Administrator via a crafted payload se (CVSS 8.8)
- [CVE-2024-46625](https://cve.now/CVE-2024-46625.md): An authenticated arbitrary file upload vulnerability in the /documentCache/upload endpoint of InfoDom Performa 365 v4.0.1 allows attackers t (CVSS 8.8)
- [CVE-2024-48080](https://cve.now/CVE-2024-48080.md): An issue in aedes v0.51.2 allows attackers to cause a Denial of Service(DoS) via a crafted request. (CVSS 7.5)
- [CVE-2024-50948](https://cve.now/CVE-2024-50948.md): mochiMQTT v2.6.3 is vulnerable to Denial of Service (DoS) due to improper resource management. (CVSS 7.5, github.com/mochi-mqtt/server)
- [CVE-2024-51114](https://cve.now/CVE-2024-51114.md): An issue in Beijing Digital China Yunke Information Technology Co.Ltd v.7.2.6.120 allows a remote attacker to execute arbitrary code via the (CVSS 8.8)
- [CVE-2024-51363](https://cve.now/CVE-2024-51363.md): Insecure deserialization in Hodoku v2.3.0 to v2.3.2 allows attackers to execute arbitrary code. (CVSS 9.8)
- [CVE-2024-53502](https://cve.now/CVE-2024-53502.md): Seecms v4.8 was discovered to contain a SQL injection vulnerability in the SEMCMS\_SeoAndTag.php page. (CVSS 3.8)
- [CVE-2024-53921](https://cve.now/CVE-2024-53921.md): An issue was discovered in the installer in Samsung Magician 8.1.0 on Windows. (CVSS 2.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-12-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.