# CVEs published 2024-12-04

133 CVEs were published on December 4, 2024: 7 critical, 62 high. Days are UTC.

- [CVE-2018-9463](https://cve.now/CVE-2018-9463.md): In sw49408\_irq\_runtime\_engine\_debug of touch\_sw49408.c, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 7.8, Google Android)
- [CVE-2018-9462](https://cve.now/CVE-2018-9462.md): In store\_cmd of ftm4\_pdc.c, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 7.8, Google Android)
- [CVE-2018-9439](https://cve.now/CVE-2018-9439.md): In \_\_unregister\_prot\_hook and packet\_release of af\_packet.c, there is a possible use-after-free due to improper locking. (CVSS 7.8, Google Android)
- [CVE-2018-9416](https://cve.now/CVE-2018-9416.md): In sg\_remove\_scat of scsi/sg.c, there is a possible memory corruption due to an unusual root cause. (CVSS 10.0, Google Android)
- [CVE-2018-9408](https://cve.now/CVE-2018-9408.md): In m3326\_gps\_write and m3326\_gps\_read of gps.s, there is a possible Out Of Bounds Read due to a missing bounds check. (CVSS 5.5, Google Android)
- [CVE-2018-9407](https://cve.now/CVE-2018-9407.md): In emmc\_rpmb\_ioctl of emmc\_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check. (CVSS 6.5, Google Android)
- [CVE-2018-9404](https://cve.now/CVE-2018-9404.md): In oemCallback of ril.cpp, there is a possible out of bounds write due to an integer overflow. (CVSS 7.8, Google Android)
- [CVE-2024-12186](https://cve.now/CVE-2024-12186.md): code-projects Hotel Management System Available Room hotelnew.c stack-based overflow (CVSS 4.8, code-projects Hotel Management System)
- [CVE-2024-12185](https://cve.now/CVE-2024-12185.md): code-projects Hotel Management System Administrator Login Password stack-based overflow (CVSS 4.8, code-projects Hotel Management System)
- [CVE-2018-9403](https://cve.now/CVE-2018-9403.md): In the MTK\_FLP\_MSG\_HAL\_DIAG\_REPORT\_DATA\_NTF handler of flp2hal\_- interface.c, there is a possible stack buffer overflow due to a missing (CVSS 7.8, Google Android)
- [CVE-2018-9402](https://cve.now/CVE-2018-9402.md): In multiple functions of gl\_proc.c, there is a buffer overwrite due to a missing bounds check. (CVSS 8.8, Google Android)
- [CVE-2024-54221](https://cve.now/CVE-2024-54221.md): WordPress FAT Services Booking plugin \<= 5.6 - Unauthenticated SQL Injection vulnerability (CVSS 9.3, roninwp FAT Services Booking)
- [CVE-2018-9400](https://cve.now/CVE-2018-9400.md): In gt1x\_debug\_write\_proc and gt1x\_tool\_write of drivers/input/touchscreen/mediatek/GT1151/gt1x\_generic.c and gt1x\_tools.c, there is (CVSS 7.8, Google Android)
- [CVE-2018-9399](https://cve.now/CVE-2018-9399.md): In /proc/driver/wmt\_dbg driver, there are several possible out of bounds writes. (CVSS 7.8, Google Android)
- [CVE-2018-9398](https://cve.now/CVE-2018-9398.md): In fm\_set\_stat of mediatek FM radio driver, there is a possible OOB write due to improper input validation. (CVSS 7.8, Google Android)
- [CVE-2018-9397](https://cve.now/CVE-2018-9397.md): In WMT\_unlocked\_ioctl of MTK WMT device driver, there is a possible OOB write due to a missing bounds check. (CVSS 7.8, Google Android)
- [CVE-2024-12183](https://cve.now/CVE-2024-12183.md): DedeCMS HTTP POST Request carbuyaction.php RemoveXSS cross site scripting (CVSS 5.3, DedeCMS)
- [CVE-2024-12182](https://cve.now/CVE-2024-12182.md): DedeCMS soft\_add.php cross site scripting (CVSS 5.3, DedeCMS)
- [CVE-2024-53982](https://cve.now/CVE-2024-53982.md): Arbitrary file download in Zoo-Project Echo Example (CVSS 8.7, ZOO-Project)
- [CVE-2024-12181](https://cve.now/CVE-2024-12181.md): DedeCMS SWF File uploads\_add.php cross site scripting (CVSS 5.3, DedeCMS)
- [CVE-2024-12180](https://cve.now/CVE-2024-12180.md): DedeCMS article\_add.php cross site scripting (CVSS 5.3, DedeCMS)
- [CVE-2018-9396](https://cve.now/CVE-2018-9396.md): In rpc\_msg\_handler and related handlers of drivers/misc/mediatek/eccci/port\_rpc.c, there is a possible out of bounds write due to an incorre (CVSS 7.8, Google Android)
- [CVE-2024-38829](https://cve.now/CVE-2024-38829.md): Spring LDAP sensitive data exposure for case-sensitive comparisons (CVSS 3.7, Spring LDAP · org.springframework.ldap:spring-ldap-core)
- [CVE-2024-12147](https://cve.now/CVE-2024-12147.md): Netgear R6900 HTTP Header upgrade\_check.cgi buffer overflow (CVSS 7.1, Netgear R6900)
- [CVE-2018-9395](https://cve.now/CVE-2018-9395.md): In mtk\_cfg80211\_vendor\_packet\_keep\_alive\_start and mtk\_cfg80211\_vendor\_set\_config of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/g (CVSS 7.8, Google Android)
- [CVE-2018-9394](https://cve.now/CVE-2018-9394.md): In mtk\_p2p\_wext\_set\_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl\_p2p.c, there is a possible OOB write due to improper inp (CVSS 7.8, Google Android)
- [CVE-2024-12148](https://cve.now/CVE-2024-12148.md): Incorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and earlier allows an authenticated user to acce (CVSS 4.3, Devolutions Server)
- [CVE-2024-12149](https://cve.now/CVE-2024-12149.md): Incorrect permission assignment in temporary access requests component in Devolutions Remote Desktop Manager 2024.3.19.0 and earlier on Wind (CVSS 8.1, Devolutions Remote Desktop Manager)
- [CVE-2024-12151](https://cve.now/CVE-2024-12151.md): Incorrect permission assignment in the user migration feature in Devolutions Server 2024.3.8.0 and earlier allows users to retain their old (CVSS 5.0, Devolutions Server)
- [CVE-2018-9393](https://cve.now/CVE-2018-9393.md): In procfile\_write of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl\_proc.c, there is a possible OOB write due to a missing bounds (CVSS 7.8, Google Android)
- [CVE-2024-12196](https://cve.now/CVE-2024-12196.md): Incorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier allows an authenticated user to view the pa (CVSS 6.5, Devolutions Server)
- [CVE-2018-9392](https://cve.now/CVE-2018-9392.md): In get\_binary of vendor/mediatek/proprietary/hardware/connectivity/gps/gps\_hal/src/data\_coder.c, there is a possible out of bounds write due (CVSS 7.8, Google Android)
- [CVE-2024-20397](https://cve.now/CVE-2024-20397.md): Cisco NX-OS Software Image Verification Bypass Vulnerability (CVSS 5.2, Cisco NX-OS Software · Cisco NX-OS System Software in AC… +1)
- [CVE-2024-54002](https://cve.now/CVE-2024-54002.md): Dependency-Track allows enumeration of managed users via /api/v1/user/login endpoint (CVSS 5.3, DependencyTrack dependency-track)
- [CVE-2024-54132](https://cve.now/CVE-2024-54132.md): GitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerability (CVSS 6.3, cli · github.com/cli/cli +1)
- [CVE-2024-11643](https://cve.now/CVE-2024-11643.md): Accessibility by AllAccessible \<= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update (CVSS 8.8, Accessibility by AllAccessible)
- [CVE-2024-54134](https://cve.now/CVE-2024-54134.md): @solana/web3.js modified package published to npm, containing malware that exfiltrates private key material (CVSS 8.3, solana-labs solana-web3.js · @solana/web3.js)
- [CVE-2024-40745](https://cve.now/CVE-2024-40745.md): Extension - tassos.gr - Reflected Cross site scripting vulnerability in Convert Forms component for Joomla \< 4.4.8 (CVSS 5.4, tassos.gr Convert Forms component for Joomla)
- [CVE-2024-40744](https://cve.now/CVE-2024-40744.md): Extension - tassos.gr - Unrestricted file upload in Convert Forms component for Joomla \< 4.4.8 (CVSS 9.8, tassos.gr Convert Forms component for Joomla)
- [CVE-2024-12056](https://cve.now/CVE-2024-12056.md): Client Secret not checked with OAuth Password grant type (CVSS 2.3, arcinfo PcVue)
- [CVE-2024-53140](https://cve.now/CVE-2024-53140.md): netlink: terminate outstanding dump on socket close (CVSS 7.8, Linux)
- [CVE-2024-53139](https://cve.now/CVE-2024-53139.md): sctp: fix possible UAF in sctp\_v6\_available() (CVSS 7.8, Linux)
- [CVE-2024-53138](https://cve.now/CVE-2024-53138.md): net/mlx5e: kTLS, Fix incorrect page refcounting (CVSS 9.8, Linux)
- [CVE-2024-53137](https://cve.now/CVE-2024-53137.md): ARM: fix cacheflush with PAN (CVSS 5.5, Linux)
- [CVE-2024-53136](https://cve.now/CVE-2024-53136.md): mm: revert "mm: shmem: fix data-race in shmem\_getattr()" (CVSS 7.5, Linux)
- [CVE-2024-53135](https://cve.now/CVE-2024-53135.md): KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG\_BROKEN (CVSS 8.8, Linux)
- [CVE-2024-53134](https://cve.now/CVE-2024-53134.md): pmdomain: imx93-blk-ctrl: correct remove path (CVSS 5.5, Linux)
- [CVE-2024-53133](https://cve.now/CVE-2024-53133.md): drm/amd/display: Handle dml allocation failure to avoid crash (CVSS 7.8, Linux)
- [CVE-2024-53132](https://cve.now/CVE-2024-53132.md): drm/xe/oa: Fix "Missing outer runtime PM protection" warning (CVSS 5.5, Linux)
- [CVE-2024-53131](https://cve.now/CVE-2024-53131.md): nilfs2: fix null-ptr-deref in block\_touch\_buffer tracepoint (no CVSS, Linux)
- [CVE-2024-53130](https://cve.now/CVE-2024-53130.md): nilfs2: fix null-ptr-deref in block\_dirty\_buffer tracepoint (no CVSS, Linux)
- [CVE-2024-53129](https://cve.now/CVE-2024-53129.md): drm/rockchip: vop: Fix a dereferenced before check warning (no CVSS, Linux)
- [CVE-2024-53128](https://cve.now/CVE-2024-53128.md): sched/task\_stack: fix object\_is\_on\_stack() for KASAN tagged pointers (no CVSS, Linux)
- [CVE-2024-53127](https://cve.now/CVE-2024-53127.md): Revert "mmc: dw\_mmc: Fix IDMAC operation with pages bigger than 4K" (CVSS 7.8, Linux)
- [CVE-2024-53126](https://cve.now/CVE-2024-53126.md): vdpa: solidrun: Fix UB bug with devres (CVSS 7.1, Linux)
- [CVE-2024-53125](https://cve.now/CVE-2024-53125.md): bpf: sync\_linked\_regs() must preserve subreg\_def (CVSS 7.8, Linux)
- [CVE-2024-51465](https://cve.now/CVE-2024-51465.md): IBM App Connect Enterprise Certified Container command execution (CVSS 8.8, IBM App Connect Enterprise Certified Container)
- [CVE-2024-7488](https://cve.now/CVE-2024-7488.md): Business Logic Error in RestApp Inc.'s Online Ordering System (CVSS 5.3, RestApp Online Ordering System)
- [CVE-2024-12138](https://cve.now/CVE-2024-12138.md): horilla create\_skills deserialization (CVSS 5.3, horilla)
- [CVE-2024-11935](https://cve.now/CVE-2024-11935.md): Email Address Obfuscation \<= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter (CVSS 6.4, neotrendy Email Address Obfuscation)
- [CVE-2024-10576](https://cve.now/CVE-2024-10576.md): Unauthorized factory reset of Infinix devices (CVSS 9.4, Infinix Mobile com.transsion.agingfunction)
- [CVE-2024-8894](https://cve.now/CVE-2024-8894.md): Out-of-bounds Write vulnerability in ODA SDK versions \< 2025.10 (CVSS 8.1, Open Design Alliance ODA Drawings SDK - All Versions \<)
- [CVE-2024-52269](https://cve.now/CVE-2024-52269.md): AI Assistant PDF Document Spoofing in DocuSign (CVSS 8.2, DocuSign)
- [CVE-2024-54158](https://cve.now/CVE-2024-54158.md): In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding (CVSS 3.5, JetBrains YouTrack)
- [CVE-2024-54157](https://cve.now/CVE-2024-54157.md): In JetBrains YouTrack before 2024.3.52635 potential ReDoS was possible due to vulnerable RegExp in Ruby syntax detector (CVSS 4.3, JetBrains YouTrack)
- [CVE-2024-54156](https://cve.now/CVE-2024-54156.md): In JetBrains YouTrack before 2024.3.52635 multiple merge functions were vulnerable to prototype pollution attack (CVSS 4.2, JetBrains YouTrack)
- [CVE-2024-54155](https://cve.now/CVE-2024-54155.md): In JetBrains YouTrack before 2024.3.51866 improper access control allowed listing of project names during app import without authentication (CVSS 3.7, JetBrains YouTrack)
- [CVE-2024-54154](https://cve.now/CVE-2024-54154.md): In JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in plugin sandbox (CVSS 8.0, JetBrains YouTrack)
- [CVE-2024-54153](https://cve.now/CVE-2024-54153.md): In JetBrains YouTrack before 2024.3.51866 unauthenticated database backup download was possible via vulnerable query parameter (CVSS 3.1, JetBrains YouTrack)
- [CVE-2024-8962](https://cve.now/CVE-2024-8962.md): WPBITS Addons For Elementor Page Builder \<= 1.5.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload (CVSS 6.4, WPBITS Addons For Elementor Page Builder)
- [CVE-2024-11854](https://cve.now/CVE-2024-11854.md): Listdom – Business Directory and Classified Ads Listings WordPress Plugin \<= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode Parameter (CVSS 6.4, webilia Listdom: AI-powered Business Directory with Classif…)
- [CVE-2024-12107](https://cve.now/CVE-2024-12107.md): Double Free in µD3TN (CVSS 7.5, µD3TN · pyd3tn)
- [CVE-2024-52275](https://cve.now/CVE-2024-52275.md): Denial of Service on Tenda AC6V2 Due To Stack Overflow (CVSS 8.3, Shenzhen Tenda Technology Tenda AC6V2)
- [CVE-2024-52274](https://cve.now/CVE-2024-52274.md): Denial of Service on Tenda AC6V2 Due To Stack Overflow (CVSS 8.3, Shenzhen Tenda Technology Tenda AC6V2)
- [CVE-2024-52273](https://cve.now/CVE-2024-52273.md): Denial of Service on Tenda AC6V2 Due To Stack Overflow (CVSS 8.3, Shenzhen Tenda Technology Tenda AC6V2)
- [CVE-2024-52272](https://cve.now/CVE-2024-52272.md): Denial of Service on Tenda AC6V2 Due To Stack Overflow (CVSS 8.3, Shenzhen Tenda Technology Tenda AC6V2)
- [CVE-2024-52277](https://cve.now/CVE-2024-52277.md): PDF Document Spoofing in DocuSeal (CVSS 8.2, DocuSeal)
- [CVE-2024-52276](https://cve.now/CVE-2024-52276.md): PDF Document Spoofing in DocuSign (CVSS 8.2, DocuSign)
- [CVE-2024-11814](https://cve.now/CVE-2024-11814.md): Additional Custom Order Status for WooCommerce \<= 1.6.0 - Reflected Cross-Site Scripting (CVSS 6.1, wpcodefactory Additional Custom Order Status for WooCommerce)
- [CVE-2024-11880](https://cve.now/CVE-2024-11880.md): B Testimonial – testimonial plugin for WP \<= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, bplugins B Testimonial – Customer Testimonials in Custom La…)
- [CVE-2024-5020](https://cve.now/CVE-2024-5020.md): Multiple Plugins \<= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library (CVSS 6.4, extendthemes Colibri Page Builder · smub Envira Gallery… +13)
- [CVE-2024-11952](https://cve.now/CVE-2024-11952.md): Classic Addons – WPBakery Page Builder \<= 3.0 - Authenticated (Contributor+) Limited Local PHP File Inclusion (CVSS 7.5, webcodingplace Classic Addons – WPBakery Page Builder)
- [CVE-2024-10787](https://cve.now/CVE-2024-10787.md): LA-Studio Element Kit for Elementor \<= 1.4.4 - Authenticated (Contributor+) Post Disclosure (CVSS 4.3, choijun LA-Studio Element Kit for Elementor)
- [CVE-2024-10567](https://cve.now/CVE-2024-10567.md): TI WooCommerce Wishlist \<= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Access (CVSS 7.5, templateinvaders TI WooCommerce Wishlist)
- [CVE-2024-11903](https://cve.now/CVE-2024-11903.md): WP eCards \<= 1.3.904 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, timsayshey WP eCards – Branded Digital Greeting Cards)
- [CVE-2023-6978](https://cve.now/CVE-2023-6978.md): WP Job Manager – Company Profiles \<= 1.7 - Reflected Cross-Site Scripting (CVSS 6.1, astoundify WP Job Manager – Company Profiles)
- [CVE-2024-11769](https://cve.now/CVE-2024-11769.md): Flower Delivery by Florist One \<= 3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, floristone Flower Delivery by Florist One)
- [CVE-2024-11293](https://cve.now/CVE-2024-11293.md): Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Social Sites Login \<= 1.7.9 - Authentication Bypass via WordPress.com OAuth provider (CVSS 8.1, Genetech Solutions Pie Register - Social Sites Login)
- [CVE-2024-10664](https://cve.now/CVE-2024-10664.md): Knowledge Base documentation & wiki plugin – BasePress Docs \<= 2.16.3.3 - Missing Authorization to Authenticated (Subscriber+) Database Update (CVSS 4.3, codesavory Knowledge Base documentation & wiki plugin – Bas…)
- [CVE-2024-11466](https://cve.now/CVE-2024-11466.md): Intro Tour Tutorial DeepPresentation \<= 6.5.2 - Reflected Cross-Site Scripting (CVSS 6.1, tomasgroulik Intro Tour Tutorial DeepPresentation)
- [CVE-2024-45717](https://cve.now/CVE-2024-45717.md): SolarWinds Platform Cross- Site Scripting Vulnerability (CVSS 7.0, SolarWinds Platform)
- [CVE-2023-52944](https://cve.now/CVE-2023-52944.md): Incorrect authorization vulnerability in ActionRule webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allo (CVSS 4.3, Synology Surveillance Station)
- [CVE-2023-52943](https://cve.now/CVE-2023-52943.md): Incorrect authorization vulnerability in Alert.Setting webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 a (CVSS 4.3, Synology Surveillance Station)
- [CVE-2024-11398](https://cve.now/CVE-2024-11398.md): Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in OTP reset functionality in Synology Router M (CVSS 8.1, Synology Router Manager)
- [CVE-2024-9404](https://cve.now/CVE-2024-9404.md): Denial-of-Service Vulnerability (CVSS 6.9, Moxa VPort 07-3 Series · Moxa EDS-608 Series +46)
- [CVE-2024-12099](https://cve.now/CVE-2024-12099.md): Dollie Hub – Build Your Own WordPress Cloud Platform \<= 6.2.0 - Authenticated (Contributor+) Post Disclosure (CVSS 4.3, getdollie Dollie AI – Connect)
- [CVE-2024-10885](https://cve.now/CVE-2024-10885.md): SearchIQ – The Search Solution \<= 4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, SearchIQ – The Search Solution)
- [CVE-2024-12123](https://cve.now/CVE-2024-12123.md): Unauthorized Modification of Ticket Requester (CVSS 5.3, Issuetrak)
- [CVE-2024-11807](https://cve.now/CVE-2024-11807.md): NPS computy \<= 2.8.0 - Reflected Cross-Site Scripting (CVSS 6.1, calliko NPS computy)
- [CVE-2024-11747](https://cve.now/CVE-2024-11747.md): Responsive Videos \<= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, wpenhanced Responsive Videos)
- [CVE-2024-10663](https://cve.now/CVE-2024-10663.md): Eleblog – Elementor Blog And Magazine Addons \<= 1.8 - Missing Authorization to Authenticated (Subscriber+) Deactivation Submission (CVSS 4.3, smarettheme Eleblog – Elementor Blog And Magazine Addons)
- [CVE-2024-11813](https://cve.now/CVE-2024-11813.md): Pulsating Chat Button \<= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, aminshah74 Pulsating Chat Button)
- [CVE-2024-11897](https://cve.now/CVE-2024-11897.md): Contact Form, Survey & Form Builder – MightyForms \<= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, Contact Form, Survey & Form Builder – MightyForms)
- [CVE-2024-11093](https://cve.now/CVE-2024-11093.md): SG Helper \<= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload (CVSS 5.5, burgthaleratsirconic SG Helper)
- [CVE-2024-10952](https://cve.now/CVE-2024-10952.md): Authors List \<= 2.0.4 - Unauthenticated Arbitrary Shortcode Execution via update\_authors\_list\_ajax (CVSS 7.3, wpkube Authors List)
- [CVE-2024-10587](https://cve.now/CVE-2024-10587.md): Funnelforms Free \<= 3.7.5.1 - Authenticated (Contributor+) PHP Object Injection (CVSS 8.8, Interactive Contact Form and Multi Step Form Builder with D…)
- [CVE-2024-10832](https://cve.now/CVE-2024-10832.md): Posti Shipping \<= 3.10.3 - Reflected Cross-Site Scripting (CVSS 6.1, postioy Posti Shipping)
- [CVE-2024-11985](https://cve.now/CVE-2024-11985.md): An improper input validation vulnerability leads to device crashes in certain ASUS router models. (CVSS 4.4, ASUS RT-AX55 · ASUS RT-AX56U +3)
- [CVE-2024-45204](https://cve.now/CVE-2024-45204.md): A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved (CVSS 7.7, Veeam Backup & Replication)
- [CVE-2024-42451](https://cve.now/CVE-2024-42451.md): A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext. (CVSS 7.7, Veeam Backup & Replication)
- [CVE-2024-42453](https://cve.now/CVE-2024-42453.md): A vulnerability Veeam Backup & Replication allows low-privileged users to control and modify configurations on connected virtual infrastruct (CVSS 7.4, Veeam Backup & Replication)
- [CVE-2024-45207](https://cve.now/CVE-2024-45207.md): DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. (CVSS 7.0, Veeam Agent for Windows)
- [CVE-2024-42457](https://cve.now/CVE-2024-42457.md): A vulnerability in Veeam Backup & Replication allows users with certain operator roles to expose saved credentials by leveraging a combinati (CVSS 7.7, Veeam Backup & Replication)
- [CVE-2024-42452](https://cve.now/CVE-2024-42452.md): A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials, (CVSS 8.8, Veeam Backup & Replication)
- [CVE-2024-45206](https://cve.now/CVE-2024-45206.md): A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests to arbitrary hosts of (CVSS 6.5, Veeam Service Provider Console)
- [CVE-2024-45205](https://cve.now/CVE-2024-45205.md): An Improper Certificate Validation on the UniFi iOS App managing a standalone UniFi Access Point (not using UniFi Network Application) could (CVSS 7.1, Ubiquiti UniFi iOS App)
- [CVE-2024-40717](https://cve.now/CVE-2024-40717.md): A vulnerability in Veeam Backup & Replication allows a low-privileged user with certain roles to perform remote code execution (RCE) by upda (CVSS 8.8, Veeam Backup & Replication)
- [CVE-2024-42456](https://cve.now/CVE-2024-42456.md): A vulnerability in Veeam Backup & Replication platform allows a low-privileged user with a specific role to exploit a method that updates cr (CVSS 8.8, Veeam Backup & Replication)
- [CVE-2024-42455](https://cve.now/CVE-2024-42455.md): A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting services and exploit insecure deserializat (CVSS 7.1, Veeam Backup & Replication)
- [CVE-2024-42449](https://cve.now/CVE-2024-42449.md): From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to remove arbi (CVSS 7.1, Veeam Service Provider Console)
- [CVE-2024-11479](https://cve.now/CVE-2024-11479.md): Authenticated HTML Injection in Issuetrak Ticket Comment Function (CVSS 5.1, Issuetrak)
- [CVE-2024-37574](https://cve.now/CVE-2024-37574.md): The GriceMobile com.grice.call application 4.5.2 for Android enables any installed application (with no permissions) to place phone calls wi (CVSS 8.2)
- [CVE-2024-37575](https://cve.now/CVE-2024-37575.md): The Mister org.mistergroup.shouldianswer application 1.4.264 for Android enables any installed application (with no permissions) to place ph (CVSS 7.5)
- [CVE-2024-39163](https://cve.now/CVE-2024-39163.md): binux pyspider up to v0.3.10 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Flask endpoints. (CVSS 8.8, pyspider)
- [CVE-2024-39219](https://cve.now/CVE-2024-39219.md): An issue in Aginode GigaSwitch V5 before version 7.06G allows authenticated attackers with Administrator privileges to upload an earlier fir (CVSS 8.8)
- [CVE-2024-48453](https://cve.now/CVE-2024-48453.md): An issue in INOVANCE AM401\_CPU1608TPTN allows a remote attacker to execute arbitrary code via the ExecuteUserProgramUpgrade function (CVSS 9.8)
- [CVE-2024-50947](https://cve.now/CVE-2024-50947.md): An issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service (DoS) via a crafted request. (CVSS 7.5)
- [CVE-2024-51210](https://cve.now/CVE-2024-51210.md): Firepad through 1.5.11 allows remote attackers, who have knowledge of a pad ID, to retrieve both the current text of a document and all cont (CVSS 5.3, firepad)
- [CVE-2024-52676](https://cve.now/CVE-2024-52676.md): Itsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross Site Scripting (XSS) via /bcc\_forum/members/home.php. (CVSS 5.4)
- [CVE-2024-53614](https://cve.now/CVE-2024-53614.md): A hardcoded decryption key in Thinkware Cloud APK v4.3.46 allows attackers to access sensitive data and execute arbitrary commands with elev (CVSS 6.5)
- [CVE-2024-54661](https://cve.now/CVE-2024-54661.md): readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file. (CVSS 9.8, dest-unreach socat)
- [CVE-2024-54674](https://cve.now/CVE-2024-54674.md): app/View/GalaxyClusters/cluster\_export\_misp\_galaxy.ctp in MISP through 2.5.2 has stored XSS when exporting custom clusters into the misp-gal (CVSS 6.1)
- [CVE-2024-54675](https://cve.now/CVE-2024-54675.md): app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow. (CVSS 6.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-12-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.