# CVEs published 2024-12-05

110 CVEs were published on December 5, 2024: 19 critical, 45 high. Days are UTC.

- [CVE-2024-6219](https://cve.now/CVE-2024-6219.md): Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its rest (CVSS 3.8, Canonical LXD · github.com/canonical/lxd)
- [CVE-2024-6156](https://cve.now/CVE-2024-6156.md): Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust stor (CVSS 3.8, Canonical LXD · github.com/canonical/lxd)
- [CVE-2024-52798](https://cve.now/CVE-2024-52798.md): path-to-regexp Unpatched \`path-to-regexp\` ReDoS in 0.1.x (CVSS 7.7, pillarjs path-to-regexp · path-to-regexp)
- [CVE-2018-9391](https://cve.now/CVE-2018-9391.md): In update\_gps\_sv and output\_vzw\_debug of vendor/mediatek/proprietary/hardware/connectivity/gps/gps\_hal/src/gpshal\_wor ker.c, there i (CVSS 6.7, Google Android)
- [CVE-2018-9390](https://cve.now/CVE-2018-9390.md): In procfile\_write of gl\_proc.c, there is a possible out of bounds read of a function pointer due to an incorrect bounds check. (CVSS 6.7, Google Android)
- [CVE-2018-9388](https://cve.now/CVE-2018-9388.md): In store\_upgrade and store\_cmd of drivers/input/touchscreen/stm/ftm4\_pdc.c, there are out of bound writes due to missing bounds checks or in (CVSS 7.8, Google Android)
- [CVE-2018-9386](https://cve.now/CVE-2018-9386.md): In reboot\_block\_command of htc reboot\_block driver, there is a possible stack buffer overflow due to a missing bounds check. (CVSS 6.7, Google Android)
- [CVE-2024-54140](https://cve.now/CVE-2024-54140.md): sigstore-java has a vulnerability with bundle verification (CVSS 2.1, sigstore-java · dev.sigstore:sigstore-java)
- [CVE-2017-13308](https://cve.now/CVE-2017-13308.md): In tscpu\_write\_GPIO\_out and mtkts\_Abts\_write of mtk\_ts\_Abts.c, there is a possible buffer overflow in an sscanf due to improper input valida (CVSS 6.7, Google Android)
- [CVE-2024-10933](https://cve.now/CVE-2024-10933.md): OpenBSD readdir directory traversal (CVSS 4.1, OpenBSD)
- [CVE-2024-11148](https://cve.now/CVE-2024-11148.md): OpenBSD httpd(8) null dereference (CVSS 7.5, OpenBSD)
- [CVE-2024-12130](https://cve.now/CVE-2024-12130.md): Rockwell Automation Arena® Out of Bounds Read Vulnerability (CVSS 8.5, Rockwell Automation Arena®)
- [CVE-2024-11158](https://cve.now/CVE-2024-11158.md): Rockwell Automation Arena® Uninitialized Vulnerability (CVSS 8.5, Rockwell Automation Arena®)
- [CVE-2024-11156](https://cve.now/CVE-2024-11156.md): Rockwell Automation Arena® Out of Bounds Write Vulnerability (CVSS 8.5, Rockwell Automation Arena®)
- [CVE-2024-11155](https://cve.now/CVE-2024-11155.md): Rockwell Automation Arena® Use After Free Vulnerability (CVSS 8.5, Rockwell Automation Arena®)
- [CVE-2024-12235](https://cve.now/CVE-2024-12235.md): Shenzhen Dashi Tongzhou Information Technology AgileBPM AuthorizationTokenCheckFilter.java doFilter access control (CVSS 5.3, Shenzhen Dashi Tongzhou Information Technology AgileBPM)
- [CVE-2024-53846](https://cve.now/CVE-2024-53846.md): ssl fails to validate incorrect extened key usage (CVSS 5.5, erlang otp)
- [CVE-2024-12234](https://cve.now/CVE-2024-12234.md): 1000 Projects Beauty Parlour Management System edit-customer-detailed.php sql injection (CVSS 6.9, 1000 Projects Beauty Parlour Management System)
- [CVE-2024-54128](https://cve.now/CVE-2024-54128.md): Directus has an HTML Injection in Comment (CVSS 5.7, directus · @directus/app)
- [CVE-2024-12233](https://cve.now/CVE-2024-12233.md): code-projects Online Notice Board Profile Picture registration.php unrestricted upload (CVSS 6.9, code-projects Online Notice Board)
- [CVE-2024-12232](https://cve.now/CVE-2024-12232.md): code-projects Simple CRUD Functionality index.php cross site scripting (CVSS 5.3, code-projects Simple CRUD Functionality)
- [CVE-2024-12231](https://cve.now/CVE-2024-12231.md): CodeZips Project Management System index.php sql injection (CVSS 6.9, CodeZips Project Management System)
- [CVE-2024-10716](https://cve.now/CVE-2024-10716.md): Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search. (CVSS 5.9, Pegasystems Pega Infinity)
- [CVE-2024-53856](https://cve.now/CVE-2024-53856.md): rPGP Panics on Malformed Untrusted Input (CVSS 7.5, rpgp · pgp)
- [CVE-2024-53857](https://cve.now/CVE-2024-53857.md): rPGP Potential Resource Exhaustion when handling Untrusted Messages (CVSS 7.5, rpgp · pgp)
- [CVE-2024-12247](https://cve.now/CVE-2024-12247.md): Improper propagation of permission scheme updates across cluster nodes (CVSS 4.6, Mattermost)
- [CVE-2024-54001](https://cve.now/CVE-2024-54001.md): Kanboard allows a persistent HTML injection site scripting in settings page date format (CVSS 5.5, kanboard)
- [CVE-2024-54129](https://cve.now/CVE-2024-54129.md): Improper Initialization of \`imc\` Scheme Leading to \`SIGABRT\` in ION-DTN BPv7 (CVSS 9.2, nasa-jpl ION-DTN)
- [CVE-2024-54130](https://cve.now/CVE-2024-54130.md): Segmentation Fault in \`forwardBundle\` Function of ION-DTN BPv7 When Destination EID is \`dtn:none\` (public) (CVSS 9.2, nasa-jpl ION-DTN)
- [CVE-2024-11942](https://cve.now/CVE-2024-11942.md): Drupal core - Moderately critical - Improper error handling - SA-CORE-2024-002 (CVSS 5.9, Drupal Core · drupal/core)
- [CVE-2024-11941](https://cve.now/CVE-2024-11941.md): Drupal core - Moderately critical - Denial of Service - SA-CORE-2024-001 (CVSS 7.5, Drupal Core · drupal/core)
- [CVE-2024-12230](https://cve.now/CVE-2024-12230.md): PHPGurukul Complaint Management System subcategory.php sql injection (CVSS 6.9, PHPGurukul Complaint Management System)
- [CVE-2024-12229](https://cve.now/CVE-2024-12229.md): PHPGurukul Complaint Management System complaint-search.php sql injection (CVSS 6.9, PHPGurukul Complaint Management System)
- [CVE-2024-53703](https://cve.now/CVE-2024-53703.md): A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod\_httprp library loaded by the Apache web serv (CVSS 8.1, SonicWall SMA100)
- [CVE-2024-52271](https://cve.now/CVE-2024-52271.md): PDF Document Spoofing in Documenso (CVSS 8.2, Documenso)
- [CVE-2024-53702](https://cve.now/CVE-2024-53702.md): Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, (CVSS 5.3, SonicWall SMA100)
- [CVE-2024-45319](https://cve.now/CVE-2024-45319.md): A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can cir (CVSS 6.3, SonicWall SMA100)
- [CVE-2024-45318](https://cve.now/CVE-2024-45318.md): A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and pot (CVSS 8.1, SonicWall SMA100)
- [CVE-2024-40763](https://cve.now/CVE-2024-40763.md): Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. (CVSS 7.5, SonicWall SMA100)
- [CVE-2024-12228](https://cve.now/CVE-2024-12228.md): PHPGurukul Complaint Management System user-search.php sql injection (CVSS 6.9, PHPGurukul Complaint Management System)
- [CVE-2024-12227](https://cve.now/CVE-2024-12227.md): MSI Dragon Center IOCTL NTIOLib\_X64.sys MmUnMapIoSpace null pointer dereference (CVSS 6.8, MSI Dragon Center)
- [CVE-2024-51555](https://cve.now/CVE-2024-51555.md): Force Change of Default Credentials (CVSS 9.3, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-51554](https://cve.now/CVE-2024-51554.md): off-by-one-error (CVSS 8.8, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-51551](https://cve.now/CVE-2024-51551.md): Default Credentials (CVSS 10.0, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-51550](https://cve.now/CVE-2024-51550.md): Data Validation / Sanitization (CVSS 9.3, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-51549](https://cve.now/CVE-2024-51549.md): Absolute Path Traversal (CVSS 10.0, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-51548](https://cve.now/CVE-2024-51548.md): Dangerous File Upload (CVSS 8.7, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-51546](https://cve.now/CVE-2024-51546.md): Credentails Disclosure (CVSS 8.7, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-51545](https://cve.now/CVE-2024-51545.md): Username Enumeration (CVSS 9.3, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-51544](https://cve.now/CVE-2024-51544.md): Service Control (CVSS 8.2, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-51543](https://cve.now/CVE-2024-51543.md): Information Disclosure (CVSS 8.8, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-51542](https://cve.now/CVE-2024-51542.md): Configuration Download (CVSS 8.2, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-51541](https://cve.now/CVE-2024-51541.md): Local File Inclusion (CVSS 8.8, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-48847](https://cve.now/CVE-2024-48847.md): MD5 bypass operation (CVSS 8.8, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-48846](https://cve.now/CVE-2024-48846.md): Cross Side Request Forgery, CSRF (CVSS 7.1, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-48845](https://cve.now/CVE-2024-48845.md): Weak Password Rules/Strength (CVSS 9.3, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-48844](https://cve.now/CVE-2024-48844.md): Denial of Service, DoS (CVSS 7.7, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-48843](https://cve.now/CVE-2024-48843.md): Denial of Service, DoS (CVSS 7.7, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-48840](https://cve.now/CVE-2024-48840.md): Unauthorized Access (CVSS 9.3, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-48839](https://cve.now/CVE-2024-48839.md): Remote Code Execution, RCE (CVSS 10.0, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-11317](https://cve.now/CVE-2024-11317.md): PHP Session Fixation (CVSS 10.0, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-12094](https://cve.now/CVE-2024-12094.md): Information Disclosure Vulnerability in Tinxy (CVSS 5.4, Mogify Infotech Tinxy Android app · Mogify Infotech Tinxy i…)
- [CVE-2024-11316](https://cve.now/CVE-2024-11316.md): Filesize Check (CVSS 7.5, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-6784](https://cve.now/CVE-2024-6784.md): SSRF Server Side Request Forgery (CVSS 8.7, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-6516](https://cve.now/CVE-2024-6516.md): Cross Site Scripting XSS (CVSS 9.3, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-6515](https://cve.now/CVE-2024-6515.md): unauthorized file access (CVSS 8.7, ABB ASPECT-Enterprise · ABB NEXUS Series +1)
- [CVE-2024-54127](https://cve.now/CVE-2024-54127.md): Exposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C50 (CVSS 4.3, TP-Link Archer C50 Wireless Router)
- [CVE-2024-54126](https://cve.now/CVE-2024-54126.md): Insufficient Integrity Verification Vulnerability in TP-Link Archer C50 (CVSS 8.5, TP-Link Archer C50 Wireless Router)
- [CVE-2024-52270](https://cve.now/CVE-2024-52270.md): PDF Document Spoofing in DropBox Sign(HelloSign) (CVSS 8.2, DropBox(HelloSign) DropBox Sign)
- [CVE-2022-41137](https://cve.now/CVE-2022-41137.md): Apache Hive: Deserialization of untrusted data when fetching partitions from the Metastore (CVSS 8.3, Apache Software Foundation Apache Hive · org.apache.hive:hi…)
- [CVE-2024-52564](https://cve.now/CVE-2024-52564.md): Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 an (CVSS 7.5, I-O DATA DEVICE UD-LT1 · I-O DATA DEVICE UD-LT1/EX)
- [CVE-2024-47133](https://cve.now/CVE-2024-47133.md): UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier allow a remote authenticated attacker with an administrat (CVSS 7.2, I-O DATA DEVICE UD-LT1 · I-O DATA DEVICE UD-LT1/EX)
- [CVE-2024-45841](https://cve.now/CVE-2024-45841.md): Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 (CVSS 6.5, I-O DATA DEVICE UD-LT1 · I-O DATA DEVICE UD-LT1/EX)
- [CVE-2024-11324](https://cve.now/CVE-2024-11324.md): Accounting for WooCommerce \<= 1.6.6 - Reflected Cross-Site Scripting (CVSS 6.1, bastho Accounting for WooCommerce)
- [CVE-2024-10777](https://cve.now/CVE-2024-10777.md): AnyWhere Elementor \<= 1.2.11 - Authenticated (Contributor+) Post Disclosure (CVSS 4.3, wpvibes Dynific Addons for Elementor)
- [CVE-2024-10056](https://cve.now/CVE-2024-10056.md): Contact Form Builder \<= 4.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via livesite-pay Shortcode (CVSS 6.4, eyale-vc Contact Form Builder by vcita)
- [CVE-2024-11779](https://cve.now/CVE-2024-11779.md): WIP WooCarousel Lite \<= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, alexvtn WIP WooCarousel Lite)
- [CVE-2024-10848](https://cve.now/CVE-2024-10848.md): NewsMunch \<= 1.0.35 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, desertthemes NewsMunch)
- [CVE-2024-11341](https://cve.now/CVE-2024-11341.md): Simple Redirection \<= 1.5 - Cross-Site Request Forgery to Arbitrary Site Redirect (CVSS 4.3, agencenous Simple Redirection)
- [CVE-2024-11420](https://cve.now/CVE-2024-11420.md): Blocksy \<= 2.0.77 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, creativethemeshq Blocksy)
- [CVE-2024-10937](https://cve.now/CVE-2024-10937.md): Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins \<= 2.0.58 - Sensitive Information Exposure (CVSS 5.3, Related Posts By PickPlugins)
- [CVE-2024-11429](https://cve.now/CVE-2024-11429.md): Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials \<= 3.3.3 - Authenticated (Contributor+) Local File Inclusion (CVSS 8.8, premio Stars Testimonials — Responsive Reviews & Star Ratin…)
- [CVE-2024-42195](https://cve.now/CVE-2024-42195.md): HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection (CVSS 3.1, HCL Software DevOps Deploy / Launch)
- [CVE-2024-10178](https://cve.now/CVE-2024-10178.md): Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor \<= 3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget (CVSS 6.4, Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Ed…)
- [CVE-2024-10881](https://cve.now/CVE-2024-10881.md): LUNA RADIO PLAYER \<= 6.24.11.07 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, sodah LUNA RADIO PLAYER)
- [CVE-2024-54014](https://cve.now/CVE-2024-54014.md): Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2. (CVSS 3.6, SKYLARK HOLDINGS CO. 'Skylark' App for Android · SKYLARK HO…)
- [CVE-2024-12188](https://cve.now/CVE-2024-12188.md): 1000 Projects Library Management System stu.php sql injection (CVSS 6.9, 1000 Projects Library Management System)
- [CVE-2024-12187](https://cve.now/CVE-2024-12187.md): 1000 Projects Library Management System showbook.php sql injection (CVSS 6.9, 1000 Projects Library Management System)
- [CVE-2023-48010](https://cve.now/CVE-2023-48010.md): STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface. (CVSS 9.8)
- [CVE-2023-50913](https://cve.now/CVE-2023-50913.md): Oxide control plane software before 5 allows SSRF. (CVSS 9.1)
- [CVE-2024-30961](https://cve.now/CVE-2024-30961.md): Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allow (CVSS 7.8)
- [CVE-2024-30962](https://cve.now/CVE-2024-30962.md): Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a l (CVSS 7.8)
- [CVE-2024-30963](https://cve.now/CVE-2024-30963.md): Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a l (CVSS 7.8)
- [CVE-2024-30964](https://cve.now/CVE-2024-30964.md): Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allow (CVSS 7.8)
- [CVE-2024-37860](https://cve.now/CVE-2024-37860.md): Buffer Overflow vulnerability in Open Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker (CVSS 7.3)
- [CVE-2024-37861](https://cve.now/CVE-2024-37861.md): Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2\_amcl proc (CVSS 9.8)
- [CVE-2024-37862](https://cve.now/CVE-2024-37862.md): Buffer Overflow vulnerability in Open Robotic Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local a (CVSS 7.3)
- [CVE-2024-37863](https://cve.now/CVE-2024-37863.md): Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2\_amcl proc (CVSS 9.8)
- [CVE-2024-38910](https://cve.now/CVE-2024-38910.md): Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a use-after-free in the nav2\_amcl process. (CVSS 7.5)
- [CVE-2024-38920](https://cve.now/CVE-2024-38920.md): Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2\_amcl proce (CVSS 9.1)
- [CVE-2024-41579](https://cve.now/CVE-2024-41579.md): DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vuln (CVSS 9.8)
- [CVE-2024-53442](https://cve.now/CVE-2024-53442.md): whapa v1.59 is vulnerable to Command Injection via a crafted filename to the HTML reports component. (CVSS 9.8)
- [CVE-2024-53457](https://cve.now/CVE-2024-53457.md): A stored cross-site scripting (XSS) vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows attackers to execute (CVSS 5.4, librenms/librenms)
- [CVE-2024-53470](https://cve.now/CVE-2024-53470.md): Multiple stored cross-site scripting (XSS) vulnerabilities in the component /configuracao/gateway\_pagamento.php of WeGIA v3.2.0 allows attac (CVSS 6.1)
- [CVE-2024-53471](https://cve.now/CVE-2024-53471.md): Multiple stored cross-site scripting (XSS) vulnerabilities in the component /configuracao/meio\_pagamento.php of WeGIA v3.2.0 allows attacker (CVSS 6.1)
- [CVE-2024-53472](https://cve.now/CVE-2024-53472.md): WeGIA v3.2.0 was discovered to contain a Cross-Site Request Forgery (CSRF). (CVSS 8.8)
- [CVE-2024-53490](https://cve.now/CVE-2024-53490.md): Favorites-web 1.3.0 favorites-web has a directory traversal vulnerability in SecurityFilter.java. (CVSS 7.5)
- [CVE-2024-53523](https://cve.now/CVE-2024-53523.md): JSFinder commit d70ab9bc5221e016c08cffaf0d9ac79646c90645 is vulnerable to Directory Traversal in the find\_by\_file function. (CVSS 7.5)
- [CVE-2024-53589](https://cve.now/CVE-2024-53589.md): GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD (Binary File Descriptor) library's handling of tekhex format files. (CVSS 8.4)
- [CVE-2024-54679](https://cve.now/CVE-2024-54679.md): CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions. (CVSS 4.3)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-12-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.