# CVEs published 2024-12-08

7 CVEs were published on December 8, 2024: 2 critical, 2 high. Days are UTC.

- [CVE-2024-12347](https://cve.now/CVE-2024-12347.md): Guangzhou Huayi Intelligent Technology Jeewms Druid Monitoring Interface index.html improper authorization (CVSS 6.9, Guangzhou Huayi Intelligent Technology Jeewms)
- [CVE-2024-12346](https://cve.now/CVE-2024-12346.md): Talentera byt\_cv\_manager cross site scripting (CVSS 5.3, Talentera)
- [CVE-2024-12344](https://cve.now/CVE-2024-12344.md): TP-Link VN020 F3v(T) FTP USER Command memory corruption (CVSS 5.3, TP-Link VN020 F3v)
- [CVE-2024-12343](https://cve.now/CVE-2024-12343.md): TP-Link VN020 F3v(T) SOAP Request WANIPConnection buffer overflow (CVSS 7.1, TP-Link VN020 F3v)
- [CVE-2024-12342](https://cve.now/CVE-2024-12342.md): TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service (CVSS 7.1, TP-Link VN020 F3v)
- [CVE-2024-12209](https://cve.now/CVE-2024-12209.md): WP Umbrella: Update Backup Restore & Monitoring \<= 2.17.0 - Unauthenticated Local File Inclusion (CVSS 9.8, wphealth WP Umbrella: Update Backup Restore & Monitoring)
- [CVE-2024-55560](https://cve.now/CVE-2024-55560.md): MailCleaner before 28d913e has default values of ssh\_host\_dsa\_key, ssh\_host\_rsa\_key, and ssh\_host\_ed25519\_key that persist after installatio (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-12-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.