November 2024
Published in November 2024
- unknownJenkins Security Advisory 2024-11-27jenkins
- known exploitedCVE-2014-2120
- criticalGitLab Patch Release: 17.6.1, 17.5.3, 17.4.5gitlab
- known exploitedpublic exploitCVE-2019-16278
- criticalGitLab Patch Release: 17.6.1, 17.5.3, 17.4.5gitlab
- known exploitedpublic exploitCVE-2021-26086
- criticalexploitedCVE-2024-21287: Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2021-41277
- criticalDrupal core - Moderately critical - Gadget chain - SA-CORE-2024-008drupal
- known exploitedCVE-2023-28461
- criticalDrupal core - Moderately critical - Gadget chain - SA-CORE-2024-007drupal
- known exploitedpublic exploitCVE-2024-0012
- criticalDrupal core - Less critical - Gadget chain - SA-CORE-2024-006drupal
- known exploitedpublic exploitCVE-2024-1212
- criticalexploitedCVE-2024-38813: VMware vCenter Server Privilege Escalation Vulnerabilitycisa-kev
- known exploitedCVE-2024-21287
- criticalexploitedCVE-2024-38812: VMware vCenter Server Heap-Based Buffer Overflow Vulnerabilitycisa-kev
- known exploitedCVE-2024-38812
- criticalexploitedCVE-2024-1212: Progress Kemp LoadMaster OS Command Injection Vulnerabilitycisa-kev
- known exploitedCVE-2024-38813
- criticalexploitedCVE-2024-9474: Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerabilitycisa-kev
- known exploitedCVE-2024-43093
- unknownexploited[Update] Multiple vulnerabilities on the administration interface of Palo Alto Networks devices (November 15, …cert-fr-alerte
- known exploitedpublic exploitCVE-2024-43451
- criticalexploitedCVE-2024-9465: Palo Alto Networks Expedition SQL Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-44308
- criticalexploitedCVE-2024-9463: Palo Alto Networks Expedition OS Command Injection Vulnerabilitycisa-kev
- known exploitedCVE-2024-44309
- unknownJenkins Security Advisory 2024-11-13jenkins
- known exploitedpublic exploitCVE-2024-49039
- criticalGitLab Patch Release: 17.5.2, 17.4.4, 17.3.7gitlab
- known exploitedpublic exploitCVE-2024-51567
- criticalGitLab Patch Release: 17.5.2, 17.4.4, 17.3.7gitlab
- known exploitedpublic exploitCVE-2024-5910
- criticalexploitedCVE-2024-49039: Microsoft Windows Task Scheduler Privilege Escalation Vulnerabilitycisa-kev
- known exploitedCVE-2024-8956
- criticalexploitedCVE-2024-43451: Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerabilitycisa-kev
- known exploitedCVE-2024-8957
- criticalexploitedCVE-2014-2120: Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-9463
- criticalexploitedCVE-2024-5910: Palo Alto Networks Expedition Missing Authentication Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-9465
- criticalexploitedCVE-2024-8957: PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-9474
- criticalexploitedCVE-2024-8956: PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerabilitycisa-kev