November 2024
4,154 CVEs published, +13% on October 2024 and +62% on November 2023. CISA added 22 to KEV.
2024 month by month
- Critical
- 3489% of the 4,035 with a CVSS score
- Added to CISA KEV
- 2215 of this month's CVEs are in KEV, listed a median 6 days after publication
- Vendors
- 1,8094,948 products
- Top weakness
- XSSCWE-79 · 824 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1Сообщество Свободного Программного ОбеспеченияLinux, Debian Gnu/linux, Needrestart375124new
- 2LinuxLinux Kernel, Linux27901new
- 3Ооо «русбитех-астра»Astra Linux Special Edition, Astra Linux Common Edition, Astra Linux Special Edition Для «эльбрус»263123new
- 4Ооо «ред Софт»Ред Ос, Ред База Данных246111new
- 5Ао "нппкт"Осон Основа Оnyx21883new
- 6CanonicalUbuntu, Ubuntu's Pulseaudio16522new
- 7Red HatRed Hat Enterprise Linux, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 814823new
- 8GoogleAndroid, Chrome, Google Chrome13652new
- 9MicrosoftWindows Server 2022, Windows Server 2022 (Server Core Installation), Windows Server 2022 23h210653new
- 10CiscoCisco Catalyst SD-WAN Manager, Cisco SD-WAN, Catalyst SD-WAN Manager1043nonenew
- 11IrfanviewIrfanview, Formats870nonenew
- 12PackagistMoodle/moodle, Librenms/librenms, Symfony/symfony742nonenew
- 13IntelIntel Arc Graphics, Video Processing Library, Intel Iris XE Graphics590nonenew
- 14AdobeSubstance3d - Painter, Substance 3d Painter, Adobe Substance 3d Painter570nonenew
- 15PyPICalibreweb, Transformers, Aiohttp515nonenew
- 16Fedora ProjectFedora500nonenew
- 17IvantiEndpoint Manager, Connect Secure, Policy Secure498nonenew
- 18NetgearR7000P, R7000P Firmware, R8500 Firmware490nonenew
- 19MavenOrg.keycloak:keycloak-quarkus-server, Org.keycloak:keycloak-services, Ca.uhn.hapi.fhir:org.hl7.fhir.dstu3485nonenew
- 20Ао «ивк»Альт Сп 10, Альт 8 Сп477nonenew
- 21code-projectsE-health Care System, Farmacia, Job Recruitment460nonenew
- 22Novell Inc.Opensuse Leap, Suse Linux Enterprise Server, Suse Linux Enterprise Desktop4411new
- 23GoGithub.com/goharbor/harbor, Github.com/moby/moby, Github.com/drakkan/sftpgo/v2425nonenew
- 24Pdf-xchangePdf-xchange Editor, Pdf-tools390nonenew
- 25UnknownLogo Slider, Rss Feed Widget, Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin392nonenew
Severity
How this month's CVEs score on CVSS; 119 have no score yet. Severity is not exploitation.
- Critical348
- High1,472
- Medium2,067
- Low148
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS824
- CWE-862Missing Authorization261
- CWE-89SQL Injection245
- CWE-787Out-of-bounds Write239
- CWE-125Out-of-bounds Read198
- CWE-78OS Command Injection134
- CWE-22Path Traversal115
- CWE-120Buffer Overflow107
- CWE-74Injection104
- CWE-352CSRF99
- CWE-416Use After Free97
- CWE-94Code Injection93
- CWE-434Unrestricted File Upload89
- CWE-20Improper Input Validation71
- CWE-476NULL Pointer Dereference68
- CWE-122Heap Buffer Overflow65
- CWE-276Incorrect Default Permissions64
- CWE-77Command Injection62
- CWE-284Improper Access Control60
- CWE-200Information Exposure57
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins99021% of sector-tagged CVEs
- Operating Systems73815% of sector-tagged CVEs
- Enterprise Software54011% of sector-tagged CVEs
- OSS Libraries3898% of sector-tagged CVEs
- Consumer Software3567% of sector-tagged CVEs
- Networking Infrastructure3327% of sector-tagged CVEs
- Hardware Firmware2435% of sector-tagged CVEs
- Mobile Apps1904% of sector-tagged CVEs
- Security Products1844% of sector-tagged CVEs
- ICS / OT / IoT1814% of sector-tagged CVEs
- Not yet classified349
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 862Missing Authorization | 89SQL Injection | 787Out-of-bounds Write | 125Out-of-bounds Read | 78OS Command Injection | 22Path Traversal | 120Buffer Overflow | 74Injection | 352CSRF |
|---|---|---|---|---|---|---|---|---|---|---|
| Сообщество Свободного Программного Обеспечения | 6 | 1 | 1 | 13 | 23 | 3 | 6 | 5 | 2 | |
| Linux | 10 | 18 | 3 | |||||||
| Ооо «русбитех-астра» | 6 | 1 | 10 | 17 | 2 | 1 | 4 | 2 | ||
| Ооо «ред Софт» | 14 | 3 | 4 | 7 | 15 | 2 | 4 | 5 | 2 | |
| Ао «нппкт» | 7 | 7 | 16 | 2 | ||||||
| Canonical Ltd. | 1 | 7 | 16 | 2 | 4 | |||||
| 6 | 11 | 37 | 26 | 1 | 1 | |||||
| Red Hat Inc. | 2 | 4 | 13 | 2 | 1 | 4 | 1 | |||
| Microsoft Corp | 5 | 7 | ||||||||
| Cisco | 21 | 2 | 2 | 4 | 7 | 2 | 1 | |||
| Cisco Systems Inc. | 21 | 2 | 2 | 4 | 7 | 2 | 1 | |||
| Microsoft | 2 | 7 |
CVEs published in November 2024
67 vulnerabilities from this month that were exploited in the wild (CISA KEV), covered in the news, explained on cve.tools or searched for. Known-exploited first, then by CVSS.
- CVE-2024-0012PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)KEV9.8
- CVE-2024-11120GeoVision EOL devices - OS Command InjectionKEV9.8
- CVE-2024-11680ProjectSend Unauthenticated Configuration ModificationKEV9.8
- CVE-2024-44308The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing mali...KEV8.8
- CVE-2024-49039Windows Task Scheduler Elevation of Privilege VulnerabilityKEV8.8
- CVE-2024-49035Partner.Microsoft.Com Elevation of Privilege VulnerabilityKEV8.7
- CVE-2024-8068Privilege escalation to NetworkService Account accessKEV8.0
- CVE-2024-8069Limited remote code execution with privilege of a NetworkService Account accessKEV8.0
- CVE-2024-11667A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W...KEV7.5
- CVE-2024-21287Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension). The supported version that is affected is 9.3.6. Easily ex...KEV7.5
- CVE-2024-43093In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. ...KEV7.3
- CVE-2024-9474PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management InterfaceKEV7.2
- CVE-2024-43451NTLM Hash Disclosure Spoofing VulnerabilityKEV6.5
- CVE-2024-11182Stored XSS vulnerability in MDaemon Email ServerKEV6.1
- CVE-2024-44309A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visio...KEV6.1
- CVE-2024-50302HID: core: zero-initialize the report bufferKEV5.5
- CVE-2024-51788WordPress The Novel Design Store Directory plugin <= 4.3.0 - Arbitrary File Upload vulnerability10.0
- CVE-2024-52375WordPress Datasets Manager by Arttia Creative plugin <= 1.5 - Arbitrary File Upload vulnerability10.0
- CVE-2024-11403Out of Bounds Memory Read/Write in libjxl9.8
- CVE-2024-51211SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file. The vulnerability is due to improper input validation of the $username_stn_id pa...9.8
- CVE-2024-52475WordPress Wawp plugin < 3.0.18 - Account Takeover vulnerability9.8
- CVE-2024-52714Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime.9.8
- CVE-2024-53504A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory.9.8
- CVE-2024-24409Privilege Escalation8.8
- CVE-2024-8805BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability8.8
- CVE-2024-51619WordPress Market 360 Viewer plugin <= 1.01 - SQL Injection vulnerability8.5
- CVE-2024-9710PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability8.3
- CVE-2024-10914D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection8.1
- CVE-2024-43703GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF8.1
- CVE-2024-51774qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors.8.1
- CVE-2024-47939Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted reque...7.7
- CVE-2024-49362Remote Code Execution on click of <a> Link in markdown preview7.7
- CVE-2024-11237TP-Link VN020 F3v(T) DHCP DISCOVER Packet Parser TP-Thumper stack-based overflow7.5
- CVE-2024-47873PhpSpreadsheet XmlScanner bypass leads to XXE7.5
- CVE-2024-48953An issue was discovered in Logpoint before 7.5.0. Endpoints for creating, editing, or deleting third-party authentication modules lacked proper authorization checks. This allowed unauthenticated us...7.5
- CVE-2024-49754LibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.php7.5
- CVE-2024-51428An issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS) via a crafted data channel packet.7.5
- CVE-2024-51996Symphony has an Authentication Bypass via RememberMe7.5
- CVE-2024-52871In Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting.7.5
- CVE-2024-50986An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file.7.3
- CVE-2024-34891Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request.6.8
- CVE-2024-51627WordPress Audio Comparison Lite plugin <= 3.4 - Stored Cross Site Scripting (XSS) vulnerability6.5
- CVE-2024-51751Arbitrary file read with File and UploadButton components in Gradio6.5
- CVE-2024-51826WordPress Bitcoin Payments plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2024-52317Apache Tomcat: Request/response mix-up with HTTP/26.5
- CVE-2024-10659ESAFENET CDG CDGAuthoriseTempletService.java delSystemEncryptPolicy sql injection6.3
- CVE-2024-51058Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5. This vulnerability enables a user to read arbitrary files from the server's file system through <img> src tag, potential...6.2
- CVE-2024-53425A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-...6.2
- CVE-2023-2142Nunjucks autoescape bypass leads to cross site scripting6.1
- CVE-2024-50513WordPress PostX plugin <= 4.1.15 - Cross Site Scripting (XSS) vulnerability5.9
- CVE-2024-50169vsock: Update rx_bytes on read_skb()5.5
- CVE-2024-53056drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()5.5
- CVE-2024-11210EyouCMS FilemanagerLogic.php editFile path traversal5.4
- CVE-2024-33231Cross Site Scripting vulnerability in Ferozo Email version 1.1 allows a local attacker to execute arbitrary code via a crafted payload to the PDF preview component.5.4
- CVE-2024-36624Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the construct_copy_div function in copy_and_paste.js.5.4
- CVE-2024-37483WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability5.4
- CVE-2024-51987HTTP Client uses incorrect token after refresh in Duende.AccessTokenManagement.OpenIdConnect5.4
- CVE-2024-53261Cross-Site Scripting attack (XSS) on dev mode 404 page in SvelteKit5.4
- CVE-2024-43159WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability5.3
- CVE-2024-52616Avahi: avahi wide-area dns predictable transaction ids5.3
- CVE-2024-52913In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because transaction re-requests are mishandled.5.3
- CVE-2024-27200Improper access control in some Intel(R) Granulate(TM) software before version 4.30.1 may allow a authenticated user to potentially enable escalation of privilege via local access.4.4
- CVE-2024-43298WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerability4.3
- CVE-2024-11587idcCMS classProvCity.php GetCityOptionJs cross site scripting3.5
- CVE-2024-42331Use after free in browser_push_error3.3
- CVE-2024-50342Internal address and port enumeration allowed by NoPrivateNetworkHttpClient in symfony/http-client3.1
- CVE-2024-52513Nextcloud Server's Attachments folder for Text app is accessible on "Files drop" and "Password protected" shares2.6