# CVEs published 2024-11-15

222 CVEs were published on November 15, 2024: 19 critical, 46 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2024-11263](https://cve.now/CVE-2024-11263.md): arch: riscv: userspace: potential security risk when CONFIG\_RISCV\_GP=y (CVSS 9.4, zephyrproject-rtos Zephyr)
- [CVE-2024-11262](https://cve.now/CVE-2024-11262.md): SourceCodester Student Record Management System View All Student Marks main stack-based overflow (CVSS 4.8, SourceCodester Student Record Management System)
- [CVE-2017-13313](https://cve.now/CVE-2017-13313.md): In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resource exhaustion due t (CVSS 7.5, Google Android)
- [CVE-2024-11261](https://cve.now/CVE-2024-11261.md): SourceCodester Student Record Management System Number of Students Menu StudentRecordManagementSystem.cpp memory corruption (CVSS 4.8, SourceCodester Student Record Management System)
- [CVE-2017-13314](https://cve.now/CVE-2017-13314.md): In setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings bypass due to a missing permission check. (CVSS 7.8, Google Android)
- [CVE-2017-13312](https://cve.now/CVE-2017-13312.md): In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation. (CVSS 7.8, Google Android)
- [CVE-2017-13311](https://cve.now/CVE-2017-13311.md): In the read() function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions bypass. (CVSS 7.8, Google Android)
- [CVE-2024-51765](https://cve.now/CVE-2024-51765.md): A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). (CVSS 5.5, Hewlett Packard Enterprise (HPE) Cray System Management Sof…)
- [CVE-2017-13310](https://cve.now/CVE-2017-13310.md): In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypass. (CVSS 7.8, Google Android)
- [CVE-2024-51764](https://cve.now/CVE-2024-51764.md): A security vulnerability has been identified in HPE Data Management Framework (DMF) Suite (CXFS). (CVSS 5.5, Hewlett Packard Enterprise (HPE) SGI CXFS)
- [CVE-2024-9500](https://cve.now/CVE-2024-9500.md): Autodesk ADP Desktop SDK Privilege Escalation Vulnerability (CVSS 7.8, Autodesk Installer)
- [CVE-2024-38370](https://cve.now/CVE-2024-38370.md): GLPI allows API document download without rights (CVSS 5.3, glpi-project glpi)
- [CVE-2017-13309](https://cve.now/CVE-2017-13309.md): In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. (CVSS 6.2, Google Android)
- [CVE-2024-11217](https://cve.now/CVE-2024-11217.md): Oauth-server-container: oauth-server-container logs client secret in debug level (CVSS 4.9, oauth-server-container · Red Hat OpenShift Container Platfo…)
- [CVE-2024-49060](https://cve.now/CVE-2024-49060.md): Azure Stack HCI Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Azure Stack HCI OS)
- [CVE-2024-45611](https://cve.now/CVE-2024-45611.md): GLPI has a stored XSS at src/RSSFeed.php (CVSS 5.7, glpi-project glpi)
- [CVE-2024-45610](https://cve.now/CVE-2024-45610.md): GLPI has a reflected XSS in ajax/cable.php (CVSS 6.5, glpi-project glpi)
- [CVE-2024-45609](https://cve.now/CVE-2024-45609.md): GLPI has a Reflected XSS in /front/stat.graph.php (CVSS 6.5, glpi-project glpi)
- [CVE-2024-11259](https://cve.now/CVE-2024-11259.md): code-projects Farmacia fornecedores.php cross site scripting (CVSS 5.3, code-projects Farmacia)
- [CVE-2024-11258](https://cve.now/CVE-2024-11258.md): 1000 Projects Beauty Parlour Management System index.php sql injection (CVSS 6.9, 1000 Projects Beauty Parlour Management System)
- [CVE-2024-3334](https://cve.now/CVE-2024-3334.md): USB Security Feature Bypass in Digital Guardian Windows Agent Prior to version 8.2.0 (CVSS 4.3, Fortra Digital Guardian Agent)
- [CVE-2024-49536](https://cve.now/CVE-2024-49536.md): Audition | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Audition)
- [CVE-2024-11257](https://cve.now/CVE-2024-11257.md): 1000 Projects Beauty Parlour Management System forgot-password.php sql injection (CVSS 6.9, 1000 Projects Beauty Parlour Management System)
- [CVE-2024-11256](https://cve.now/CVE-2024-11256.md): 1000 Projects Portfolio Management System MCA login.php sql injection (CVSS 6.9, 1000 Projects Portfolio Management System MCA)
- [CVE-2024-10934](https://cve.now/CVE-2024-10934.md): OpenBSD NFS double-free vulnerability (CVSS 9.8, OpenBSD)
- [CVE-2024-45608](https://cve.now/CVE-2024-45608.md): GLPI has an Authenticated SQL Injection (CVSS 6.5, glpi-project glpi)
- [CVE-2024-43418](https://cve.now/CVE-2024-43418.md): GLPI has multiple reflected XSS (CVSS 6.5, glpi-project glpi)
- [CVE-2024-43417](https://cve.now/CVE-2024-43417.md): Reflected XSS in Software form (CVSS 6.5, glpi-project glpi)
- [CVE-2024-41679](https://cve.now/CVE-2024-41679.md): Authenticated SQL injection in ticket form (CVSS 6.5, glpi-project glpi)
- [CVE-2024-41678](https://cve.now/CVE-2024-41678.md): GLPI has multiple reflected XSS (CVSS 6.5, glpi-project glpi)
- [CVE-2024-40638](https://cve.now/CVE-2024-40638.md): GLPI allows account takeover via SQL Injection in AJAX scripts (CVSS 8.1, glpi-project glpi)
- [CVE-2024-11251](https://cve.now/CVE-2024-11251.md): erzhongxmu Jeewms AuthInterceptor cgReportController.do sql injection (CVSS 5.3, erzhongxmu Jeewms)
- [CVE-2024-47759](https://cve.now/CVE-2024-47759.md): GLPI has a stored XSS via document upload (CVSS 6.7, glpi-project glpi)
- [CVE-2024-52509](https://cve.now/CVE-2024-52509.md): Nextcloud Mail app does not respect download permissions in shares (CVSS 3.5, nextcloud security-advisories)
- [CVE-2024-52508](https://cve.now/CVE-2024-52508.md): Nextcloud Mail auto configurator can be tricked into sending account information to wrong servers (CVSS 8.2, nextcloud security-advisories)
- [CVE-2024-11250](https://cve.now/CVE-2024-11250.md): code-projects Inventory Management editProduct.php sql injection (CVSS 5.3, code-projects Inventory Management)
- [CVE-2024-52510](https://cve.now/CVE-2024-52510.md): Nextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is empty (CVSS 4.2, nextcloud security-advisories)
- [CVE-2024-52507](https://cve.now/CVE-2024-52507.md): Share information of the Nextcloud Tables app is not limited to affected users (CVSS 3.5, nextcloud security-advisories)
- [CVE-2024-52511](https://cve.now/CVE-2024-52511.md): Nextcloud Tables has an Authorization Bypass Through User-Controlled Key in Tables (CVSS 6.3, nextcloud security-advisories)
- [CVE-2024-52512](https://cve.now/CVE-2024-52512.md): Nextcloud User OIDC has an open redirection when logging in with User OIDC (CVSS 3.3, nextcloud security-advisories)
- [CVE-2024-52522](https://cve.now/CVE-2024-52522.md): Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata (CVSS 5.4, rclone · github.com/rclone/rclone)
- [CVE-2024-52513](https://cve.now/CVE-2024-52513.md): Nextcloud Server's Attachments folder for Text app is accessible on "Files drop" and "Password protected" shares (CVSS 2.6, nextcloud security-advisories)
- [CVE-2024-52514](https://cve.now/CVE-2024-52514.md): Nextcloud Server allows users to copy folder that contain files that are blocked by the files access control (CVSS 4.1, nextcloud security-advisories)
- [CVE-2021-1466](https://cve.now/CVE-2021-1466.md): Cisco SD-WAN vDaemon Buffer Overflow Vulnerability (CVSS 5.4, Cisco Catalyst SD-WAN Manager)
- [CVE-2024-52515](https://cve.now/CVE-2024-52515.md): Nextcloud Server has incomplete sanitization of SVG files allows to embed other images into previews (CVSS 5.7, nextcloud security-advisories)
- [CVE-2024-11248](https://cve.now/CVE-2024-11248.md): Tenda AC10 SetSysAutoRebbotCfg formSetRebootTimer stack-based overflow (CVSS 8.7, Tenda AC10)
- [CVE-2024-52516](https://cve.now/CVE-2024-52516.md): Nextcloud Server's shares are not removed when user is limited to share with in their groups and being removed from one of them (CVSS 3.0, nextcloud security-advisories)
- [CVE-2024-52517](https://cve.now/CVE-2024-52517.md): Nextcloud Server's global credentials of external storages are sent back to the frontend (CVSS 4.6, nextcloud security-advisories)
- [CVE-2024-52518](https://cve.now/CVE-2024-52518.md): Nextcloud Server is missing password confirmation when changing external storage options (CVSS 4.4, nextcloud security-advisories)
- [CVE-2024-52519](https://cve.now/CVE-2024-52519.md): Nextcloud Server's OAuth2 client secrets were stored in a recoverable way (CVSS 2.7, nextcloud security-advisories)
- [CVE-2024-52520](https://cve.now/CVE-2024-52520.md): Nextcloud Server's link reference provider can be tricked into downloading bigger files than intended (CVSS 5.7, nextcloud security-advisories)
- [CVE-2021-1470](https://cve.now/CVE-2021-1470.md): Cisco SD-WAN SQL Injection Vulnerability (CVSS 4.9, Cisco Catalyst SD-WAN Manager)
- [CVE-2024-52521](https://cve.now/CVE-2024-52521.md): Nextcloud Server has a potential hash collision for background jobs could skip queuing them (CVSS 2.6, nextcloud security-advisories)
- [CVE-2021-1481](https://cve.now/CVE-2021-1481.md): Cisco SD-WAN vManage Cypher Query Language Injection Vulnerability (CVSS 4.3, Cisco Catalyst SD-WAN Manager)
- [CVE-2021-1482](https://cve.now/CVE-2021-1482.md): Cisco SD-WAN vManage Authorization Bypass Vulnerability (CVSS 6.4, Cisco Catalyst SD-WAN Manager)
- [CVE-2024-52523](https://cve.now/CVE-2024-52523.md): Nextcloud Server Custom defined credentials of external storages are sent back to the frontend (CVSS 4.6, nextcloud security-advisories)
- [CVE-2021-1464](https://cve.now/CVE-2021-1464.md): Cisco SD-WAN vManage Authorization Bypass Vulnerability (CVSS 5.0, Cisco Catalyst SD-WAN Manager)
- [CVE-2024-11247](https://cve.now/CVE-2024-11247.md): SourceCodester Online Eyewear Shop Inventory Page Master.php cross site scripting (CVSS 5.3, SourceCodester Online Eyewear Shop)
- [CVE-2024-52525](https://cve.now/CVE-2024-52525.md): Nextcloud Server User password is available in memory of the PHP process (CVSS 1.8, nextcloud security-advisories)
- [CVE-2021-1483](https://cve.now/CVE-2021-1483.md): Cisco SD-WAN vManage Software XML External Entity Vulnerability (CVSS 6.4, Cisco Catalyst SD-WAN Manager)
- [CVE-2021-1484](https://cve.now/CVE-2021-1484.md): Cisco SD-WAN vManage Command Injection Vulnerability (CVSS 6.5, Cisco Catalyst SD-WAN Manager)
- [CVE-2021-1491](https://cve.now/CVE-2021-1491.md): Cisco SD-WAN vManage Software Information Disclosure Vulnerability (CVSS 6.5, Cisco Catalyst SD-WAN Manager)
- [CVE-2024-52528](https://cve.now/CVE-2024-52528.md): Auth Token can be passed dummy or wrong the middleware response is 200 OK (CVSS 9.3, BudgetControl Gateway)
- [CVE-2021-1494](https://cve.now/CVE-2021-1494.md): Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker t (CVSS 5.8, Cisco Firepower Threat Defense Software · Cisco UTD SNORT I…)
- [CVE-2022-20633](https://cve.now/CVE-2022-20633.md): Cisco Enterprise Chat and Email Username Enumeration Vulnerability (CVSS 5.3, Cisco Enterprise Chat and Email)
- [CVE-2022-20632](https://cve.now/CVE-2022-20632.md): Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Enterprise Chat and Email)
- [CVE-2021-34753](https://cve.now/CVE-2021-34753.md): Cisco Firepower Threat Defense Ethernet Industrial Protocol Policy Bypass Vulnerabilities (CVSS 5.8, Cisco Firepower Threat Defense Software)
- [CVE-2021-34752](https://cve.now/CVE-2021-34752.md): Cisco Firepower Threat Defense Command Injection Vulnerabilities (CVSS 6.7, Cisco Firepower Threat Defense Software)
- [CVE-2021-34751](https://cve.now/CVE-2021-34751.md): Cisco Firepower Management Center Software Configuration Information Disclosure Vulnerability (CVSS 4.3, Cisco Firepower Management Center)
- [CVE-2021-34750](https://cve.now/CVE-2021-34750.md): Cisco Firepower Management Center Software Configuration Information Disclosure Vulnerability (CVSS 4.3, Cisco Firepower Management Center)
- [CVE-2024-39726](https://cve.now/CVE-2024-39726.md): IBM Engineering Insights XML external entity injection (CVSS 8.2, IBM Engineering Insights)
- [CVE-2022-20626](https://cve.now/CVE-2022-20626.md): Cisco Prime Access Registrar Appliance Cross-Site Scripting Vulnerability (CVSS 5.5, Cisco Prime Access Registrar)
- [CVE-2022-20631](https://cve.now/CVE-2022-20631.md): Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Enterprise Chat and Email)
- [CVE-2022-20654](https://cve.now/CVE-2022-20654.md): Cisco Webex Meetings Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Webex Meetings)
- [CVE-2022-20634](https://cve.now/CVE-2022-20634.md): Cisco Enterprise Chat and Email Open Redirect Vulnerability (CVSS 4.7, Cisco Enterprise Chat and Email)
- [CVE-2024-11246](https://cve.now/CVE-2024-11246.md): code-projects Farmacia adicionar-cliente.php cross site scripting (CVSS 5.3, code-projects Farmacia)
- [CVE-2022-20648](https://cve.now/CVE-2022-20648.md): Cisco Redundancy Configuration Manager Debug Information Disclosure Vulnerability (CVSS 5.3, Cisco Redundancy Configuration Manager)
- [CVE-2022-20649](https://cve.now/CVE-2022-20649.md): Cisco Redundancy Configuration Manager Debug Remote Code Execution Vulnerability (CVSS 8.1, Cisco Redundancy Configuration Manager)
- [CVE-2022-20652](https://cve.now/CVE-2022-20652.md): Cisco Tetration Command Injection Vulnerability (CVSS 6.5, Cisco Secure Workload)
- [CVE-2022-20655](https://cve.now/CVE-2022-20655.md): A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a (CVSS 8.8, Cisco IOS XR Software · Cisco Virtual Topology System +7)
- [CVE-2024-52526](https://cve.now/CVE-2024-52526.md): LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/services.inc.php (CVSS 4.8, librenms · librenms/librenms)
- [CVE-2024-51497](https://cve.now/CVE-2024-51497.md): LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-customoid.php (CVSS 4.8, librenms · librenms/librenms)
- [CVE-2024-51496](https://cve.now/CVE-2024-51496.md): LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/html/pages/wireless.inc.php (CVSS 4.8, librenms · librenms/librenms)
- [CVE-2024-51495](https://cve.now/CVE-2024-51495.md): LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/dev-overview-data.inc.php (CVSS 4.8, librenms · librenms/librenms)
- [CVE-2024-51494](https://cve.now/CVE-2024-51494.md): LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php (CVSS 4.8, librenms · librenms/librenms)
- [CVE-2024-50355](https://cve.now/CVE-2024-50355.md): LibreNMS has a Persistent XSS from Insecure Input Sanitization Affects Multiple Endpoints (CVSS 4.8, librenms · librenms/librenms)
- [CVE-2024-41784](https://cve.now/CVE-2024-41784.md): IBM Sterling Secure Proxy directory traversal (CVSS 7.5, IBM Sterling Secure Proxy)
- [CVE-2024-50352](https://cve.now/CVE-2024-50352.md): LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/overview/services.inc.php (CVSS 4.8, librenms · librenms/librenms)
- [CVE-2022-20657](https://cve.now/CVE-2022-20657.md): Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Evolved Programmable Network Manager · Cisco Prime In…)
- [CVE-2022-20663](https://cve.now/CVE-2022-20663.md): Secure Network Analytics Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Secure Network Analytics)
- [CVE-2022-20685](https://cve.now/CVE-2022-20685.md): Multiple Cisco Products Snort Modbus Denial of Service Vulnerability (CVSS 7.5, Cisco Cyber Vision · Cisco Firepower Threat Defense Soft… +1)
- [CVE-2022-20656](https://cve.now/CVE-2022-20656.md): Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Path Traversal Vulnerability (CVSS 6.5, Cisco Evolved Programmable Network Manager · Cisco Prime In…)
- [CVE-2022-20766](https://cve.now/CVE-2022-20766.md): Cisco ATA 190 Series Analog Telephone Adapter firmware Cisco Discovery Protocol Denial of Service Vulnerability (CVSS 5.3, Cisco Analog Telephone Adaptor (ATA) Software)
- [CVE-2024-50351](https://cve.now/CVE-2024-50351.md): LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/functions.php (CVSS 4.8, librenms · librenms/librenms)
- [CVE-2022-20793](https://cve.now/CVE-2022-20793.md): Cisco Touch 10 Device Insufficient Identity Verification Vulnerability (CVSS 6.8, Cisco RoomOS Software · Cisco TelePresence Endpoint Software)
- [CVE-2022-20814](https://cve.now/CVE-2022-20814.md): Cisco Expressway Series and Cisco TelePresence VCS Improper Certificate Validation Vulnerability (CVSS 7.4, Cisco TelePresence Video Communication Server (VCS) Express…)
- [CVE-2022-20846](https://cve.now/CVE-2022-20846.md): Cisco IOS XR Software Cisco Discovery Protocol Buffer Overflow Vulnerability (CVSS 4.3, Cisco IOS XR Software)
- [CVE-2022-20845](https://cve.now/CVE-2022-20845.md): Cisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability (CVSS 6.0, Cisco IOS XR Software)
- [CVE-2022-20849](https://cve.now/CVE-2022-20849.md): Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability (CVSS 6.1, Cisco IOS XR Software)
- [CVE-2024-11245](https://cve.now/CVE-2024-11245.md): code-projects Farmacia editar-produto.php sql injection (CVSS 5.3, code-projects Farmacia)
- [CVE-2024-11244](https://cve.now/CVE-2024-11244.md): code-projects Farmacia editar-cliente.php sql injection (CVSS 5.3, code-projects Farmacia)
- [CVE-2022-20948](https://cve.now/CVE-2022-20948.md): Cisco BroadWorks Hosted Thin Receptionist Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco BroadWorks)
- [CVE-2022-20931](https://cve.now/CVE-2022-20931.md): Cisco Touch 10 Device Downgrade Attack Vulnerability (CVSS 6.5, Cisco TelePresence Endpoint Software)
- [CVE-2024-50350](https://cve.now/CVE-2024-50350.md): LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php (CVSS 4.8, librenms · librenms/librenms)
- [CVE-2024-49764](https://cve.now/CVE-2024-49764.md): LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php (CVSS 4.8, librenms · librenms/librenms)
- [CVE-2022-20853](https://cve.now/CVE-2022-20853.md): Cisco Expressway Series and Cisco TelePresence VCS Cross-Site Request Forgery Vulnerability (CVSS 7.4, Cisco TelePresence Video Communication Server (VCS) Express…)
- [CVE-2022-20871](https://cve.now/CVE-2022-20871.md): Cisco Secure Web Appliance Privilege Escalation Vulnerability (CVSS 6.3, Cisco Secure Web Appliance)
- [CVE-2024-49759](https://cve.now/CVE-2024-49759.md): LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.php (CVSS 4.8, librenms · librenms/librenms)
- [CVE-2022-20939](https://cve.now/CVE-2022-20939.md): Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability (CVSS 4.3, Cisco Smart Software Manager On-Prem)
- [CVE-2023-20004](https://cve.now/CVE-2023-20004.md): Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Write Vulnerability (CVSS 4.4, Cisco RoomOS Software · Cisco TelePresence Endpoint Software)
- [CVE-2023-20036](https://cve.now/CVE-2023-20036.md): Cisco Industrial Network Director Command Injection Vulnerability (CVSS 9.9, Cisco Industrial Network Director)
- [CVE-2023-20039](https://cve.now/CVE-2023-20039.md): Cisco Industrial Network Director File Permissions (CVSS 5.5, Cisco Industrial Network Director)
- [CVE-2023-20060](https://cve.now/CVE-2023-20060.md): Cisco Prime Collaboration Deployment Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Prime Collaboration Deployment)
- [CVE-2023-20090](https://cve.now/CVE-2023-20090.md): Cisco TelePresence Collaboration Endpoint and RoomOS Software Privilege Escalation Vulnerability (CVSS 6.7, Cisco RoomOS Software · Cisco TelePresence Endpoint Software)
- [CVE-2024-49758](https://cve.now/CVE-2024-49758.md): LibreNMS has a stored XSS in ExamplePlugin with Device's Notes (CVSS 4.8, librenms · librenms/librenms)
- [CVE-2023-20091](https://cve.now/CVE-2023-20091.md): Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability (CVSS 5.1, Cisco TelePresence Endpoint Software)
- [CVE-2023-20092](https://cve.now/CVE-2023-20092.md): Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability (CVSS 4.4, Cisco RoomOS Software · Cisco TelePresence Endpoint Software)
- [CVE-2024-49754](https://cve.now/CVE-2024-49754.md): LibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.php (CVSS 7.5, librenms · librenms/librenms)
- [CVE-2023-20093](https://cve.now/CVE-2023-20093.md): Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability (CVSS 4.4, Cisco RoomOS Software · Cisco TelePresence Endpoint Software)
- [CVE-2023-20094](https://cve.now/CVE-2023-20094.md): Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability (CVSS 4.3, Cisco RoomOS Software · Cisco TelePresence Endpoint Software)
- [CVE-2024-52555](https://cve.now/CVE-2024-52555.md): In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script (CVSS 6.3, JetBrains WebStorm)
- [CVE-2024-11243](https://cve.now/CVE-2024-11243.md): code-projects Online Shop Store signup.php cross site scripting (CVSS 6.9, code-projects Online Shop Store)
- [CVE-2023-20125](https://cve.now/CVE-2023-20125.md): Cisco BroadWorks Network Server TCP Denial of Service Vulnerability (CVSS 8.6, Cisco BroadWorks)
- [CVE-2023-20154](https://cve.now/CVE-2023-20154.md): Cisco Modeling Labs External Authentication Bypass Vulnerability (CVSS 9.1, Cisco Modeling Labs)
- [CVE-2024-20373](https://cve.now/CVE-2024-20373.md): Cisco IOS and Cisco IOS XE SNMP Extended ACL Bypass Vulnerability (CVSS 5.3, Cisco IOS XE Catalyst SD-WAN)
- [CVE-2024-43189](https://cve.now/CVE-2024-43189.md): IBM Concert Software information disclosure (CVSS 5.9, IBM Concert Software)
- [CVE-2024-41785](https://cve.now/CVE-2024-41785.md): IBM Concert cross-site scripting (CVSS 6.1, IBM Concert Software)
- [CVE-2024-11242](https://cve.now/CVE-2024-11242.md): ZZCMS Keyword Filtering ad\_list.php sql injection (CVSS 5.1, ZZCMS)
- [CVE-2024-11241](https://cve.now/CVE-2024-11241.md): code-projects Job Recruitment reset.php sql injection (CVSS 6.9, code-projects Job Recruitment)
- [CVE-2024-11240](https://cve.now/CVE-2024-11240.md): IBPhoenix ibWebAdmin Banco de Dados Tab database.php cross site scripting (CVSS 5.3, IBPhoenix ibWebAdmin)
- [CVE-2024-11239](https://cve.now/CVE-2024-11239.md): Landray EKP API Interface import.do deleteFile path traversal (CVSS 5.3, Landray EKP)
- [CVE-2024-11238](https://cve.now/CVE-2024-11238.md): Landray EKP sysUiComponent.do delPreviewFile path traversal (CVSS 6.9, Landray EKP)
- [CVE-2024-11237](https://cve.now/CVE-2024-11237.md): TP-Link VN020 F3v(T) DHCP DISCOVER Packet Parser TP-Thumper stack-based overflow (CVSS 8.7, TP-Link VN020 F3v)
- [CVE-2024-10534](https://cve.now/CVE-2024-10534.md): Improper Access Control in Dataprom Informatics' PACS-ACSS (CVSS 8.6, Dataprom Informatics Personnel Attendance Control Systems (…)
- [CVE-2024-0875](https://cve.now/CVE-2024-0875.md): Stored XSS in openemr/openemr (CVSS 8.1, openemr/openemr)
- [CVE-2023-0109](https://cve.now/CVE-2023-0109.md): Stored XSS in usememos/memos (CVSS 9.8, usememos/memos · github.com/usememos/memos)
- [CVE-2022-1226](https://cve.now/CVE-2022-1226.md): Cross-site Scripting (XSS) in phpipam/phpipam (CVSS 3.5, phpipam/phpipam)
- [CVE-2023-2332](https://cve.now/CVE-2023-2332.md): Stored Cross-site Scripting (XSS) in pimcore/pimcore (CVSS 4.0, pimcore/pimcore)
- [CVE-2024-1097](https://cve.now/CVE-2024-1097.md): Stored XSS in craigk5n/webcalendar (CVSS 7.6, craigk5n/webcalendar)
- [CVE-2021-3740](https://cve.now/CVE-2021-3740.md): Session Fixation in chatwoot/chatwoot (CVSS 6.8, chatwoot/chatwoot)
- [CVE-2024-1240](https://cve.now/CVE-2024-1240.md): Open Redirection in pyload/pyload (CVSS 4.6, pyload/pyload · pyload-ng)
- [CVE-2024-0787](https://cve.now/CVE-2024-0787.md): Improper Restriction of Excessive Authentication Attempts in phpipam/phpipam (CVSS 5.3, phpipam/phpipam)
- [CVE-2023-4679](https://cve.now/CVE-2023-4679.md): Use After Free in gpac/gpac (CVSS 5.9, gpac/gpac)
- [CVE-2023-0737](https://cve.now/CVE-2023-0737.md): CSRF in wallabag/wallabag (CVSS 6.5, wallabag/wallabag)
- [CVE-2022-1884](https://cve.now/CVE-2022-1884.md): Remote Command Execution in gogs/gogs (CVSS 10.0, gogs/gogs · gogs.io/gogs)
- [CVE-2021-3991](https://cve.now/CVE-2021-3991.md): Improper Authorization in dolibarr/dolibarr (CVSS 4.3, dolibarr/dolibarr)
- [CVE-2021-3988](https://cve.now/CVE-2021-3988.md): Cross-site Scripting (XSS) in janeczku/calibre-web (CVSS 5.7, janeczku/calibre-web · calibreweb)
- [CVE-2021-3987](https://cve.now/CVE-2021-3987.md): Improper Access Control in janeczku/calibre-web (CVSS 5.4, janeczku/calibre-web · calibreweb)
- [CVE-2021-3986](https://cve.now/CVE-2021-3986.md): Information Disclosure in janeczku/calibre-web (CVSS 4.3, janeczku/calibre-web · calibreweb)
- [CVE-2021-3902](https://cve.now/CVE-2021-3902.md): Improper Restriction of XML External Entity Reference in dompdf/dompdf (CVSS 9.8, dompdf/dompdf)
- [CVE-2021-3841](https://cve.now/CVE-2021-3841.md): Stored Cross-site Scripting (XSS) in sylius/sylius (CVSS 4.1, sylius/sylius)
- [CVE-2021-3838](https://cve.now/CVE-2021-3838.md): PHAR Deserialization in dompdf/dompdf (CVSS 9.8, dompdf/dompdf)
- [CVE-2021-3742](https://cve.now/CVE-2021-3742.md): Server-Side Request Forgery (SSRF) in chatwoot/chatwoot (CVSS 7.9, chatwoot/chatwoot)
- [CVE-2021-3741](https://cve.now/CVE-2021-3741.md): Stored Cross-site Scripting (XSS) in chatwoot/chatwoot (CVSS 7.8, chatwoot/chatwoot)
- [CVE-2024-11182](https://cve.now/CVE-2024-11182.md): Stored XSS vulnerability in MDaemon Email Server (CVSS 5.3, KEV, MDaemon Email Server)
- [CVE-2024-10443](https://cve.now/CVE-2024-10443.md): Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Task Manager component in Synolo (CVSS 9.8, Synology BeePhotos · Synology Photos)
- [CVE-2024-10311](https://cve.now/CVE-2024-10311.md): External Database Based Actions \<= 0.1 - Authenticated (Subscriber+) Authentication Bypass (CVSS 7.5, cmorillas1 External Database Based Actions)
- [CVE-2024-8978](https://cve.now/CVE-2024-8978.md): Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders \<= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure (CVSS 5.7, wpdevteam Essential Addons for Elementor – Popular Elemento…)
- [CVE-2024-8979](https://cve.now/CVE-2024-8979.md): Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders \<= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation (CVSS 8.0, wpdevteam Essential Addons for Elementor – Popular Elemento…)
- [CVE-2024-45784](https://cve.now/CVE-2024-45784.md): Apache Airflow: Sensitive configuration values are not masked in the logs by default (CVSS 7.5, Apache Software Foundation Apache Airflow · apache-airfl… +1)
- [CVE-2024-10825](https://cve.now/CVE-2024-10825.md): Hide My WP Ghost – Security & Firewall \<= 5.3.01 - Reflected Cross-Site Scripting via URL (CVSS 6.1, johndarrel WP Ghost (Hide My WP Ghost) – Security & Firewall)
- [CVE-2024-8961](https://cve.now/CVE-2024-8961.md): Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders \<= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, wpdevteam Essential Addons for Elementor – Popular Elemento…)
- [CVE-2024-9529](https://cve.now/CVE-2024-9529.md): Secure Custom Fields \< 6.3.6.3 - Admin+ Remote Code Execution (CVSS 6.6, Secure Custom Fields · Advanced Custom Fields Pro)
- [CVE-2024-10104](https://cve.now/CVE-2024-10104.md): Jobs for WordPress \< 2.7.8 - Contributor+ Stored XSS (CVSS 5.9, Jobs for WordPress)
- [CVE-2024-10793](https://cve.now/CVE-2024-10793.md): WP Activity Log \<= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User\_id Parameter (CVSS 7.2, melapress WP Activity Log)
- [CVE-2024-10260](https://cve.now/CVE-2024-10260.md): Tripetto \<= 8.0.11 - Unauthentiated Stored Cross-Site Scripting via Form File Upload (CVSS 7.2, WordPress form builder plugin for contact forms, surveys an…)
- [CVE-2024-9356](https://cve.now/CVE-2024-9356.md): Yotpo: Product & Photo Reviews for WooCommerce \<= 1.7.9 - Reflected Cross-Site Scripting (CVSS 6.1, Yotpo: Product & Photo Reviews for WooCommerce)
- [CVE-2024-10582](https://cve.now/CVE-2024-10582.md): Music Player for Elementor – Audio Player & Podcast Player \<= 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Template Import (CVSS 4.3, smartwpress Music Player for Elementor – Audio Player & Pod…)
- [CVE-2024-10113](https://cve.now/CVE-2024-10113.md): WP AdCenter – Ad Manager & Adsense Ads \<= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpadcenter\_ad Shortcode (CVSS 6.4, wpeka-club WP AdCenter – Ad Manager & Adsense Ads)
- [CVE-2024-39610](https://cve.now/CVE-2024-39610.md): Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. (CVSS 6.1, unclebob FitNesse · org.fitnesse:fitnesse)
- [CVE-2024-42499](https://cve.now/CVE-2024-42499.md): Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. (CVSS 5.3, unclebob FitNesse · org.fitnesse:fitnesse)
- [CVE-2024-9609](https://cve.now/CVE-2024-9609.md): LearnPress Export Import – WordPress extension for LearnPress \<= 4.0.4 - Reflected Cross-Site Scripting (CVSS 6.1, thimpress LearnPress – Backup & Migration Tool)
- [CVE-2024-10897](https://cve.now/CVE-2024-10897.md): Tutor LMS Elementor Addons \<= 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation (CVSS 4.3, themeum Tutor LMS Elementor Addons)
- [CVE-2024-10924](https://cve.now/CVE-2024-10924.md): Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass (CVSS 9.8, Really Simple Plugins Really Simple Security Pro multisi… +1)
- [CVE-2024-11120](https://cve.now/CVE-2024-11120.md): GeoVision EOL devices - OS Command Injection (CVSS 9.8, KEV, GeoVision GV-VS12 · GeoVision GV-VS11 +2)
- [CVE-2024-23169](https://cve.now/CVE-2024-23169.md): The web interface in RSA NetWitness 11.7.2.0 allows Cross-Site Scripting (XSS) via the Where textbox on the Reports screen during new rule c (CVSS 4.6)
- [CVE-2024-24425](https://cve.now/CVE-2024-24425.md): Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amf\_as\_establish\_req function at /tasks/am (CVSS 6.5, github.com/magma/magma)
- [CVE-2024-24426](https://cve.now/CVE-2024-24426.md): Reachable assertions in the NGAP\_FIND\_PROTOCOLIE\_BY\_ID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attacke (CVSS 7.5, github.com/magma/magma)
- [CVE-2024-24431](https://cve.now/CVE-2024-24431.md): A reachable assertion in the ogs\_nas\_emm\_decode function of Open5GS v2.7.0 allows attackers to cause a Denial of Service (DoS) via a crafted (CVSS 7.5)
- [CVE-2024-24446](https://cve.now/CVE-2024-24446.md): An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a cra (CVSS 6.5)
- [CVE-2024-24447](https://cve.now/CVE-2024-24447.md): A buffer overflow in the ngap\_amf\_handle\_pdu\_session\_resource\_setup\_response function of oai-cn5g-amf up to v2.0.0 allows attackers to cause (CVSS 5.3)
- [CVE-2024-24449](https://cve.now/CVE-2024-24449.md): An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a D (CVSS 6.5)
- [CVE-2024-24450](https://cve.now/CVE-2024-24450.md): Stack-based memcpy buffer overflow in the ngap\_handle\_pdu\_session\_resource\_setup\_response routine in OpenAirInterface CN5G AMF \<= 2.0.0 allo (CVSS 5.3)
- [CVE-2024-24452](https://cve.now/CVE-2024-24452.md): An invalid memory access when handling the ProtocolIE\_ID field of E-RAB Release Indication messages in Athonet vEPC MME v11.4.0 allows attac (CVSS 5.9, Hewlett Packard Enterprise (HPE) HPE Athonet Core)
- [CVE-2024-24453](https://cve.now/CVE-2024-24453.md): An invalid memory access when handling the ProtocolIE\_ID field of E-RAB NotToBeModifiedBearerModInd information element in Athonet vEPC MME (CVSS 5.9, Hewlett Packard Enterprise (HPE) HPE Athonet Core)
- [CVE-2024-24454](https://cve.now/CVE-2024-24454.md): An invalid memory access when handling the ProtocolIE\_ID field of E-RAB Modify Request messages in Athonet vEPC MME v11.4.0 allows attackers (CVSS 5.9, Hewlett Packard Enterprise (HPE) HPE Athonet Core)
- [CVE-2024-24455](https://cve.now/CVE-2024-24455.md): An invalid memory access when handling a UE Context Release message containing an invalid UE identifier in Athonet vEPC MME v11.4.0 allows a (CVSS 5.9, Hewlett Packard Enterprise (HPE) HPE Athonet Core)
- [CVE-2024-24457](https://cve.now/CVE-2024-24457.md): An invalid memory access when handling the ProtocolIE\_ID field of E-RAB Setup List Context SURes messages in Athonet vEPC MME v11.4.0 allows (CVSS 5.9, Hewlett Packard Enterprise (HPE) HPE Athonet Core)
- [CVE-2024-24458](https://cve.now/CVE-2024-24458.md): An invalid memory access when handling the ENB Configuration Transfer messages containing invalid PLMN Identities in Athonet vEPC MME v11.4. (CVSS 5.9, Hewlett Packard Enterprise (HPE) HPE Athonet Core)
- [CVE-2024-24459](https://cve.now/CVE-2024-24459.md): An invalid memory access when handling the ProtocolIE\_ID field of S1Setup Request messages in Athonet vEPC MME v11.4.0 allows attackers to c (CVSS 5.9, Hewlett Packard Enterprise (HPE) HPE Athonet Core)
- [CVE-2024-44625](https://cve.now/CVE-2024-44625.md): Gogs \<=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go. (CVSS 8.8, gogs.io/gogs)
- [CVE-2024-44758](https://cve.now/CVE-2024-44758.md): An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to (CVSS 9.8)
- [CVE-2024-44759](https://cve.now/CVE-2024-44759.md): An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to dow (CVSS 7.5)
- [CVE-2024-45969](https://cve.now/CVE-2024-45969.md): NULL pointer dereference in the MMS Client in MZ Automation LibIEC1850 before commit 7afa40390b26ad1f4cf93deaa0052fe7e357ef33 allows a malic (CVSS 7.5)
- [CVE-2024-45970](https://cve.now/CVE-2024-45970.md): Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc allow a mali (CVSS 9.8)
- [CVE-2024-45971](https://cve.now/CVE-2024-45971.md): Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4cac3cb4f0c880c4f0 allow a mali (CVSS 9.8)
- [CVE-2024-46383](https://cve.now/CVE-2024-46383.md): Hathway Skyworth Router CM5100-511 v4.1.1.24 was discovered to store sensitive information about USB and Wifi connected devices in plaintext (CVSS 2.4)
- [CVE-2024-46462](https://cve.now/CVE-2024-46462.md): By default, dedicated folders of ZEDMAIL for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them per (CVSS 7.8)
- [CVE-2024-46463](https://cve.now/CVE-2024-46463.md): By default, dedicated folders of ORIZON for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perf (CVSS 7.8)
- [CVE-2024-46465](https://cve.now/CVE-2024-46465.md): By default, dedicated folders of CRYHOD for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perf (CVSS 7.8)
- [CVE-2024-46466](https://cve.now/CVE-2024-46466.md): By default, dedicated folders of ZONECENTRAL for Windows up to 2024.3 or up to Q.2021.2 (ANSSI qualification submission) can be accessed by (CVSS 7.8)
- [CVE-2024-46467](https://cve.now/CVE-2024-46467.md): By default, dedicated folders of ZONEPOINT for Windows up to 2024.1 can be accessed by other users to misuse technical files and make them p (CVSS 7.8)
- [CVE-2024-48068](https://cve.now/CVE-2024-48068.md): A cross-site scripting (XSS) vulnerability in Shenzhen Landray Software Co.,LTD Landray EKP v16 and earlier allows attackers to execute arbi (CVSS 6.1)
- [CVE-2024-49592](https://cve.now/CVE-2024-49592.md): Trial installer for McAfee Total Protection (legacy trial installer software) 16.0.53 allows local privilege escalation because of an Uncont (CVSS 6.7)
- [CVE-2024-50647](https://cve.now/CVE-2024-50647.md): The python\_food ordering system V1.0 has an unauthorized vulnerability that leads to the leakage of sensitive user information. (CVSS 7.5)
- [CVE-2024-50648](https://cve.now/CVE-2024-50648.md): yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to p (CVSS 9.8)
- [CVE-2024-50649](https://cve.now/CVE-2024-50649.md): The user avatar upload function in python\_book V1.0 has an arbitrary file upload vulnerability. (CVSS 9.8)
- [CVE-2024-50650](https://cve.now/CVE-2024-50650.md): python\_book V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different I (CVSS 7.5)
- [CVE-2024-50651](https://cve.now/CVE-2024-50651.md): java\_shop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs (CVSS 6.5)
- [CVE-2024-50652](https://cve.now/CVE-2024-50652.md): A file upload vulnerability in java\_shop 1.0 allows attackers to upload arbitrary files by modifying the avatar function. (CVSS 6.3)
- [CVE-2024-50653](https://cve.now/CVE-2024-50653.md): CRMEB \<=5.4.0 is vulnerable to Incorrect Access Control. (CVSS 7.5)
- [CVE-2024-50654](https://cve.now/CVE-2024-50654.md): lilishop \<=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturi (CVSS 7.5)
- [CVE-2024-50655](https://cve.now/CVE-2024-50655.md): emlog pro \<=2.3.18 is vulnerable to Cross Site Scripting (XSS), which allows attackers to write malicious JavaScript code in published artic (CVSS 6.1)
- [CVE-2024-50724](https://cve.now/CVE-2024-50724.md): KASO v9.0 was discovered to contain a SQL injection vulnerability via the person\_id parameter at /cardcase/editcard.jsp. (CVSS 9.8)
- [CVE-2024-50800](https://cve.now/CVE-2024-50800.md): Cross Site Scripting vulnerability in M2000 Smart4Web before v.5.020241004 allows a remote attacker to execute arbitrary code via the error (CVSS 6.1)
- [CVE-2024-50983](https://cve.now/CVE-2024-50983.md): FlightPath 7.5 contains a Cross Site Scripting (XSS) vulnerability, which allows authenticated remote attackers with administrative rights t (CVSS 6.1)
- [CVE-2024-50986](https://cve.now/CVE-2024-50986.md): An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file. (CVSS 7.3)
- [CVE-2024-51037](https://cve.now/CVE-2024-51037.md): An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password res (CVSS 5.3)
- [CVE-2024-51141](https://cve.now/CVE-2024-51141.md): An issue in TOTOLINK Bluetooth Wireless Adapter A600UB allows a local attacker to execute arbitrary code via the WifiAutoInstallDriver.exe a (CVSS 7.8)
- [CVE-2024-51142](https://cve.now/CVE-2024-51142.md): Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows an attacker to execute arbitrary code via the svkey parameter of the stor (CVSS 6.1)
- [CVE-2024-51164](https://cve.now/CVE-2024-51164.md): Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to s (CVSS 9.1)
- [CVE-2024-51330](https://cve.now/CVE-2024-51330.md): An issue in UltiMaker Cura v.4.41 and 5.8.1 and before allows a local attacker to execute arbitrary code via Inter-process communication (IP (CVSS 4.4)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-11-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.