CVEs published November 11 to November 17, 2024
1,106 CVEs were published Nov 11 to Nov 17, 2024, 125 of them critical. CISA added 7 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 1,106
- Critical
- 125
- Added to CISA KEV
- 7
- Busiest day
- Tue, Nov 12 (332)
- Quietest day
- Sun, Nov 17 (11)
- November 11, 2024114 CVEs · 22 critical
- November 12, 2024332 CVEs · 19 critical
- November 13, 2024230 CVEs · 17 critical
- November 14, 2024147 CVEs · 29 critical
- November 15, 2024222 CVEs · 19 critical
- November 16, 202450 CVEs · 18 critical
- November 17, 202411 CVEs · 1 critical
Added to CISA KEV 7
- CVE-2014-2120Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attacker
- CVE-2021-26086Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerabilitAtlassian Jira Server · Atlassian Jira Data Center
- CVE-2021-41277GeoJSON URL validation can expose server files and environment variables to unauthorized usersmetabase
- CVE-2024-43451NTLM Hash Disclosure Spoofing VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-49039Windows Task Scheduler Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-9463Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential DisclosurePalo Alto Networks Expedition
- CVE-2024-9465Expedition: SQL Injection Leads to Firewall Admin Credential DisclosurePalo Alto Networks Expedition