CISA Known Exploited Vulnerabilities
KEV additions — November 2024
21 CVEs entered the KEV catalog in November 2024.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added November 25, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-28461ransomware | Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability | 9.8 | 68.1 % | Dec 16, 2024 |
Added November 21, 20243
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-21287 | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability | 7.5 | 1.7 % | Dec 12, 2024 |
| CVE-2024-44308 | Apple Multiple Products Code Execution Vulnerability | 8.8 | 10.2 % | Dec 12, 2024 |
| CVE-2024-44309 | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability | 6.1 | 22.6 % | Dec 12, 2024 |
Added November 20, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-38812 | VMware vCenter Server Heap-Based Buffer Overflow Vulnerability | 9.8 | 54.6 % | Dec 11, 2024 |
| CVE-2024-38813 | VMware vCenter Server Privilege Escalation Vulnerability | 7.5 | 17.4 % | Dec 11, 2024 |
Added November 18, 20243
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-0012ransomware | Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability | 9.8 | 99.9 % | Dec 9, 2024 |
| CVE-2024-1212 | Progress Kemp LoadMaster OS Command Injection Vulnerability | 9.8 | 95.4 % | Dec 9, 2024 |
| CVE-2024-9474ransomware | Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability | 7.2 | 94.8 % | Dec 9, 2024 |
Added November 14, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-9463 | Palo Alto Networks Expedition OS Command Injection Vulnerability | 7.5 | 98.5 % | Dec 5, 2024 |
| CVE-2024-9465 | Palo Alto Networks Expedition SQL Injection Vulnerability | 9.1 | 99.6 % | Dec 5, 2024 |
Added November 12, 20244
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-26086 | Atlassian Jira Server and Data Center Path Traversal Vulnerability | 5.3 | 100.0 % | Dec 3, 2024 |
| CVE-2021-41277 | Metabase GeoJSON API Local File Inclusion Vulnerability | 7.5 | 97.2 % | Dec 3, 2024 |
| CVE-2024-43451 | Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability | 6.5 | 85.4 % | Dec 3, 2024 |
| CVE-2024-49039ransomware | Microsoft Windows Task Scheduler Privilege Escalation Vulnerability | 8.8 | 14.2 % | Dec 3, 2024 |
Added November 7, 20244
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2019-16278 | Nostromo nhttpd Directory Traversal Vulnerability | 9.8 | 99.0 % | Nov 28, 2024 |
| CVE-2024-43093 | Android Framework Privilege Escalation Vulnerability | 7.3 | 0.7 % | Nov 28, 2024 |
| CVE-2024-51567ransomware | CyberPanel Incorrect Default Permissions Vulnerability | 9.8 | 86.6 % | Nov 28, 2024 |
| CVE-2024-5910 | Palo Alto Networks Expedition Missing Authentication Vulnerability | 9.8 | 91.7 % | Nov 28, 2024 |
Added November 4, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-8956 | PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability | 9.1 | 58.8 % | Nov 25, 2024 |
| CVE-2024-8957 | PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability | 7.2 | 79.8 % | Nov 25, 2024 |