November 2024

6 results · Clear filters · Feed

• High 7.5
  CVE-2024-11667 Exploited · Ransomware

  A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through…

  Zyxel USG FLEX series firmware ATP series firmware USG20(W)-VPN series firmware Network devices
  Nov 27, 2024

  KEV Dec 3, 2024
• High 8.7
  CVE-2024-49035 Exploited

  Partner.Microsoft.Com Elevation of Privilege Vulnerability

  An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network.

  Microsoft Microsoft Partner Center
  Nov 26, 2024

  KEV Feb 25, 2025
• High 8.8
  CVE-2024-44308 Exploited Public exploit

  The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 1…

  Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu
  Nov 19, 2024

  KEV Nov 21, 2024
• High 7.5
  CVE-2024-21287 Exploited

  Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Pr…

  Oracle Oracle Agile PLM Framework
  Nov 18, 2024

  KEV Nov 21, 2024
• High 7.3
  CVE-2024-43093 Exploited Public exploit

  In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to pre…

  Google Android Android
  Nov 13, 2024

  KEV Nov 7, 2024
• High 8.8
  CVE-2024-49039 Exploited · Ransomware Public exploit EPSS 14%

  Windows Task Scheduler Elevation of Privilege Vulnerability

  Windows Task Scheduler Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 12, 2024

  KEV Nov 12, 2024