Week 47, 2024

18–24 November 2024

New CVEs: 1,275
Critical: 100
High: 529
Newly exploited: 8
Advisories: 213
Malicious pkgs: 74

Newly exploited 8

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

High 8.8
CVE-2024-44308 KEV Nov 21, 2024 The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 1…
Apple · macOS · iOS and iPadOS · visionOS

EPSS 9.9%
High 7.5
CVE-2024-21287 KEV Nov 21, 2024 Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension). The supported version …
Oracle · Oracle Agile PLM Framework

EPSS 1.7%
Medium 6.3
CVE-2024-44309 KEV Nov 21, 2024 A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPad…
Apple · macOS · iOS and iPadOS · visionOS

EPSS 22%
Critical 9.8
CVE-2024-38812 KEV Nov 20, 2024 Heap-overflow vulnerability
EPSS 55%
High 7.5
CVE-2024-38813 KEV Nov 20, 2024 Privilege escalation vulnerability
EPSS 17%
Critical 10.0
CVE-2024-1212 KEV Nov 18, 2024 LoadMaster Pre-Authenticated OS Command Injection
Progress Software · LoadMaster

EPSS 95%
Medium 5.9
CVE-2024-0012 KEV Nov 18, 2024 · ransomware PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
Palo Alto Networks · PAN-OS · Prisma Access · Cloud NGFW

EPSS 100%
Medium 5.9
CVE-2024-9474 KEV Nov 18, 2024 · ransomware PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface
Palo Alto Networks · PAN-OS · Prisma Access · Cloud NGFW

EPSS 94%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 10.0
CVE-2024-47407 mySCADA myPRO OS Command Injection
mySCADA · myPRO Manager · myPRO Runtime

EPSS 64%
Critical 9.8
CVE-2024-52765 H3C GR-1800AX MiniGRW1B0V100R007 is vulnerable to remote code execution (RCE) via the aspForm parameter.
EPSS 12%
Critical 9.8
CVE-2024-28892 GoCast OS Command Injection vulnerability
GoCast · GoCast

EPSS 6.5%
Critical 9.8
CVE-2024-29224 An OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An…
GoCast · GoCast

EPSS 6.3%
Critical 9.8
CVE-2024-52316 Apache Tomcat: Authentication bypass when using Jakarta Authentication API
Apache Software Foundation · Apache Tomcat

EPSS 6.2%
Critical 9.1
CVE-2024-30896 InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the a…
EPSS 5.3%
Critical 9.8
CVE-2024-47533 Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes
cobbler · cobbler

EPSS 4%
Critical 9.8
CVE-2024-52433 WordPress My Geo Posts Free plugin <= 1.2 - PHP Object Injection vulnerability
Mindstien Technologies · My Geo Posts Free

EPSS 3.1%
Critical 9.8
CVE-2023-51639 Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability
Allegra · Allegra

EPSS 2.5%
Critical 9.8
CVE-2024-11236 Integer overflow in the firebird and dblib quoters causing OOB writes
PHP Group · PHP

EPSS 2.1%
Critical 9.8
CVE-2024-21855 A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command exe…
GoCast · GoCast

EPSS 2%
Critical 9.8
CVE-2023-51644 Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability
Allegra · Allegra

EPSS 2%
Critical 9.8
CVE-2023-52333 Allegra saveFile Directory Traversal Remote Code Execution Vulnerability
Allegra · Allegra

EPSS 1.9%
Critical 10.0
CVE-2024-52034 mySCADA myPRO OS Command Injection
mySCADA · myPRO Manager · myPRO Runtime

EPSS 1.7%
Critical 9.8
CVE-2024-8807 Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability
Cohesive Networks · VNS3

EPSS 1.7%

All 100 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Medium 5.9
CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
Palo Alto Networks · PAN-OS · Prisma Access · Cloud NGFW

EPSS 100%
Medium 5.9
CVE-2024-9474 PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface
Palo Alto Networks · PAN-OS · Prisma Access · Cloud NGFW

EPSS 94%
Medium 6.9
CVE-2024-11320 Command Injection leading to RCE via LDAP Misconfiguration
Pandora FMS · Pandora FMS

EPSS 91%
High 7.5
CVE-2024-10400 Tutor LMS <= 2.7.6 - Unauthenticated SQL Injection via rating_filter
Themeum · Tutor LMS – eLearning and online course solution

EPSS 83%
High 8.0
CVE-2024-51151 D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the msp_info_htm function via the flag parameter and cmd parameter.
EPSS 31%
High 7.8
CVE-2024-48990 Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Pytho…
needrestart · needrestart

EPSS 29%
High 7.8
CVE-2024-11477 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability
7-Zip · 7-Zip

EPSS 22%
Medium 6.3
CVE-2024-44309 A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPad…
Apple · macOS · iOS and iPadOS · visionOS

EPSS 22%

Advisories

USN-7123-1 linux-azure vulnerabilities 226 CVEs
USN-7089-7 linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities 196 CVEs
USN-7119-1 linux-iot vulnerabilities 175 CVEs
DSA-5818-1 linux - security update 91 CVEs
USN-7121-2 linux-azure vulnerabilities 45 CVEs
USN-7121-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities 45 CVEs
RHSA-2024:9679 Red Hat Security Advisory: webkit2gtk3 security update 30 CVEs
RHSA-2024:9646 Red Hat Security Advisory: webkit2gtk3 security update 22 CVEs
RHSA-2024:9636 Red Hat Security Advisory: webkit2gtk3 security update 21 CVEs
SSA-354569 SSA-354569: Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices 18 CVEs