CVEs published in November 2024

CVE-2023-31486High

Perl Vulnerability in NetApp Products

CVE-2024-21703Medium

This Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of Confluence Data Center and…

CVE-2024-11667HighCISA KEV

Zyxel Multiple Firewalls Path Traversal Vulnerability

CVE-2024-50401High

QTS: use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions

CVE-2024-50400High

QTS: use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions

CVE-2024-50399High

QTS: use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions

CVE-2024-50398High

QTS: use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions

CVE-2024-50397High

QTS: use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions

CVE-2024-50396High

QTS: use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions

CVE-2024-50395High

authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on.

CVE-2024-48862Critical

link following vulnerability has been reported to affect QuLog Center.

CVE-2024-48861High

OS command injection vulnerability has been reported to affect several product versions.

CVE-2024-48860Critical

OS command injection vulnerability has been reported to affect several product versions.

CVE-2024-38647High

exposure of sensitive information vulnerability has been reported to affect QNAP AI Core.

CVE-2024-38646Medium

incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3.

CVE-2024-38645Medium

server-side request forgery (SSRF) vulnerability has been reported to affect Notes Station 3.

CVE-2024-38644High

OS command injection vulnerability has been reported to affect Notes Station 3.

CVE-2024-38643Critical

missing authentication for critical function vulnerability has been reported to affect Notes Station 3.

CVE-2024-37050Medium

QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions

CVE-2024-37049Medium

QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions

CVE-2024-37048Medium

QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVE-2024-37047Medium

QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions

CVE-2024-37046Medium

QTS: path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVE-2024-37045Medium

QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVE-2024-37044High

QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions

CVE-2024-37043Medium

QTS: path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVE-2024-37042Medium

QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVE-2024-37041High

QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions

CVE-2024-32770Medium

Photo Station: cross-site scripting (XSS) vulnerability has been reported to affect Photo Station.

CVE-2024-32769Medium

Photo Station: cross-site scripting (XSS) vulnerability has been reported to affect Photo Station.

CVE-2024-32768Medium

Photo Station: cross-site scripting (XSS) vulnerability has been reported to affect Photo Station.

CVE-2024-32767Medium

Photo Station: cross-site scripting (XSS) vulnerability has been reported to affect Photo Station.

CVE-2024-21697High

This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19…

CVE-2024-9474CriticalCISA KEV

Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

CVE-2024-0012CriticalCISA KEV

Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

CVE-2024-38428Critical

GNU Wget Vulnerability in NetApp Products

CVE-2024-29736Critical

Apache CXF Vulnerability in NetApp Products

CVE-2024-25744High

Linux Kernel Vulnerability in NetApp Products

CVE-2023-29404Critical

Golang Vulnerability in NetApp Products

CVE-2023-24540Critical

Golang Vulnerability in NetApp Products

CVE-2024-26011Medium

missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4, FortiManager 7.0.0 through 7.0.11, FortiManager 6.4.0 through 6.4.14, FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.14, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiPortal 6.0.0 through 6.0.14, FortiPortal 5.3 all versions, FortiProxy 7.4.0 through 7.4.3, FortiProxy 7.2.0 through 7.2.9, FortiProxy 7.0.0 through 7.0.16, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions, FortiSwitchManager 7.2.0 through 7.2.3, FortiSwitchManager 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets

CVE-2023-50176Medium

session fixation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link

CVE-2024-49039HighCISA KEV

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

CVE-2024-49019High

Active Directory Certificate Services Elevation of Privilege Vulnerability

CVE-2024-50330Critical

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution

CVE-2024-37371Critical

MIT Kerberos 5 Vulnerability in NetApp Products

CVE-2024-37370High

MIT Kerberos 5 Vulnerability in NetApp Products

CVE-2024-26641Medium

Linux Kernel Vulnerability in NetApp Products

CVE-2024-8424High

WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM

CVE-2024-24914High

Gaia: Authenticated Gaia users can inject code or commands by global variables through special HTTP requests.

CVE-2024-10318Medium

session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at…

CVE-2024-47464Medium

AOS-10: authenticated Path Traversal vulnerability exists in Instant AOS-8 and AOS-10.

CVE-2024-47463High

AOS-10: arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface.

CVE-2024-47462High

AOS-10: arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface.

CVE-2024-47461High

AOS-10: authenticated command injection vulnerability exists in the Instant AOS-8 and AOS-10 command line interface.

CVE-2024-9143Low

OpenSSL Vulnerability in NetApp Products

CVE-2024-26733Medium

Linux Kernel Vulnerability in NetApp Products