Zero-day report: November 2024
CISA added 22 exploited vulnerabilities to its catalog in November 2024, 5 more than October (17). 8 were zero-days, listed within a week of going public. 5 are known to be used by ransomware. The most-hit vendor was Palo Alto Networks, with 5.
By technology
Most-hit vendors
Every flaw added in November 2024
- Array Networks · AG/vxAG ArrayOSArray Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
- Oracle · Agile Product Lifecycle Management (PLM)Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
- Apple · Multiple ProductsApple Multiple Products Code Execution Vulnerability
- Apple · Multiple ProductsApple Multiple Products Cross-Site Scripting (XSS) Vulnerability
- VMware · vCenter ServerVMware vCenter Server Heap-Based Buffer Overflow Vulnerability
- VMware · vCenter ServerVMware vCenter Server Privilege Escalation Vulnerability
- Palo Alto Networks · PAN-OSPalo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
- Progress · Kemp LoadMasterProgress Kemp LoadMaster OS Command Injection Vulnerability
- Palo Alto Networks · PAN-OSPalo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
- Palo Alto Networks · ExpeditionPalo Alto Networks Expedition OS Command Injection Vulnerability
- Palo Alto Networks · ExpeditionPalo Alto Networks Expedition SQL Injection Vulnerability
- Cisco · Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
- Atlassian · Jira Server and Data CenterAtlassian Jira Server and Data Center Path Traversal Vulnerability
- Metabase · MetabaseMetabase GeoJSON API Local File Inclusion Vulnerability
- Microsoft · WindowsMicrosoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
- Microsoft · WindowsMicrosoft Windows Task Scheduler Privilege Escalation Vulnerability
- Nostromo · nhttpdNostromo nhttpd Directory Traversal Vulnerability
- Android · FrameworkAndroid Framework Privilege Escalation Vulnerability
- CyberPersons · CyberPanelCyberPanel Incorrect Default Permissions Vulnerability
- Palo Alto Networks · ExpeditionPalo Alto Networks Expedition Missing Authentication Vulnerability
- PTZOptics · PT30X-SDI/NDI CamerasPTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability
- PTZOptics · PT30X-SDI/NDI CamerasPTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.