Nov 12, 2024
4 new incidents, 0 with updates.
Started
- ClosedCriticalPatched
Metabase GeoJSON API Local File Inclusion
Metabase contains a local file inclusion vulnerability in the custom map support in the API to read GeoJSON formatted data. Added to the CISA KEV catalog on 2024-11-12. CVE-2021-41277 was assigned before 2024; the KEV listing came in 2024.
MetabaseClosed Nov 12, 2024
- ClosedHighPatched
Microsoft November 2024: 2 actively exploited zero-days
CVE-2024-43451: Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user. CVE-2024-49039: Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions. Added to the CISA KEV catalog on 2024-11-12. CISA lists known use in ransomware campaigns.
Microsoft WindowsClosed Nov 12, 2024
- ClosedMediumPatched
Atlassian Jira Server and Data Center Path Traversal
Atlassian Jira Server and Data Center contain a path traversal vulnerability that allows a remote attacker to read particular files in the /WEB-INF/web.xml endpoint. Added to the CISA KEV catalog on 2024-11-12. CVE-2021-26086 was assigned before 2024; the KEV listing came in 2024.
Atlassian Jira Server and Data CenterClosed Nov 12, 2024
- ClosedMediumPatched
Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS)
Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. Added to the CISA KEV catalog on 2024-11-12. CVE-2014-2120 was assigned before 2024; the KEV listing came in 2024.
Cisco Adaptive Security Appliance (ASA)Closed Nov 12, 2024
