Exploited Vulnerabilities DailyVulnerabilities added to KEV in November 2024
Added22
Ransomware-linked5
Vendors14
By vendor
5
2
2
2
2
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2023-28461 | Array Networks AG/vxAG ArrayOS | 2024-11-25 | 68.0% | Known |
| CVE-2024-44309 | Apple Multiple Products | 2024-11-21 | 22.5% | Unknown |
| CVE-2024-44308 | Apple Multiple Products | 2024-11-21 | 10.1% | Unknown |
| CVE-2024-21287 | Oracle Agile Product Lifecycle Management (PLM) | 2024-11-21 | 1.7% | Unknown |
| CVE-2024-38813 | VMware vCenter Server | 2024-11-20 | 17.3% | Unknown |
| CVE-2024-38812 | VMware vCenter Server | 2024-11-20 | 54.5% | Unknown |
| CVE-2024-9474 | Palo Alto Networks PAN-OS | 2024-11-18 | 94.8% | Known |
| CVE-2024-1212 | Progress Kemp LoadMaster | 2024-11-18 | 95.3% | Unknown |
| CVE-2024-0012 | Palo Alto Networks PAN-OS | 2024-11-18 | 99.8% | Known |
| CVE-2024-9465 | Palo Alto Networks Expedition | 2024-11-14 | 99.6% | Unknown |
| CVE-2024-9463 | Palo Alto Networks Expedition | 2024-11-14 | 98.5% | Unknown |
| CVE-2024-49039 | Microsoft Windows | 2024-11-12 | 14.1% | Known |
| CVE-2024-43451 | Microsoft Windows | 2024-11-12 | 84.1% | Unknown |
| CVE-2021-41277 | Metabase Metabase | 2024-11-12 | 97.1% | Unknown |
| CVE-2021-26086 | Atlassian Jira Server and Data Center | 2024-11-12 | 99.9% | Unknown |
| CVE-2014-2120 | Cisco Adaptive Security Appliance (ASA) | 2024-11-12 | 22.5% | Unknown |
| CVE-2024-5910 | Palo Alto Networks Expedition | 2024-11-07 | 91.6% | Unknown |
| CVE-2024-51567 | CyberPersons CyberPanel | 2024-11-07 | 86.6% | Known |
| CVE-2024-43093 | Android Framework | 2024-11-07 | 0.7% | Unknown |
| CVE-2019-16278 | Nostromo nhttpd | 2024-11-07 | 99.0% | Unknown |
| CVE-2024-8957 | PTZOptics PT30X-SDI/NDI Cameras | 2024-11-04 | 79.7% | Unknown |
| CVE-2024-8956 | PTZOptics PT30X-SDI/NDI Cameras | 2024-11-04 | 58.7% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.