NVD disclosure day

Published threat advisories for November 15, 2024

CVE-2024-11182

MDaemon Email Server Cross-Site Scripting Vulnerability.

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A cross-site scripting vulnerability in MDaemon Email Server allows attackers to run arbitrary JavaScript in a user's browser via HTML emails. The U.S. government has identified this as a known exploited vulnerability, posing a business risk.

NVD published: November 15, 2024 • CISA KEV

CVE advisoryKnown Exploit

CVE-2024-11120

GeoVision Devices OS Command Injection Vulnerability.

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

Certain GeoVision devices contain an OS command injection vulnerability, allowing unauthenticated remote attackers to execute arbitrary commands. This issue has been exploited, posing a risk to affected organizations and their systems.

NVD published: November 15, 2024 • CISA KEV