NVD disclosure day

Published threat advisories for November 21, 2024

CVE-2024-51367

BlackBoard Arbitrary File Upload Vulnerability.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

An arbitrary file upload vulnerability exists in BlackBoard software. If exploited, an attacker could upload a crafted file to execute arbitrary code. This could allow unauthorized system access and control.

NVD published: November 21, 2024

CVE advisoryCRITICAL

CVE-2024-51366

OmegaT Arbitrary File Upload Leading to Code Execution.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

An arbitrary file upload flaw in OmegaT's file handling could allow attackers to execute arbitrary code by uploading a crafted configuration file. While OmegaT is a local translation tool not typically internet-facing, this vulnerability, if reachable, presents a risk of code execution. Confirming its relevance and pot

NVD published: November 21, 2024