CISA's list that day
7 November 2024
On CISA added 4 vulnerabilities to its list of exploited vulnerabilities, in Nostromo nhttpd, Palo Alto Networks Expedition, Android Framework and 1 other product. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2019-16278Directory Traversal | Nostromo nhttpd | Patch this weekMetasploit module; EPSS 0.99; verified Exploit-DB entry | 0.99 | ||
| CVE-2024-5910Missing Authentication | Palo Alto Networks Expedition | Patch this weekMetasploit module; EPSS 0.92 | 0.92 | ||
| CVE-2024-51567Incorrect Default Permissions | CyberPersons CyberPanel | Patch this weekRansomware use; Metasploit module; EPSS 0.87 | 0.87 | ||
| CVE-2024-43093Privilege Escalation | Android Framework | Patch soon | 0.01 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.