CVE-2024-51721

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-59

Affected software

No affected versions have been published.

Timeline

Published: Nov 12, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-517226.4A local privilege escalation vulnerability in the SecuSUITE Server (System Configuration) of SecuSUITE versions 5.0.420 and earlier could al CVE-2024-517234.6A Stored Cross-Site Scripting (XSS) vulnerability in the Management Console of BlackBerry AtHoc version 7.15 could allow an attacker to pote CVE-2024-517277.5Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a feature that could enable attackers to invalidate a legitimate u CVE-2024-517297.8In the Linux kernel, the following vulnerability has been resolved: mm: use aligned address in copy_user_gigantic_page() In current kernel CVE-2024-51735.4The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Video player widget se CVE-2024-517348.7Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data main CVE-2024-517358.7Osmedeus is a Workflow Engine for Offensive Security. Cross-site Scripting (XSS) occurs on the Osmedues web server when viewing results from CVE-2024-517369.8Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. On Windows, when an executable file na CVE-2024-517377.0RediSearch is a Redis module that provides querying, secondary indexing, and full-text search for Redis. An authenticated redis user executi CVE-2024-517388.1Sunshine is a self-hosted game stream host for Moonlight. In 0.23.1 and earlier, Sunshine's pairing protocol implementation does not validat CVE-2024-517395.3Combodo iTop is a simple, web based IT Service Management tool. Unauthenticated user can perform users enumeration, which can make it easier CVE-2024-51745.3A flaw in Gliffy results in broken authentication through the reset functionality of the application.