CVE-2024-9678

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

An SQL Injection vulnerability existed in DLP Extension 11.11.1.3. The vulnerability allowed an attacker to perform arbitrary SQL queries potentially leading to command execution.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
Trellix	DLP Extension	11.11.1.3

References

https://thrive.trellix.com/s/article/000013964

Timeline

Published: Dec 16, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-96795.3A Hardcoded Cryptographic key vulnerability existed in DLP Extension 11.11.1.3 which allowed the decryption of previously encrypted user cre CVE-2024-96809.8An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had rep CVE-2024-96816.5When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later CVE-2024-96825.4The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Form Builder wid CVE-2024-96835.3A vulnerability was found in Quay, which allows successful authentication even when a truncated password version is provided. This flaw affe CVE-2024-96847.5FreyrSCADA/IEC-60870-5-104 server v21.06.008 allows remote attackers to cause a denial of service by sending specific message sequences.CVE-2024-96854.3The Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a missing capability check on t CVE-2024-96865.3The Order Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a missing capability chec CVE-2024-96878.8The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0. This is due to i CVE-2024-96894.3The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow attackers to make logg CVE-2024-96926.9VIMESA VHF/FM Transmitter Blue Plus is suffering from a Denial-of-Service (DoS) vulnerability. An unauthenticated attacker can issue an unau CVE-2024-96938.8An issue was discovered in GitLab CE/EE affecting all versions starting from 16.0 prior to 17.3.7, starting from 17.4 prior to 17.4.4, and s