CVE-2024-52945

An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. If a user executes specific NetBackup commands or an attacker uses social engineering techniques to impel the user to execute the commands, a malicious DLL could be loaded, resulting in execution of the attacker's code in the user's security context.

• CWE-94

• https://www.veritas.com/content/support/en_US/security/VTS24-012Vendor Advisory

Published

Nov 18, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-5294D-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Den…6.5
• CVE-2024-52940AnyDesk through 8.1.0 on Windows, when Allow Direct Connecti…7.5
• CVE-2024-52941An issue was discovered in Veritas Enterprise Vault before 1…5.4
• CVE-2024-52942An issue was discovered in Veritas Enterprise Vault before 1…5.4
• CVE-2024-52943An issue was discovered in Veritas Enterprise Vault before 1…5.4
• CVE-2024-52944An issue was discovered in Veritas Enterprise Vault before 1…5.4
• CVE-2024-52946An issue was discovered in LemonLDAP::NG before 2.20.1. An I…8.8
• CVE-2024-52947A cross-site scripting (XSS) vulnerability in LemonLDAP::NG …5.4
• CVE-2024-52949iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/if…7.5
• CVE-2024-5295D-Link G416 flupl self Command Injection Remote Code Executi…8.8
• CVE-2024-52951Stored Cross-Site Scripting in the Access Request History in…8
• CVE-2024-52958A improper verification of cryptographic signature vulnerabi…7.2