2024 CVE Vulnerabilities
39,218 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-54197 | HIGH | 7.2 | 0.3% | Dec 10, 2024 | SAP NetWeaver Administrator(System Overview) allows an authenticated attacker to enumerate accessible HTTP endpoints in ... |
| CVE-2024-55634 | HIGH | 8.1 | 0.4% | Dec 10, 2024 | A vulnerability in Drupal Core allows Privilege Escalation.This issue affects Drupal Core: from 8.0.0 before 10.2.11, fr... |
| CVE-2024-50628 | HIGH | 8.8 | 0.5% | Dec 9, 2024 | An issue was discovered in the web services of Digi ConnectPort LTS before 1.4.12. It allows an attacker on the local ar... |
| CVE-2024-50627 | HIGH | 8.8 | 0.3% | Dec 9, 2024 | An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file u... |
| CVE-2024-50626 | HIGH | 8.8 | 0.5% | Dec 9, 2024 | An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Directory Traversal vulnerability exists in WebFS. This... |
| CVE-2024-50625 | HIGH | 8 | 0.3% | Dec 9, 2024 | An issue was discovered in Digi ConnectPort LTS before 1.4.12. A vulnerability in the file upload handling of a web appl... |
| CVE-2024-54151 | HIGH | 7.5 | 0.6% | Dec 9, 2024 | Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 11.0.0 and prior to... |
| CVE-2024-54149 | HIGH | 8.4 | 0.4% | Dec 9, 2024 | Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Winter CMS prior to ve... |
| CVE-2024-54938 | HIGH | 7.5 | 0.5% | Dec 9, 2024 | A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which allows remote attackers to acc... |
| CVE-2024-54928 | HIGH | 7.2 | 0.5% | Dec 9, 2024 | kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_teacher.php, |
| CVE-2024-54927 | HIGH | 7.2 | 0.5% | Dec 9, 2024 | Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_users.php. |
| CVE-2024-52586 | HIGH | 7.8 | 0.2% | Dec 9, 2024 | eLabFTW is an open source electronic lab notebook for research labs. A vulnerability has been found starting in version ... |
| CVE-2024-46547 | HIGH | 7.5 | 0.4% | Dec 9, 2024 | A vulnerability was found in Romain Bourdon Wampserver all versions (discovered in v3.2.3 and v3.2.6) where unauthorized... |
| CVE-2024-54933 | HIGH | 7.2 | 0.5% | Dec 9, 2024 | Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_content.php. |
| CVE-2024-54930 | HIGH | 7.2 | 0.5% | Dec 9, 2024 | Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_student.php. |
| CVE-2024-54922 | HIGH | 7.2 | 0.6% | Dec 9, 2024 | A SQL Injection was found in /admin/edit_user.php of kashipara E-learning Management System v1.0, which allows remote at... |
| CVE-2024-11608 | HIGH | 7.8 | 0.2% | Dec 9, 2024 | A maliciously crafted SKP file, when linked or imported into Autodesk Revit, can be used to cause a Heap-based Overflow.... |
| CVE-2024-11454 | HIGH | 7.8 | 0.2% | Dec 9, 2024 | A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and ... |
| CVE-2024-54926 | HIGH | 8.8 | 0.6% | Dec 9, 2024 | A SQL Injection vulnerability was found in /search_class.php of kashipara E-learning Management System v1.0, which allow... |
| CVE-2024-53450 | HIGH | 7.5 | 0.5% | Dec 9, 2024 | RAGFlow 0.13.0 suffers from improper access control in document-hooks.ts, allowing unauthorized access to user documents... |
| CVE-2024-45761 | HIGH | 8.1 | 0.3% | Dec 9, 2024 | Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains an improper input validation vulnerability. ... |
| CVE-2024-45760 | HIGH | 8.8 | 0.3% | Dec 9, 2024 | Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains an improper access control vulnerability. A ... |
| CVE-2024-40582 | HIGH | 7.5 | 0.4% | Dec 9, 2024 | Pentaminds CuroVMS v2.0.1 was discovered to contain exposed sensitive information. |
| CVE-2024-49600 | HIGH | 7.8 | 0.2% | Dec 9, 2024 | Dell Power Manager (DPM), versions prior to 3.17, contain an improper access control vulnerability. A low privileged att... |
| CVE-2024-54929 | HIGH | 7.2 | 0.5% | Dec 9, 2024 | KASHIPARA E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_subject.php. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now