2024 CVE Vulnerabilities
39,219 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-52519 | HIGH | 8.2 | 0.5% | Nov 15, 2024 | Nextcloud Server is a self hosted personal cloud system. The OAuth2 client secrets were stored in a recoverable way, so ... |
| CVE-2024-50654 | HIGH | 7.5 | 1.6% | Nov 15, 2024 | lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quant... |
| CVE-2024-50653 | HIGH | 7.5 | 0.5% | Nov 15, 2024 | CRMEB <=5.4.0 is vulnerable to Incorrect Access Control. Users can bypass the front-end restriction of only being able t... |
| CVE-2024-44625 | HIGH | 8.8 | 14.9% | Nov 15, 2024 | Gogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go. |
| CVE-2024-39726 | HIGH | 8.2 | 0.7% | Nov 15, 2024 | IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 is vulnerable to an XML External Entity In... |
| CVE-2024-11248 | HIGH | 8.8 | 1.2% | Nov 15, 2024 | A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is the function f... |
| CVE-2024-52555 | HIGH | 7.8 | 0.1% | Nov 15, 2024 | In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer... |
| CVE-2024-50650 | HIGH | 7.5 | 0.5% | Nov 15, 2024 | python_book V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of us... |
| CVE-2024-50647 | HIGH | 7.5 | 0.5% | Nov 15, 2024 | The python_food ordering system V1.0 has an unauthorized vulnerability that leads to the leakage of sensitive user infor... |
| CVE-2024-41784 | HIGH | 7.5 | 0.6% | Nov 15, 2024 | IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, and 6.1.0.0 could allow a remote attacker to traverse dire... |
| CVE-2024-11245 | HIGH | 7.5 | 0.6% | Nov 15, 2024 | A vulnerability, which was classified as critical, has been found in code-projects Farmacia 1.0. This issue affects some... |
| CVE-2024-50986 | HIGH | 7.3 | 1.0% | Nov 15, 2024 | An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file. |
| CVE-2024-11242 | HIGH | 7.2 | 0.5% | Nov 15, 2024 | A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functiona... |
| CVE-2024-11241 | HIGH | 7.5 | 0.6% | Nov 15, 2024 | A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulne... |
| CVE-2024-10311 | HIGH | 8.8 | 0.4% | Nov 15, 2024 | The External Database Based Actions plugin for WordPress is vulnerable to authentication bypass in versions up to, and i... |
| CVE-2024-45784 | HIGH | 7.5 | 1.3% | Nov 15, 2024 | Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in tas... |
| CVE-2024-49778 | HIGH | 8.8 | 0.6% | Nov 14, 2024 | A heap-based buffer overflow in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to cause Denial of Service ... |
| CVE-2024-49777 | HIGH | 8.8 | 0.6% | Nov 14, 2024 | A heap-based buffer overflow in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Denial of Service ... |
| CVE-2024-41209 | HIGH | 8.8 | 0.6% | Nov 14, 2024 | A heap-based buffer overflow in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Denial of Service ... |
| CVE-2024-51659 | HIGH | 7.1 | 0.2% | Nov 14, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in GeekRMX Twitter @Anywhere Plus twitter-anywhere-plus allows Stored XS... |
| CVE-2024-51658 | HIGH | 7.1 | 0.2% | Nov 14, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Henrik Hoff WP Course Manager wp-course-manager allows Stored XSS.Thi... |
| CVE-2024-50968 | HIGH | 7.5 | 0.8% | Nov 14, 2024 | A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.... |
| CVE-2024-51687 | HIGH | 7.1 | 0.2% | Nov 14, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Platform.ly Platform.ly Official platformly allows Stored XSS.This is... |
| CVE-2024-51684 | HIGH | 7.1 | 0.2% | Nov 14, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu W3P SEO wp-perfect-plugin allows Stored XSS.This issu... |
| CVE-2024-51688 | HIGH | 7.1 | 0.2% | Nov 14, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in fraudlabspro FraudLabs Pro SMS Verification fraudlabs-pro-sms-verific... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now