2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-47404 | HIGH | 7.8 | 0.2% | Nov 5, 2024 | in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sens... |
| CVE-2024-47137 | HIGH | 7.8 | 0.2% | Nov 5, 2024 | in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sens... |
| CVE-2024-10097 | HIGH | 8.1 | 0.7% | Nov 5, 2024 | The Loginizer Security and Loginizer plugins for WordPress are vulnerable to authentication bypass in all versions up to... |
| CVE-2024-9459 | HIGH | 8.8 | 2.1% | Nov 5, 2024 | Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in re... |
| CVE-2024-10810 | HIGH | 7.5 | 0.5% | Nov 5, 2024 | A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an ... |
| CVE-2024-10809 | HIGH | 7.5 | 0.5% | Nov 5, 2024 | A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical. This issue affects some ... |
| CVE-2024-10808 | HIGH | 7.5 | 0.5% | Nov 5, 2024 | A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability ... |
| CVE-2024-31998 | HIGH | 8.8 | 0.2% | Nov 5, 2024 | Combodo iTop is a simple, web based IT Service Management tool. A CSRF can be performed on CSV import simulation. This i... |
| CVE-2024-51734 | HIGH | 8.7 | 0.4% | Nov 4, 2024 | Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delet... |
| CVE-2024-51500 | HIGH | 7.5 | 0.4% | Nov 4, 2024 | Meshtastic firmware is a device firmware for the Meshtastic project. The Meshtastic firmware does not check for packets ... |
| CVE-2024-10805 | HIGH | 8.8 | 0.5% | Nov 4, 2024 | A vulnerability was found in code-projects University Event Management System 1.0. It has been classified as critical. T... |
| CVE-2024-30619 | HIGH | 7.5 | 0.4% | Nov 4, 2024 | Chamilo LMS Version 1.11.26 is vulnerable to Incorrect Access Control. A non-authenticated attacker can request the numb... |
| CVE-2024-30616 | HIGH | 8.8 | 0.6% | Nov 4, 2024 | Chamilo LMS 1.11.26 is vulnerable to Incorrect Access Control via main/auth/profile. Non-admin users can manipulate sens... |
| CVE-2024-51329 | HIGH | 8.8 | 0.6% | Nov 4, 2024 | A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password reset token via user in... |
| CVE-2024-51326 | HIGH | 7.5 | 0.9% | Nov 4, 2024 | SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrar... |
| CVE-2024-51127 | HIGH | 7.1 | 0.7% | Nov 4, 2024 | An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensit... |
| CVE-2024-48336 | HIGH | 8.4 | 0.5% | Nov 4, 2024 | The install() function of ProviderInstaller.java in Magisk App before canary version 27007 does not verify the GMS app b... |
| CVE-2024-48809 | HIGH | 7.5 | 0.6% | Nov 4, 2024 | An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a ... |
| CVE-2024-51626 | HIGH | 8.8 | 0.4% | Nov 4, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in chenyenming Woocom... |
| CVE-2024-45893 | HIGH | 8 | 1.6% | Nov 4, 2024 | DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when... |
| CVE-2024-45891 | HIGH | 8 | 1.3% | Nov 4, 2024 | DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when... |
| CVE-2024-45890 | HIGH | 8 | 2.1% | Nov 4, 2024 | DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability This vulnerability occurs when ... |
| CVE-2024-45889 | HIGH | 8 | 1.6% | Nov 4, 2024 | DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when... |
| CVE-2024-45888 | HIGH | 8 | 2.0% | Nov 4, 2024 | DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the `action` parame... |
| CVE-2024-45887 | HIGH | 8 | 2.1% | Nov 4, 2024 | DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now