2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-45885 | HIGH | 8 | 1.3% | Nov 4, 2024 | DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when... |
| CVE-2024-45884 | HIGH | 8 | 2.1% | Nov 4, 2024 | DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when... |
| CVE-2024-45882 | HIGH | 8 | 1.5% | Nov 4, 2024 | DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the `action` parame... |
| CVE-2024-51672 | HIGH | 7.2 | 0.5% | Nov 4, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPDeveloper Better... |
| CVE-2024-51582 | HIGH | 8.8 | 0.5% | Nov 4, 2024 | Path Traversal: '.../...//' vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows PHP Local File Inclusion... |
| CVE-2024-51253 | HIGH | 8 | 0.7% | Nov 4, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-51251 | HIGH | 8 | 0.7% | Nov 4, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-51249 | HIGH | 8 | 0.7% | Nov 4, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-51246 | HIGH | 8 | 0.4% | Nov 4, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-50530 | HIGH | 8.8 | 0.5% | Nov 4, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Stars SMTP Mailer stars-smtp-mailer al... |
| CVE-2024-50529 | HIGH | 8.8 | 0.5% | Nov 4, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in rudrainn Training – Courses training allows Upload a We... |
| CVE-2024-50528 | HIGH | 7.5 | 0.4% | Nov 4, 2024 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Stacks Stacks Mobile App Bui... |
| CVE-2024-45164 | HIGH | 7.1 | 0.3% | Nov 4, 2024 | Akamai SIA (Secure Internet Access Enterprise) ThreatAvert, in SPS (Security and Personalization Services) before the la... |
| CVE-2024-51561 | HIGH | 7.5 | 0.5% | Nov 4, 2024 | This vulnerability exists in Aero due to improper implementation of OTP validation mechanism in certain API endpoints. A... |
| CVE-2024-36485 | HIGH | 8.8 | 1.5% | Nov 4, 2024 | Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option. |
| CVE-2024-51661 | HIGH | 7.2 | 1.1% | Nov 4, 2024 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in David Lingre... |
| CVE-2024-48878 | HIGH | 8.8 | 1.5% | Nov 4, 2024 | Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report. |
| CVE-2024-10389 | HIGH | 7.5 | 0.2% | Nov 4, 2024 | There exists a Path Traversal vulnerability in Safearchive on Platforms with Case-Insensitive Filesystems (e.g., NTFS). ... |
| CVE-2024-38424 | HIGH | 7.8 | 0.1% | Nov 4, 2024 | Memory corruption during GNSS HAL process initialization. |
| CVE-2024-38423 | HIGH | 7.8 | 0.1% | Nov 4, 2024 | Memory corruption while processing GPU page table switch. |
| CVE-2024-38422 | HIGH | 7.8 | 0.1% | Nov 4, 2024 | Memory corruption while processing voice packet with arbitrary data received from ADSP. |
| CVE-2024-38421 | HIGH | 7.8 | 0.1% | Nov 4, 2024 | Memory corruption while processing GPU commands. |
| CVE-2024-38419 | HIGH | 7.8 | 0.1% | Nov 4, 2024 | Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node. |
| CVE-2024-38415 | HIGH | 7.8 | 0.1% | Nov 4, 2024 | Memory corruption while handling session errors from firmware. |
| CVE-2024-38410 | HIGH | 7.8 | 0.1% | Nov 4, 2024 | Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now