2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-49243 | HIGH | 8.8 | 0.5% | Oct 18, 2024 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2024-4740 | HIGH | 7.5 | 0.3% | Oct 18, 2024 | MXsecurity software versions v1.1.0 and prior are vulnerable because of the use of hard-coded credentials. This vulnerab... |
| CVE-2024-4739 | HIGH | 7.5 | 0.3% | Oct 18, 2024 | The lack of access restriction to a resource from unauthorized users makes MXsecurity software versions v1.1.0 and prior... |
| CVE-2024-47487 | HIGH | 8.8 | 0.4% | Oct 18, 2024 | There is a SQL injection vulnerability in some HikCentral Professional versions. This could allow an authenticated user ... |
| CVE-2024-10079 | HIGH | 8.8 | 0.8% | Oct 18, 2024 | The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.... |
| CVE-2024-9264 | HIGH | 8.8 | 97.8% | Oct 18, 2024 | The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input.... |
| CVE-2024-43596 | HIGH | 8.8 | 1.0% | Oct 17, 2024 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2024-43595 | HIGH | 8.8 | 1.0% | Oct 17, 2024 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2024-43587 | HIGH | 8.1 | 0.9% | Oct 17, 2024 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2024-43579 | HIGH | 8.3 | 0.7% | Oct 17, 2024 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2024-43578 | HIGH | 8.3 | 0.7% | Oct 17, 2024 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2024-10093 | HIGH | 7.8 | 0.2% | Oct 17, 2024 | A vulnerability, which was classified as critical, was found in VSO ConvertXtoDvd 7.0.0.83. Affected is an unknown funct... |
| CVE-2024-33453 | HIGH | 8.1 | 1.0% | Oct 17, 2024 | Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the external... |
| CVE-2024-30875 | HIGH | 7.1 | 0.8% | Oct 17, 2024 | Cross Site Scripting vulnerability in JavaScript Library jquery-ui v.1.13.1 allows a remote attacker to obtain sensitive... |
| CVE-2024-48924 | HIGH | 8.7 | 0.4% | Oct 17, 2024 | ### Impact When this library is used to deserialize messagepack data from an untrusted source, there is a risk of a den... |
| CVE-2024-49283 | HIGH | 7.1 | 0.3% | Oct 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme CURCY w... |
| CVE-2024-49278 | HIGH | 7.1 | 0.3% | Oct 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in omnipressteam Omni... |
| CVE-2024-49276 | HIGH | 7.1 | 0.3% | Oct 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cliogrow Clio Grow... |
| CVE-2024-49248 | HIGH | 7.1 | 0.3% | Oct 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spacetime Ad Inser... |
| CVE-2024-7755 | HIGH | 8.2 | 0.3% | Oct 17, 2024 | The EWON FLEXY 202 transmits credentials using a weak encoding method base64. An attacker who is present in the network ... |
| CVE-2024-49316 | HIGH | 7.1 | 0.3% | Oct 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zodiac Akismet hta... |
| CVE-2024-49309 | HIGH | 7.1 | 0.3% | Oct 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in omarfolghe Digital... |
| CVE-2024-49308 | HIGH | 7.1 | 0.3% | Oct 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Toast Plugins Anim... |
| CVE-2024-10100 | HIGH | 7.5 | 0.6% | Oct 17, 2024 | A path traversal vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability is due to improper ha... |
| CVE-2024-49317 | HIGH | 7.5 | 0.5% | Oct 17, 2024 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now