2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-49313 | HIGH | 7.1 | 0.2% | Oct 17, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in rudestan VKontakte Wall Post vkontakte-wall-post allows Stored XSS.Th... |
| CVE-2024-49312 | HIGH | 8.6 | 0.2% | Oct 17, 2024 | Server-Side Request Forgery (SSRF) vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge.This issue affects Edwiser B... |
| CVE-2024-49299 | HIGH | 7.6 | 0.4% | Oct 17, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Surfer Surfer surf... |
| CVE-2024-49297 | HIGH | 8.5 | 0.4% | Oct 17, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in zohocrm Zoho CRM L... |
| CVE-2024-49287 | HIGH | 7.5 | 0.6% | Oct 17, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in mh6webentwicklung PDF-Re... |
| CVE-2024-49285 | HIGH | 7.5 | 0.5% | Oct 17, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Jeroen Berkvens SSV Mail... |
| CVE-2024-49244 | HIGH | 8.5 | 0.4% | Oct 17, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vrinsoft CSV Produ... |
| CVE-2024-49235 | HIGH | 7.5 | 0.4% | Oct 17, 2024 | Insertion of Sensitive Information Into Sent Data vulnerability in videowhisper Contact Forms, Live Support, CRM, Video ... |
| CVE-2024-49219 | HIGH | 8.8 | 0.4% | Oct 17, 2024 | Incorrect Privilege Assignment vulnerability in themexpo RS-Members rs-members allows Privilege Escalation.This issue af... |
| CVE-2024-48638 | HIGH | 8 | 2.1% | Oct 17, 2024 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via th... |
| CVE-2024-48637 | HIGH | 8 | 2.1% | Oct 17, 2024 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via th... |
| CVE-2024-48636 | HIGH | 8 | 2.1% | Oct 17, 2024 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via th... |
| CVE-2024-48635 | HIGH | 8 | 2.1% | Oct 17, 2024 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via th... |
| CVE-2024-48634 | HIGH | 8 | 16.7% | Oct 17, 2024 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via th... |
| CVE-2024-48633 | HIGH | 8 | 2.0% | Oct 17, 2024 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabiliti... |
| CVE-2024-48632 | HIGH | 8 | 2.0% | Oct 17, 2024 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabiliti... |
| CVE-2024-48631 | HIGH | 8 | 2.1% | Oct 17, 2024 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via th... |
| CVE-2024-48630 | HIGH | 8 | 2.1% | Oct 17, 2024 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via th... |
| CVE-2024-48629 | HIGH | 8 | 2.1% | Oct 17, 2024 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via th... |
| CVE-2024-47312 | HIGH | 8.5 | 0.4% | Oct 17, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Grim Classic Ed... |
| CVE-2024-47304 | HIGH | 8.5 | 0.4% | Oct 17, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjahan Jewel Fl... |
| CVE-2024-43997 | HIGH | 7.1 | 0.3% | Oct 17, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in easy.Jobs E... |
| CVE-2024-49399 | HIGH | 8.7 | 0.4% | Oct 17, 2024 | The affected product is vulnerable to an attacker being able to use commands without providing a password which may allo... |
| CVE-2024-49398 | HIGH | 8.8 | 0.5% | Oct 17, 2024 | The affected product is vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute code. |
| CVE-2024-49396 | HIGH | 8.7 | 0.4% | Oct 17, 2024 | The affected product is vulnerable due to insufficiently protected credentials, which may allow an attacker to impersona... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now