2024 CVE Vulnerabilities
39,221 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-45754 | HIGH | 7.2 | 0.5% | Oct 11, 2024 | An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before... |
| CVE-2024-35522 | HIGH | 7.2 | 1.8% | Oct 11, 2024 | Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injectio... |
| CVE-2024-35517 | HIGH | 7.2 | 14.1% | Oct 11, 2024 | Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usb_remote_smb_conf.cgi via the share_name parameter. |
| CVE-2024-48938 | HIGH | 7.5 | 0.6% | Oct 11, 2024 | Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email. Parsing the content of emails... |
| CVE-2024-48788 | HIGH | 7.5 | 0.6% | Oct 11, 2024 | An issue in YESCAM (com.yescom.YesCam.zwave) 1.0.2 allows a remote attacker to obtain sensitive information via the firm... |
| CVE-2024-46468 | HIGH | 7.5 | 0.4% | Oct 11, 2024 | A Server-Side Request Forgery (SSRF) vulnerability exists in the jpress <= v5.1.1, which can be exploited by an attacker... |
| CVE-2024-48777 | HIGH | 7.5 | 0.4% | Oct 11, 2024 | LEDVANCE com.ledvance.smartplus.eu 2.1.10 allows a remote attacker to obtain sensitive information via the firmware upda... |
| CVE-2024-48776 | HIGH | 7.5 | 0.4% | Oct 11, 2024 | An issue in Shelly com.home.shelly 1.0.4 allows a remote attacker to obtain sensitive information via the firmware updat... |
| CVE-2024-48775 | HIGH | 7.5 | 0.4% | Oct 11, 2024 | An issue in Plug n Play Camera com.ezset.delaney 1.2.0 allows a remote attacker to obtain sensitive information via the ... |
| CVE-2024-48774 | HIGH | 7.5 | 0.4% | Oct 11, 2024 | An issue in Fermax Asia Pacific Pte Ltd com.fermax.vida 2.4.6 allows a remote attacker to obtain sensitve information vi... |
| CVE-2024-48773 | HIGH | 7.5 | 0.5% | Oct 11, 2024 | An issue in WoFit v.7.2.3 allows a remote attacker to obtain sensitive information via the firmware update process |
| CVE-2024-48771 | HIGH | 7.5 | 0.4% | Oct 11, 2024 | An issue in almando GmbH Almando Play APP (com.almando.play) 1.8.2 allows a remote attacker to obtain sensitive informat... |
| CVE-2024-48770 | HIGH | 8.2 | 0.4% | Oct 11, 2024 | An issue in Plug n Play Camera com.wisdomcity.zwave 1.1.0 allows a remote attacker to obtain sensitive information via t... |
| CVE-2024-48768 | HIGH | 7.5 | 0.5% | Oct 11, 2024 | An issue in almaodo GmbH appinventor.ai_google.almando_control 2.3.1 allows a remote attacker to obtain sensitive inform... |
| CVE-2024-38365 | HIGH | 8.1 | 1.0% | Oct 11, 2024 | btcd is an alternative full node bitcoin implementation written in Go (golang). The btcd Bitcoin client (versions 0.10 t... |
| CVE-2024-8912 | HIGH | 7.5 | 0.2% | Oct 11, 2024 | An HTTP Request Smuggling vulnerability in Looker allowed an unauthorized attacker to capture HTTP responses destined fo... |
| CVE-2024-48020 | HIGH | 8.5 | 0.5% | Oct 11, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx Backup and... |
| CVE-2024-9859 | HIGH | 8.8 | 0.4% | Oct 11, 2024 | Type confusion in WebAssembly in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to execute arbitrary co... |
| CVE-2024-47877 | HIGH | 7.5 | 0.5% | Oct 11, 2024 | Extract is aA Go library to extract archives in zip, tar.gz or tar.bz2 formats. A maliciously crafted archive may allow ... |
| CVE-2024-44734 | HIGH | 7.5 | 0.3% | Oct 11, 2024 | Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a... |
| CVE-2024-44414 | HIGH | 8.8 | 1.4% | Oct 11, 2024 | A vulnerability was discovered in FBM_292W-21.03.10V, which has been classified as critical. This issue affects the sub_... |
| CVE-2024-44413 | HIGH | 8.8 | 3.0% | Oct 11, 2024 | A vulnerability was discovered in DI_8200-16.07.26A1, which has been classified as critical. This issue affects the upgr... |
| CVE-2024-42018 | HIGH | 7.7 | 0.4% | Oct 11, 2024 | An issue was discovered in Atos Eviden SMC xScale before 1.6.6. During initialization of nodes, some configuration param... |
| CVE-2024-9046 | HIGH | 7.8 | 0.2% | Oct 11, 2024 | A DLL hijack vulnerability was reported in Lenovo stARstudio that could allow a local attacker to execute code with elev... |
| CVE-2024-8376 | HIGH | 7.5 | 0.7% | Oct 11, 2024 | In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now