2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-45148 | HIGH | 8.8 | 0.7% | Oct 10, 2024 | Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authentication v... |
| CVE-2024-45117 | HIGH | 7.6 | 0.9% | Oct 10, 2024 | Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Input Validation... |
| CVE-2024-45116 | HIGH | 8.1 | 0.9% | Oct 10, 2024 | Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Cross-Site Scripting (XSS)... |
| CVE-2024-6747 | HIGH | 7.5 | 0.4% | Oct 10, 2024 | Information leakage in mknotifyd in Checkmk before 2.3.0p18, 2.2.0p36, 2.1.0p49 and in 2.0.0p39 (EOL) allows attacker to... |
| CVE-2024-9781 | HIGH | 7.5 | 0.3% | Oct 10, 2024 | AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet i... |
| CVE-2024-9156 | HIGH | 7.5 | 0.4% | Oct 10, 2024 | The TI WooCommerce Wishlist WordPress plugin through 2.8.2 is vulnerable to SQL Injection due to insufficient escaping o... |
| CVE-2024-9022 | HIGH | 7.2 | 0.9% | Oct 10, 2024 | The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the ‘o... |
| CVE-2024-9581 | HIGH | 7.3 | 0.4% | Oct 10, 2024 | The Shortcodes AnyWhere plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and i... |
| CVE-2024-9522 | HIGH | 8.8 | 0.5% | Oct 10, 2024 | The WP Users Masquerade plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.... |
| CVE-2024-9519 | HIGH | 7.2 | 0.5% | Oct 10, 2024 | The UserPlus plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check... |
| CVE-2024-48958 | HIGH | 7.8 | 0.6% | Oct 10, 2024 | execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a c... |
| CVE-2024-48957 | HIGH | 7.8 | 0.5% | Oct 10, 2024 | execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a c... |
| CVE-2024-39525 | HIGH | 8.7 | 0.4% | Oct 9, 2024 | An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Ju... |
| CVE-2024-39516 | HIGH | 8.7 | 0.4% | Oct 9, 2024 | An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS E... |
| CVE-2024-39515 | HIGH | 8.7 | 0.4% | Oct 9, 2024 | An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Network... |
| CVE-2024-3656 | HIGH | 8.1 | 2.8% | Oct 9, 2024 | A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access adminis... |
| CVE-2024-9473 | HIGH | 7.8 | 0.3% | Oct 9, 2024 | A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a locally authenticat... |
| CVE-2024-9468 | HIGH | 7.5 | 0.4% | Oct 9, 2024 | A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-... |
| CVE-2024-9463 | HIGH | 7.5 | 98.4% | Oct 9, 2024 | An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitra... |
| CVE-2024-46307 | HIGH | 7.5 | 0.5% | Oct 9, 2024 | A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products. |
| CVE-2024-43610 | HIGH | 7.5 | 1.0% | Oct 9, 2024 | Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view s... |
| CVE-2024-46316 | HIGH | 8 | 1.1% | Oct 9, 2024 | DrayTek Vigor3900 v1.5.1.6 was discovered to contain a command injection vulnerability via the sub_2C920 function at /cg... |
| CVE-2024-46304 | HIGH | 7.5 | 0.5% | Oct 9, 2024 | A NULL pointer dereference in libcoap v4.3.5-rc2 and below allows a remote attacker to cause a denial of service via the... |
| CVE-2024-46292 | HIGH | 7.5 | 0.8% | Oct 9, 2024 | A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via a crafted input inserte... |
| CVE-2024-8048 | HIGH | 7.8 | 0.2% | Oct 9, 2024 | In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible using object ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now