2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-50313 | MEDIUM | 6.9 | 0.3% | Nov 12, 2024 | A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.16.0 only if the basic authentication mech... |
| CVE-2024-47808 | MEDIUM | 6.5 | 0.1% | Nov 12, 2024 | A vulnerability has been identified in SINEC NMS (All versions < V3.0 SP1). The affected application contains a database... |
| CVE-2024-46894 | MEDIUM | 5.4 | 0.3% | Nov 12, 2024 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not p... |
| CVE-2024-46889 | MEDIUM | 6.9 | 0.3% | Nov 12, 2024 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application uses hard-... |
| CVE-2024-36140 | MEDIUM | 5.4 | 0.3% | Nov 12, 2024 | A vulnerability has been identified in OZW672 (All versions < V5.2), OZW772 (All versions < V5.2). The user accounts tab... |
| CVE-2024-10323 | MEDIUM | 5.4 | 0.3% | Nov 12, 2024 | The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File upl... |
| CVE-2024-10179 | MEDIUM | 6.4 | 0.3% | Nov 12, 2024 | The Slickstream: Engagement and Conversions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl... |
| CVE-2024-9836 | MEDIUM | 5.9 | 0.3% | Nov 12, 2024 | The RSS Feed Widget WordPress plugin before 3.0.0 does not validate and escape some of its shortcode attributes before o... |
| CVE-2024-9835 | MEDIUM | 4.8 | 0.3% | Nov 12, 2024 | The RSS Feed Widget WordPress plugin before 3.0.1 does not escape the $_SERVER['REQUEST_URI'] parameter before outputtin... |
| CVE-2024-9357 | MEDIUM | 6.1 | 0.4% | Nov 12, 2024 | The xili-tidy-tags plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'action' parameter in al... |
| CVE-2024-29075 | MEDIUM | 4.6 | 0.2% | Nov 12, 2024 | Active debug code vulnerability exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerab... |
| CVE-2024-10790 | MEDIUM | 5.4 | 0.3% | Nov 12, 2024 | The Admin and Site Enhancements (ASE) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File upl... |
| CVE-2024-11102 | MEDIUM | 4.8 | 0.4% | Nov 12, 2024 | A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected b... |
| CVE-2024-10695 | MEDIUM | 4.3 | 0.3% | Nov 12, 2024 | The Futurio Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.0.1... |
| CVE-2024-10685 | MEDIUM | 6.1 | 0.3% | Nov 12, 2024 | The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via th... |
| CVE-2024-10538 | MEDIUM | 5.4 | 0.2% | Nov 12, 2024 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the before_label pa... |
| CVE-2024-49395 | MEDIUM | 5.3 | 0.2% | Nov 12, 2024 | In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field b... |
| CVE-2024-49394 | MEDIUM | 5.3 | 0.3% | Nov 12, 2024 | In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacke... |
| CVE-2024-8882 | MEDIUM | 4.5 | 0.2% | Nov 12, 2024 | A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and ea... |
| CVE-2024-8881 | MEDIUM | 6.8 | 0.7% | Nov 12, 2024 | A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version ... |
| CVE-2024-49393 | MEDIUM | 6.5 | 0.3% | Nov 12, 2024 | In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker tha... |
| CVE-2024-11097 | MEDIUM | 5.5 | 0.3% | Nov 12, 2024 | A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. Thi... |
| CVE-2024-47593 | MEDIUM | 4.3 | 0.4% | Nov 12, 2024 | SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the serv... |
| CVE-2024-47592 | MEDIUM | 5.3 | 0.3% | Nov 12, 2024 | SAP NetWeaver AS Java allows an unauthenticated attacker to brute force the login functionality in order to identify the... |
| CVE-2024-47588 | MEDIUM | 4.7 | 0.1% | Nov 12, 2024 | In SAP NetWeaver Java (Software Update Manager 1.1), under certain conditions when a software upgrade encounters errors,... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now