2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-30141 | MEDIUM | 4.7 | 0.3% | Nov 7, 2024 | HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information. Detailed erro... |
| CVE-2024-30140 | MEDIUM | 5.4 | 0.2% | Nov 7, 2024 | HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attac... |
| CVE-2024-10027 | MEDIUM | 4.8 | 0.3% | Nov 7, 2024 | The WP Booking Calendar WordPress plugin before 10.6.3 does not sanitise and escape some of its Widgets settings, which ... |
| CVE-2024-51409 | MEDIUM | 6.5 | 0.4% | Nov 6, 2024 | Buffer Overflow vulnerability in Tenda O3 v.1.0.0.5 allows a remote attacker to cause a denial of service via a network ... |
| CVE-2024-10928 | MEDIUM | 6.1 | 0.4% | Nov 6, 2024 | A vulnerability was found in MonoCMS up to 20240528. It has been declared as problematic. Affected by this vulnerability... |
| CVE-2024-10927 | MEDIUM | 6.1 | 0.4% | Nov 6, 2024 | A vulnerability was found in MonoCMS up to 20240528. It has been classified as problematic. Affected is an unknown funct... |
| CVE-2024-50345 | MEDIUM | 6.1 | 0.6% | Nov 6, 2024 | symfony/http-foundation is a module for the Symphony PHP framework which defines an object-oriented layer for the HTTP s... |
| CVE-2024-50342 | MEDIUM | 4.3 | 0.5% | Nov 6, 2024 | symfony/http-client is a module for the Symphony PHP framework which provides powerful methods to fetch HTTP resources s... |
| CVE-2024-10941 | MEDIUM | 6.5 | 0.4% | Nov 6, 2024 | A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. Th... |
| CVE-2024-10926 | MEDIUM | 5.3 | 0.3% | Nov 6, 2024 | A vulnerability was found in IBPhoenix ibWebAdmin up to 1.0.2 and classified as problematic. This issue affects some unk... |
| CVE-2024-51988 | MEDIUM | 6.5 | 0.4% | Nov 6, 2024 | RabbitMQ is a feature rich, multi-protocol messaging and streaming broker. In affected versions queue deletion via the H... |
| CVE-2024-51751 | MEDIUM | 6.5 | 0.7% | Nov 6, 2024 | Gradio is an open-source Python package designed to enable quick builds of a demo or web application. If File or UploadB... |
| CVE-2024-50637 | MEDIUM | 5.4 | 0.4% | Nov 6, 2024 | UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function. This allows attackers to... |
| CVE-2024-20540 | MEDIUM | 5.4 | 0.3% | Nov 6, 2024 | A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) c... |
| CVE-2024-20539 | MEDIUM | 4.8 | 0.3% | Nov 6, 2024 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to cond... |
| CVE-2024-20538 | MEDIUM | 6.1 | 0.3% | Nov 6, 2024 | A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to co... |
| CVE-2024-20537 | MEDIUM | 6.5 | 0.5% | Nov 6, 2024 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to bypa... |
| CVE-2024-20534 | MEDIUM | 4.8 | 0.3% | Nov 6, 2024 | A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Vid... |
| CVE-2024-20533 | MEDIUM | 4.8 | 0.3% | Nov 6, 2024 | A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Vid... |
| CVE-2024-20532 | MEDIUM | 5.5 | 0.5% | Nov 6, 2024 | A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files... |
| CVE-2024-20531 | MEDIUM | 6.5 | 0.4% | Nov 6, 2024 | A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the und... |
| CVE-2024-20530 | MEDIUM | 6.1 | 0.3% | Nov 6, 2024 | A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to co... |
| CVE-2024-20529 | MEDIUM | 5.5 | 0.5% | Nov 6, 2024 | A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files... |
| CVE-2024-20527 | MEDIUM | 5.5 | 0.5% | Nov 6, 2024 | A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files... |
| CVE-2024-20525 | MEDIUM | 6.1 | 0.3% | Nov 6, 2024 | A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to co... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now