2024 CVE Vulnerabilities
39,221 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-48410 | MEDIUM | 6.1 | 0.4% | Nov 1, 2024 | Cross Site Scripting vulnerability in Camtrace v.9.16.2.1 allows a remote attacker to execute arbitrary code via the log... |
| CVE-2024-41745 | MEDIUM | 6.1 | 0.3% | Nov 1, 2024 | IBM CICS TX Standard is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to emb... |
| CVE-2024-41741 | MEDIUM | 5.3 | 0.3% | Nov 1, 2024 | IBM TXSeries for Multiplatforms 10.1 could allow an attacker to determine valid usernames due to an observable timing di... |
| CVE-2024-41738 | MEDIUM | 5.9 | 0.3% | Nov 1, 2024 | IBM TXSeries for Multiplatforms 10.1 could allow an attacker to obtain sensitive information from the query string of an... |
| CVE-2024-51432 | MEDIUM | 4.8 | 0.3% | Nov 1, 2024 | Cross Site Scripting vulnerability in FiberHome HG6544C RP2743 allows an attacker to execute arbitrary code via the SSID... |
| CVE-2024-51399 | MEDIUM | 5.7 | 0.2% | Nov 1, 2024 | Altai Technologies Ltd Altai IX500 Indoor 22 802.11ac Wave 2 AP After login, there are file reads in the background, and... |
| CVE-2024-51398 | MEDIUM | 6.5 | 0.2% | Nov 1, 2024 | Altai Technologies Ltd Altai X500 Indoor 22 802.11ac Wave 2 AP web Management Weak password leakage in the background ma... |
| CVE-2024-51377 | MEDIUM | 5.4 | 0.4% | Nov 1, 2024 | An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk (On-Premise and Cloud) 9.2.0 allows a remote attacker to ... |
| CVE-2024-48289 | MEDIUM | 6.5 | 0.3% | Nov 1, 2024 | An issue in the Bluetooth Low Energy implementation of Cypress Bluetooth SDK v3.66 allows attackers to cause a Denial of... |
| CVE-2024-43937 | MEDIUM | 4.3 | 0.3% | Nov 1, 2024 | Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control S... |
| CVE-2024-43290 | MEDIUM | 5.3 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration.This issue affects Atarim: from n/a... |
| CVE-2024-43285 | MEDIUM | 6.3 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in Presto Made, Inc Presto Player allows Exploiting Incorrectly Configured Access Co... |
| CVE-2024-43277 | MEDIUM | 5.3 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in AyeCode Ltd UsersWP allows Exploiting Incorrectly Configured Access Control Secur... |
| CVE-2024-43273 | MEDIUM | 5.4 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in icegram Icegram Collect plugin allows Exploiting Incorrectly Configured Access Co... |
| CVE-2024-43270 | MEDIUM | 5.3 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in WPBackItUp Backup and Restore WordPress allows Accessing Functionality Not Proper... |
| CVE-2024-43268 | MEDIUM | 5.4 | 0.3% | Nov 1, 2024 | Access Control vulnerability in WPBackItUp Backup and Restore WordPress allows . This issue affects Backup and Restore ... |
| CVE-2024-43260 | MEDIUM | 5.4 | 0.3% | Nov 1, 2024 | Missing Authorization vulnerability in Creative Motion Clearfy Cache allows Exploiting Incorrectly Configured Access Con... |
| CVE-2024-43229 | MEDIUM | 4.3 | 0.3% | Nov 1, 2024 | Missing Authorization vulnerability in Cornel Raiu WP Search Analytics search-analytics.This issue affects WP Search Ana... |
| CVE-2024-43219 | MEDIUM | 5.3 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in ووکامرس فارسی Persian WooCommerce allows Accessing Functionality Not Properly Con... |
| CVE-2024-43215 | MEDIUM | 4.3 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in creativemotion Social Slider Feed allows Exploiting Incorrectly Configured Access... |
| CVE-2024-43211 | MEDIUM | 5.9 | 0.3% | Nov 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps MailChim... |
| CVE-2024-43209 | MEDIUM | 6.5 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in Bitly allows Accessing Functionality Not Properly Constrained by ACLs.This issue ... |
| CVE-2024-43208 | MEDIUM | 4.3 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in Matt Miller Send Emails with Mandrill send-emails-with-mandrill allows Exploiting... |
| CVE-2024-43159 | MEDIUM | 5.3 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo... |
| CVE-2024-43157 | MEDIUM | 4.3 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in nCrafts FormCraft allows Exploiting Incorrectly Configured Access Control Securit... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now