2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-55955 | HIGH | 7.3 | 0.1% | Dec 31, 2024 | An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 ... |
| CVE-2024-55917 | HIGH | 7.8 | 0.3% | Dec 31, 2024 | An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on ... |
| CVE-2024-55632 | HIGH | 7.8 | 0.3% | Dec 31, 2024 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privilege... |
| CVE-2024-55631 | HIGH | 7.8 | 0.3% | Dec 31, 2024 | An engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on af... |
| CVE-2024-13074 | MEDIUM | 5.4 | 0.3% | Dec 31, 2024 | A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0. This affects an unknown p... |
| CVE-2024-56802 | HIGH | 8.7 | 0.4% | Dec 31, 2024 | Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploy... |
| CVE-2024-56198 | CRITICAL | 9.3 | 0.7% | Dec 31, 2024 | path-sanitizer is a simple lightweight npm package for sanitizing paths to prevent Path Traversal. Prior to 3.1.0, the f... |
| CVE-2024-53647 | HIGH | 8.2 | 0.3% | Dec 31, 2024 | Trend Micro ID Security, version 3.0 and below contains a vulnerability that could allow an attacker to send an unlimite... |
| CVE-2024-52050 | HIGH | 7.8 | 0.5% | Dec 31, 2024 | A LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local attacker to escalate privi... |
| CVE-2024-52049 | HIGH | 7.8 | 0.3% | Dec 31, 2024 | A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on ... |
| CVE-2024-52048 | HIGH | 7.8 | 0.3% | Dec 31, 2024 | A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on ... |
| CVE-2024-52047 | HIGH | 8.8 | 1.1% | Dec 31, 2024 | A widget local file inclusion vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary c... |
| CVE-2024-25133 | HIGH | 8.8 | 0.5% | Dec 31, 2024 | A flaw was found in the Hive ClusterDeployments resource in OpenShift Dedicated. In certain conditions, this issue may a... |
| CVE-2024-13072 | CRITICAL | 9.8 | 0.6% | Dec 31, 2024 | A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been rated as critical. Affected... |
| CVE-2024-13070 | HIGH | 8.8 | 0.5% | Dec 31, 2024 | A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been declared as critical. Affected by th... |
| CVE-2024-56207 | HIGH | 8.8 | 0.3% | Dec 31, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in EditionGuard EditionGuard for WooCommerce – eBook Sales with DRM edit... |
| CVE-2024-56206 | HIGH | 8.8 | 0.2% | Dec 31, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in krishankakkar gap-hub-user-role gap-hub-user-role allows Authenticati... |
| CVE-2024-56204 | HIGH | 8.8 | 0.3% | Dec 31, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in yonisink Sinking Dropdowns sinking-dropdowns allows Privilege Escalat... |
| CVE-2024-56203 | HIGH | 8.8 | 0.2% | Dec 31, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in gholme4 Wayne Audio Player wayne-audio-player allows Privilege Escala... |
| CVE-2024-56070 | HIGH | 7.4 | 0.3% | Dec 31, 2024 | Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Confi... |
| CVE-2024-56066 | CRITICAL | 9.8 | 0.6% | Dec 31, 2024 | Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Privilege Escalation.This issue affec... |
| CVE-2024-56061 | HIGH | 8.8 | 0.4% | Dec 31, 2024 | Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Privilege Escalation.This is... |
| CVE-2024-56045 | CRITICAL | 9.3 | 0.7% | Dec 31, 2024 | Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLM... |
| CVE-2024-56044 | CRITICAL | 9.8 | 0.8% | Dec 31, 2024 | Authentication Bypass Using an Alternate Path or Channel vulnerability in VibeThemes WPLMS wplms_plugin allows Authentic... |
| CVE-2024-56043 | CRITICAL | 9.8 | 0.6% | Dec 31, 2024 | Incorrect Privilege Assignment vulnerability in VibeThemes WPLMS wplms_plugin allows Privilege Escalation.This issue aff... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now