2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-56213 | HIGH | 8.8 | 0.5% | Dec 31, 2024 | Path Traversal: '.../...//' vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affect... |
| CVE-2024-56212 | HIGH | 8.5 | 0.4% | Dec 31, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DeluxeThemes Userp... |
| CVE-2024-56211 | HIGH | 8.8 | 0.4% | Dec 31, 2024 | Missing Authorization vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a through <= 5.1.... |
| CVE-2024-49422 | LOW | 3.9 | 0.2% | Dec 31, 2024 | Protection Mechanism Failure in bootloader prior to SMR Oct-2024 Release 1 allows physical attackers to reset lockscreen... |
| CVE-2024-13067 | MEDIUM | 5.3 | 0.8% | Dec 31, 2024 | A vulnerability was found in CodeAstro Online Food Ordering System 1.0 and classified as critical. This issue affects so... |
| CVE-2024-11972 | CRITICAL | 9.8 | 54.8% | Dec 31, 2024 | The Hunk Companion WordPress plugin before 1.9.0 does not correctly authorize some REST API endpoints, allowing unauthen... |
| CVE-2024-45497 | HIGH | 7.6 | 0.6% | Dec 31, 2024 | A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume m... |
| CVE-2024-13040 | HIGH | 8.8 | 0.5% | Dec 31, 2024 | The QOCA aim from Quanta Computer has an Authorization Bypass Through User-Controlled Key vulnerability. By controlling ... |
| CVE-2024-12839 | HIGH | 8.8 | 0.7% | Dec 31, 2024 | The login mechanism via device authentication of CGFIDO from Changing Information Technology has an Authentication Bypas... |
| CVE-2024-12838 | HIGH | 8.8 | 0.7% | Dec 31, 2024 | The passwordless login mechanism in CGFIDO from Changing Information Technology has an Authentication Bypass vulnerabili... |
| CVE-2024-13058 | MEDIUM | 4.8 | 0.4% | Dec 30, 2024 | An issue exists in SoftIron HyperCloud where authenticated, but non-admin users can create data pools, which could pote... |
| CVE-2024-13051 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabili... |
| CVE-2024-13050 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabili... |
| CVE-2024-13049 | HIGH | 7.8 | 0.2% | Dec 30, 2024 | Ashlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remot... |
| CVE-2024-13048 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows ... |
| CVE-2024-13047 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remot... |
| CVE-2024-13046 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows ... |
| CVE-2024-13045 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Cobalt AR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability... |
| CVE-2024-13044 | HIGH | 7.8 | 0.2% | Dec 30, 2024 | Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows ... |
| CVE-2024-13043 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers t... |
| CVE-2024-13042 | MEDIUM | 5.3 | 0.4% | Dec 30, 2024 | A vulnerability was found in Tsinghua Unigroup Electronic Archives Management System 3.2.210802(62532). It has been clas... |
| CVE-2024-12753 | HIGH | 7.3 | 0.3% | Dec 30, 2024 | Foxit PDF Reader Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to e... |
| CVE-2024-12752 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Foxit PDF Reader AcroForm Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attack... |
| CVE-2024-12751 | HIGH | 7.8 | 0.4% | Dec 30, 2024 | Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attac... |
| CVE-2024-11946 | MEDIUM | 6.5 | 0.3% | Dec 30, 2024 | iXsystems TrueNAS CORE fetch_plugin_packagesites tar Cleartext Transmission of Sensitive Information Vulnerability. This... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now