2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-6510 | HIGH | 7.8 | 0.1% | Sep 12, 2024 | Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileg... |
| CVE-2024-45826 | HIGH | 8.8 | 11.2% | Sep 12, 2024 | CVE-2024-45826 IMPACT Due to improper input validation, a path traversal and remote code execution vulnerability exists ... |
| CVE-2024-45825 | HIGH | 7.5 | 0.5% | Sep 12, 2024 | CVE-2024-45825 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a... |
| CVE-2024-28991 | HIGH | 8 | 3.1% | Sep 12, 2024 | SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability. If exploite... |
| CVE-2024-28990 | HIGH | 8.8 | 0.5% | Sep 12, 2024 | SolarWinds Access Rights Manager (ARM) was found to contain a hard-coded credential authentication bypass vulnerability.... |
| CVE-2024-45857 | HIGH | 7.8 | 0.2% | Sep 12, 2024 | Deserialization of untrusted data can occur in versions 2.4.0 or newer of the Cleanlab project, enabling a maliciously c... |
| CVE-2024-45855 | HIGH | 7.5 | 0.5% | Sep 12, 2024 | Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciou... |
| CVE-2024-45854 | HIGH | 7.5 | 0.5% | Sep 12, 2024 | Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciou... |
| CVE-2024-45853 | HIGH | 7.5 | 0.5% | Sep 12, 2024 | Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciou... |
| CVE-2024-45852 | HIGH | 8.8 | 0.7% | Sep 12, 2024 | Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a malicious... |
| CVE-2024-45851 | HIGH | 8.8 | 0.9% | Sep 12, 2024 | An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the ... |
| CVE-2024-45850 | HIGH | 8.8 | 0.9% | Sep 12, 2024 | An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the ... |
| CVE-2024-45849 | HIGH | 8.8 | 0.9% | Sep 12, 2024 | An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the ... |
| CVE-2024-45848 | HIGH | 8.8 | 0.8% | Sep 12, 2024 | An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ... |
| CVE-2024-45847 | HIGH | 8.8 | 0.9% | Sep 12, 2024 | An arbitrary code execution vulnerability exists in versions 23.11.4.2 up to 24.7.4.1 of the MindsDB platform, when one ... |
| CVE-2024-45846 | HIGH | 8.8 | 2.1% | Sep 12, 2024 | An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the ... |
| CVE-2024-3306 | HIGH | 7.5 | 0.4% | Sep 12, 2024 | Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub allows Exploiting Incorrec... |
| CVE-2024-3305 | HIGH | 7.5 | 0.4% | Sep 12, 2024 | Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub all... |
| CVE-2024-27321 | HIGH | 7.8 | 0.3% | Sep 12, 2024 | An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of ... |
| CVE-2024-27320 | HIGH | 7.8 | 0.3% | Sep 12, 2024 | An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of ... |
| CVE-2024-8749 | HIGH | 7.5 | 0.4% | Sep 12, 2024 | SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a specially craf... |
| CVE-2024-8529 | HIGH | 7.5 | 11.8% | Sep 12, 2024 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_fields' parameter o... |
| CVE-2024-8522 | HIGH | 7.5 | 61.4% | Sep 12, 2024 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_only_fields' parame... |
| CVE-2024-7766 | HIGH | 7.2 | 0.6% | Sep 12, 2024 | The Adicon Server WordPress plugin through 1.2 does not sanitize and escape a parameter before using it in a SQL stateme... |
| CVE-2024-45624 | HIGH | 7.5 | 0.5% | Sep 12, 2024 | Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now