2024 CVE Vulnerabilities
39,218 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-52786 | CRITICAL | 9.8 | 0.8% | Aug 22, 2025 | An authentication bypass vulnerability in anji-plus AJ-Report up to v1.4.2 allows unauthenticated attackers to execute a... |
| CVE-2024-50645 | CRITICAL | 9.8 | 0.6% | Aug 22, 2025 | MallChat v1.0-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this vulnerability to access ... |
| CVE-2024-53494 | HIGH | 7.5 | 0.3% | Aug 22, 2025 | Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive compone... |
| CVE-2024-50644 | CRITICAL | 9.8 | 0.5% | Aug 22, 2025 | zhisheng17 blog 3.0.1-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this vulnerability to... |
| CVE-2024-58239 | MEDIUM | 5.5 | 0.2% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: tls: stop recv() if initial process_rx_list gave us... |
| CVE-2024-56179 | HIGH | 7.8 | 0.4% | Aug 22, 2025 | In MindManager Windows versions prior to 24.1.150, attackers could potentially write to unexpected directories in victim... |
| CVE-2024-50641 | HIGH | 8.1 | 0.4% | Aug 21, 2025 | An authentication bypass vulnerability in PandoraNext-TokensTool v0.6.8 and before. An attacker can exploit this vulnera... |
| CVE-2024-45438 | CRITICAL | 9.1 | 0.5% | Aug 21, 2025 | An issue was discovered in TitanHQ SpamTitan Email Security Gateway 8.00.x before 8.00.101 and 8.01.x before 8.01.14. Th... |
| CVE-2024-57155 | CRITICAL | 9.8 | 0.4% | Aug 20, 2025 | Incorrect access control in radar v1.0.8 allows attackers to bypass authentication and access sensitive APIs without a t... |
| CVE-2024-57154 | CRITICAL | 9.8 | 0.4% | Aug 20, 2025 | Incorrect access control in dts-shop v0.0.1-SNAPSHOT allows attackers to bypass authentication via sending a crafted pay... |
| CVE-2024-57152 | HIGH | 7.5 | 0.3% | Aug 20, 2025 | Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components wit... |
| CVE-2024-53495 | HIGH | 7.5 | 0.3% | Aug 20, 2025 | Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive compon... |
| CVE-2024-50640 | CRITICAL | 9.8 | 0.5% | Aug 20, 2025 | jeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function |
| CVE-2024-57157 | CRITICAL | 9.8 | 0.4% | Aug 20, 2025 | Incorrect access control in Jantent v1.1 allows attackers to bypass authentication and access sensitive APIs without a t... |
| CVE-2024-57491 | HIGH | 8.8 | 0.3% | Aug 20, 2025 | Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to ac... |
| CVE-2024-39954 | MEDIUM | 6.3 | 0.4% | Aug 20, 2025 | CWE-918 Server-Side Request Forgery (SSRF) in eventmesh-runtime module in WebhookUtil.java on windows\linux\mac os e.g. ... |
| CVE-2024-12223 | CRITICAL | 9.3 | 0.3% | Aug 20, 2025 | Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component... |
| CVE-2024-44373 | CRITICAL | 9.8 | 1.1% | Aug 19, 2025 | A Path Traversal vulnerability in AllSky v2023.05.01 through v2024.12.06_06 allows an unauthenticated attacker to create... |
| CVE-2024-45062 | MEDIUM | 6.8 | 0.3% | Aug 19, 2025 | A stack based buffer overflow vulnerability is present in OpenPrinting ippusbxd 1.34. A specially configured printer tha... |
| CVE-2024-49827 | HIGH | 7.5 | 0.2% | Aug 18, 2025 | IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to excessive data exposure, allowing attackers to access sensitiv... |
| CVE-2024-8393 | MEDIUM | 6.6 | 0.6% | Aug 16, 2025 | The Woocommerce Blocks – Woolook plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and i... |
| CVE-2024-12612 | HIGH | 7.5 | 0.4% | Aug 16, 2025 | The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via several parameters ac... |
| CVE-2024-12575 | MEDIUM | 5.3 | 0.3% | Aug 16, 2025 | The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Basic Information Expo... |
| CVE-2024-12573 | — | — | — | Aug 15, 2025 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-24752 Reason: This candidate is a r... |
| CVE-2024-37945 | MEDIUM | 6.5 | 0.2% | Aug 14, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS Addo... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now