2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-52538 | HIGH | 8.8 | 0.4% | Dec 10, 2024 | Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Impr... |
| CVE-2024-47977 | HIGH | 8.8 | 0.6% | Dec 10, 2024 | Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Impr... |
| CVE-2024-47484 | CRITICAL | 9.8 | 0.7% | Dec 10, 2024 | Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Impr... |
| CVE-2024-11928 | MEDIUM | 6.4 | 0.3% | Dec 10, 2024 | The iChart – Easy Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ pa... |
| CVE-2024-11106 | MEDIUM | 5.3 | 0.4% | Dec 10, 2024 | The Simple Restrict plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and incl... |
| CVE-2024-10959 | HIGH | 7.3 | 0.6% | Dec 10, 2024 | The The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to a... |
| CVE-2024-11973 | MEDIUM | 6.1 | 0.3% | Dec 10, 2024 | The Quran multilanguage Text & Audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'soura... |
| CVE-2024-11945 | MEDIUM | 6.4 | 0.3% | Dec 10, 2024 | The Email Reminders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all vers... |
| CVE-2024-8256 | MEDIUM | 5.9 | 0.2% | Dec 10, 2024 | In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 (excluding) and TSWOS devices running on versions 1.... |
| CVE-2024-45709 | MEDIUM | 5.5 | 0.5% | Dec 10, 2024 | SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software b... |
| CVE-2024-11940 | MEDIUM | 6.4 | 0.3% | Dec 10, 2024 | The Property Hive Mortgage Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘price’ ... |
| CVE-2024-47946 | HIGH | 7.2 | 1.1% | Dec 10, 2024 | If the attacker has access to a valid Poweruser session, remote code execution is possible because specially crafted val... |
| CVE-2024-28138 | HIGH | 7.3 | 0.9% | Dec 10, 2024 | An unauthenticated attacker with network access to the affected device's web interface can execute any system command vi... |
| CVE-2024-11107 | MEDIUM | 6.1 | 0.3% | Dec 10, 2024 | The System Dashboard WordPress plugin before 2.8.15 does not sanitise and escape some parameters when outputting them in... |
| CVE-2024-10708 | MEDIUM | 4.9 | 2.0% | Dec 10, 2024 | The System Dashboard WordPress plugin before 2.8.15 does not validate user input used in a path, which could allow high ... |
| CVE-2024-21542 | HIGH | 8.6 | 1.1% | Dec 10, 2024 | Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due ... |
| CVE-2024-11205 | MEDIUM | 6.5 | 0.7% | Dec 10, 2024 | The WPForms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on... |
| CVE-2024-37144 | MEDIUM | 6.7 | 0.2% | Dec 10, 2024 | Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.... |
| CVE-2024-37143 | CRITICAL | 9.8 | 0.8% | Dec 10, 2024 | Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.... |
| CVE-2024-53919 | HIGH | 7.6 | 0.4% | Dec 10, 2024 | An injection vulnerability in Barco ClickShare CX-30/20, C-5/10, and ClickShare Bar Pro and Core models, running firmwar... |
| CVE-2024-53552 | CRITICAL | 9.8 | 0.7% | Dec 10, 2024 | CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover. |
| CVE-2024-54198 | HIGH | 8.5 | 0.6% | Dec 10, 2024 | In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function... |
| CVE-2024-54197 | HIGH | 7.2 | 0.3% | Dec 10, 2024 | SAP NetWeaver Administrator(System Overview) allows an authenticated attacker to enumerate accessible HTTP endpoints in ... |
| CVE-2024-47585 | MEDIUM | 4.3 | 0.3% | Dec 10, 2024 | SAP NetWeaver Application Server for ABAP and ABAP Platform allows an authenticated attacker to gain higher access level... |
| CVE-2024-47582 | MEDIUM | 5.3 | 0.4% | Dec 10, 2024 | Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which lead... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now