2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-48874 | CRITICAL | 9.8 | 0.6% | Dec 6, 2024 | Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could give attackers the ability to force Ruijie's prox... |
| CVE-2024-47791 | MEDIUM | 5.3 | 0.4% | Dec 6, 2024 | Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to subscribe to partial possibl... |
| CVE-2024-47146 | MEDIUM | 6.5 | 0.3% | Dec 6, 2024 | Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to obtain the devices serial nu... |
| CVE-2024-46874 | CRITICAL | 9.9 | 0.4% | Dec 6, 2024 | Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow MQTT clients connecting with device credent... |
| CVE-2024-45722 | HIGH | 7.5 | 0.5% | Dec 6, 2024 | Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses weak credential mechanism that could allow an atta... |
| CVE-2024-52558 | MEDIUM | 6.9 | 0.6% | Dec 6, 2024 | The affected product is vulnerable to an integer underflow. An unauthenticated attacker could send a malformed HTTP requ... |
| CVE-2024-52320 | CRITICAL | 9.8 | 2.3% | Dec 6, 2024 | The affected product is vulnerable to a command injection. An unauthenticated attacker could send commands through a mal... |
| CVE-2024-51727 | HIGH | 7.5 | 0.5% | Dec 6, 2024 | Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a feature that could enable attackers to inval... |
| CVE-2024-48871 | CRITICAL | 9.8 | 1.4% | Dec 6, 2024 | The affected product is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious ... |
| CVE-2024-48703 | MEDIUM | 4.8 | 0.3% | Dec 6, 2024 | PhpGurukul Medical Card Generation System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/search-medicalcard.... |
| CVE-2024-47547 | CRITICAL | 9.8 | 0.7% | Dec 6, 2024 | Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a weak mechanism for its users to change their... |
| CVE-2024-47043 | MEDIUM | 5.3 | 0.4% | Dec 6, 2024 | Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correlate a device serial n... |
| CVE-2024-42494 | HIGH | 7.5 | 0.4% | Dec 6, 2024 | Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a a feature that could enable sub accounts or ... |
| CVE-2024-11220 | HIGH | 7.8 | 0.1% | Dec 6, 2024 | A local low-level user on the server machine with credentials to the running OAS services can create and execute a repor... |
| CVE-2024-55268 | MEDIUM | 6.1 | 0.4% | Dec 6, 2024 | A Reflected Cross Site Scripting (XSS) vulnerability was found in /covidtms/registered-user-testing.php in PHPGurukul CO... |
| CVE-2024-54749 | HIGH | 7.5 | 0.2% | Dec 6, 2024 | Ubiquiti U7-Pro 7.0.35 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attacke... |
| CVE-2024-54143 | CRITICAL | 9.3 | 1.9% | Dec 6, 2024 | openwrt/asu is an image on demand server for OpenWrt based distributions. The request hashing mechanism truncates SHA-25... |
| CVE-2024-53691 | HIGH | 8.8 | 20.1% | Dec 6, 2024 | A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul... |
| CVE-2024-50404 | HIGH | 8.8 | 1.4% | Dec 6, 2024 | A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow re... |
| CVE-2024-50403 | HIGH | 7.2 | 0.5% | Dec 6, 2024 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver... |
| CVE-2024-50402 | HIGH | 7.2 | 0.5% | Dec 6, 2024 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver... |
| CVE-2024-50393 | CRITICAL | 9.8 | 1.3% | Dec 6, 2024 | A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the ... |
| CVE-2024-50389 | CRITICAL | 9.8 | 0.8% | Dec 6, 2024 | A SQL injection vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote a... |
| CVE-2024-50388 | CRITICAL | 9.8 | 2.3% | Dec 6, 2024 | An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerabil... |
| CVE-2024-50387 | CRITICAL | 9.8 | 10.1% | Dec 6, 2024 | A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now