2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-53862 | HIGH | 7.5 | 0.6% | Dec 2, 2024 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When us... |
| CVE-2024-53459 | MEDIUM | 5.4 | 0.3% | Dec 2, 2024 | Sysax Multi Server 6.99 is vulnerable to Cross Site Scripting (XSS) via the /scgi?sid parameter. |
| CVE-2024-8785 | MEDIUM | 5.3 | 9.5% | Dec 2, 2024 | In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage NmAPI.exe to create ... |
| CVE-2024-52732 | CRITICAL | 9.1 | 0.4% | Dec 2, 2024 | Incorrect access control in wms-Warehouse management system-zeqp v2.20.9.1 due to the token value of the zeqp system bei... |
| CVE-2024-46909 | CRITICAL | 9.8 | 49.2% | Dec 2, 2024 | In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage this vulnerability t... |
| CVE-2024-46908 | HIGH | 8.8 | 2.2% | Dec 2, 2024 | In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged ... |
| CVE-2024-46907 | HIGH | 8.8 | 2.2% | Dec 2, 2024 | In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged ... |
| CVE-2024-46906 | HIGH | 8.8 | 40.6% | Dec 2, 2024 | In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged ... |
| CVE-2024-46905 | HIGH | 8.8 | 2.2% | Dec 2, 2024 | In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated lower-privilege... |
| CVE-2024-38827 | MEDIUM | 4.8 | 0.4% | Dec 2, 2024 | The usage of String.toLowerCase() and String.toUpperCase() has some Locale dependent exceptions that could potentially r... |
| CVE-2024-31669 | HIGH | 7.5 | 0.4% | Dec 2, 2024 | rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via bin_pe_parse_imports, Pe_r_bin_pe_par... |
| CVE-2024-29645 | HIGH | 7.8 | 0.2% | Dec 2, 2024 | Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the parse_die... |
| CVE-2024-10905 | CRITICAL | 9.8 | 0.9% | Dec 2, 2024 | IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p2, IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p5, Identity... |
| CVE-2024-53793 | HIGH | 8.2 | 0.2% | Dec 2, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in jerodmoore eDoc Easy Tables edoc-easy-tables allows Blind SQL Injecti... |
| CVE-2024-53792 | HIGH | 8.8 | 0.4% | Dec 2, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Watu Quiz watu... |
| CVE-2024-53789 | HIGH | 7.1 | 0.1% | Dec 2, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Ritesh Sanap Advanced What should we write next about advanced-what-s... |
| CVE-2024-53784 | MEDIUM | 4.3 | 0.3% | Dec 2, 2024 | Missing Authorization vulnerability in E-goi Smart Marketing SMS and Newsletters Forms smart-marketing-for-wp allows Exp... |
| CVE-2024-53782 | HIGH | 7.1 | 0.1% | Dec 2, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in cmsaccount Photo Video Store photo-video-store allows Cross-Site Scri... |
| CVE-2024-53781 | HIGH | 7.1 | 0.1% | Dec 2, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in homejunction SpatialMatch IDX spatialmatch-free-lifestyle-search allo... |
| CVE-2024-53780 | HIGH | 7.1 | 0.1% | Dec 2, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in rajeevglocify Load More Posts load-more-posts allows Stored XSS.This ... |
| CVE-2024-53779 | HIGH | 7.1 | 0.1% | Dec 2, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in 8bitkid Yahoo! WebPlayer yahoo-media-player allows Stored XSS.This is... |
| CVE-2024-53777 | HIGH | 7.1 | 0.1% | Dec 2, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Alberto Reineri Simple Header and Footer simple-header-and-footer all... |
| CVE-2024-53776 | HIGH | 7.1 | 0.1% | Dec 2, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in raphaelheide Donate Me donate-me allows Stored XSS.This issue affects... |
| CVE-2024-53775 | MEDIUM | 4.3 | 0.2% | Dec 2, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in benmoreassynt DancePress (TRWA) dancepress-trwa allows Cross Site Req... |
| CVE-2024-53770 | HIGH | 7.1 | 0.1% | Dec 2, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in pbmacintyre RingCentral Communications rccp-free allows Stored XSS.Th... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now