2024 CVE Vulnerabilities
39,260 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-9044 | MEDIUM | 4.6 | 0.2% | Nov 29, 2024 | A XML External Entity (XXE) vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across mu... |
| CVE-2024-11983 | HIGH | 7.2 | 1.1% | Nov 29, 2024 | Certain models of routers from Billion Electric has an OS Command Injection vulnerability, allowing remote attackers wit... |
| CVE-2024-11982 | HIGH | 7.2 | 0.6% | Nov 29, 2024 | Certain models of routers from Billion Electric has a Plaintext Storage of a Password vulnerability. Remote attackers wi... |
| CVE-2024-11482 | CRITICAL | 9.8 | 2.5% | Nov 29, 2024 | A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code exe... |
| CVE-2024-11481 | HIGH | 8.2 | 0.4% | Nov 29, 2024 | A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper han... |
| CVE-2024-11014 | MEDIUM | 4.3 | 0.2% | Nov 29, 2024 | Cross-site request forgery (CSRF) vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 u... |
| CVE-2024-11013 | HIGH | 7.2 | 1.1% | Nov 29, 2024 | Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27,... |
| CVE-2024-11981 | HIGH | 7.5 | 0.5% | Nov 29, 2024 | Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated atta... |
| CVE-2024-53701 | LOW | 3.1 | 0.2% | Nov 29, 2024 | Multiple FCNT Android devices provide the original security features such as "privacy mode" where arbitrary applications... |
| CVE-2024-39162 | MEDIUM | 6.1 | 0.4% | Nov 29, 2024 | pyspider through 0.3.10 allows /update XSS. NOTE: This vulnerability only affects products that are no longer supported ... |
| CVE-2024-11980 | HIGH | 8.6 | 0.5% | Nov 29, 2024 | Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated rem... |
| CVE-2024-10980 | MEDIUM | 5.4 | 0.3% | Nov 29, 2024 | The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) WordPress ... |
| CVE-2024-10704 | MEDIUM | 4.8 | 0.4% | Nov 29, 2024 | The Photo Gallery by 10Web WordPress plugin before 1.8.31 does not sanitise and escape some of its settings, which coul... |
| CVE-2024-48651 | HIGH | 7.5 | 2.2% | Nov 29, 2024 | In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of th... |
| CVE-2024-45495 | MEDIUM | 4.3 | 0.2% | Nov 29, 2024 | MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking. |
| CVE-2024-35451 | MEDIUM | 4.8 | 0.3% | Nov 29, 2024 | LinkStack 2.7.9 through 4.7.7 allows resources\views\components\favicon.blade.php link SSRF. |
| CVE-2024-54124 | HIGH | 8.8 | 0.4% | Nov 29, 2024 | In Click Studios Passwordstate before build 9920, there is a potential permission escalation on the edit folder screen. |
| CVE-2024-54123 | MEDIUM | 6.1 | 0.3% | Nov 29, 2024 | Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text... |
| CVE-2024-11979 | CRITICAL | 9.8 | 0.8% | Nov 29, 2024 | DreamMaker from Interinfo has a Path Traversal vulnerability and does not restrict the types of uploaded files. This all... |
| CVE-2024-11978 | HIGH | 7.5 | 0.7% | Nov 29, 2024 | DreamMaker from Interinfo has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this ... |
| CVE-2024-9852 | HIGH | 7.8 | 0.2% | Nov 28, 2024 | Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi E... |
| CVE-2024-8300 | HIGH | 7 | 0.2% | Nov 28, 2024 | Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsub... |
| CVE-2024-8299 | HIGH | 7.8 | 0.2% | Nov 28, 2024 | Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi E... |
| CVE-2024-11971 | MEDIUM | 5.4 | 0.5% | Nov 28, 2024 | A vulnerability classified as problematic was found in Guizhou Xiaoma Technology jpress 5.1.2. Affected by this vulnerab... |
| CVE-2024-11970 | CRITICAL | 9.8 | 0.8% | Nov 28, 2024 | A vulnerability classified as critical has been found in code-projects Concert Ticket Ordering System 1.0. Affected is a... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now