2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-47863 | MEDIUM | 6.2 | 0.6% | Nov 22, 2024 | An issue was discovered in Centreon Web 24.10.x before 24.10.0, 24.04.x before 24.04.8, 23.10.x before 23.10.18, 23.04.x... |
| CVE-2024-30377 | HIGH | 7.8 | 0.4% | Nov 22, 2024 | G DATA Total Security Scan Server Link Following Local Privilege Escalation Vulnerability. This vulnerability allows loc... |
| CVE-2024-30376 | HIGH | 7.3 | 0.4% | Nov 22, 2024 | Famatech Advanced IP Scanner Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerabili... |
| CVE-2024-30372 | MEDIUM | 6.3 | 1.1% | Nov 22, 2024 | Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability. This vulnerability allows remote... |
| CVE-2024-1868 | HIGH | 7.8 | 0.4% | Nov 22, 2024 | G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers... |
| CVE-2024-1867 | HIGH | 7.8 | 0.4% | Nov 22, 2024 | G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers... |
| CVE-2024-52998 | MEDIUM | 5.5 | 0.3% | Nov 22, 2024 | Substance3D - Stager versions 3.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to d... |
| CVE-2024-52726 | HIGH | 7.5 | 1.6% | Nov 22, 2024 | CRMEB v5.4.0 is vulnerable to Arbitrary file read in the save_basics function which allows an attacker to obtain sensiti... |
| CVE-2024-11618 | HIGH | 7.3 | 0.6% | Nov 22, 2024 | A vulnerability classified as critical was found in IPC Unigy Management System 04.03.00.08.0027. Affected by this vulne... |
| CVE-2024-50657 | MEDIUM | 6.8 | 0.4% | Nov 22, 2024 | An issue in Owncloud android apk v.4.3.1 allows a physically proximate attacker to escalate privileges via the PassCodeV... |
| CVE-2024-37783 | MEDIUM | 5.4 | 0.4% | Nov 22, 2024 | A reflected cross-site scripting (XSS) vulnerability in Gladinet CentreStack v13.12.9934.54690 allows attackers to injec... |
| CVE-2024-37782 | CRITICAL | 9.8 | 1.0% | Nov 22, 2024 | An LDAP injection vulnerability in the login page of Gladinet CentreStack v13.12.9934.54690 allows attackers to access s... |
| CVE-2024-53438 | CRITICAL | 9.8 | 0.5% | Nov 22, 2024 | EventAttendance.php in ChurchCRM 5.7.0 is vulnerable to SQL injection. An attacker can exploit this vulnerability by man... |
| CVE-2024-44786 | HIGH | 7.5 | 0.5% | Nov 22, 2024 | Incorrect access control in Meabilis CMS 1.0 allows attackers to access other users' address books via unspecified vecto... |
| CVE-2024-10220 | HIGH | 8.1 | 3.0% | Nov 22, 2024 | The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue aff... |
| CVE-2024-52814 | LOW | 2.8 | 0.2% | Nov 22, 2024 | Argo Helm is a collection of community maintained charts for `argoproj.github.io` projects. Prior to version 0.45.0, the... |
| CVE-2024-52804 | HIGH | 7.5 | 1.1% | Nov 22, 2024 | Tornado is a Python web framework and asynchronous networking library. The algorithm used for parsing HTTP cookies in To... |
| CVE-2024-52802 | HIGH | 7.5 | 0.7% | Nov 22, 2024 | RIOT is an operating system for internet of things (IoT) devices. In version 2024.04 and prior, the function `_parse_adv... |
| CVE-2024-52793 | MEDIUM | 5.1 | 0.6% | Nov 22, 2024 | The Deno Standard Library provides APIs for Deno and the Web. Prior to version 1.0.11, `http/file-server`'s `serveDir` w... |
| CVE-2024-52723 | CRITICAL | 9.8 | 1.0% | Nov 22, 2024 | In TOTOLINK X6000R V9.4.0cu.1041_B20240224 in the shttpd file, the Uci_Set Str function is used without strict parameter... |
| CVE-2024-51074 | MEDIUM | 6.7 | 0.3% | Nov 22, 2024 | Incorrect access control in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to ar... |
| CVE-2024-51073 | MEDIUM | 6.7 | 0.3% | Nov 22, 2024 | An issue in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to control or disrupt... |
| CVE-2024-51072 | MEDIUM | 5.3 | 0.2% | Nov 22, 2024 | An issue in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to cause a Denial of ... |
| CVE-2024-50965 | MEDIUM | 5.4 | 0.3% | Nov 22, 2024 | Cross Site Scripting vulnerability in Public Knowledge Project PKP Platform OJS/OMP/OPS- before v.3.3.0.16 allows an att... |
| CVE-2024-50401 | HIGH | 7.2 | 0.6% | Nov 22, 2024 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now