2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-21786 | HIGH | 7.2 | 10.5% | Nov 21, 2024 | An OS command injection vulnerability exists in the web interface configuration upload functionality of MC Technologies ... |
| CVE-2024-11592 | CRITICAL | 9.8 | 0.9% | Nov 21, 2024 | A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vu... |
| CVE-2024-7130 | MEDIUM | 5.5 | 0.4% | Nov 21, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kion Comput... |
| CVE-2024-7026 | HIGH | 7.5 | 0.6% | Nov 21, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknogis Informati... |
| CVE-2024-53426 | MEDIUM | 6.2 | 0.3% | Nov 21, 2024 | A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS function. |
| CVE-2024-53425 | MEDIUM | 6.2 | 0.3% | Nov 21, 2024 | A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue oc... |
| CVE-2024-11591 | CRITICAL | 9.8 | 0.9% | Nov 21, 2024 | A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This... |
| CVE-2024-11089 | MEDIUM | 5.3 | 0.6% | Nov 21, 2024 | The Anonymous Restricted Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up... |
| CVE-2024-11088 | HIGH | 7.5 | 0.6% | Nov 21, 2024 | The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in... |
| CVE-2024-7016 | MEDIUM | 4.8 | 0.4% | Nov 21, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Smarttek In... |
| CVE-2024-11590 | CRITICAL | 9.8 | 0.8% | Nov 21, 2024 | A vulnerability, which was classified as critical, has been found in 1000 Projects Bookstore Management System 1.0. Affe... |
| CVE-2024-11589 | HIGH | 8.8 | 0.7% | Nov 21, 2024 | A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulne... |
| CVE-2024-11588 | HIGH | 7.5 | 0.8% | Nov 21, 2024 | A vulnerability was found in AVL-DiTEST-DiagDev libdoip 1.0.0. It has been rated as problematic. This issue affects the ... |
| CVE-2024-11587 | MEDIUM | 6.1 | 0.9% | Nov 21, 2024 | A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the function GetCityOption... |
| CVE-2024-9851 | MEDIUM | 5.4 | 0.4% | Nov 21, 2024 | The LSX Tour Operator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all vers... |
| CVE-2024-9828 | MEDIUM | 4.1 | 0.5% | Nov 21, 2024 | The Taskbuilder WordPress plugin before 3.0.5 does not sanitize user input into the 'load_orders' parameter and uses it... |
| CVE-2024-9768 | MEDIUM | 4.8 | 0.4% | Nov 21, 2024 | The Formidable Forms WordPress plugin before 6.14.1 does not sanitise and escape some of its settings, which could allo... |
| CVE-2024-9600 | MEDIUM | 4.8 | 0.4% | Nov 21, 2024 | The Ditty WordPress plugin before 3.1.47 does not sanitise and escape some of its settings, which could allow high priv... |
| CVE-2024-9542 | MEDIUM | 4.3 | 0.3% | Nov 21, 2024 | The Sky Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,... |
| CVE-2024-9442 | MEDIUM | 5.4 | 0.4% | Nov 21, 2024 | The F4 Improvements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versio... |
| CVE-2024-9371 | MEDIUM | 6.1 | 0.5% | Nov 21, 2024 | The Branda – White Label & Branding, Custom Login Page Customizer plugin for WordPress is vulnerable to Reflected Cross-... |
| CVE-2024-9111 | MEDIUM | 6.4 | 0.5% | Nov 21, 2024 | The Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versi... |
| CVE-2024-8157 | MEDIUM | 4.3 | 0.2% | Nov 21, 2024 | The Alphabetical List WordPress plugin through 1.0.3 does not have CSRF check in place when updating its settings, which... |
| CVE-2024-7517 | HIGH | 7.8 | 0.6% | Nov 21, 2024 | A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms... |
| CVE-2024-5029 | MEDIUM | 4.8 | 0.2% | Nov 21, 2024 | The CM Table Of Contents WordPress plugin before 1.2.4 does not have CSRF check when updating its settings, and is miss... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now