2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-52473 | HIGH | 7.1 | 0.3% | Nov 20, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sandeep Verma HTML... |
| CVE-2024-52472 | HIGH | 7.1 | 0.3% | Nov 20, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Weather Atlas Weat... |
| CVE-2024-52471 | MEDIUM | 6.1 | 0.3% | Nov 20, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in petesheppar... |
| CVE-2024-52470 | HIGH | 7.1 | 0.3% | Nov 20, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brainvireinfo Dyna... |
| CVE-2024-51209 | MEDIUM | 5.4 | 0.3% | Nov 20, 2024 | Cross-Site Scripting (XSS) vulnerabilities in Anuj Kumar's Client Management System Version 1.2 allow local attackers to... |
| CVE-2024-51208 | HIGH | 7.2 | 0.4% | Nov 20, 2024 | File Upload vulnerability in change-image.php in Anuj Kumar's Boat Booking System version 1.0 allows local attackers to ... |
| CVE-2024-10094 | CRITICAL | 9.8 | 0.5% | Nov 20, 2024 | Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code |
| CVE-2024-9479 | CRITICAL | 10 | 0.4% | Nov 20, 2024 | Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Esc... |
| CVE-2024-9478 | CRITICAL | 10 | 0.4% | Nov 20, 2024 | Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Esc... |
| CVE-2024-52597 | MEDIUM | 6.1 | 0.4% | Nov 20, 2024 | 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Versions prior... |
| CVE-2024-11154 | MEDIUM | 4.3 | 0.4% | Nov 20, 2024 | The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes plugin for WordPress is vulner... |
| CVE-2024-10913 | HIGH | 8.8 | 0.6% | Nov 20, 2024 | The Clone plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.4.6 via des... |
| CVE-2024-11495 | HIGH | 7.8 | 0.1% | Nov 20, 2024 | Buffer overflow vulnerability in OllyDbg, version 1.10, which could allow a local attacker to execute arbitrary code due... |
| CVE-2024-11086 | — | — | — | Nov 20, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2024-52451 | HIGH | 8.2 | 0.2% | Nov 20, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in aaronrobbins Post Ideas post-ideas allows SQL Injection.This issue af... |
| CVE-2024-52450 | HIGH | 7.5 | 0.6% | Nov 20, 2024 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2024-52449 | HIGH | 7.5 | 0.5% | Nov 20, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Navneil Naicer Bootscrap... |
| CVE-2024-52448 | HIGH | 7.5 | 0.6% | Nov 20, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in webcodingplace Ultimate ... |
| CVE-2024-52447 | HIGH | 8.6 | 0.6% | Nov 20, 2024 | Path Traversal: '.../...//' vulnerability in corporatezen222 Contact Page With Google Map contact-page-with-google-map a... |
| CVE-2024-52446 | HIGH | 8.8 | 0.2% | Nov 20, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Buying Buddy Buying Buddy IDX CRM buying-buddy-idx-crm allows Object ... |
| CVE-2024-52445 | HIGH | 8.8 | 0.5% | Nov 20, 2024 | Deserialization of Untrusted Data vulnerability in ModelTheme QRMenu Restaurant QR Menu Lite qrmenu-lite allows Object I... |
| CVE-2024-52444 | HIGH | 7.5 | 0.6% | Nov 20, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpopal Opal Woo Custom P... |
| CVE-2024-52443 | CRITICAL | 9.8 | 0.5% | Nov 20, 2024 | Deserialization of Untrusted Data vulnerability in masikonis Geolocator geolocator allows Object Injection.This issue af... |
| CVE-2024-52442 | CRITICAL | 9.8 | 0.5% | Nov 20, 2024 | Incorrect Privilege Assignment vulnerability in userplus UserPlus userplus allows Privilege Escalation.This issue affect... |
| CVE-2024-52441 | CRITICAL | 9.8 | 0.5% | Nov 20, 2024 | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Rajesh Thanoc... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now