2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-53047 | MEDIUM | 5.5 | 0.2% | Nov 19, 2024 | In the Linux kernel, the following vulnerability has been resolved: mptcp: init: protect sched with rcu_read_lock Enab... |
| CVE-2024-53046 | MEDIUM | 5.5 | 0.3% | Nov 19, 2024 | In the Linux kernel, the following vulnerability has been resolved: arm64: dts: imx8ulp: correct the flexspi compatible... |
| CVE-2024-53045 | MEDIUM | 5.5 | 0.2% | Nov 19, 2024 | In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: fix bounds checker error in dapm_widget... |
| CVE-2024-53044 | MEDIUM | 5.5 | 0.2% | Nov 19, 2024 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_api: fix xa_insert() error path in t... |
| CVE-2024-53043 | MEDIUM | 5.5 | 0.2% | Nov 19, 2024 | In the Linux kernel, the following vulnerability has been resolved: mctp i2c: handle NULL header address daddr can be ... |
| CVE-2024-53042 | MEDIUM | 5.5 | 0.3% | Nov 19, 2024 | In the Linux kernel, the following vulnerability has been resolved: ipv4: ip_tunnel: Fix suspicious RCU usage warning i... |
| CVE-2024-50304 | MEDIUM | 5.5 | 0.2% | Nov 19, 2024 | In the Linux kernel, the following vulnerability has been resolved: ipv4: ip_tunnel: Fix suspicious RCU usage warning i... |
| CVE-2024-50303 | MEDIUM | 5.5 | 0.2% | Nov 19, 2024 | In the Linux kernel, the following vulnerability has been resolved: resource,kexec: walk_system_ram_res_rev must retain... |
| CVE-2024-48992 | HIGH | 7.8 | 6.6% | Nov 19, 2024 | Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tric... |
| CVE-2024-48991 | HIGH | 7.8 | 5.3% | Nov 19, 2024 | Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by winn... |
| CVE-2024-48990 | HIGH | 7.8 | 19.9% | Nov 19, 2024 | Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tric... |
| CVE-2024-48072 | CRITICAL | 9.8 | 0.4% | Nov 19, 2024 | Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?inv... |
| CVE-2024-48070 | CRITICAL | 9.8 | 0.7% | Nov 19, 2024 | An issue in Weaver E-cology v. attackers construct special requests to insert remote malicious code and to trigger malic... |
| CVE-2024-48069 | CRITICAL | 9.8 | 0.4% | Nov 19, 2024 | A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to uploa... |
| CVE-2024-42450 | CRITICAL | 10 | 0.6% | Nov 19, 2024 | The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data. It is also needed for High Av... |
| CVE-2024-11003 | HIGH | 7.8 | 11.5% | Nov 19, 2024 | Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which e... |
| CVE-2024-10224 | HIGH | 7.8 | 8.6% | Nov 19, 2024 | Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local att... |
| CVE-2024-52789 | HIGH | 8 | 0.4% | Nov 19, 2024 | Tenda W30E v2.0 V16.01.0.8 was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows ... |
| CVE-2024-52788 | HIGH | 8 | 0.4% | Nov 19, 2024 | Tenda W9 v1.0.0.7(4456) was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows att... |
| CVE-2024-52600 | MEDIUM | 5.3 | 0.6% | Nov 19, 2024 | Statmatic is a Laravel and Git powered content management system (CMS). Prior to version 5.17.0, assets uploaded with ap... |
| CVE-2024-52421 | HIGH | 7.1 | 0.2% | Nov 19, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Popup Window Maker easy-popup-lightbox-maker allows Stored ... |
| CVE-2024-52420 | MEDIUM | 4.3 | 0.2% | Nov 19, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Disable Admin Notices individually disable-admin-notices al... |
| CVE-2024-52402 | CRITICAL | 9.6 | 0.8% | Nov 19, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in gunghoinc Exclusive Content Password Protect exclusive-content-passwo... |
| CVE-2024-52401 | CRITICAL | 9.6 | 0.3% | Nov 19, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in HuangYe WuDeng Hacklog DownloadManager hacklog-downloadmanager allows... |
| CVE-2024-52395 | MEDIUM | 5.3 | 0.4% | Nov 19, 2024 | Missing Authorization vulnerability in QuantumCloud Floating Buttons for WooCommerce shop-assistant-for-woocommerce-jarv... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now