2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-52347 | MEDIUM | 6.5 | 0.2% | Nov 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpwebsitecreator W... |
| CVE-2024-52346 | MEDIUM | 6.5 | 0.2% | Nov 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JavierMendezPWG Si... |
| CVE-2024-52345 | MEDIUM | 6.5 | 0.2% | Nov 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RobertoAlicata ra_... |
| CVE-2024-52344 | MEDIUM | 6.5 | 0.2% | Nov 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codeies Pvt Ltd Pr... |
| CVE-2024-52343 | MEDIUM | 6.5 | 0.2% | Nov 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Offshorent Solutio... |
| CVE-2024-52342 | MEDIUM | 6.5 | 0.2% | Nov 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Offshorent Solutio... |
| CVE-2024-52341 | MEDIUM | 6.5 | 0.2% | Nov 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Offshorent Solutio... |
| CVE-2024-51051 | CRITICAL | 9.8 | 0.5% | Nov 18, 2024 | AVSCMS v8.2.0 was discovered to contain weak default credentials for the Administrator account. |
| CVE-2024-21287 | HIGH | 7.5 | 1.5% | Nov 18, 2024 | Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Pro... |
| CVE-2024-10486 | MEDIUM | 5.3 | 0.9% | Nov 18, 2024 | The Google for WooCommerce plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and inclu... |
| CVE-2024-52585 | MEDIUM | 5.4 | 0.3% | Nov 18, 2024 | Autolab is a course management service that enables auto-graded programming assignments. There is an HTML injection vuln... |
| CVE-2024-52584 | MEDIUM | 5.4 | 0.2% | Nov 18, 2024 | Autolab is a course management service that enables auto-graded programming assignments. There is a vulnerability in ver... |
| CVE-2024-52583 | HIGH | 8.2 | 0.2% | Nov 18, 2024 | The WesHacks GitHub repository provides the official Hackathon competition website source code for the Muweilah Wesgreen... |
| CVE-2024-52506 | MEDIUM | 6.5 | 0.6% | Nov 18, 2024 | Graylog is a free and open log management platform. The reporting functionality in Graylog allows the creation and sched... |
| CVE-2024-52304 | HIGH | 7.5 | 0.6% | Nov 18, 2024 | aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.10.11, the Python par... |
| CVE-2024-51053 | CRITICAL | 9.8 | 0.6% | Nov 18, 2024 | An arbitrary file upload vulnerability in the component /main/fileupload.php of AVSCMS v8.2.0 allows attackers to execut... |
| CVE-2024-50849 | MEDIUM | 4.8 | 0.5% | Nov 18, 2024 | A Stored Cross-Site Scripting (XSS) vulnerability in the "Rules" functionality of WorldServer v11.8.2 allows a remote au... |
| CVE-2024-50848 | MEDIUM | 6.5 | 1.2% | Nov 18, 2024 | An XML External Entity (XXE) vulnerability in the Import object and Translation Memory import functionalities of WorldSe... |
| CVE-2024-50804 | HIGH | 7.8 | 0.6% | Nov 18, 2024 | Insecure Permissions vulnerability in Micro-star International MSI Center Pro 2.1.37.0 allows a local attacker to execut... |
| CVE-2024-52303 | HIGH | 8.7 | 0.6% | Nov 18, 2024 | aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In versions starting with 3.10.6 and pri... |
| CVE-2024-51743 | HIGH | 8.8 | 0.7% | Nov 18, 2024 | MarkUs is a web application for the submission and grading of student assignments. In versions prior to 2.4.8, an arbitr... |
| CVE-2024-51499 | HIGH | 8.8 | 0.7% | Nov 18, 2024 | MarkUs is a web application for the submission and grading of student assignments. In versions prior to 2.4.8, an arbitr... |
| CVE-2024-50919 | CRITICAL | 9.8 | 1.1% | Nov 18, 2024 | Jpress until v5.1.1 has arbitrary file uploads on the windows platform, and the construction of non-standard file format... |
| CVE-2024-48917 | HIGH | 7.5 | 0.7% | Nov 18, 2024 | PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. The `XmlScanner` class has a scan method whic... |
| CVE-2024-48294 | MEDIUM | 5.5 | 0.2% | Nov 18, 2024 | A NULL pointer dereference in the component libPdfCore.dll of Wondershare PDF Reader v1.0.9.2544 allows attackers to cau... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now