2024 CVE Vulnerabilities
39,227 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-41973 | HIGH | 8.1 | 0.6% | Nov 18, 2024 | A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file wri... |
| CVE-2024-41972 | MEDIUM | 6.5 | 0.6% | Nov 18, 2024 | A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file r... |
| CVE-2024-41971 | HIGH | 8.1 | 0.6% | Nov 18, 2024 | A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss. |
| CVE-2024-41970 | MEDIUM | 5.7 | 0.3% | Nov 18, 2024 | A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for... |
| CVE-2024-48962 | HIGH | 8.8 | 0.6% | Nov 18, 2024 | Improper Control of Generation of Code ('Code Injection'), Cross-Site Request Forgery (CSRF), : Improper Neutralization ... |
| CVE-2024-47208 | CRITICAL | 9.8 | 1.6% | Nov 18, 2024 | Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OF... |
| CVE-2024-45791 | HIGH | 7.5 | 0.8% | Nov 18, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HertzBeat. This issue affects Apache... |
| CVE-2024-45505 | HIGH | 8.8 | 2.1% | Nov 18, 2024 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache HertzBeat (i... |
| CVE-2024-41969 | HIGH | 8.8 | 0.5% | Nov 18, 2024 | A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication... |
| CVE-2024-41968 | MEDIUM | 5.4 | 0.3% | Nov 18, 2024 | A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS. |
| CVE-2024-41967 | HIGH | 8.1 | 0.4% | Nov 18, 2024 | A low privileged remote attacker may modify the boot mode configuration setup of the device, leading to modification of ... |
| CVE-2024-41151 | HIGH | 8.8 | 1.0% | Nov 18, 2024 | Deserialization of Untrusted Data vulnerability in Apache HertzBeat. This vulnerability can only be exploited by author... |
| CVE-2024-49574 | HIGH | 8.8 | 1.7% | Nov 18, 2024 | Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module. |
| CVE-2024-22067 | HIGH | 8.8 | 0.7% | Nov 18, 2024 | ZTE NH8091 product has an improper permission control vulnerability. Due to improper permission control of the Web modul... |
| CVE-2024-11315 | CRITICAL | 9.8 | 1.3% | Nov 18, 2024 | The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows un... |
| CVE-2024-11314 | CRITICAL | 9.8 | 1.3% | Nov 18, 2024 | The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows un... |
| CVE-2024-11313 | CRITICAL | 9.8 | 1.3% | Nov 18, 2024 | The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows un... |
| CVE-2024-11312 | CRITICAL | 9.8 | 1.3% | Nov 18, 2024 | The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows un... |
| CVE-2024-11311 | CRITICAL | 9.8 | 1.3% | Nov 18, 2024 | The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows un... |
| CVE-2024-5030 | LOW | 3.8 | 0.2% | Nov 18, 2024 | The CM Table Of Contents WordPress plugin before 1.2.3 does not have CSRF check in place when resetting its settings, w... |
| CVE-2024-52947 | MEDIUM | 5.4 | 0.3% | Nov 18, 2024 | A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.20.1 allows remote attackers to inject arbitrary we... |
| CVE-2024-52946 | HIGH | 8.8 | 0.5% | Nov 18, 2024 | An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated... |
| CVE-2024-52945 | HIGH | 7.8 | 0.2% | Nov 18, 2024 | An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows... |
| CVE-2024-52944 | MEDIUM | 5.4 | 0.3% | Nov 18, 2024 | An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698. It allows an authenticated rem... |
| CVE-2024-52943 | MEDIUM | 5.4 | 1.1% | Nov 18, 2024 | An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697. It allows an authenticated rem... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now