2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-52419 | MEDIUM | 5.4 | 0.2% | Nov 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Clipboard Agency C... |
| CVE-2024-0012 | CRITICAL | 9.8 | 99.7% | Nov 18, 2024 | An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access t... |
| CVE-2024-52436 | HIGH | 7.2 | 0.5% | Nov 18, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal Post SM... |
| CVE-2024-52435 | HIGH | 7.2 | 0.5% | Nov 18, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada WPDM – Pr... |
| CVE-2024-52434 | CRITICAL | 9.1 | 1.1% | Nov 18, 2024 | Deserialization of Untrusted Data vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Command Inject... |
| CVE-2024-52433 | CRITICAL | 9.8 | 3.1% | Nov 18, 2024 | Deserialization of Untrusted Data vulnerability in Mindstien Technologies My Geo Posts Free my-geo-posts-free allows Obj... |
| CVE-2024-52432 | CRITICAL | 9.8 | 0.5% | Nov 18, 2024 | Deserialization of Untrusted Data vulnerability in NIX Solutions Ltd NIX Anti-Spam Light nix-anti-spam-light allows Obje... |
| CVE-2024-52431 | CRITICAL | 9.8 | 0.4% | Nov 18, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pressaholic WordPr... |
| CVE-2024-52430 | CRITICAL | 9.8 | 1.1% | Nov 18, 2024 | Deserialization of Untrusted Data vulnerability in bublick Lis Video Gallery lis-video-gallery allows Object Injection.T... |
| CVE-2024-52429 | HIGH | 8.8 | 0.9% | Nov 18, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in AntonHoelstad WP Quick Setup wp-quick-setup allows Uplo... |
| CVE-2024-52428 | CRITICAL | 9.8 | 0.5% | Nov 18, 2024 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2024-52427 | HIGH | 8.8 | 0.7% | Nov 18, 2024 | Deserialization of Untrusted Data vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket... |
| CVE-2024-37155 | HIGH | 8.2 | 0.4% | Nov 18, 2024 | OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observ... |
| CVE-2024-28058 | HIGH | 7.5 | 0.4% | Nov 18, 2024 | In RSA NetWitness (NW) Platform before 12.5.1, even when an administrator revokes the access of a specific user with an ... |
| CVE-2024-11304 | MEDIUM | 5.1 | 0.5% | Nov 18, 2024 | Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertec... |
| CVE-2024-9526 | MEDIUM | 5.4 | 0.2% | Nov 18, 2024 | There exists a stored XSS Vulnerability in Kubeflow Pipeline View web UI. The Kubeflow Web UI allows to create new pipel... |
| CVE-2024-8781 | HIGH | 8.7 | 0.2% | Nov 18, 2024 | Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security... |
| CVE-2024-11318 | HIGH | 7.5 | 0.9% | Nov 18, 2024 | An IDOR (Insecure Direct Object Reference) vulnerability has been discovered in AbsysNet, affecting version 2.3.1. This ... |
| CVE-2024-11303 | HIGH | 8.7 | 1.8% | Nov 18, 2024 | The pathname of the root directory to a Restricted Directory ('Path Traversal') vulnerability in Korenix JetPort 5601 al... |
| CVE-2024-52318 | MEDIUM | 6.1 | 1.7% | Nov 18, 2024 | Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0, 10.1.31,... |
| CVE-2024-3370 | HIGH | 8.8 | 0.3% | Nov 18, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Egebilgi Software ... |
| CVE-2024-52317 | MEDIUM | 6.5 | 2.0% | Nov 18, 2024 | Incorrect object re-cycling and re-use vulnerability in Apache Tomcat. Incorrect recycling of the request and response u... |
| CVE-2024-52316 | CRITICAL | 9.8 | 6.3% | Nov 18, 2024 | Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat is configured to use a custom Jakarta Authentication... |
| CVE-2024-48901 | MEDIUM | 4.3 | 0.3% | Nov 18, 2024 | A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a re... |
| CVE-2024-48898 | MEDIUM | 4.3 | 0.3% | Nov 18, 2024 | A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from othe... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now