2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-48897 | MEDIUM | 4.3 | 0.3% | Nov 18, 2024 | A vulnerability was found in Moodle. Additional checks are required to ensure users can only edit or delete RSS feeds th... |
| CVE-2024-48896 | MEDIUM | 4.3 | 0.4% | Nov 18, 2024 | A vulnerability was found in Moodle. It is possible for users with the "send message" capability to view other users' na... |
| CVE-2024-11319 | MEDIUM | 4.8 | 0.5% | Nov 18, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in django CMS ... |
| CVE-2024-11023 | MEDIUM | 6.1 | 0.1% | Nov 18, 2024 | Firebase JavaScript SDK utilizes a "FIREBASE_DEFAULTS" cookie to store configuration data, including an "_authTokenSyncU... |
| CVE-2024-42392 | HIGH | 7.5 | 0.2% | Nov 18, 2024 | Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite l... |
| CVE-2024-42391 | MEDIUM | 5.3 | 0.3% | Nov 18, 2024 | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unex... |
| CVE-2024-42390 | MEDIUM | 5.3 | 0.3% | Nov 18, 2024 | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unex... |
| CVE-2024-42389 | MEDIUM | 5.3 | 0.3% | Nov 18, 2024 | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unex... |
| CVE-2024-42388 | MEDIUM | 5.3 | 0.3% | Nov 18, 2024 | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unex... |
| CVE-2024-42387 | MEDIUM | 5.3 | 0.3% | Nov 18, 2024 | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unex... |
| CVE-2024-42386 | HIGH | 7.5 | 0.4% | Nov 18, 2024 | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unex... |
| CVE-2024-42385 | HIGH | 7 | 0.1% | Nov 18, 2024 | Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bou... |
| CVE-2024-42384 | HIGH | 7.5 | 0.5% | Nov 18, 2024 | Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpect... |
| CVE-2024-42383 | CRITICAL | 9.8 | 0.3% | Nov 18, 2024 | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows to write a NULL byte value ... |
| CVE-2024-41974 | HIGH | 7.1 | 0.3% | Nov 18, 2024 | A low privileged remote attacker may modify the BACNet service properties due to incorrect permission assignment for cri... |
| CVE-2024-41973 | HIGH | 8.1 | 0.6% | Nov 18, 2024 | A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file wri... |
| CVE-2024-41972 | MEDIUM | 6.5 | 0.6% | Nov 18, 2024 | A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file r... |
| CVE-2024-41971 | HIGH | 8.1 | 0.6% | Nov 18, 2024 | A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss. |
| CVE-2024-41970 | MEDIUM | 5.7 | 0.3% | Nov 18, 2024 | A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for... |
| CVE-2024-48962 | HIGH | 8.8 | 0.6% | Nov 18, 2024 | Improper Control of Generation of Code ('Code Injection'), Cross-Site Request Forgery (CSRF), : Improper Neutralization ... |
| CVE-2024-47208 | CRITICAL | 9.8 | 1.6% | Nov 18, 2024 | Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OF... |
| CVE-2024-45791 | HIGH | 7.5 | 0.8% | Nov 18, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HertzBeat. This issue affects Apache... |
| CVE-2024-45505 | HIGH | 8.8 | 2.1% | Nov 18, 2024 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache HertzBeat (i... |
| CVE-2024-41969 | HIGH | 8.8 | 0.5% | Nov 18, 2024 | A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication... |
| CVE-2024-41968 | MEDIUM | 5.4 | 0.3% | Nov 18, 2024 | A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now