2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-41967 | HIGH | 8.1 | 0.4% | Nov 18, 2024 | A low privileged remote attacker may modify the boot mode configuration setup of the device, leading to modification of ... |
| CVE-2024-41151 | HIGH | 8.8 | 1.0% | Nov 18, 2024 | Deserialization of Untrusted Data vulnerability in Apache HertzBeat. This vulnerability can only be exploited by author... |
| CVE-2024-49574 | HIGH | 8.8 | 1.7% | Nov 18, 2024 | Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module. |
| CVE-2024-22067 | HIGH | 8.8 | 0.7% | Nov 18, 2024 | ZTE NH8091 product has an improper permission control vulnerability. Due to improper permission control of the Web modul... |
| CVE-2024-11315 | CRITICAL | 9.8 | 1.3% | Nov 18, 2024 | The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows un... |
| CVE-2024-11314 | CRITICAL | 9.8 | 1.3% | Nov 18, 2024 | The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows un... |
| CVE-2024-11313 | CRITICAL | 9.8 | 1.3% | Nov 18, 2024 | The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows un... |
| CVE-2024-11312 | CRITICAL | 9.8 | 1.3% | Nov 18, 2024 | The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows un... |
| CVE-2024-11311 | CRITICAL | 9.8 | 1.3% | Nov 18, 2024 | The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows un... |
| CVE-2024-5030 | LOW | 3.8 | 0.2% | Nov 18, 2024 | The CM Table Of Contents WordPress plugin before 1.2.3 does not have CSRF check in place when resetting its settings, w... |
| CVE-2024-52947 | MEDIUM | 5.4 | 0.3% | Nov 18, 2024 | A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.20.1 allows remote attackers to inject arbitrary we... |
| CVE-2024-52946 | HIGH | 8.8 | 0.5% | Nov 18, 2024 | An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated... |
| CVE-2024-52945 | HIGH | 7.8 | 0.2% | Nov 18, 2024 | An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows... |
| CVE-2024-52944 | MEDIUM | 5.4 | 0.3% | Nov 18, 2024 | An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698. It allows an authenticated rem... |
| CVE-2024-52943 | MEDIUM | 5.4 | 1.1% | Nov 18, 2024 | An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697. It allows an authenticated rem... |
| CVE-2024-52942 | MEDIUM | 5.4 | 0.3% | Nov 18, 2024 | An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24696. It allows an authenticated rem... |
| CVE-2024-52941 | MEDIUM | 5.4 | 0.3% | Nov 18, 2024 | An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24695. It allows an authenticated rem... |
| CVE-2024-11310 | HIGH | 7.5 | 0.7% | Nov 18, 2024 | The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulner... |
| CVE-2024-11309 | HIGH | 7.5 | 0.7% | Nov 18, 2024 | The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulner... |
| CVE-2024-11308 | MEDIUM | 5.5 | 0.2% | Nov 18, 2024 | The DVC from TRCore encrypts files using a hardcoded key. Attackers can use this key to decrypt the files and restore th... |
| CVE-2024-52940 | HIGH | 7.5 | 1.2% | Nov 18, 2024 | AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address wi... |
| CVE-2024-43704 | HIGH | 8.4 | 0.2% | Nov 18, 2024 | Software installed and run as a non-privileged user may conduct improper GPU system calls to gain access to the graphics... |
| CVE-2024-52926 | MEDIUM | 6.5 | 0.2% | Nov 18, 2024 | Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent. |
| CVE-2024-52922 | MEDIUM | 6.5 | 0.3% | Nov 18, 2024 | In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes... |
| CVE-2024-52921 | MEDIUM | 5.3 | 0.4% | Nov 18, 2024 | In Bitcoin Core before 25.0, a peer can affect the download state of other peers by sending a mutated block. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now