2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-46466 | HIGH | 7.8 | 0.2% | Nov 15, 2024 | By default, dedicated folders of ZONECENTRAL for Windows up to 2024.3 or up to Q.2021.2 (ANSSI qualification submission)... |
| CVE-2024-46465 | HIGH | 7.8 | 0.2% | Nov 15, 2024 | By default, dedicated folders of CRYHOD for Windows up to 2024.3 can be accessed by other users to misuse technical file... |
| CVE-2024-46463 | HIGH | 7.8 | 0.2% | Nov 15, 2024 | By default, dedicated folders of ORIZON for Windows up to 2024.3 can be accessed by other users to misuse technical file... |
| CVE-2024-46462 | HIGH | 7.8 | 0.2% | Nov 15, 2024 | By default, dedicated folders of ZEDMAIL for Windows up to 2024.3 can be accessed by other users to misuse technical fil... |
| CVE-2024-46383 | LOW | 2.4 | 0.3% | Nov 15, 2024 | Hathway Skyworth Router CM5100-511 v4.1.1.24 was discovered to store sensitive information about USB and Wifi connected ... |
| CVE-2024-41678 | MEDIUM | 6.1 | 0.5% | Nov 15, 2024 | GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI ... |
| CVE-2024-40638 | HIGH | 8.8 | 37.0% | Nov 15, 2024 | GLPI is a free asset and IT management software package. An authenticated user can exploit multiple SQL injection vulner... |
| CVE-2024-24450 | MEDIUM | 5.3 | 1.4% | Nov 15, 2024 | Stack-based memcpy buffer overflow in the ngap_handle_pdu_session_resource_setup_response routine in OpenAirInterface CN... |
| CVE-2024-24449 | MEDIUM | 6.5 | 0.4% | Nov 15, 2024 | An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows at... |
| CVE-2024-24447 | MEDIUM | 5.3 | 0.5% | Nov 15, 2024 | A buffer overflow in the ngap_amf_handle_pdu_session_resource_setup_response function of oai-cn5g-amf up to v2.0.0 allow... |
| CVE-2024-11251 | HIGH | 8.8 | 0.5% | Nov 15, 2024 | A vulnerability was found in erzhongxmu Jeewms up to 20241108. It has been rated as critical. This issue affects some un... |
| CVE-2024-11250 | CRITICAL | 9.8 | 0.7% | Nov 15, 2024 | A vulnerability was found in code-projects Inventory Management up to 1.0. It has been declared as critical. This vulner... |
| CVE-2024-52528 | CRITICAL | 9.3 | 0.6% | Nov 15, 2024 | Budget Control Gateway acts as an entry point for incoming requests and routes them to the appropriate microservices for... |
| CVE-2024-52525 | HIGH | 7.5 | 0.3% | Nov 15, 2024 | Nextcloud Server is a self hosted personal cloud system. Under certain conditions the password of a user was stored unen... |
| CVE-2024-52523 | MEDIUM | 6.5 | 0.6% | Nov 15, 2024 | Nextcloud Server is a self hosted personal cloud system. After setting up a user or administrator defined external stora... |
| CVE-2024-52521 | MEDIUM | 5.3 | 0.4% | Nov 15, 2024 | Nextcloud Server is a self hosted personal cloud system. MD5 hashes were used to check background jobs for their uniquen... |
| CVE-2024-52520 | MEDIUM | 6.5 | 0.8% | Nov 15, 2024 | Nextcloud Server is a self hosted personal cloud system. Due to a pre-flighted HEAD request, the link reference provider... |
| CVE-2024-52519 | HIGH | 8.2 | 0.5% | Nov 15, 2024 | Nextcloud Server is a self hosted personal cloud system. The OAuth2 client secrets were stored in a recoverable way, so ... |
| CVE-2024-52518 | MEDIUM | 5.4 | 0.5% | Nov 15, 2024 | Nextcloud Server is a self hosted personal cloud system. After an attacker got access to the session of a user or admini... |
| CVE-2024-52517 | MEDIUM | 5.9 | 0.6% | Nov 15, 2024 | Nextcloud Server is a self hosted personal cloud system. After storing "Global credentials" on the server, the API retur... |
| CVE-2024-52516 | MEDIUM | 4.3 | 0.4% | Nov 15, 2024 | Nextcloud Server is a self hosted personal cloud system. When a server is configured to only allow sharing with users th... |
| CVE-2024-52515 | MEDIUM | 6.5 | 0.7% | Nov 15, 2024 | Nextcloud Server is a self hosted personal cloud system. After an admin enables the default-disabled SVG preview provide... |
| CVE-2024-50655 | MEDIUM | 5.4 | 0.4% | Nov 15, 2024 | emlog pro <=2.3.18 is vulnerable to Cross Site Scripting (XSS), which allows attackers to write malicious JavaScript cod... |
| CVE-2024-50654 | HIGH | 7.5 | 1.6% | Nov 15, 2024 | lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quant... |
| CVE-2024-50653 | HIGH | 7.5 | 0.5% | Nov 15, 2024 | CRMEB <=5.4.0 is vulnerable to Incorrect Access Control. Users can bypass the front-end restriction of only being able t... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now