2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-44625 | HIGH | 8.8 | 14.9% | Nov 15, 2024 | Gogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go. |
| CVE-2024-39726 | HIGH | 8.2 | 0.7% | Nov 15, 2024 | IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 is vulnerable to an XML External Entity In... |
| CVE-2024-11248 | HIGH | 8.8 | 1.2% | Nov 15, 2024 | A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is the function f... |
| CVE-2024-11247 | MEDIUM | 5.4 | 0.5% | Nov 15, 2024 | A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this... |
| CVE-2024-7865 | — | — | — | Nov 15, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-2414. Reason: This candidate is a r... |
| CVE-2024-6413 | — | — | — | Nov 15, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-2414. Reason: This candidate is a r... |
| CVE-2024-52555 | HIGH | 7.8 | 0.1% | Nov 15, 2024 | In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer... |
| CVE-2024-52526 | MEDIUM | 5.4 | 0.4% | Nov 15, 2024 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerab... |
| CVE-2024-51497 | MEDIUM | 5.4 | 0.4% | Nov 15, 2024 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerab... |
| CVE-2024-51496 | MEDIUM | 5.4 | 0.4% | Nov 15, 2024 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Reflected Cross-Site Scripting (XSS) vulne... |
| CVE-2024-51495 | MEDIUM | 5.4 | 0.4% | Nov 15, 2024 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerab... |
| CVE-2024-51494 | MEDIUM | 5.4 | 0.4% | Nov 15, 2024 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerab... |
| CVE-2024-51164 | CRITICAL | 9.1 | 0.7% | Nov 15, 2024 | Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allo... |
| CVE-2024-50724 | CRITICAL | 9.8 | 0.4% | Nov 15, 2024 | KASO v9.0 was discovered to contain a SQL injection vulnerability via the person_id parameter at /cardcase/editcard.jsp. |
| CVE-2024-50652 | MEDIUM | 4.3 | 0.3% | Nov 15, 2024 | A file upload vulnerability in java_shop 1.0 allows attackers to upload arbitrary files by modifying the avatar function... |
| CVE-2024-50651 | MEDIUM | 6.5 | 0.5% | Nov 15, 2024 | java_shop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users... |
| CVE-2024-50650 | HIGH | 7.5 | 0.5% | Nov 15, 2024 | python_book V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of us... |
| CVE-2024-50649 | CRITICAL | 9.8 | 1.0% | Nov 15, 2024 | The user avatar upload function in python_book V1.0 has an arbitrary file upload vulnerability. |
| CVE-2024-50648 | CRITICAL | 9.8 | 1.0% | Nov 15, 2024 | yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improp... |
| CVE-2024-50647 | HIGH | 7.5 | 0.5% | Nov 15, 2024 | The python_food ordering system V1.0 has an unauthorized vulnerability that leads to the leakage of sensitive user infor... |
| CVE-2024-50355 | MEDIUM | 4.8 | 0.3% | Nov 15, 2024 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. User with Admin role can edit the Display Na... |
| CVE-2024-50352 | MEDIUM | 5.4 | 36.7% | Nov 15, 2024 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerab... |
| CVE-2024-50351 | MEDIUM | 5.4 | 0.4% | Nov 15, 2024 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Reflected Cross-Site Scripting (XSS) vulne... |
| CVE-2024-50350 | MEDIUM | 5.4 | 0.4% | Nov 15, 2024 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerab... |
| CVE-2024-49764 | MEDIUM | 5.4 | 0.4% | Nov 15, 2024 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerab... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now