2024 CVE Vulnerabilities
39,268 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-2551 | HIGH | 7.5 | 0.5% | Nov 14, 2024 | A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to st... |
| CVE-2024-2550 | HIGH | 7.5 | 0.5% | Nov 14, 2024 | A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an u... |
| CVE-2024-7787 | MEDIUM | 5.1 | 0.4% | Nov 14, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ITG Compute... |
| CVE-2024-11206 | HIGH | 7.5 | 0.4% | Nov 14, 2024 | Unauthorized access vulnerability in the mobile application (com.transsion.phoenix) can lead to the leakage of user info... |
| CVE-2024-9186 | HIGH | 8.6 | 2.2% | Nov 14, 2024 | The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit WordPress plugi... |
| CVE-2024-10146 | MEDIUM | 5.4 | 0.6% | Nov 14, 2024 | The Simple File List WordPress plugin before 6.1.13 does not sanitise and escape a generated URL before outputting it ba... |
| CVE-2024-5082 | HIGH | 7.1 | 1.9% | Nov 14, 2024 | A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2. This issue affects Nexus Rep... |
| CVE-2024-5083 | MEDIUM | 5.1 | 0.4% | Nov 14, 2024 | A stored Cross-site Scripting vulnerability has been discovered in Sonatype Nexus Repository 2 This issue affects Nexus... |
| CVE-2024-40410 | MEDIUM | 4.8 | 0.1% | Nov 13, 2024 | Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key used for ... |
| CVE-2024-40408 | HIGH | 7.3 | 0.3% | Nov 13, 2024 | Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create P... |
| CVE-2024-40407 | HIGH | 7.5 | 0.4% | Nov 13, 2024 | A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root pat... |
| CVE-2024-40405 | HIGH | 8.1 | 0.4% | Nov 13, 2024 | Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a ... |
| CVE-2024-40404 | CRITICAL | 9.8 | 0.4% | Nov 13, 2024 | Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endp... |
| CVE-2024-51027 | MEDIUM | 6.5 | 6.8% | Nov 13, 2024 | Ruijie NBR800G gateway NBR_RGOS_11.1(6)B4P9 is vulnerable to command execution in /itbox_pi/networksafe.php via the prov... |
| CVE-2024-50956 | MEDIUM | 6.5 | 0.3% | Nov 13, 2024 | A buffer overflow in the RecvSocketData function of Inovance HCPLC_AM401-CPU1608TPTN 21.38.0.0, HCPLC_AM402-CPU1608TPTN ... |
| CVE-2024-50955 | HIGH | 7.5 | 0.4% | Nov 13, 2024 | An issue in how XINJE XD5E-24R and XL5E-16T v3.5.3b handles TCP protocol messages allows attackers to cause a Denial of ... |
| CVE-2024-52554 | HIGH | 8.8 | 0.5% | Nov 13, 2024 | Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as ... |
| CVE-2024-52553 | HIGH | 8.8 | 0.6% | Nov 13, 2024 | Jenkins OpenId Connect Authentication Plugin 4.418.vccc7061f5b_6d and earlier does not invalidate the previous session o... |
| CVE-2024-52552 | HIGH | 8 | 0.7% | Nov 13, 2024 | Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Aut... |
| CVE-2024-52551 | HIGH | 8 | 0.6% | Nov 13, 2024 | Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile)... |
| CVE-2024-52550 | HIGH | 8 | 0.4% | Nov 13, 2024 | Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether t... |
| CVE-2024-52549 | MEDIUM | 4.3 | 0.4% | Nov 13, 2024 | Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc... |
| CVE-2024-45879 | MEDIUM | 5.4 | 0.3% | Nov 13, 2024 | The file upload function in the "QWKalkulation" tool of baltic-it TOPqw Webportal v1.35.287.1 (fixed in version 1.35.291... |
| CVE-2024-45878 | MEDIUM | 5.4 | 0.3% | Nov 13, 2024 | The "Stammdaten" menu of baltic-it TOPqw Webportal v1.35.283.2 (fixed in version 1.35.291), in /Apps/TOPqw/qwStammdaten.... |
| CVE-2024-45877 | MEDIUM | 6.5 | 0.4% | Nov 13, 2024 | baltic-it TOPqw Webportal v1.35.283.2 is vulnerable to Incorrect Access Control in the User Management function in /Apps... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now