2024 CVE Vulnerabilities
39,268 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-11175 | MEDIUM | 4.8 | 0.5% | Nov 13, 2024 | A vulnerability was found in Public CMS 5.202406.d and classified as problematic. This issue affects some unknown proces... |
| CVE-2024-10013 | HIGH | 7.8 | 0.2% | Nov 13, 2024 | In Progress Telerik UI for WinForms versions prior to 2024 Q4 (2024.4.1113), a code execution attack is possible through... |
| CVE-2024-10012 | HIGH | 7.8 | 0.2% | Nov 13, 2024 | In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1111), a code execution attack is possible through an i... |
| CVE-2024-9477 | MEDIUM | 6.1 | 0.2% | Nov 13, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air... |
| CVE-2024-50854 | HIGH | 8.8 | 0.5% | Nov 13, 2024 | Tenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function. |
| CVE-2024-50853 | HIGH | 8.8 | 1.6% | Nov 13, 2024 | Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetDebugCfg function. |
| CVE-2024-50852 | HIGH | 8.8 | 1.6% | Nov 13, 2024 | Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetUSBPartitionUmount ... |
| CVE-2024-49506 | HIGH | 7.3 | 0.1% | Nov 13, 2024 | Insecure creation of temporary files allows local users on systems with non-default configurations to cause denial of se... |
| CVE-2024-49505 | MEDIUM | 6.1 | 0.3% | Nov 13, 2024 | A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE Tumblew... |
| CVE-2024-49504 | HIGH | 7 | 0.3% | Nov 13, 2024 | grub2 allowed attackers with access to the grub shell to access files on the encrypted disks. |
| CVE-2024-48900 | MEDIUM | 4.3 | 0.3% | Nov 13, 2024 | A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipi... |
| CVE-2024-48510 | CRITICAL | 9.8 | 2.1% | Nov 13, 2024 | Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code vi... |
| CVE-2024-11165 | MEDIUM | 5.7 | 0.1% | Nov 13, 2024 | An information disclosure vulnerability exists in the backup configuration process where the SAS token is not masked in ... |
| CVE-2024-48989 | HIGH | 7.5 | 0.5% | Nov 13, 2024 | A vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch Rexroth allows an attacke... |
| CVE-2024-11159 | MEDIUM | 4.3 | 0.3% | Nov 13, 2024 | Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This vulnerability affects T... |
| CVE-2024-47574 | HIGH | 7.8 | 0.5% | Nov 13, 2024 | A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 ... |
| CVE-2024-4741 | HIGH | 7.5 | 2.9% | Nov 13, 2024 | Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously fre... |
| CVE-2024-8001 | MEDIUM | 4.3 | 0.7% | Nov 13, 2024 | A vulnerability was found in VIWIS LMS 9.11. It has been classified as critical. Affected is an unknown function of the ... |
| CVE-2024-11028 | CRITICAL | 9.8 | 1.3% | Nov 13, 2024 | The MultiManager WP – Manage All Your WordPress Sites Easily plugin for WordPress is vulnerable to Authentication Bypass... |
| CVE-2024-9682 | MEDIUM | 5.4 | 0.4% | Nov 13, 2024 | The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi... |
| CVE-2024-9668 | MEDIUM | 5.4 | 0.4% | Nov 13, 2024 | The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi... |
| CVE-2024-9059 | MEDIUM | 5.4 | 0.4% | Nov 13, 2024 | The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Googl... |
| CVE-2024-10877 | MEDIUM | 6.1 | 0.6% | Nov 13, 2024 | The AFI – The Easiest Integration Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the... |
| CVE-2024-52268 | MEDIUM | 4.8 | 0.3% | Nov 13, 2024 | Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerabi... |
| CVE-2024-9409 | HIGH | 7.5 | 0.8% | Nov 13, 2024 | CWE-400: An Uncontrolled Resource Consumption vulnerability exists that could cause the device to become unresponsive re... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now