2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-31817 | HIGH | 7.5 | 55.3% | Apr 8, 2024 | In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the... |
| CVE-2024-31816 | HIGH | 7.5 | 2.7% | Apr 8, 2024 | In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the... |
| CVE-2024-31814 | HIGH | 8.8 | 8.6% | Apr 8, 2024 | TOTOLINK EX200 V4.0.3c.7646_B20201211 allows attackers to bypass login through the Form_Login function. |
| CVE-2024-31813 | HIGH | 8.4 | 0.2% | Apr 8, 2024 | TOTOLINK EX200 V4.0.3c.7646_B20201211 does not contain an authentication mechanism by default. |
| CVE-2024-31811 | HIGH | 8 | 1.0% | Apr 8, 2024 | TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the lang... |
| CVE-2024-31809 | HIGH | 8.8 | 1.0% | Apr 8, 2024 | TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the File... |
| CVE-2024-31808 | HIGH | 8.8 | 0.9% | Apr 8, 2024 | TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the webW... |
| CVE-2024-2834 | HIGH | 8.7 | 0.5% | Apr 8, 2024 | A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSigh... |
| CVE-2024-28066 | HIGH | 8.8 | 0.5% | Apr 8, 2024 | In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password). |
| CVE-2024-26574 | HIGH | 7.8 | 0.3% | Apr 8, 2024 | Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code vi... |
| CVE-2024-27897 | HIGH | 7.5 | 0.3% | Apr 8, 2024 | Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect se... |
| CVE-2024-27896 | HIGH | 7.5 | 0.3% | Apr 8, 2024 | Input verification vulnerability in the log module. Impact: Successful exploitation of this vulnerability can affect int... |
| CVE-2024-27895 | HIGH | 7.5 | 0.3% | Apr 8, 2024 | Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confi... |
| CVE-2024-28744 | HIGH | 8.8 | 0.3% | Apr 8, 2024 | The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmw... |
| CVE-2024-3437 | HIGH | 7.2 | 1.1% | Apr 8, 2024 | A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. This issue affe... |
| CVE-2024-3436 | HIGH | 7.2 | 0.9% | Apr 8, 2024 | A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. This vulnera... |
| CVE-2024-3432 | HIGH | 8.8 | 0.6% | Apr 7, 2024 | A vulnerability was found in PuneethReddyHC Event Management 1.0. It has been rated as critical. This issue affects some... |
| CVE-2024-3431 | HIGH | 8.8 | 0.7% | Apr 7, 2024 | A vulnerability was found in EyouCMS 1.6.5. It has been declared as critical. This vulnerability affects unknown code of... |
| CVE-2024-31308 | HIGH | 7.2 | 0.4% | Apr 7, 2024 | Deserialization of Untrusted Data vulnerability in VJInfotech WP Import Export Lite.This issue affects WP Import Export ... |
| CVE-2024-31292 | HIGH | 7.2 | 0.6% | Apr 7, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Moove Agency Import XML and RSS Feeds.This issue affect... |
| CVE-2024-31291 | HIGH | 7.1 | 0.4% | Apr 7, 2024 | Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid :... |
| CVE-2024-31288 | HIGH | 7.2 | 0.4% | Apr 7, 2024 | Server-Side Request Forgery (SSRF) vulnerability in RapidLoad RapidLoad Power-Up for Autoptimize.This issue affects Rapi... |
| CVE-2024-31280 | HIGH | 8.8 | 0.6% | Apr 7, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects... |
| CVE-2024-31277 | HIGH | 8.7 | 0.5% | Apr 7, 2024 | Deserialization of Untrusted Data vulnerability in PickPlugins Product Designer.This issue affects Product Designer: fro... |
| CVE-2024-31260 | HIGH | 7.2 | 0.5% | Apr 7, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WisdmLabs Edwiser ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now