2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-10694 | — | — | — | Nov 11, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-9542. Reason: This candidate is a r... |
| CVE-2024-52532 | HIGH | 7.5 | 0.9% | Nov 11, 2024 | GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSo... |
| CVE-2024-52531 | MEDIUM | 6.5 | 0.7% | Nov 11, 2024 | GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_pars... |
| CVE-2024-52530 | HIGH | 7.5 | 0.8% | Nov 11, 2024 | GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of he... |
| CVE-2024-52288 | MEDIUM | 5.1 | 0.1% | Nov 11, 2024 | libosdp is an implementation of IEC 60839-11-5 OSDP (Open Supervised Device Protocol) and provides a C library with supp... |
| CVE-2024-52286 | LOW | 2 | 0.5% | Nov 11, 2024 | Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. In affected... |
| CVE-2024-51992 | MEDIUM | 4.1 | 0.3% | Nov 11, 2024 | Orchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panel... |
| CVE-2024-51748 | HIGH | 7.2 | 0.9% | Nov 11, 2024 | Kanboard is project management software that focuses on the Kanban methodology. An authenticated Kanboard admin can run ... |
| CVE-2024-51747 | HIGH | 7.2 | 0.8% | Nov 11, 2024 | Kanboard is project management software that focuses on the Kanban methodology. An authenticated Kanboard admin can read... |
| CVE-2024-51490 | CRITICAL | 9 | 0.5% | Nov 11, 2024 | Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface se... |
| CVE-2024-51489 | MEDIUM | 5.4 | 0.3% | Nov 11, 2024 | Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing d... |
| CVE-2024-51488 | MEDIUM | 5.4 | 0.3% | Nov 11, 2024 | Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing d... |
| CVE-2024-51487 | HIGH | 8.1 | 0.3% | Nov 11, 2024 | Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing f... |
| CVE-2024-51486 | HIGH | 8.4 | 0.5% | Nov 11, 2024 | Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface sec... |
| CVE-2024-51485 | HIGH | 8.1 | 0.3% | Nov 11, 2024 | Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing f... |
| CVE-2024-51484 | HIGH | 8.1 | 0.3% | Nov 11, 2024 | Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing f... |
| CVE-2024-51190 | MEDIUM | 4.8 | 0.4% | Nov 11, 2024 | TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS)... |
| CVE-2024-51189 | MEDIUM | 4.8 | 0.4% | Nov 11, 2024 | TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS)... |
| CVE-2024-51188 | MEDIUM | 4.8 | 0.4% | Nov 11, 2024 | TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS)... |
| CVE-2024-51187 | MEDIUM | 4.8 | 0.4% | Nov 11, 2024 | TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS)... |
| CVE-2024-51186 | HIGH | 8 | 0.8% | Nov 11, 2024 | D-Link DIR-820L 1.05b03 was discovered to contain a remote code execution (RCE) vulnerability via the ping_addr paramete... |
| CVE-2024-48322 | HIGH | 8.1 | 0.8% | Nov 11, 2024 | UsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability. |
| CVE-2024-46965 | MEDIUM | 5.4 | 0.2% | Nov 11, 2024 | The DS allvideo.downloader.browser (aka Fast Video Downloader: Browser) application through 1.6-RC1 for Android allows a... |
| CVE-2024-36061 | CRITICAL | 9.8 | 1.1% | Nov 11, 2024 | EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection. This allows an attacker to execute arbitrar... |
| CVE-2024-11078 | MEDIUM | 5.4 | 0.4% | Nov 11, 2024 | A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. Affected by this vuln... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now