2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-43437 | MEDIUM | 6.1 | 0.3% | Nov 11, 2024 | A flaw was found in moodle. Insufficient sanitizing of data when performing a restore could result in a cross-site scrip... |
| CVE-2024-43435 | MEDIUM | 5.3 | 0.3% | Nov 11, 2024 | A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries ... |
| CVE-2024-43433 | MEDIUM | 5.3 | 0.3% | Nov 11, 2024 | A flaw was found in moodle. Matrix room membership and power levels are incorrectly applied and revoked for suspended Mo... |
| CVE-2024-43432 | MEDIUM | 5.3 | 0.3% | Nov 11, 2024 | A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, bu... |
| CVE-2024-43430 | MEDIUM | 5.3 | 0.3% | Nov 11, 2024 | A flaw was found in moodle. External API access to Quiz can override contained insufficient access control. |
| CVE-2024-43429 | MEDIUM | 5.3 | 0.3% | Nov 11, 2024 | A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in user... |
| CVE-2024-43427 | LOW | 3.7 | 0.3% | Nov 11, 2024 | A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are ... |
| CVE-2024-11068 | CRITICAL | 9.8 | 1.2% | Nov 11, 2024 | The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attacke... |
| CVE-2024-11067 | HIGH | 7.5 | 1.3% | Nov 11, 2024 | The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this ... |
| CVE-2024-11066 | HIGH | 7.2 | 1.8% | Nov 11, 2024 | The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privil... |
| CVE-2024-11065 | HIGH | 7.2 | 1.3% | Nov 11, 2024 | The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privil... |
| CVE-2024-11064 | HIGH | 7.2 | 1.3% | Nov 11, 2024 | The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privil... |
| CVE-2024-11063 | HIGH | 7.2 | 1.3% | Nov 11, 2024 | The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privil... |
| CVE-2024-11062 | HIGH | 7.2 | 1.3% | Nov 11, 2024 | The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privil... |
| CVE-2024-11021 | MEDIUM | 5.4 | 0.3% | Nov 11, 2024 | Webopac from Grand Vice info has Stored Cross-site Scripting vulnerability. Remote attackers with regular privileges can... |
| CVE-2024-11020 | CRITICAL | 9.8 | 0.5% | Nov 11, 2024 | Webopac from Grand Vice info has a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitr... |
| CVE-2024-52355 | MEDIUM | 5.4 | 0.3% | Nov 11, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MiKa OSM osm.This ... |
| CVE-2024-52354 | MEDIUM | 5.4 | 0.3% | Nov 11, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cool Plugins Web S... |
| CVE-2024-52353 | MEDIUM | 5.4 | 0.2% | Nov 11, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gabriel Serafini C... |
| CVE-2024-52352 | MEDIUM | 5.4 | 0.2% | Nov 11, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in miloandrew Postcas... |
| CVE-2024-52351 | MEDIUM | 5.4 | 0.2% | Nov 11, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BU Web Team BU Sli... |
| CVE-2024-52350 | MEDIUM | 5.4 | 0.2% | Nov 11, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nrmendez CRM 2go c... |
| CVE-2024-11019 | MEDIUM | 6.1 | 0.3% | Nov 11, 2024 | Webopac from Grand Vice info has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attacke... |
| CVE-2024-11018 | CRITICAL | 9.8 | 0.8% | Nov 11, 2024 | Webopac from Grand Vice info does not properly validate uploaded file types, allowing unauthenticated remote attackers t... |
| CVE-2024-11017 | HIGH | 8.8 | 0.7% | Nov 11, 2024 | Webopac from Grand Vice info does not properly validate uploaded file types, allowing remote attackers with regular priv... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now