2024 CVE Vulnerabilities

39,227 CVEs published in 2024.

CVE IDSeverityCVSSDescription
CVE-2024-45763HIGH7.2Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an ...
CVE-2024-25431HIGH7.8An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to...
CVE-2024-50966CRITICAL9.3dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction....
CVE-2024-47190LOW2.7Northern.tech Hosted Mender before 2024.07.11 allows SSRF.
CVE-2024-46948MEDIUM4.3Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control.
CVE-2024-46947MEDIUM6.5Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF.
CVE-2024-45765HIGH7.2Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an ...
CVE-2024-45764CRITICAL9.8Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. A...
CVE-2024-50378MEDIUM4.9Airflow versions before 2.10.3 have a vulnerability that allows authenticated users with audit log access to see sensiti...
CVE-2024-50592HIGH7An attacker with local access the to medical office computer can escalate his Windows user privileges to "NT AUTHORITY\...
CVE-2024-50593HIGH7.8An attacker with local access to the medical office computer can access restricted functions of the Elefant Service too...
CVE-2024-50591HIGH7.8An attacker with local access the to medical office computer can escalate his Windows user privileges to "NT AUTHORITY\...
CVE-2024-50590HIGH7.8Attackers with local access to the medical office computer can escalate their Windows user privileges to "NT AUTHORITY\...
CVE-2024-50589HIGH7.5An unauthenticated attacker with access to the local network of the medical office can query an unprotected Fast Health...
CVE-2024-10325MEDIUM5.4The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG...
CVE-2024-10839HIGH8.1Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entit...
CVE-2024-10187MEDIUM5.4The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, Woo...
CVE-2024-50588CRITICAL9.8An unauthenticated attacker with access to the local network of the medical office can use known default credentials to...
CVE-2024-24409HIGH8.8Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Comput...
CVE-2024-11000HIGH7.2A vulnerability classified as problematic was found in CodeAstro Real Estate Management System 1.0. Affected by this vul...
CVE-2024-10999HIGH7.2A vulnerability classified as problematic has been found in CodeAstro Real Estate Management System 1.0. Affected is an ...
CVE-2024-10998CRITICAL9.8A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. This issue af...
CVE-2024-10997CRITICAL9.8A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. This vulne...
CVE-2024-10996CRITICAL9.8A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been classified as critical. This aff...
CVE-2024-10995CRITICAL9.8A vulnerability was found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this issue...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now