2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-50343 | LOW | 3.1 | 0.5% | Nov 6, 2024 | symfony/validator is a module for the Symphony PHP framework which provides tools to validate values. It is possible to ... |
| CVE-2024-50342 | MEDIUM | 4.3 | 0.5% | Nov 6, 2024 | symfony/http-client is a module for the Symphony PHP framework which provides powerful methods to fetch HTTP resources s... |
| CVE-2024-50341 | LOW | 3.1 | 0.3% | Nov 6, 2024 | symfony/security-bundle is a module for the Symphony PHP framework which provides a tight integration of the Security co... |
| CVE-2024-50340 | HIGH | 7.3 | 63.4% | Nov 6, 2024 | symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. ... |
| CVE-2024-10941 | MEDIUM | 6.5 | 0.4% | Nov 6, 2024 | A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. Th... |
| CVE-2024-10926 | MEDIUM | 5.3 | 0.3% | Nov 6, 2024 | A vulnerability was found in IBPhoenix ibWebAdmin up to 1.0.2 and classified as problematic. This issue affects some unk... |
| CVE-2024-51988 | MEDIUM | 6.5 | 0.4% | Nov 6, 2024 | RabbitMQ is a feature rich, multi-protocol messaging and streaming broker. In affected versions queue deletion via the H... |
| CVE-2024-51757 | CRITICAL | 9.3 | 0.7% | Nov 6, 2024 | happy-dom is a JavaScript implementation of a web browser without its graphical user interface. Versions of happy-dom pr... |
| CVE-2024-51755 | LOW | 2.2 | 0.4% | Nov 6, 2024 | Twig is a template language for PHP. In a sandbox, an attacker can access attributes of Array-like objects as they were ... |
| CVE-2024-51754 | LOW | 2.2 | 0.4% | Nov 6, 2024 | Twig is a template language for PHP. In a sandbox, an attacker can call `__toString()` on an object even if the `__toStr... |
| CVE-2024-51751 | MEDIUM | 6.5 | 0.7% | Nov 6, 2024 | Gradio is an open-source Python package designed to enable quick builds of a demo or web application. If File or UploadB... |
| CVE-2024-50315 | — | — | — | Nov 6, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requ... |
| CVE-2024-50637 | MEDIUM | 5.4 | 0.4% | Nov 6, 2024 | UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function. This allows attackers to... |
| CVE-2024-20540 | MEDIUM | 5.4 | 0.3% | Nov 6, 2024 | A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) c... |
| CVE-2024-20539 | MEDIUM | 4.8 | 0.3% | Nov 6, 2024 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to cond... |
| CVE-2024-20538 | MEDIUM | 6.1 | 0.3% | Nov 6, 2024 | A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to co... |
| CVE-2024-20537 | MEDIUM | 6.5 | 0.5% | Nov 6, 2024 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to bypa... |
| CVE-2024-20536 | HIGH | 8.8 | 0.8% | Nov 6, 2024 | A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller (ND... |
| CVE-2024-20534 | MEDIUM | 4.8 | 0.3% | Nov 6, 2024 | A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Vid... |
| CVE-2024-20533 | MEDIUM | 4.8 | 0.3% | Nov 6, 2024 | A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Vid... |
| CVE-2024-20532 | MEDIUM | 5.5 | 0.5% | Nov 6, 2024 | A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files... |
| CVE-2024-20531 | MEDIUM | 6.5 | 0.4% | Nov 6, 2024 | A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the und... |
| CVE-2024-20530 | MEDIUM | 6.1 | 0.3% | Nov 6, 2024 | A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to co... |
| CVE-2024-20529 | MEDIUM | 5.5 | 0.5% | Nov 6, 2024 | A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files... |
| CVE-2024-20528 | HIGH | 7.2 | 0.6% | Nov 6, 2024 | A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to upload files to arbitrary locat... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now