2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-51521 | MEDIUM | 5.5 | 0.1% | Nov 5, 2024 | Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vuln... |
| CVE-2024-51520 | MEDIUM | 5.5 | 0.1% | Nov 5, 2024 | Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerabi... |
| CVE-2024-51519 | MEDIUM | 5.5 | 0.1% | Nov 5, 2024 | Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerabi... |
| CVE-2024-51518 | HIGH | 7.5 | 0.3% | Nov 5, 2024 | Vulnerability of message types not being verified in the advanced messaging modul Impact: Successful exploitation of thi... |
| CVE-2024-51517 | MEDIUM | 5.5 | 0.1% | Nov 5, 2024 | Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerabilit... |
| CVE-2024-47255 | HIGH | 7.8 | 0.1% | Nov 5, 2024 | In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which co... |
| CVE-2024-47254 | HIGH | 7.2 | 0.3% | Nov 5, 2024 | In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability coul... |
| CVE-2024-47253 | HIGH | 7.2 | 0.9% | Nov 5, 2024 | In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administr... |
| CVE-2024-10687 | CRITICAL | 9.8 | 0.6% | Nov 5, 2024 | The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Socia... |
| CVE-2024-9667 | MEDIUM | 6.1 | 0.4% | Nov 5, 2024 | The Seriously Simple Podcasting plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of a... |
| CVE-2024-9443 | MEDIUM | 5.4 | 0.3% | Nov 5, 2024 | The Basticom Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all ver... |
| CVE-2024-51516 | MEDIUM | 5.5 | 0.1% | Nov 5, 2024 | Permission control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause f... |
| CVE-2024-51515 | MEDIUM | 4.7 | 0.1% | Nov 5, 2024 | Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affec... |
| CVE-2024-51514 | MEDIUM | 5.5 | 0.1% | Nov 5, 2024 | Vulnerability of pop-up windows belonging to no app in the VPN module Impact: Successful exploitation of this vulnerabi... |
| CVE-2024-51513 | MEDIUM | 5.5 | 0.1% | Nov 5, 2024 | Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerab... |
| CVE-2024-51512 | MEDIUM | 5.5 | 0.1% | Nov 5, 2024 | Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulne... |
| CVE-2024-51511 | MEDIUM | 5.5 | 0.1% | Nov 5, 2024 | Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulne... |
| CVE-2024-51510 | MEDIUM | 5.5 | 0.1% | Nov 5, 2024 | Out-of-bounds access vulnerability in the logo module Impact: Successful exploitation of this vulnerability may affect s... |
| CVE-2024-10711 | HIGH | 8.8 | 0.3% | Nov 5, 2024 | The WooCommerce Report plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu... |
| CVE-2024-10114 | HIGH | 8.1 | 0.5% | Nov 5, 2024 | The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and in... |
| CVE-2024-47797 | HIGH | 7.8 | 0.2% | Nov 5, 2024 | in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sens... |
| CVE-2024-47404 | HIGH | 7.8 | 0.2% | Nov 5, 2024 | in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sens... |
| CVE-2024-47402 | MEDIUM | 5.5 | 0.1% | Nov 5, 2024 | in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through out-of-bounds read. |
| CVE-2024-47137 | HIGH | 7.8 | 0.2% | Nov 5, 2024 | in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sens... |
| CVE-2024-10097 | HIGH | 8.1 | 0.7% | Nov 5, 2024 | The Loginizer Security and Loginizer plugins for WordPress are vulnerable to authentication bypass in all versions up to... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now