2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-48050 | CRITICAL | 9.8 | 0.8% | Nov 4, 2024 | In agentscope <=v0.0.4, the file agentscope\web\workstation\workflow_utils.py has the function is_callable_expression. W... |
| CVE-2024-10805 | HIGH | 8.8 | 0.5% | Nov 4, 2024 | A vulnerability was found in code-projects University Event Management System 1.0. It has been classified as critical. T... |
| CVE-2024-51744 | LOW | 3.1 | 0.5% | Nov 4, 2024 | golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in `ParseWithClaims` c... |
| CVE-2024-48463 | MEDIUM | 6.5 | 0.6% | Nov 4, 2024 | Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for opening windows within th... |
| CVE-2024-45185 | MEDIUM | 5.1 | 0.2% | Nov 4, 2024 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 108... |
| CVE-2024-45086 | MEDIUM | 5.5 | 0.4% | Nov 4, 2024 | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection (XXE) attack when process... |
| CVE-2024-10791 | CRITICAL | 9.8 | 0.6% | Nov 4, 2024 | A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issu... |
| CVE-2024-34891 | MEDIUM | 6.8 | 0.3% | Nov 4, 2024 | Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrator... |
| CVE-2024-34885 | MEDIUM | 6.8 | 0.4% | Nov 4, 2024 | Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrato... |
| CVE-2024-30619 | HIGH | 7.5 | 0.4% | Nov 4, 2024 | Chamilo LMS Version 1.11.26 is vulnerable to Incorrect Access Control. A non-authenticated attacker can request the numb... |
| CVE-2024-30618 | MEDIUM | 6.1 | 0.4% | Nov 4, 2024 | A Stored Cross-Site Scripting (XSS) Vulnerability in Chamilo LMS 1.11.26 allows a remote attacker to execute arbitrary J... |
| CVE-2024-30617 | MEDIUM | 5.4 | 0.2% | Nov 4, 2024 | A Cross-Site Request Forgery (CSRF) vulnerability in Chamilo LMS 1.11.26 "/main/social/home.php," allows attackers to in... |
| CVE-2024-30616 | HIGH | 8.8 | 0.6% | Nov 4, 2024 | Chamilo LMS 1.11.26 is vulnerable to Incorrect Access Control via main/auth/profile. Non-admin users can manipulate sens... |
| CVE-2024-10768 | MEDIUM | 5.4 | 0.4% | Nov 4, 2024 | A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects... |
| CVE-2024-51329 | HIGH | 8.8 | 0.6% | Nov 4, 2024 | A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password reset token via user in... |
| CVE-2024-51328 | MEDIUM | 6.1 | 0.4% | Nov 4, 2024 | Cross Site Scripting vulnerability in addcategory.php in projectworld's Travel Management System v1.0 allows remote atta... |
| CVE-2024-51327 | CRITICAL | 9.8 | 0.8% | Nov 4, 2024 | SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authent... |
| CVE-2024-51326 | HIGH | 7.5 | 0.9% | Nov 4, 2024 | SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrar... |
| CVE-2024-51127 | HIGH | 7.1 | 0.7% | Nov 4, 2024 | An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensit... |
| CVE-2024-48336 | HIGH | 8.4 | 0.5% | Nov 4, 2024 | The install() function of ProviderInstaller.java in Magisk App before canary version 27007 does not verify the GMS app b... |
| CVE-2024-34887 | MEDIUM | 4.9 | 0.3% | Nov 4, 2024 | Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administr... |
| CVE-2024-34883 | MEDIUM | 4.9 | 0.4% | Nov 4, 2024 | Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allow remote administrators... |
| CVE-2024-34882 | MEDIUM | 4.9 | 0.3% | Nov 4, 2024 | Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrato... |
| CVE-2024-10766 | CRITICAL | 9.8 | 0.5% | Nov 4, 2024 | A vulnerability, which was classified as critical, has been found in Codezips Free Exam Hall Seating Management System 1... |
| CVE-2024-51136 | CRITICAL | 9.8 | 1.2% | Nov 4, 2024 | An XML External Entity (XXE) vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive informat... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now