2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-51251 | HIGH | 8 | 0.7% | Nov 4, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-51249 | HIGH | 8 | 0.7% | Nov 4, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-51246 | HIGH | 8 | 0.4% | Nov 4, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-50531 | CRITICAL | 9.8 | 0.5% | Nov 4, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in davidfcarr RSVPMaker for Toastmasters rsvpmaker-for-toa... |
| CVE-2024-50530 | HIGH | 8.8 | 0.5% | Nov 4, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Stars SMTP Mailer stars-smtp-mailer al... |
| CVE-2024-50529 | HIGH | 8.8 | 0.5% | Nov 4, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in rudrainn Training – Courses training allows Upload a We... |
| CVE-2024-50528 | HIGH | 7.5 | 0.4% | Nov 4, 2024 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Stacks Stacks Mobile App Bui... |
| CVE-2024-50527 | CRITICAL | 9.8 | 0.5% | Nov 4, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Stacks Stacks Mobile App Builder stacks-mobile-app-buil... |
| CVE-2024-50526 | CRITICAL | 9.8 | 0.6% | Nov 4, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Lindeni Mahlalela Multi Purpose Mail Form multi-purpose... |
| CVE-2024-50525 | CRITICAL | 9.8 | 0.5% | Nov 4, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in helloprint Helloprint helloprint allows Upload a Web Sh... |
| CVE-2024-50523 | CRITICAL | 9.8 | 0.5% | Nov 4, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in RainbowLink Inc. All Post Contact Form allpost-contactf... |
| CVE-2024-45164 | HIGH | 7.1 | 0.3% | Nov 4, 2024 | Akamai SIA (Secure Internet Access Enterprise) ThreatAvert, in SPS (Security and Personalization Services) before the la... |
| CVE-2024-9147 | MEDIUM | 6.1 | 0.2% | Nov 4, 2024 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Bna Informatics PosPratik... |
| CVE-2024-51561 | HIGH | 7.5 | 0.5% | Nov 4, 2024 | This vulnerability exists in Aero due to improper implementation of OTP validation mechanism in certain API endpoints. A... |
| CVE-2024-51560 | MEDIUM | 4.3 | 0.3% | Nov 4, 2024 | This vulnerability exists in the Wave 2.0 due to improper exception handling for invalid inputs at certain API endpoint.... |
| CVE-2024-51559 | MEDIUM | 6.5 | 0.3% | Nov 4, 2024 | This vulnerability exists in the Wave 2.0 due to improper authorization checks on certain API endpoints. An authenticate... |
| CVE-2024-51558 | CRITICAL | 9.8 | 0.5% | Nov 4, 2024 | This vulnerability exists in the Wave 2.0 due to missing restrictions for excessive failed authentication attempts on it... |
| CVE-2024-51557 | MEDIUM | 6.5 | 0.4% | Nov 4, 2024 | This vulnerability exists in the Wave 2.0 due to missing rate limiting on OTP requests in an API endpoint. An authentica... |
| CVE-2024-51556 | MEDIUM | 6.5 | 0.2% | Nov 4, 2024 | This vulnerability exists in the Wave 2.0 due to insufficient encryption of sensitive data received at the API response.... |
| CVE-2024-36485 | HIGH | 8.8 | 1.5% | Nov 4, 2024 | Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option. |
| CVE-2024-10523 | MEDIUM | 4.6 | 0.1% | Nov 4, 2024 | This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device f... |
| CVE-2024-10035 | CRITICAL | 9.8 | 0.8% | Nov 4, 2024 | Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in a Command... |
| CVE-2024-51661 | HIGH | 7.2 | 1.1% | Nov 4, 2024 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in David Lingre... |
| CVE-2024-48878 | HIGH | 8.8 | 1.5% | Nov 4, 2024 | Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report. |
| CVE-2024-10389 | HIGH | 7.5 | 0.2% | Nov 4, 2024 | There exists a Path Traversal vulnerability in Safearchive on Platforms with Case-Insensitive Filesystems (e.g., NTFS). ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now