2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-10702 | CRITICAL | 9.8 | 0.6% | Nov 2, 2024 | A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unkn... |
| CVE-2024-10701 | MEDIUM | 6.1 | 0.4% | Nov 2, 2024 | A vulnerability was found in PHPGurukul Car Rental Portal 1.0. It has been rated as problematic. This issue affects some... |
| CVE-2024-10700 | CRITICAL | 9.8 | 0.5% | Nov 2, 2024 | A vulnerability was found in code-projects University Event Management System 1.0. It has been declared as critical. Thi... |
| CVE-2024-10699 | CRITICAL | 9.8 | 0.7% | Nov 2, 2024 | A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknow... |
| CVE-2024-10698 | CRITICAL | 9.8 | 1.2% | Nov 2, 2024 | A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this issue is the function fo... |
| CVE-2024-10697 | CRITICAL | 9.8 | 25.5% | Nov 2, 2024 | A vulnerability has been found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this vulnerability is th... |
| CVE-2024-9896 | MEDIUM | 6.1 | 0.4% | Nov 2, 2024 | The BBP Core – Expand bbPress powered forums with useful features plugin for WordPress is vulnerable to Reflected Cross-... |
| CVE-2024-51774 | HIGH | 8.1 | 3.3% | Nov 2, 2024 | qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors. |
| CVE-2024-9868 | MEDIUM | 5.4 | 0.3% | Nov 2, 2024 | The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for W... |
| CVE-2024-8739 | MEDIUM | 6.1 | 0.4% | Nov 2, 2024 | The ReCaptcha Integration for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the ... |
| CVE-2024-10540 | MEDIUM | 6.5 | 0.6% | Nov 2, 2024 | The Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to SQL I... |
| CVE-2024-10310 | MEDIUM | 5.4 | 0.2% | Nov 2, 2024 | The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for W... |
| CVE-2024-9191 | HIGH | 7.8 | 0.2% | Nov 1, 2024 | The Okta Device Access features, provided by the Okta Verify agent for Windows, provides access to the OktaDeviceAccessP... |
| CVE-2024-44234 | MEDIUM | 5.5 | 0.3% | Nov 1, 2024 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and i... |
| CVE-2024-44233 | MEDIUM | 5.5 | 0.3% | Nov 1, 2024 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and i... |
| CVE-2024-44232 | MEDIUM | 5.5 | 0.3% | Nov 1, 2024 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and i... |
| CVE-2024-51252 | CRITICAL | 9.8 | 0.8% | Nov 1, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-48353 | HIGH | 7.5 | 0.4% | Nov 1, 2024 | Yealink Meeting Server before V26.0.0.67 allows attackers to obtain static key information from a front-end JS file and ... |
| CVE-2024-51492 | HIGH | 8.8 | 0.5% | Nov 1, 2024 | Zusam is a free and open-source way to self-host private forums. Prior to version 0.5.6, specially crafted SVG files upl... |
| CVE-2024-51483 | MEDIUM | 6.9 | 2.3% | Nov 1, 2024 | changedetection.io is free, open source web page change detection software. Prior to version 0.47.5, when a WebDriver is... |
| CVE-2024-51431 | CRITICAL | 9.8 | 0.6% | Nov 1, 2024 | LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily guessable. |
| CVE-2024-51248 | HIGH | 8.8 | 0.8% | Nov 1, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-51247 | HIGH | 8.8 | 0.8% | Nov 1, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-51245 | HIGH | 8.8 | 0.8% | Nov 1, 2024 | In DrayTek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-51244 | HIGH | 8.8 | 0.8% | Nov 1, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now