2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-37209 | MEDIUM | 6.5 | 0.5% | Nov 1, 2024 | Access Control vulnerability in Prism IT Systems User Rights Access Manager allows . This issue affects User Rights Acc... |
| CVE-2024-37207 | MEDIUM | 5.4 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in Theme4Press Demo Awesome allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2024-37204 | MEDIUM | 4.3 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in PropertyHive PropertyHive allows Exploiting Incorrectly Configured Access Control... |
| CVE-2024-37203 | MEDIUM | 4.3 | 0.3% | Nov 1, 2024 | Missing Authorization vulnerability in Laybuy Laybuy Payment Extension for WooCommerce allows Exploiting Incorrectly Con... |
| CVE-2024-37201 | MEDIUM | 4.3 | 0.3% | Nov 1, 2024 | Missing Authorization vulnerability in javmah Woocommerce Customers Order History allows Exploiting Incorrectly Configur... |
| CVE-2024-37123 | MEDIUM | 5.3 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in VowelWeb Ibtana allows Exploiting Incorrectly Configured Access Control Security ... |
| CVE-2024-37119 | CRITICAL | 9.8 | 0.5% | Nov 1, 2024 | Missing Authorization vulnerability in Uncanny Owl Uncanny Automator Pro allows Exploiting Incorrectly Configured Access... |
| CVE-2024-37108 | HIGH | 7.7 | 0.6% | Nov 1, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WishList Products WishLi... |
| CVE-2024-37106 | HIGH | 8.2 | 0.3% | Nov 1, 2024 | Missing Authorization vulnerability in WishList Products WishList Member X allows Exploiting Incorrectly Configured Acce... |
| CVE-2024-37096 | MEDIUM | 4.3 | 0.3% | Nov 1, 2024 | Missing Authorization vulnerability in Popup Box Team Popup allows Exploiting Incorrectly Configured Access Control Secu... |
| CVE-2024-37095 | MEDIUM | 4.3 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured... |
| CVE-2024-27525 | MEDIUM | 4.6 | 0.4% | Nov 1, 2024 | Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafte... |
| CVE-2024-27524 | HIGH | 7.1 | 0.7% | Nov 1, 2024 | Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafte... |
| CVE-2024-10658 | CRITICAL | 9.8 | 0.7% | Nov 1, 2024 | A vulnerability classified as critical was found in Tongda OA up to 11.10. Affected by this vulnerability is an unknown ... |
| CVE-2024-10657 | CRITICAL | 9.8 | 0.7% | Nov 1, 2024 | A vulnerability classified as critical has been found in Tongda OA up to 11.10. Affected is an unknown function of the f... |
| CVE-2024-10656 | CRITICAL | 9.8 | 0.7% | Nov 1, 2024 | A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. This issue affects some unknown p... |
| CVE-2024-51407 | MEDIUM | 6.2 | 0.2% | Nov 1, 2024 | Floodlight SDN OpenFlow Controller v.1.2 has an issue that allows local hosts to construct false broadcast ports causing... |
| CVE-2024-51406 | MEDIUM | 6.2 | 0.2% | Nov 1, 2024 | Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow spe... |
| CVE-2024-48270 | HIGH | 7.5 | 0.5% | Nov 1, 2024 | An issue in the component /logins of oasys v1.1 allows attackers to access sensitive information via a burst attack. |
| CVE-2024-37094 | CRITICAL | 9.8 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS allows Exploiting Incorrectly Configured Access Co... |
| CVE-2024-10655 | CRITICAL | 9.8 | 0.5% | Nov 1, 2024 | A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unk... |
| CVE-2024-7456 | CRITICAL | 9.8 | 1.4% | Nov 1, 2024 | A SQL injection vulnerability exists in the `/api/v1/external-users` route of lunary-ai/lunary version v1.4.2. The `orde... |
| CVE-2024-10654 | CRITICAL | 9.1 | 1.5% | Nov 1, 2024 | A vulnerability has been found in TOTOLINK LR350 up to 9.3.5u.6369 and classified as critical. Affected by this vulnerab... |
| CVE-2024-10367 | MEDIUM | 6.4 | 0.3% | Nov 1, 2024 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Store... |
| CVE-2024-10653 | HIGH | 7.2 | 0.6% | Nov 1, 2024 | IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator inter... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now