2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-10601 | CRITICAL | 9.8 | 0.5% | Oct 31, 2024 | A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability ... |
| CVE-2024-10600 | CRITICAL | 9.8 | 6.3% | Oct 31, 2024 | A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.6. Affected is an unknown functi... |
| CVE-2024-6480 | MEDIUM | 5.4 | 0.3% | Oct 31, 2024 | The SIP Reviews Shortcode for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'no_... |
| CVE-2024-6479 | MEDIUM | 6.5 | 0.5% | Oct 31, 2024 | The SIP Reviews Shortcode for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'no_of_reviews' at... |
| CVE-2024-10599 | HIGH | 7.5 | 0.9% | Oct 31, 2024 | A vulnerability, which was classified as problematic, has been found in Tongda OA 2017 up to 11.7. This issue affects so... |
| CVE-2024-10598 | MEDIUM | 6.5 | 0.5% | Oct 31, 2024 | A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unkno... |
| CVE-2024-10597 | CRITICAL | 9.8 | 0.6% | Oct 31, 2024 | A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function delPolicyAction of th... |
| CVE-2024-10596 | HIGH | 8.8 | 0.5% | Oct 31, 2024 | A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. Affected by this issue is the function delEn... |
| CVE-2024-10595 | CRITICAL | 9.8 | 0.6% | Oct 31, 2024 | A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the fun... |
| CVE-2024-10594 | HIGH | 8.8 | 0.5% | Oct 31, 2024 | A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function docHistory of ... |
| CVE-2024-48360 | HIGH | 7.5 | 3.9% | Oct 31, 2024 | Qualitor v8.24 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /request/viewValidacao.p... |
| CVE-2024-48359 | CRITICAL | 9.8 | 2.2% | Oct 31, 2024 | Qualitor v8.24 was discovered to contain a remote code execution (RCE) vulnerability via the gridValoresPopHidden parame... |
| CVE-2024-39722 | HIGH | 7.5 | 3.9% | Oct 31, 2024 | An issue was discovered in Ollama before 0.1.46. It exposes which files exist on the server on which it is deployed via ... |
| CVE-2024-39721 | HIGH | 7.5 | 2.7% | Oct 31, 2024 | An issue was discovered in Ollama before 0.1.34. The CreateModelHandler function uses os.Open to read a file until compl... |
| CVE-2024-39720 | HIGH | 8.2 | 2.5% | Oct 31, 2024 | An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file c... |
| CVE-2024-39719 | HIGH | 7.5 | 4.1% | Oct 31, 2024 | An issue was discovered in Ollama through 0.3.14. File existence disclosure can occur via api/create. When calling the C... |
| CVE-2024-51066 | HIGH | 7.5 | 0.5% | Oct 31, 2024 | An Insecure Direct Object Reference (IDOR) vulnerability in appointment-detail.php in Phpgurukul's Beauty Parlour Manage... |
| CVE-2024-51065 | CRITICAL | 9.8 | 0.5% | Oct 31, 2024 | Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username ... |
| CVE-2024-51064 | CRITICAL | 9.8 | 0.6% | Oct 31, 2024 | Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection via the tid parameter to admin/queries.... |
| CVE-2024-51063 | CRITICAL | 9.1 | 0.5% | Oct 31, 2024 | Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile numbe... |
| CVE-2024-51060 | CRITICAL | 9.1 | 0.5% | Oct 31, 2024 | Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'a_id' parameter. |
| CVE-2024-50802 | MEDIUM | 6 | 0.4% | Oct 31, 2024 | A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controlle... |
| CVE-2024-50801 | MEDIUM | 6 | 0.4% | Oct 31, 2024 | A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controlle... |
| CVE-2024-48200 | HIGH | 8.4 | 0.2% | Oct 31, 2024 | An issue in MobaXterm v24.2 allows a local attacker to escalate privileges and execute arbitrary code via the remove fun... |
| CVE-2024-42515 | CRITICAL | 9.9 | 0.5% | Oct 31, 2024 | Glossarizer through 1.5.2 improperly tries to convert text into HTML. Even though the application itself escapes special... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now