2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-39332 | CRITICAL | 9.8 | 1.2% | Oct 31, 2024 | Webswing 23.2.2 allows remote attackers to modify client-side JavaScript code to achieve path traversal, likely leading ... |
| CVE-2024-10573 | MEDIUM | 6.7 | 0.3% | Oct 31, 2024 | An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may writ... |
| CVE-2024-51482 | CRITICAL | 9.9 | 36.9% | Oct 31, 2024 | ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37.* <= 1.37.64 is vulne... |
| CVE-2024-50356 | NONE | 0 | 0.4% | Oct 31, 2024 | Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-... |
| CVE-2024-50347 | MEDIUM | 6.3 | 0.3% | Oct 31, 2024 | Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. Prior to 1.4.0, there is a... |
| CVE-2024-7883 | LOW | 3.7 | 0.5% | Oct 31, 2024 | When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floatin... |
| CVE-2024-51481 | LOW | 1 | 0.2% | Oct 31, 2024 | Nix is a package manager for Linux and other Unix systems. On macOS, built-in builders (such as `builtin:fetchurl`, expo... |
| CVE-2024-51478 | CRITICAL | 9.1 | 0.4% | Oct 31, 2024 | YesWiki is a wiki system written in PHP. Prior to 4.4.5, the use of a weak cryptographic algorithm and a hard-coded salt... |
| CVE-2024-51430 | MEDIUM | 6.4 | 0.5% | Oct 31, 2024 | Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker t... |
| CVE-2024-8185 | HIGH | 7.5 | 0.5% | Oct 31, 2024 | Vault Community and Vault Enterprise (“Vault”) clusters using Vault’s Integrated Storage backend are vulnerable to a den... |
| CVE-2024-51260 | CRITICAL | 9.8 | 0.6% | Oct 31, 2024 | DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary comm... |
| CVE-2024-51255 | CRITICAL | 9.8 | 0.4% | Oct 31, 2024 | DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary comm... |
| CVE-2024-50354 | MEDIUM | 5.5 | 0.3% | Oct 31, 2024 | gnark is a fast zk-SNARK library that offers a high-level API to design circuits. In gnark 0.11.0 and earlier, deseriali... |
| CVE-2024-8553 | MEDIUM | 6.3 | 0.4% | Oct 31, 2024 | A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authent... |
| CVE-2024-48910 | CRITICAL | 9.8 | 1.2% | Oct 31, 2024 | DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to p... |
| CVE-2024-51259 | CRITICAL | 9.8 | 0.3% | Oct 31, 2024 | DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary comm... |
| CVE-2024-51254 | HIGH | 8.8 | 0.4% | Oct 31, 2024 | DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary comm... |
| CVE-2024-42835 | CRITICAL | 9.8 | 1.0% | Oct 31, 2024 | langflow v1.0.12 was discovered to contain a remote code execution (RCE) vulnerability via the PythonCodeTool component. |
| CVE-2024-8934 | MEDIUM | 6.5 | 0.2% | Oct 31, 2024 | A local user with administrative access rights can enter specialy crafted values for settings at the user interface (UI)... |
| CVE-2024-10454 | MEDIUM | 6.1 | 0.2% | Oct 31, 2024 | Clickjacking vulnerability in Clibo Manager v1.1.9.12 in the '/public/login' directory, a login panel. This vulnerabilit... |
| CVE-2024-49685 | HIGH | 8.8 | 0.2% | Oct 31, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Custom Twitter Feeds (Tweets Widget) custom-twitter-feeds... |
| CVE-2024-49674 | CRITICAL | 9.6 | 0.2% | Oct 31, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in lukashuser EKC Tournament Manager ekc-tournament-manager allows Uploa... |
| CVE-2024-43984 | HIGH | 8.8 | 0.3% | Oct 31, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Podlove Podlove Podcast Publisher allows Code Injection.This issue af... |
| CVE-2024-43933 | MEDIUM | 4.3 | 0.3% | Oct 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amauri WPMobile.Ap... |
| CVE-2024-43930 | MEDIUM | 4.3 | 0.2% | Oct 31, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in eyecix JobSearch allows Cross Site Request Forgery.This issue affects... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now