2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-43383 | HIGH | 8.1 | 1.2% | Oct 31, 2024 | Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator. This issue affects Apache Lucene.NET's... |
| CVE-2024-30149 | MEDIUM | 6.5 | 0.2% | Oct 31, 2024 | HCL AppScan Source <= 10.6.0 does not properly validate a TLS/SSL certificate for an executable. |
| CVE-2024-9446 | MEDIUM | 6.4 | 0.3% | Oct 31, 2024 | The WP Simple Anchors Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpanchor ... |
| CVE-2024-9434 | MEDIUM | 6.1 | 0.2% | Oct 31, 2024 | The WPGlobus Translate Options plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, a... |
| CVE-2024-9430 | MEDIUM | 5.3 | 0.4% | Oct 31, 2024 | The Get Quote For Woocommerce – Request A Quote For Woocommerce plugin for WordPress is vulnerable to unauthorized acces... |
| CVE-2024-9165 | MEDIUM | 6.4 | 0.3% | Oct 31, 2024 | The Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) plugin for WordPress is vulnerable to Stored Cross-S... |
| CVE-2024-9700 | MEDIUM | 5.3 | 0.4% | Oct 31, 2024 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure D... |
| CVE-2024-10392 | CRITICAL | 9.8 | 13.1% | Oct 31, 2024 | The AI Power: Complete AI Pack plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type val... |
| CVE-2024-21537 | HIGH | 8.9 | 1.1% | Oct 31, 2024 | Versions of the package lilconfig from 3.1.0 and before 3.1.1 are vulnerable to Arbitrary Code Execution due to the inse... |
| CVE-2024-9708 | MEDIUM | 5.4 | 0.3% | Oct 31, 2024 | The Easy SVG Upload plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versio... |
| CVE-2024-48311 | HIGH | 8.8 | 0.3% | Oct 31, 2024 | Piwigo v14.5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit album function. |
| CVE-2024-10561 | CRITICAL | 9.8 | 0.8% | Oct 31, 2024 | A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects a... |
| CVE-2024-10559 | HIGH | 7.8 | 0.4% | Oct 31, 2024 | A vulnerability was found in SourceCodester Airport Booking Management System 1.0 and classified as critical. Affected b... |
| CVE-2024-10544 | MEDIUM | 5.3 | 0.5% | Oct 31, 2024 | The Woo Manage Fraud Orders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, ... |
| CVE-2024-48307 | CRITICAL | 9.8 | 44.3% | Oct 31, 2024 | JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalD... |
| CVE-2024-10557 | MEDIUM | 6.5 | 0.6% | Oct 31, 2024 | A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as problematic. Affected... |
| CVE-2024-10556 | CRITICAL | 9.8 | 0.7% | Oct 31, 2024 | A vulnerability, which was classified as critical, was found in Codezips Pet Shop Management System 1.0. Affected is an ... |
| CVE-2024-10086 | MEDIUM | 6.1 | 0.4% | Oct 30, 2024 | A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Co... |
| CVE-2024-10006 | MEDIUM | 5.8 | 0.5% | Oct 30, 2024 | A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentio... |
| CVE-2024-10005 | MEDIUM | 5.8 | 0.7% | Oct 30, 2024 | A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intent... |
| CVE-2024-51427 | CRITICAL | 9.8 | 0.6% | Oct 30, 2024 | An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an... |
| CVE-2024-51426 | HIGH | 8.8 | 0.5% | Oct 30, 2024 | An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an... |
| CVE-2024-51425 | HIGH | 8.8 | 0.4% | Oct 30, 2024 | An issue in the WaterToken smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have ... |
| CVE-2024-51424 | CRITICAL | 9.8 | 0.6% | Oct 30, 2024 | An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an... |
| CVE-2024-51419 | MEDIUM | 6.1 | 0.3% | Oct 30, 2024 | Cross Site Scripting vulnerability in Shenzhen Interconnection Harbor Network Technology Co., Ltd Ofweek Online Exhibiti... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now