2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-31975 | MEDIUM | 4.8 | 0.3% | Oct 30, 2024 | EnGenius EWS356-Fit devices through 1.1.30 allow a remote attacker to conduct stored XSS attacks via the Wi-Fi SSID para... |
| CVE-2024-31973 | MEDIUM | 5.2 | 0.5% | Oct 30, 2024 | Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity to conduct stored XSS... |
| CVE-2024-31972 | MEDIUM | 4.3 | 0.4% | Oct 30, 2024 | EnGenius ESR580 A8J-EMR5000 devices allow a remote attacker to conduct stored XSS attacks that could lead to arbitrary J... |
| CVE-2024-10456 | CRITICAL | 9.8 | 17.7% | Oct 30, 2024 | Delta Electronics InfraSuite Device Master versions prior to 1.0.12 are affected by a deserialization vulnerability that... |
| CVE-2024-9110 | MEDIUM | 6.1 | 0.2% | Oct 30, 2024 | A medium severity vulnerability has been identified within Privileged Identity which can allow an attacker to perform re... |
| CVE-2024-51258 | HIGH | 8.8 | 0.5% | Oct 30, 2024 | DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary comm... |
| CVE-2024-50344 | MEDIUM | 4.6 | 0.3% | Oct 30, 2024 | I, Librarian is an open-source version of a PDF managing SaaS. Supplemental Files are allowed to be viewed in the browse... |
| CVE-2024-50419 | CRITICAL | 9.8 | 0.3% | Oct 30, 2024 | Incorrect Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploitin... |
| CVE-2024-51301 | HIGH | 8.8 | 0.6% | Oct 30, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-51300 | HIGH | 8.8 | 0.6% | Oct 30, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-51299 | HIGH | 8.8 | 0.6% | Oct 30, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-51298 | CRITICAL | 9.8 | 0.6% | Oct 30, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-51296 | HIGH | 8.8 | 0.6% | Oct 30, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-51257 | HIGH | 8.8 | 0.4% | Oct 30, 2024 | DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary comm... |
| CVE-2024-50353 | MEDIUM | 5.3 | 0.3% | Oct 30, 2024 | ICG.AspNetCore.Utilities.CloudStorage is a collection of cloud storage utilities to assist with the management of files ... |
| CVE-2024-33700 | HIGH | 7.5 | 0.8% | Oct 30, 2024 | The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP functionalit... |
| CVE-2024-33699 | HIGH | 8.8 | 9.2% | Oct 30, 2024 | The LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0.40e6, allowing attackers t... |
| CVE-2024-33626 | MEDIUM | 5.3 | 0.4% | Oct 30, 2024 | The LevelOne WBR-6012 router contains a vulnerability within its web application that allows unauthenticated disclosure ... |
| CVE-2024-33623 | HIGH | 7.5 | 11.4% | Oct 30, 2024 | A denial of service vulnerability exists in the Web Application functionality of LevelOne WBR-6012 R0.40e6. A specially ... |
| CVE-2024-33603 | MEDIUM | 5.3 | 8.8% | Oct 30, 2024 | The LevelOne WBR-6012 router has an information disclosure vulnerability in its web application, which allows unauthenti... |
| CVE-2024-32946 | MEDIUM | 5.9 | 0.3% | Oct 30, 2024 | A vulnerability in the LevelOne WBR-6012 router's firmware version R0.40e6 allows sensitive information to be transmitte... |
| CVE-2024-31152 | HIGH | 7.5 | 17.2% | Oct 30, 2024 | The LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation within its web applicat... |
| CVE-2024-31151 | CRITICAL | 9.8 | 0.7% | Oct 30, 2024 | A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain unauthoriz... |
| CVE-2024-28875 | HIGH | 8.1 | 0.7% | Oct 30, 2024 | A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain unauthoriz... |
| CVE-2024-28052 | HIGH | 7.5 | 0.7% | Oct 30, 2024 | The WBR-6012 is a wireless SOHO router. It is a low-cost device which functions as an internet gateway for homes and sma... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now