2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-10228 | LOW | 3.3 | 0.1% | Oct 29, 2024 | The Vagrant VMWare Utility Windows installer targeted a custom location with a non-protected path that could be modified... |
| CVE-2024-8587 | HIGH | 7.8 | 0.2% | Oct 29, 2024 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Ov... |
| CVE-2024-50456 | HIGH | 8.8 | 0.3% | Oct 29, 2024 | Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Acce... |
| CVE-2024-50455 | HIGH | 8.8 | 0.4% | Oct 29, 2024 | Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Acce... |
| CVE-2024-48461 | MEDIUM | 4.8 | 0.4% | Oct 29, 2024 | Cross Site Scripting vulnerability in TeslaLogger Admin Panel before v.1.59.6 allows a remote attacker to execute arbitr... |
| CVE-2024-48206 | CRITICAL | 9.8 | 0.8% | Oct 29, 2024 | A Deserialization of Untrusted Data vulnerability in chainer v7.8.1.post1 leads to execution of arbitrary code. |
| CVE-2024-48063 | CRITICAL | 9.8 | 1.6% | Oct 29, 2024 | In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this is... |
| CVE-2024-48955 | HIGH | 8.1 | 0.6% | Oct 29, 2024 | Broken access control in NetAdmin 4.030319 returns data with functionalities on the endpoint that "assembles" the functi... |
| CVE-2024-9990 | HIGH | 8.8 | 0.3% | Oct 29, 2024 | The Crypto plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.15. This... |
| CVE-2024-9989 | CRITICAL | 9.8 | 7.2% | Oct 29, 2024 | The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.18. This is d... |
| CVE-2024-9988 | CRITICAL | 9.8 | 1.1% | Oct 29, 2024 | The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.19. This is d... |
| CVE-2024-8924 | HIGH | 7.5 | 0.5% | Oct 29, 2024 | ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability... |
| CVE-2024-50466 | HIGH | 8.8 | 0.2% | Oct 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in DarkMySite DarkMySite – Advanced Dark Mode Plugin for WordPress darkm... |
| CVE-2024-50459 | CRITICAL | 9.8 | 0.4% | Oct 29, 2024 | Missing Authorization vulnerability in Hossni Mubarak AidWP wp-stripe-donation allows Exploiting Incorrectly Configured ... |
| CVE-2024-10491 | MEDIUM | 5.3 | 0.4% | Oct 29, 2024 | A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in... |
| CVE-2024-8923 | CRITICAL | 10 | 1.1% | Oct 29, 2024 | ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform. This vulnerability c... |
| CVE-2024-7985 | HIGH | 8.8 | 2.2% | Oct 29, 2024 | The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to arbitrary file uploads due ... |
| CVE-2024-25566 | MEDIUM | 6.1 | 0.2% | Oct 29, 2024 | An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper validation of redirect UR... |
| CVE-2024-10452 | LOW | 2.7 | 0.5% | Oct 29, 2024 | Organization admins can delete pending invites created in an organization they are not part of. |
| CVE-2024-50334 | MEDIUM | 5.3 | 1.0% | Oct 29, 2024 | Scoold is a Q&A and a knowledge sharing platform for teams. A semicolon path injection vulnerability was found on the /a... |
| CVE-2024-49769 | HIGH | 7.5 | 1.4% | Oct 29, 2024 | Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before ... |
| CVE-2024-49768 | MEDIUM | 4.8 | 0.5% | Oct 29, 2024 | Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly... |
| CVE-2024-48921 | LOW | 2.7 | 0.6% | Oct 29, 2024 | Kyverno is a policy engine designed for Kubernetes. A kyverno ClusterPolicy, ie. "disallow-privileged-containers," can b... |
| CVE-2024-9505 | MEDIUM | 5.4 | 0.3% | Oct 29, 2024 | The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl... |
| CVE-2024-51076 | MEDIUM | 6.1 | 0.4% | Oct 29, 2024 | A Reflected Cross Site Scripting (XSS) vulnerability was found in /odms/admin/booking-search.php in PHPGurukul Online DJ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now