2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-47401 | HIGH | 7.5 | 0.4% | Oct 29, 2024 | Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1 and 9.5.x <= 9.5.9 fail to prevent detailed error messages from b... |
| CVE-2024-46872 | MEDIUM | 4.6 | 0.1% | Oct 29, 2024 | Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1, 9.5.x <= 9.5.9 fail to sanitize user inputs in the frontend that... |
| CVE-2024-45477 | MEDIUM | 4.6 | 0.6% | Oct 29, 2024 | Apache NiFi 1.10.0 through 1.27.0 and 2.0.0-M1 through 2.0.0-M3 support a description field for Parameters in a Paramete... |
| CVE-2024-22066 | MEDIUM | 6.5 | 0.3% | Oct 29, 2024 | There is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . An authenticated at... |
| CVE-2024-10048 | MEDIUM | 6.1 | 0.3% | Oct 29, 2024 | The Post Status Notifier Lite and Premium plugins for WordPress is vulnerable to Reflected Cross-Site Scripting via the ... |
| CVE-2024-50494 | CRITICAL | 10 | 0.5% | Oct 29, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Amin Omer Sudan Payment Gateway for WooCommerce wc-suda... |
| CVE-2024-50493 | CRITICAL | 10 | 1.0% | Oct 29, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in masterhomepage Automatic Translation automatic-translat... |
| CVE-2024-50484 | CRITICAL | 10 | 0.5% | Oct 29, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Lindeni Mahlalela Multi Purpose Mail Form multi-purpose... |
| CVE-2024-50482 | CRITICAL | 10 | 1.0% | Oct 29, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Chetan Khandla Woocommerce Product Design woo-product-d... |
| CVE-2024-50480 | CRITICAL | 9.9 | 0.5% | Oct 29, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in azexo Marketing Automation by AZEXO marketing-automatio... |
| CVE-2024-50052 | MEDIUM | 4.3 | 0.3% | Oct 29, 2024 | Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1, 9.5.x <= 9.5.9 fail to check that the origin of the message in a... |
| CVE-2024-10312 | MEDIUM | 4.3 | 0.4% | Oct 29, 2024 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions ... |
| CVE-2024-10241 | MEDIUM | 4.3 | 0.3% | Oct 29, 2024 | Mattermost versions 9.5.x <= 9.5.9 fail to properly filter the channel data when ElasticSearch is enabled which allows a... |
| CVE-2024-10008 | MEDIUM | 6.5 | 0.6% | Oct 29, 2024 | The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to unauthorized... |
| CVE-2024-10000 | MEDIUM | 5.4 | 0.3% | Oct 29, 2024 | The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to Stored Cross... |
| CVE-2024-22065 | HIGH | 8.8 | 1.2% | Oct 29, 2024 | There is a command injection vulnerability in ZTE MF258 Pro product. Due to insufficient validation of Ping Diagnosis in... |
| CVE-2024-10479 | MEDIUM | 5.4 | 0.3% | Oct 29, 2024 | A vulnerability, which was classified as problematic, was found in LinZhaoguan pb-cms up to 2.0.1. Affected is an unknow... |
| CVE-2024-50088 | HIGH | 7.8 | 0.2% | Oct 29, 2024 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix uninitialized pointer free in add_inode_... |
| CVE-2024-50087 | MEDIUM | 5.5 | 0.2% | Oct 29, 2024 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix uninitialized pointer free on read_alloc... |
| CVE-2024-50086 | HIGH | 7 | 0.2% | Oct 29, 2024 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix user-after-free from session log off Th... |
| CVE-2024-50085 | MEDIUM | 5.5 | 0.2% | Oct 29, 2024 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_s... |
| CVE-2024-50084 | MEDIUM | 5.5 | 0.2% | Oct 29, 2024 | In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap api: Fix memory leaks in vcap_... |
| CVE-2024-50083 | HIGH | 7.5 | 0.9% | Oct 29, 2024 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix mptcp DSS corruption due to large pmtu xmi... |
| CVE-2024-50082 | MEDIUM | 4.7 | 0.2% | Oct 29, 2024 | In the Linux kernel, the following vulnerability has been resolved: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wak... |
| CVE-2024-50081 | MEDIUM | 5.5 | 0.2% | Oct 29, 2024 | In the Linux kernel, the following vulnerability has been resolved: blk-mq: setup queue ->tag_set before initializing h... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now