2024 CVE Vulnerabilities
39,233 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-48357 | CRITICAL | 9.8 | 0.5% | Oct 28, 2024 | LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php. |
| CVE-2024-48196 | HIGH | 7.5 | 0.5% | Oct 28, 2024 | An issue in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post pa... |
| CVE-2024-48195 | MEDIUM | 6.1 | 0.4% | Oct 28, 2024 | Cross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a cra... |
| CVE-2024-48178 | HIGH | 8.1 | 0.3% | Oct 28, 2024 | newbee-mall v1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via the goodsCoverImg parameter. |
| CVE-2024-42930 | MEDIUM | 6.1 | 0.3% | Oct 28, 2024 | PbootCMS 3.2.8 is vulnerable to URL Redirect. |
| CVE-2024-39205 | CRITICAL | 9.8 | 16.5% | Oct 28, 2024 | An issue in pyload-ng v0.5.0b3.dev85 running under python3.11 or below allows attackers to execute arbitrary code via a ... |
| CVE-2024-9825 | MEDIUM | 5.4 | 0.3% | Oct 28, 2024 | The Chef Habitat builder-api on-prem-builder package with any version lower than habitat/builder-api/10315/202409131628... |
| CVE-2024-5532 | MEDIUM | 4.8 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ O... |
| CVE-2024-50437 | MEDIUM | 5.4 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory... |
| CVE-2024-50433 | MEDIUM | 5.4 | 0.3% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wowDevs Sky Addons... |
| CVE-2024-50432 | MEDIUM | 6.5 | 0.3% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Post G... |
| CVE-2024-50431 | MEDIUM | 5.9 | 0.3% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cloudways Breeze b... |
| CVE-2024-50429 | MEDIUM | 6.5 | 0.3% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BlockArt Magazine ... |
| CVE-2024-9629 | MEDIUM | 5.4 | 0.4% | Oct 28, 2024 | The Contact Form 7 + Telegram plugin for WordPress is vulnerable to unauthorized modification of data and loss of data d... |
| CVE-2024-50469 | MEDIUM | 6.5 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brightvesseldev Te... |
| CVE-2024-50468 | MEDIUM | 6.5 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in faceleg Raptor Edi... |
| CVE-2024-50467 | MEDIUM | 6.5 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in siteengineai Scrol... |
| CVE-2024-50464 | MEDIUM | 6.5 | 0.3% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pierre Lebedel Kod... |
| CVE-2024-50462 | MEDIUM | 6.5 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in html5maps Interact... |
| CVE-2024-50461 | MEDIUM | 5.4 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper EmbedP... |
| CVE-2024-50460 | MEDIUM | 4.8 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firelight Fireligh... |
| CVE-2024-50458 | MEDIUM | 5.4 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP CodeUs Advanced... |
| CVE-2024-50451 | MEDIUM | 5.4 | 0.3% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 MDTF wp... |
| CVE-2024-50449 | MEDIUM | 5.4 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RedefiningTheWeb P... |
| CVE-2024-50448 | MEDIUM | 6.1 | 0.3% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooC... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now