2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-40851 | LOW | 2.4 | 0.2% | Oct 28, 2024 | This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.1 and iPadOS 1... |
| CVE-2024-40792 | LOW | 3.3 | 0.1% | Oct 28, 2024 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A malicious app... |
| CVE-2024-27849 | LOW | 3.3 | 0.2% | Oct 28, 2024 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia... |
| CVE-2024-50457 | HIGH | 8.8 | 0.5% | Oct 28, 2024 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2024-50453 | HIGH | 8.8 | 0.5% | Oct 28, 2024 | Relative Path Traversal vulnerability in webangon The Pack Elementor addons the-pack-addon allows PHP Local File Inclusi... |
| CVE-2024-50436 | HIGH | 8.8 | 0.5% | Oct 28, 2024 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2024-50435 | HIGH | 8.8 | 0.5% | Oct 28, 2024 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2024-50434 | HIGH | 8.8 | 0.4% | Oct 28, 2024 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2024-49755 | LOW | 3.1 | 0.3% | Oct 28, 2024 | Duende IdentityServer is an OpenID Connect and OAuth 2.x framework for ASP.NET Core. IdentityServer's local API authenti... |
| CVE-2024-48826 | HIGH | 8.8 | 1.7% | Oct 28, 2024 | Tenda AC7 v.15.03.06.44 ate_iwpriv_set has pre-authentication command injection allowing remote attackers to execute arb... |
| CVE-2024-48825 | HIGH | 8.8 | 1.7% | Oct 28, 2024 | Tenda AC7 v.15.03.06.44 ate_ifconfig_set has pre-authentication command injection allowing remote attackers to execute a... |
| CVE-2024-48465 | CRITICAL | 9.8 | 0.5% | Oct 28, 2024 | The MRBS version 1.5.0 has an SQL injection vulnerability in the edit_entry_handler.php file, specifically in the rooms%... |
| CVE-2024-48357 | CRITICAL | 9.8 | 0.5% | Oct 28, 2024 | LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php. |
| CVE-2024-48196 | HIGH | 7.5 | 0.5% | Oct 28, 2024 | An issue in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post pa... |
| CVE-2024-48195 | MEDIUM | 6.1 | 0.4% | Oct 28, 2024 | Cross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a cra... |
| CVE-2024-48178 | HIGH | 8.1 | 0.3% | Oct 28, 2024 | newbee-mall v1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via the goodsCoverImg parameter. |
| CVE-2024-42930 | MEDIUM | 6.1 | 0.3% | Oct 28, 2024 | PbootCMS 3.2.8 is vulnerable to URL Redirect. |
| CVE-2024-39205 | CRITICAL | 9.8 | 16.5% | Oct 28, 2024 | An issue in pyload-ng v0.5.0b3.dev85 running under python3.11 or below allows attackers to execute arbitrary code via a ... |
| CVE-2024-9825 | MEDIUM | 5.4 | 0.3% | Oct 28, 2024 | The Chef Habitat builder-api on-prem-builder package with any version lower than habitat/builder-api/10315/202409131628... |
| CVE-2024-5532 | MEDIUM | 4.8 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ O... |
| CVE-2024-50437 | MEDIUM | 5.4 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory... |
| CVE-2024-50433 | MEDIUM | 5.4 | 0.3% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wowDevs Sky Addons... |
| CVE-2024-50432 | MEDIUM | 6.5 | 0.3% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Post G... |
| CVE-2024-50431 | MEDIUM | 5.9 | 0.3% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cloudways Breeze b... |
| CVE-2024-50429 | MEDIUM | 6.5 | 0.3% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BlockArt Magazine ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now