2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-50488 | HIGH | 8.8 | 0.9% | Oct 28, 2024 | Authentication Bypass Using an Alternate Path or Channel vulnerability in yespbs Token Login token-login allows Authenti... |
| CVE-2024-50483 | CRITICAL | 9.8 | 2.4% | Oct 28, 2024 | Authorization Bypass Through User-Controlled Key vulnerability in Tareq Hasan Meetup meetup allows Privilege Escalation.... |
| CVE-2024-50479 | CRITICAL | 9.8 | 0.5% | Oct 28, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in chenyenming Woocom... |
| CVE-2024-50478 | CRITICAL | 9.8 | 1.1% | Oct 28, 2024 | Authentication Bypass by Primary Weakness vulnerability in Swoop 1-Click Login: Passwordless Authentication allows Authe... |
| CVE-2024-50472 | MEDIUM | 5.4 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in martindrapeau Amil... |
| CVE-2024-50471 | MEDIUM | 5.4 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in checklistcom Trip ... |
| CVE-2024-50470 | MEDIUM | 5.4 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themes4WP Themes4W... |
| CVE-2024-50465 | MEDIUM | 6.5 | 0.4% | Oct 28, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP SEO – Calin Vin... |
| CVE-2024-50463 | MEDIUM | 6.1 | 0.3% | Oct 28, 2024 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-phot... |
| CVE-2024-10447 | HIGH | 8.8 | 0.5% | Oct 28, 2024 | A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. Affected by this vul... |
| CVE-2024-50498 | CRITICAL | 9.8 | 53.6% | Oct 28, 2024 | Improper Control of Generation of Code ('Code Injection') vulnerability in Ajit Bohra WP Query Console wp-query-console ... |
| CVE-2024-50492 | CRITICAL | 9.8 | 1.4% | Oct 28, 2024 | Improper Control of Generation of Code ('Code Injection') vulnerability in Scott Paterson ScottCart scottcart allows Cod... |
| CVE-2024-50489 | CRITICAL | 9.8 | 0.5% | Oct 28, 2024 | Authentication Bypass Using an Alternate Path or Channel vulnerability in realtyworkstation Realty Workstation realty-wo... |
| CVE-2024-50487 | CRITICAL | 9.8 | 0.5% | Oct 28, 2024 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Acnoo MaanStore API maanstore-api allows Authe... |
| CVE-2024-50486 | CRITICAL | 9.8 | 0.5% | Oct 28, 2024 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Acnoo Acnoo Flutter API acnoo-flutter-api allo... |
| CVE-2024-50477 | CRITICAL | 9.8 | 8.0% | Oct 28, 2024 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Stacks Stacks Mobile App Builder stacks-mobile... |
| CVE-2024-50450 | CRITICAL | 9.8 | 1.2% | Oct 28, 2024 | Improper Control of Generation of Code ('Code Injection') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxon... |
| CVE-2024-50442 | HIGH | 7.2 | 0.5% | Oct 28, 2024 | Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-a... |
| CVE-2024-50416 | HIGH | 8.8 | 0.5% | Oct 28, 2024 | Deserialization of Untrusted Data vulnerability in WPClever WPC Shop as a Customer for WooCommerce wpc-shop-as-customer ... |
| CVE-2024-50408 | HIGH | 8.8 | 0.5% | Oct 28, 2024 | Deserialization of Untrusted Data vulnerability in Bob Namaste! LMS namaste-lms allows Object Injection.This issue affec... |
| CVE-2024-48074 | HIGH | 8 | 0.7% | Oct 28, 2024 | An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a mali... |
| CVE-2024-10446 | HIGH | 7.2 | 0.5% | Oct 28, 2024 | A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. Affected is an ... |
| CVE-2024-38821 | CRITICAL | 9.1 | 1.7% | Oct 28, 2024 | Spring WebFlux applications that have Spring Security authorization rules on static resources can be bypassed under cert... |
| CVE-2024-9162 | HIGH | 7.2 | 2.7% | Oct 28, 2024 | The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to arbitrary PHP Code Injection due to missing... |
| CVE-2024-50307 | MEDIUM | 5.5 | 0.3% | Oct 28, 2024 | Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2. If... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now