2024 CVE Vulnerabilities
39,271 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-49767 | HIGH | 7.5 | 1.1% | Oct 25, 2024 | Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartPar... |
| CVE-2024-49766 | MEDIUM | 5.3 | 0.8% | Oct 25, 2024 | Werkzeug is a Web Server Gateway Interface web application library. On Python < 3.11 on Windows, os.path.isabs() does no... |
| CVE-2024-48450 | MEDIUM | 6.5 | 0.5% | Oct 25, 2024 | An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploadin... |
| CVE-2024-37847 | HIGH | 8.8 | 0.9% | Oct 25, 2024 | An arbitrary file upload vulnerability in MangoOS before 5.1.4 and Mango API before 4.5.5 allows attackers to execute ar... |
| CVE-2024-37846 | MEDIUM | 4.6 | 0.3% | Oct 25, 2024 | MangoOS before 5.2.0 was discovered to contain a Client-Side Template Injection (CSTI) vulnerability via the Platform Ma... |
| CVE-2024-37845 | HIGH | 7.2 | 0.7% | Oct 25, 2024 | MangoOS before 5.2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active... |
| CVE-2024-37844 | MEDIUM | 5.4 | 0.2% | Oct 25, 2024 | A stored cross-site scripting (XSS) vulnerability in MangoOS before 5.2.0 allows attackers to execute arbitrary web scri... |
| CVE-2024-9585 | MEDIUM | 5.4 | 0.2% | Oct 25, 2024 | The Image Map Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'save_project' function with... |
| CVE-2024-9584 | MEDIUM | 5.4 | 0.3% | Oct 25, 2024 | The Image Map Pro plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a miss... |
| CVE-2024-48700 | HIGH | 7.2 | 0.6% | Oct 25, 2024 | Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or ge... |
| CVE-2024-48448 | MEDIUM | 6.1 | 0.3% | Oct 25, 2024 | An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploadin... |
| CVE-2024-48343 | MEDIUM | 6.3 | 0.4% | Oct 25, 2024 | A SQL Injection vulnerability in ESAFENET CDG 5 and earlier allows an attacker to execute arbitrary code via the id para... |
| CVE-2024-8036 | MEDIUM | 5.9 | 0.1% | Oct 25, 2024 | ABB is aware of privately reported vulnerabilities in the product versions referenced in this CVE. An attacker could exp... |
| CVE-2024-48743 | MEDIUM | 6.5 | 0.4% | Oct 25, 2024 | Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parame... |
| CVE-2024-48655 | HIGH | 8.8 | 1.0% | Oct 25, 2024 | An issue in Total.js CMS v.1.0 allows a remote attacker to execute arbitrary code via the func.js file. |
| CVE-2024-48654 | MEDIUM | 6.1 | 0.4% | Oct 25, 2024 | Cross Site Scripting vulnerability in Blood Bank v.1 allows a remote attacker to execute arbitrary code via a crafted sc... |
| CVE-2024-48459 | HIGH | 7.3 | 8.2% | Oct 25, 2024 | A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. (Jix... |
| CVE-2024-10387 | HIGH | 7.5 | 8.0% | Oct 25, 2024 | CVE-2024-10387 IMPACT A Denial-of-Service vulnerability exists in the affected product. The vulnerability could allow... |
| CVE-2024-10386 | CRITICAL | 9.8 | 16.6% | Oct 25, 2024 | CVE-2024-10386 IMPACT An authentication vulnerability exists in the affected product. The vulnerability could allow a... |
| CVE-2024-48581 | CRITICAL | 9.8 | 1.1% | Oct 25, 2024 | File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary c... |
| CVE-2024-48580 | CRITICAL | 9.8 | 0.9% | Oct 25, 2024 | SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary... |
| CVE-2024-48579 | CRITICAL | 9.8 | 0.9% | Oct 25, 2024 | SQL Injection vulnerability in Best House rental management system project in php v.1.0 allows a remote attacker to exec... |
| CVE-2024-48204 | CRITICAL | 9.8 | 0.8% | Oct 25, 2024 | SQL injection vulnerability in Hanzhou Haobo network management system 1.0 allows a remote attacker to execute arbitrary... |
| CVE-2024-49757 | MEDIUM | 4.9 | 2.6% | Oct 25, 2024 | The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Du... |
| CVE-2024-48428 | CRITICAL | 9.8 | 0.7% | Oct 25, 2024 | An issue in Olive VLE allows an attacker to obtain sensitive information via the reset password function. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now