2024 CVE Vulnerabilities
39,271 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-46996 | MEDIUM | 5.4 | 0.3% | Oct 24, 2024 | baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Bl... |
| CVE-2024-46995 | MEDIUM | 6.1 | 0.3% | Oct 24, 2024 | baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in HTTP 4... |
| CVE-2024-46994 | MEDIUM | 5.4 | 0.3% | Oct 24, 2024 | baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog p... |
| CVE-2024-48514 | CRITICAL | 9.8 | 1.0% | Oct 24, 2024 | php-heic-to-jpg <= 1.0.5 is vulnerable to code injection (fixed in 1.0.6). An attacker who can upload heic images is abl... |
| CVE-2024-48442 | MEDIUM | 6.5 | 0.3% | Oct 24, 2024 | Incorrect access control in Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA RG500UEAABxCOMSLICv3.2... |
| CVE-2024-48441 | HIGH | 8.8 | 1.6% | Oct 24, 2024 | Wuhan Tianyu Information Industry Co., Ltd Tianyu CPE Router CommonCPExCPETS_v3.2.468.11.04_P4 was discovered to contain... |
| CVE-2024-48440 | HIGH | 8.8 | 1.6% | Oct 24, 2024 | Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA RG500UEAABxCOMSLICv3.2.2543.12.18 was discovered t... |
| CVE-2024-46478 | CRITICAL | 9.8 | 0.7% | Oct 24, 2024 | HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681. |
| CVE-2024-38314 | MEDIUM | 5.9 | 0.3% | Oct 24, 2024 | IBM Maximo Application Suite - Monitor Component 8.10, 8.11, and 9.0 could disclose information in the form of the hard-... |
| CVE-2024-10338 | HIGH | 7.2 | 0.4% | Oct 24, 2024 | A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this v... |
| CVE-2024-10337 | HIGH | 7.2 | 0.4% | Oct 24, 2024 | A vulnerability classified as critical has been found in SourceCodeHero Clothes Recommendation System 1.0. Affected is a... |
| CVE-2024-10313 | HIGH | 8.6 | 0.5% | Oct 24, 2024 | iniNet Solutions SpiderControl SCADA PC HMI Editor has a path traversal vulnerability. When the software loads a malici... |
| CVE-2024-10295 | HIGH | 7.5 | 0.4% | Oct 24, 2024 | A flaw was found in Gateway. Sending a non-base64 'basic' auth with special characters can cause APICast to incorrectly ... |
| CVE-2024-9692 | MEDIUM | 6.9 | 0.4% | Oct 24, 2024 | VIMESA VHF/FM Transmitter Blue Plus is suffering from a Denial-of-Service (DoS) vulnerability. An unauthenticated attack... |
| CVE-2024-48548 | CRITICAL | 9.3 | 0.2% | Oct 24, 2024 | The APK file in Cloud Smart Lock v2.0.1 has a leaked a URL that can call an API for binding physical devices. This vulne... |
| CVE-2024-48547 | HIGH | 8.4 | 0.2% | Oct 24, 2024 | Incorrect access control in the firmware update and download processes of DreamCatcher Life v1.8.7 allows attackers to a... |
| CVE-2024-48546 | HIGH | 8.4 | 0.2% | Oct 24, 2024 | Incorrect access control in the firmware update and download processes of Wear Sync v1.2.0 allows attackers to access se... |
| CVE-2024-48545 | HIGH | 8.4 | 0.2% | Oct 24, 2024 | Incorrect access control in the firmware update and download processes of IVY Smart v4.5.0 allows attackers to access se... |
| CVE-2024-48544 | HIGH | 8.4 | 0.2% | Oct 24, 2024 | Incorrect access control in the firmware update and download processes of Sylvania Smart Home v3.0.3 allows attackers to... |
| CVE-2024-48542 | HIGH | 8.4 | 0.2% | Oct 24, 2024 | Incorrect access control in the firmware update and download processes of Yamaha Headphones Controller v1.6.7 allows att... |
| CVE-2024-48541 | HIGH | 8.4 | 0.2% | Oct 24, 2024 | Incorrect access control in the firmware update and download processes of Ruochan Smart v4.4.7 allows attackers to acces... |
| CVE-2024-48540 | MEDIUM | 6.2 | 0.2% | Oct 24, 2024 | Incorrect access control in XIAO HE Smart 4.3.1 allows attackers to access sensitive information by analyzing the code a... |
| CVE-2024-48539 | CRITICAL | 9.8 | 0.3% | Oct 24, 2024 | Neye3C v4.5.2.0 was discovered to contain a hardcoded encryption key in the firmware update mechanism. |
| CVE-2024-44206 | CRITICAL | 9.3 | 0.5% | Oct 24, 2024 | An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in Safari 17.6, iOS 17.... |
| CVE-2024-44205 | MEDIUM | 5.5 | 0.2% | Oct 24, 2024 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.9 an... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now