2024 CVE Vulnerabilities
39,271 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-6826 | MEDIUM | 6.5 | 0.5% | Oct 24, 2024 | An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 17.3.6, 17.4 before 17.4.3, and 17.... |
| CVE-2024-8717 | MEDIUM | 6.1 | 0.4% | Oct 24, 2024 | The PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip plugin for WordPress is vulnerable to Reflected Cross-Si... |
| CVE-2024-10050 | MEDIUM | 4.3 | 0.5% | Oct 24, 2024 | The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Information Disclosure in all versions up to... |
| CVE-2024-9943 | MEDIUM | 6.3 | 0.2% | Oct 24, 2024 | The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Cross... |
| CVE-2024-9531 | MEDIUM | 4.3 | 0.3% | Oct 24, 2024 | The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to unaut... |
| CVE-2024-8667 | MEDIUM | 4.3 | 0.3% | Oct 24, 2024 | The HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce plugin for WordPress is vulnerable ... |
| CVE-2024-6049 | HIGH | 7.5 | 4.3% | Oct 24, 2024 | The web server of Lawo AG vsm LTC Time Sync (vTimeSync) is affected by a "..." (triple dot) path traversal vulnerability... |
| CVE-2024-9865 | MEDIUM | 6.1 | 0.4% | Oct 24, 2024 | The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site Scripting... |
| CVE-2024-9864 | MEDIUM | 6.1 | 0.3% | Oct 24, 2024 | The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site Scripting... |
| CVE-2024-40595 | MEDIUM | 5.3 | 0.2% | Oct 24, 2024 | An authentication-bypass issue in the RDP component of One Identity Safeguard for Privileged Sessions (SPS) On Premise b... |
| CVE-2024-9374 | MEDIUM | 6.1 | 0.3% | Oct 24, 2024 | The Terms descriptions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_... |
| CVE-2024-48213 | MEDIUM | 4.3 | 0.6% | Oct 23, 2024 | RockOA v2.6.5 is vulnerable to Directory Traversal in webmain/system/beifen/beifenAction.php. |
| CVE-2024-40432 | MEDIUM | 6.5 | 0.4% | Oct 23, 2024 | A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IO... |
| CVE-2024-40431 | HIGH | 8.8 | 1.3% | Oct 23, 2024 | A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IO... |
| CVE-2024-9899 | — | — | — | Oct 23, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-2143. Reason: This candidate is a r... |
| CVE-2024-10301 | HIGH | 7.2 | 0.4% | Oct 23, 2024 | A vulnerability, which was classified as critical, was found in PHPGurukul Medical Card Generation System 1.0. Affected ... |
| CVE-2024-10300 | HIGH | 7.2 | 0.4% | Oct 23, 2024 | A vulnerability, which was classified as critical, has been found in PHPGurukul Medical Card Generation System 1.0. This... |
| CVE-2024-48964 | HIGH | 8.8 | 0.4% | Oct 23, 2024 | The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted Gradle project. The vuln... |
| CVE-2024-48963 | CRITICAL | 9.8 | 0.4% | Oct 23, 2024 | The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnera... |
| CVE-2024-10299 | HIGH | 7.2 | 0.4% | Oct 23, 2024 | A vulnerability classified as critical was found in PHPGurukul Medical Card Generation System 1.0. This vulnerability af... |
| CVE-2024-10298 | HIGH | 7.2 | 0.4% | Oct 23, 2024 | A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an ... |
| CVE-2024-9949 | MEDIUM | 6.1 | 0.1% | Oct 23, 2024 | Denial of Service in Forescout SecureConnector 11.1.02.1019 on Windows allows Unprivileged user to corrupt the configura... |
| CVE-2024-20526 | MEDIUM | 5.3 | 0.5% | Oct 23, 2024 | A vulnerability in the SSH server of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, re... |
| CVE-2024-20495 | HIGH | 8.6 | 0.5% | Oct 23, 2024 | A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower... |
| CVE-2024-20494 | HIGH | 8.6 | 0.5% | Oct 23, 2024 | A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Fire... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now